Skip to content

Bump the poetry-dependencies group with 35 updates#208

Merged
aecorn merged 1 commit into
mainfrom
dependabot/pip/poetry-dependencies-73ad0438ad
Jun 10, 2026
Merged

Bump the poetry-dependencies group with 35 updates#208
aecorn merged 1 commit into
mainfrom
dependabot/pip/poetry-dependencies-73ad0438ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the poetry-dependencies group with 35 updates:

Package From To
black 26.3.1 26.5.1
coverage 7.13.5 7.14.1
pydoclint 0.8.3 0.8.6
mypy 1.20.2 2.1.0
ruff 0.15.12 0.15.15
typeguard 4.5.1 4.5.2
types-requests 2.33.0.20260408 2.33.0.20260518
types-python-dateutil 2.9.0.20260408 2.9.0.20260518
types-toml 0.10.8.20260408 0.10.8.20260518
requests 2.33.1 2.34.2
certifi 2026.4.22 2026.5.20
click 8.3.3 8.4.1
debugpy 1.8.20 1.8.21
decorator 5.2.1 5.3.1
distlib 0.4.0 0.4.1
filelock 3.29.0 3.29.1
idna 3.15 3.18
librt 0.9.0 0.11.0
matplotlib-inline 0.2.1 0.2.2
mdit-py-plugins 0.5.0 0.6.1
platformdirs 4.9.6 4.10.0
python-discovery 1.2.2 1.4.0
pytz 2026.1.post1 2026.2
snowballstemmer 3.0.1 3.1.1
soupsieve 2.8.3 2.8.4
starlette 1.0.0 1.2.1
tomlkit 0.14.0 0.15.0
tornado 6.5.5 6.5.6
traitlets 5.14.3 5.15.1
types-pytz 2026.1.1.20260408 2026.2.0.20260518
uvicorn 0.46.0 0.48.0
virtualenv 21.3.0 21.4.2
watchfiles 1.1.1 1.2.0
wcwidth 0.6.0 0.7.0
zipp 3.23.1 4.1.0

Updates black from 26.3.1 to 26.5.1

Release notes

Sourced from black's releases.

26.5.1

Stable style

  • Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)
  • Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

  • Correct the version in the published executables (#5137)

Documentation

  • Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Output

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.1

Stable style

  • Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)
  • Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

  • Correct the version in the published executables (#5137)

Documentation

  • Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

Version 26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

... (truncated)

Commits

Updates coverage from 7.13.5 to 7.14.1

Changelog

Sourced from coverage's changelog.

Version 7.14.1 — 2026-05-26

  • Fix: the HTML report used typographic niceties to make file paths more readable by adding a small amount of space around slashes. Those spaces interfered with searching the page for file paths of interest. Now the report uses CSS to accomplish the same visual tweak so that searches with slashes work correctly. Closes issue 2170_.

  • Add a 3.16 PyPI classifier <hugo-316_>_ since we test on the 3.16 main branch.

.. _issue 2170: coveragepy/coveragepy#2170 .. _hugo-316: https://mastodon.social/@​hugovk/116588523571204490

.. _changes_7-14-0:

Version 7.14.0 — 2026-05-10

  • Feature: now when running one of the reporting commands, if there are parallel data files that need combining, they will be implicitly combined before creating the report. There is no option to avoid the combination; let us know if you have a use case that requires it. Thanks, Tim Hatch <pull 2162_>. Closes issue 1781.

  • Fix: the output from combine was too verbose, listing each file considered. Now it shows a single line with the counts of files combined, files skipped, and files with errors. The -q flag suppresses this line. The old detailed lines are available with the new --debug=combine option.

  • Fix: running a Python file through a symlink now sets the sys.path correctly, matching regular Python behavior. Fixes issue 2157_.

  • Fix: Collector.flush_data could fail with "RuntimeError: Set changed size during iteration" when a tracer in another thread added a line to the per-file set that add_lines (or add_arcs) was iterating. The values passed to CoverageData are now snapshotted via dict.copy() and set.copy(), which are atomic under the GIL. Thanks, Alex Vandiver <pull 2165_>_.

  • Fix: the soft keyword lazy is now bolded in HTML reports.

  • We are no longer testing eventlet support. Eventlet started issuing stern deprecation warnings that break our tests. Our support code is still there.

.. _issue 1781: coveragepy/coveragepy#1781 .. _issue 2157: coveragepy/coveragepy#2157 .. _pull 2162: coveragepy/coveragepy#2162

... (truncated)

Commits
  • 64d9b66 docs: correct the date for 7.14.1
  • 6fa7dd4 chore: bump actions/dependency-review-action (#2181)
  • 078afae docs: sample HTML for 7.14.1
  • cb4f028 docs: prep for 7.14.1
  • ae2d09f Merge branch 'nedbat/classifire-316-kits'
  • 2c3568b build: declare 3.16 compatibility
  • faa68f8 chore: bump github/codeql-action in the action-dependencies group (#2173)
  • eb55fee test: we don't need PyPy < 7.3.22 anymore
  • ac168fe test: the text summary should show missing
  • fed4bd2 chore: upgrade virtualenv
  • Additional commits viewable in compare view

Updates pydoclint from 0.8.3 to 0.8.6

Release notes

Sourced from pydoclint's releases.

0.8.6

What's Changed

Full Changelog: jsh9/pydoclint@0.8.5...0.8.6

0.8.5

What's Changed

Full Changelog: jsh9/pydoclint@0.8.4...0.8.5

0.8.4

What's Changed

New Contributors

Full Changelog: jsh9/pydoclint@0.8.3...0.8.4

Changelog

Sourced from pydoclint's changelog.

[0.8.6] - 2026-06-03

  • Fixed
    • A bug where DOC001 did not intercept unsupported numpy docstring section headers such as Inputs, Outputs, and non-ASCII names, and as a result pydoclint would report confusing cascading violations
  • Full diff

[0.8.5] - 2026-06-02

  • Fixed
    • A bug where malformed docstrings could trigger an internal error when the underlying parser returned an empty parameter name
    • Avoid cascading downstream violations after DOC001 parsing errors
  • Full diff

[0.8.4] - 2026-05-16

  • Added
    • Support inline class-attribute docstrings, add DOC606 and DOC607, and introduce --require-inline-class-var-docs in native and flake8 modes
    • A new config option --skip-checking-private-functions (shortform: -scpf) to allow docstrings in private methods not to be checked
  • Full diff
Commits
  • da69fbd Report unsupported docstring headers (numpy) as DOC001 (#290)
  • 1693aa3 Docstring parsing errors now produce DOC001 only; no more cascading violation...
  • 98b491f Update linter and formatter versions (#286)
  • 88d83c9 Add config option to skip private functions (#282)
  • 4e1136c Add config option and logic to accommodate PEP257-style inline class attribut...
  • See full diff in compare view

Updates mypy from 1.20.2 to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

  • Enable incremental self-compilation (Vaggelis Danias, PR 21369)
  • Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)
  • Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)
  • Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

  • Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)
  • Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

... (truncated)

Commits

Updates ruff from 0.15.12 to 0.15.15

Release notes

Sourced from ruff's releases.

0.15.15

Release Notes

Released on 2026-05-28.

Preview features

  • Fix Markdown closing fence handling (#25310)
  • [pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

  • [pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

  • Avoid redundant TokenValue drops in the lexer (#25300)
  • Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)
  • Use ThinVec in AST to shrink Stmt (#25361)

Documentation

  • Fix line-length example for --config option (#25389)
  • [flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)
  • [mccabe] Improve example (C901) (#25287)
  • [pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)
  • [refurb] Document FURB192 exception change for empty sequences (#25317)
  • [ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

  • Fix formatting of lambdas nested within f-strings (#25398)

Server

  • Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

  • Expand semantic syntax errors for invalid walruses (#25415)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.15

Released on 2026-05-28.

Preview features

  • Fix Markdown closing fence handling (#25310)
  • [pyflakes] Report duplicate imports in typing.TYPE_CHECKING block (F811) (#22560)

Bug fixes

  • [pyflakes] Treat function-scope bare annotations as locals per PEP 526 (F821) (#21540)

Performance

  • Avoid redundant TokenValue drops in the lexer (#25300)
  • Reduce memory usage by dropping token-excess capacity and improve performance by approximating the initial tokens Vec size (#25354)
  • Use ThinVec in AST to shrink Stmt (#25361)

Documentation

  • Fix line-length example for --config option (#25389)
  • [flake8-comprehensions] Document RecursionError edge case in __len__ (C416) (#25286)
  • [mccabe] Improve example (C901) (#25287)
  • [pyupgrade] Clarify fix safety docs (UP007, UP045) (#25288)
  • [refurb] Document FURB192 exception change for empty sequences (#25317)
  • [ruff] Document false negative for user-defined types (RUF013) (#25289)

Formatter

  • Fix formatting of lambdas nested within f-strings (#25398)

Server

  • Return code action for codeAction/resolve requests that contain no or no valid URL (#25365)

Other changes

  • Expand semantic syntax errors for invalid walruses (#25415)

Contributors

... (truncated)

Commits
  • db5aa0a Bump 0.15.15 (#25431)
  • 366fe21 [ty] Improve diagnostics for syntax errors in forward annotations (#25158)
  • e2e1e64 [ty] Remove excess capacity from more Salsa cached collections (#25411)
  • 1bd77e1 [ty] Use diagnostic message as tie breaker when sorting (#25424)
  • 7e1bc1e Add agent skills for working on ty (#25422)
  • 574e107 Expand semantic syntax errors for invalid walruses (#25415)
  • 4a7ca06 [ty] Display docs for matching parameter when hovering over the name of an ar...
  • 5432709 Refine a few agents instructions (#25423)
  • 3cb09eb [ty] Support typing.TypeForm (#25334)
  • c8cd59f [ty] Infer class attributes assigned by metaclass initialization (#25342)
  • Additional commits viewable in compare view

Updates typeguard from 4.5.1 to 4.5.2

Release notes

Sourced from typeguard's releases.

4.5.2

  • Fixed IndexError raised from check_signature_compatible when the subject method has no positional parameters (#550; PR by @​HackedRico)
Commits
  • e130f03 Added release date
  • eb77bac Fixed crash in protocol check when subject method has no positional params (#...
  • ff2b88b Bump the github-actions group with 2 updates (#547)
  • See full diff in compare view

Updates types-requests from 2.33.0.20260408 to 2.33.0.20260518

Commits

Updates types-python-dateutil from 2.9.0.20260408 to 2.9.0.20260518

Commits

Updates types-toml from 0.10.8.20260408 to 0.10.8.20260518

Commits

Updates requests from 2.33.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates certifi from 2026.4.22 to 2026.5.20

Commits

Updates click from 8.3.3 to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

  • ParamType typing improvements. #3371

    • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
    • :class:CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

  • Parameter typing improvements. #2805

    • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. :issue:3458 :issue:3484
  • Zsh completion scripts parse correctly on Windows. :issue:3277 :pr:3466
  • Shell completion of Choice Enum values produces a valid completion result. :issue:3015
  • Fix empty byte-string handling in echo. :issue:3487
  • Fix closed file error with echo_via_pager. :issue:3449

Version 8.4.0

Released 2026-05-17

  • :class:ParamType typing improvements. :pr:3371

    • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
    • :class:CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

  • :class:Parameter typing improvements. :pr:2805

    • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

  • Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

... (truncated)

Commits
  • 6eeb50e release version 8.4.1
  • 67921d5 change log and doc fixes (#3495)
  • 9c41f46 Fix changelog and version admonitions
  • 6cb3477 fix skip condition
  • 5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
  • becbde5 pager doesn't close std streams
  • a5f5aa6 Handle empty bytes in echo (#3493)
  • 4d3db84 handle empty bytes in echo
  • d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
  • 0baa8db Document ctx.params bypass with test and doc
  • Additional commits viewable in compare view

Updates debugpy from 1.8.20 to 1.8.21

Release notes

Sourced from debugpy's releases.

debugpy v1.8.21

Fixes for:

  • Return evaluate result in DAP response body instead of writing to stdout: #2027
  • Prevent invalid scopes request from crashing debug session: #2026
  • Skip uninitialized __slots__ in variable resolver: #2024
  • Handle -c arguments that are bytes instead of str: #2021
  • Fix evaluation of variables from chained exception frames: #2018
  • ContinueRequest with a specific threadId no longer resumes all threads (in-process adapter): #2012
  • Avoid strong reference to exceptions during unwind: #2008
  • Show error message on evaluate failures in the hover context: #2006
  • Display dlerror output when dlopen fails: #2000
  • Replace removed pkgutil.get_loader with importlib.util.find_spec in get_fullname: #1998

Enhancements:

  • Add option to ignore all system exit codes: #2017
  • Pull changes from pydevd up to March 2026: #2010

Infrastructure work:

Thanks to @​maxbachmann, @​mfussenegger, and @​sambrightman for the commits.

Commits
  • 858b05c Fix TSA #2816217: suppress Flawfinder false positive on Cython JoinPyUnicode ...
  • f0c34f1 Fix TSA #2816216: suppress Flawfinder false positive on Cython DIGIT_PAIRS_8 ...
  • 4c70e13 Fix TSA #2816218: suppress Flawfinder false positive on Cython read-loop iter...
  • 19c2b8c Fix TSA #2816220: suppress Flawfinder false positive on Cython read-loop iter...
  • ab92638 Merge pull request #2031 from StellaHuang95/stellahuang/tsa-2816219-flawfinde...
  • 12bd4fe Return evaluate result in DAP response body instead of writing to stdout (#2027)
  • 8bd57a7 Prevent invalid s...

    Description has been truncated

@dependabot
Bump the poetry-dependencies group with 35 updates
a433619 
Bumps the poetry-dependencies group with 35 updates:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.5` | `7.14.1` |
| [pydoclint](https://github.com/jsh9/pydoclint) | `0.8.3` | `0.8.6` |
| [mypy](https://github.com/python/mypy) | `1.20.2` | `2.1.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.12` | `0.15.15` |
| [typeguard](https://github.com/agronholm/typeguard) | `4.5.1` | `4.5.2` |
| [types-requests](https://github.com/python/typeshed) | `2.33.0.20260408` | `2.33.0.20260518` |
| [types-python-dateutil](https://github.com/python/typeshed) | `2.9.0.20260408` | `2.9.0.20260518` |
| [types-toml](https://github.com/python/typeshed) | `0.10.8.20260408` | `0.10.8.20260518` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.4.22` | `2026.5.20` |
| [click](https://github.com/pallets/click) | `8.3.3` | `8.4.1` |
| [debugpy](https://github.com/microsoft/debugpy) | `1.8.20` | `1.8.21` |
| [decorator](https://github.com/micheles/decorator) | `5.2.1` | `5.3.1` |
| [distlib](https://github.com/pypa/distlib) | `0.4.0` | `0.4.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.0` | `3.29.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [librt](https://github.com/mypyc/librt) | `0.9.0` | `0.11.0` |
| [matplotlib-inline](https://github.com/ipython/matplotlib-inline) | `0.2.1` | `0.2.2` |
| [mdit-py-plugins](https://github.com/executablebooks/mdit-py-plugins) | `0.5.0` | `0.6.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.9.6` | `4.10.0` |
| [python-discovery](https://github.com/tox-dev/python-discovery) | `1.2.2` | `1.4.0` |
| [pytz](https://github.com/stub42/pytz) | `2026.1.post1` | `2026.2` |
| [snowballstemmer](https://github.com/snowballstem/snowball) | `3.0.1` | `3.1.1` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.8.3` | `2.8.4` |
| [starlette](https://github.com/Kludex/starlette) | `1.0.0` | `1.2.1` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.14.0` | `0.15.0` |
| [tornado](https://github.com/tornadoweb/tornado) | `6.5.5` | `6.5.6` |
| [traitlets](https://github.com/ipython/traitlets) | `5.14.3` | `5.15.1` |
| [types-pytz](https://github.com/python/typeshed) | `2026.1.1.20260408` | `2026.2.0.20260518` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.46.0` | `0.48.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.3.0` | `21.4.2` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.1` | `1.2.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.6.0` | `0.7.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.23.1` | `4.1.0` |


Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.3.1...26.5.1)

Updates `coverage` from 7.13.5 to 7.14.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.5...7.14.1)

Updates `pydoclint` from 0.8.3 to 0.8.6
- [Release notes](https://github.com/jsh9/pydoclint/releases)
- [Changelog](https://github.com/jsh9/pydoclint/blob/main/CHANGELOG.md)
- [Commits](jsh9/pydoclint@0.8.3...0.8.6)

Updates `mypy` from 1.20.2 to 2.1.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.2...v2.1.0)

Updates `ruff` from 0.15.12 to 0.15.15
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.12...0.15.15)

Updates `typeguard` from 4.5.1 to 4.5.2
- [Release notes](https://github.com/agronholm/typeguard/releases)
- [Commits](agronholm/typeguard@4.5.1...4.5.2)

Updates `types-requests` from 2.33.0.20260408 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-python-dateutil` from 2.9.0.20260408 to 2.9.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-toml` from 0.10.8.20260408 to 0.10.8.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `certifi` from 2026.4.22 to 2026.5.20
- [Commits](certifi/python-certifi@2026.04.22...2026.05.20)

Updates `click` from 8.3.3 to 8.4.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.3...8.4.1)

Updates `debugpy` from 1.8.20 to 1.8.21
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](microsoft/debugpy@v1.8.20...v1.8.21)

Updates `decorator` from 5.2.1 to 5.3.1
- [Release notes](https://github.com/micheles/decorator/releases)
- [Changelog](https://github.com/micheles/decorator/blob/master/CHANGES.md)
- [Commits](micheles/decorator@5.2.1...5.3.1)

Updates `distlib` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](pypa/distlib@0.4.0...0.4.1)

Updates `filelock` from 3.29.0 to 3.29.1
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.0...3.29.1)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.18)

Updates `librt` from 0.9.0 to 0.11.0
- [Commits](mypyc/librt@v0.9.0...v0.11.0)

Updates `matplotlib-inline` from 0.2.1 to 0.2.2
- [Commits](ipython/matplotlib-inline@0.2.1...0.2.2)

Updates `mdit-py-plugins` from 0.5.0 to 0.6.1
- [Release notes](https://github.com/executablebooks/mdit-py-plugins/releases)
- [Changelog](https://github.com/executablebooks/mdit-py-plugins/blob/master/CHANGELOG.md)
- [Commits](executablebooks/mdit-py-plugins@v0.5.0...v0.6.1)

Updates `platformdirs` from 4.9.6 to 4.10.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.9.6...4.10.0)

Updates `python-discovery` from 1.2.2 to 1.4.0
- [Release notes](https://github.com/tox-dev/python-discovery/releases)
- [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst)
- [Commits](tox-dev/python-discovery@1.2.2...1.4.0)

Updates `pytz` from 2026.1.post1 to 2026.2
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2026.1.post1...release_2026.2)

Updates `snowballstemmer` from 3.0.1 to 3.1.1
- [Changelog](https://github.com/snowballstem/snowball/blob/main/NEWS)
- [Commits](snowballstem/snowball@v3.0.1...v3.1.1)

Updates `soupsieve` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

Updates `starlette` from 1.0.0 to 1.2.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.0...1.2.1)

Updates `tomlkit` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.14.0...0.15.0)

Updates `tornado` from 6.5.5 to 6.5.6
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.5...v6.5.6)

Updates `traitlets` from 5.14.3 to 5.15.1
- [Release notes](https://github.com/ipython/traitlets/releases)
- [Changelog](https://github.com/ipython/traitlets/blob/main/CHANGELOG.md)
- [Commits](ipython/traitlets@v5.14.3...v5.15.1)

Updates `types-pytz` from 2026.1.1.20260408 to 2026.2.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `uvicorn` from 0.46.0 to 0.48.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.46.0...0.48.0)

Updates `virtualenv` from 21.3.0 to 21.4.2
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.3.0...21.4.2)

Updates `watchfiles` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.1.1...v1.2.0)

Updates `wcwidth` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.6.0...0.7.0)

Updates `zipp` from 3.23.1 to 4.1.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.1...v4.1.0)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: coverage
  dependency-version: 7.14.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: pydoclint
  dependency-version: 0.8.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: mypy
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: poetry-dependencies
- dependency-name: ruff
  dependency-version: 0.15.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: typeguard
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: types-toml
  dependency-version: 0.10.8.20260518
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: certifi
  dependency-version: 2026.5.20
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: click
  dependency-version: 8.4.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: debugpy
  dependency-version: 1.8.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: decorator
  dependency-version: 5.3.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: distlib
  dependency-version: 0.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: filelock
  dependency-version: 3.29.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: idna
  dependency-version: '3.18'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: librt
  dependency-version: 0.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: matplotlib-inline
  dependency-version: 0.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: mdit-py-plugins
  dependency-version: 0.6.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: platformdirs
  dependency-version: 4.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: python-discovery
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: pytz
  dependency-version: '2026.2'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: snowballstemmer
  dependency-version: 3.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: starlette
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: tomlkit
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: tornado
  dependency-version: 6.5.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: traitlets
  dependency-version: 5.15.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: types-pytz
  dependency-version: 2026.2.0.20260518
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: uvicorn
  dependency-version: 0.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: virtualenv
  dependency-version: 21.4.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: watchfiles
  dependency-version: 1.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: wcwidth
  dependency-version: 0.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: zipp
  dependency-version: 4.1.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: poetry-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 3, 2026
@aecorn aecorn self-requested a review June 10, 2026 08:13
@aecorn aecorn merged commit c977130 into main Jun 10, 2026
16 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/poetry-dependencies-73ad0438ad branch June 10, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aecorn aecorn aecorn approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aecorn