Skip to content

chore(deps): bump the python-dependencies group with 7 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b97d793403
Open

chore(deps): bump the python-dependencies group with 7 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-b97d793403

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 7 updates:

Package From To
obstore 0.8.2 0.11.1
pystac 1.14.1 1.15.2
rio-cogeo 7.0.0 7.0.2
ipython 9.8.0 9.17.1
mypy 1.18.2 2.3.1
pre-commit 4.3.0 4.6.2
ruff 0.14.3 0.16.6

Updates obstore from 0.8.2 to 0.11.1

Commits

Updates pystac from 1.14.1 to 1.15.2

Release notes

Sourced from pystac's releases.

pystac-core-v1.15.0

No release notes provided.

pystac-core-v1.15.0-rc.1

Second rc for pystac-core

pystac-core-v1.15.0-rc.0

The first pre-release for v1.15.0, which includes the extension package refactor: stac-utils/pystac#1650. See stac-utils/pystac#1725 for the release checklist.

Changelog

Sourced from pystac's changelog.

1.15.2 (2026-07-27)

Bug Fixes

1.15.1 (2026-06-30)

Bug Fixes

  • actually link pystac-core and pystac via release-please (207e38d)
  • consolidate core and top-level package in release-please (#1760) (c6a9fbd)
  • more release-please flailing (#1762) (bcf1062)
  • remove invalid version specifier (#1756) (bc70651)

1.15.0 (2026-06-25)

Bug Fixes

Miscellaneous Chores

  • manually set next versions (64fd083)

1.14.3 (2026-01-08)

Bug Fixes

1.14.2 (2025-12-17)

Bug Fixes

  • Remove unused pystac.validation import (#1583)
  • clone extra_fields for Item (#1601) (6ba7da1)
  • make release-please two separate jobs (#1607) (bb6d289)
  • Make extent not required for VerticalSpatialDimension (#1596)

... (truncated)

Commits
  • af10871 chore(main): release 1.15.2 (#1775)
  • 1f8d728 build(deps): bump actions/checkout in the actions-deps group (#1778)
  • 70a6405 build(deps): bump setuptools from 82.0.1 to 83.0.0 (#1776)
  • 6ec1e30 build(deps): bump soupsieve from 2.8.3 to 2.8.4 (#1766)
  • 57b8d50 build(deps): bump mistune from 3.2.1 to 3.3.0 (#1767)
  • c171db2 build(deps): bump jupyter-server from 2.18.0 to 2.20.0 (#1770)
  • c82570e fix: circular imports for extensions (#1764)
  • f0c30cc build(deps): bump cryptography from 46.0.7 to 48.0.1 (#1774)
  • a448ffc build(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#1773)
  • bb1d200 build(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#1771)
  • Additional commits viewable in compare view

Updates rio-cogeo from 7.0.0 to 7.0.2

Release notes

Sourced from rio-cogeo's releases.

7.0.2

What's Changed

New Contributors

Full Changelog: cogeotiff/rio-cogeo@7.0.1...7.0.2

7.0.1

What's Changed

Full Changelog: cogeotiff/rio-cogeo@7.0.0...7.0.1

Changelog

Sourced from rio-cogeo's changelog.

7.0.2 (2026-03-27)

7.0.1 (2025-12-15)

  • add python 3.14 support
Commits

Updates ipython from 9.8.0 to 9.17.1

Commits
  • 48ff029 release 9.17.1
  • ed47107 Have builin-lazy magics have a lower priority than registered on.
  • 19f9ae0 back to dev
  • 3278f6f release 9.17.0
  • 40cfb95 Update what's new for 9.17
  • 2ed42ae Fix RST formatting in display_functions.py
  • a487a06 change emojis
  • 7f0ee55 Declare IPython's built-in magics lazily
  • ee02392 Only run the psutil-free kitty detection test where /proc exists
  • af386cf Annotate _find_dunder and put measured numbers in the whatsnew
  • Additional commits viewable in compare view

Updates mypy from 1.18.2 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits
  • d642c44 Bump version to 2.3.1
  • a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
  • 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
  • 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
  • 6dfa06d Fix crash when unpacking return value from overload (#21830)
  • a385746 Bump version to 2.3.1+dev
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

pre-commit v4.6.1

Fixes

pre-commit v4.6.0

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

... (truncated)

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

4.6.1 - 2026-07-21

Fixes

4.6.0 - 2026-04-21

Features

  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

Fixes

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

... (truncated)

Commits
  • 9767b6c v4.6.2
  • 42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
  • 3056619 fix language: node for hooks with build scripts and npm 11.x
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • Additional commits viewable in compare view

Updates ruff from 0.14.3 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dependencies group with 7 updates
2c75f0f 
Bumps the python-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [obstore](https://github.com/geospatial-jeff/pyasyncio-benchmark) | `0.8.2` | `0.11.1` |
| [pystac](https://github.com/stac-utils/pystac) | `1.14.1` | `1.15.2` |
| [rio-cogeo](https://github.com/cogeotiff/rio-cogeo) | `7.0.0` | `7.0.2` |
| [ipython](https://github.com/ipython/ipython) | `9.8.0` | `9.17.1` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `2.3.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.3` | `0.16.6` |


Updates `obstore` from 0.8.2 to 0.11.1
- [Commits](https://github.com/geospatial-jeff/pyasyncio-benchmark/commits)

Updates `pystac` from 1.14.1 to 1.15.2
- [Release notes](https://github.com/stac-utils/pystac/releases)
- [Changelog](https://github.com/stac-utils/pystac/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac@v1.14.1...v1.15.2)

Updates `rio-cogeo` from 7.0.0 to 7.0.2
- [Release notes](https://github.com/cogeotiff/rio-cogeo/releases)
- [Changelog](https://github.com/cogeotiff/rio-cogeo/blob/main/CHANGES.md)
- [Commits](cogeotiff/rio-cogeo@7.0.0...7.0.2)

Updates `ipython` from 9.8.0 to 9.17.1
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.8.0...9.17.1)

Updates `mypy` from 1.18.2 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.18.2...v2.3.1)

Updates `pre-commit` from 4.3.0 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.6.2)

Updates `ruff` from 0.14.3 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.3...0.16.6)

---
updated-dependencies:
- dependency-name: obstore
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pystac
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: rio-cogeo
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ipython
  dependency-version: 9.17.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 8, 2026
@github-actions github-actions Bot added the chore label Oct 8, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

chore dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants