Commit 518eea2
authored
chore(deps): update python dependencies (#166)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [jsonschema](https://redirect.github.com/python-jsonschema/jsonschema)
([changelog](https://redirect.github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst))
| `4.25.1` → `4.26.0` |

|

|

|

|
| [mypy](https://redirect.github.com/python/mypy)
([changelog](https://mypy.readthedocs.io/en/latest/changelog.html)) |
`1.19.0` → `1.19.1` |

|

|

|

|
| [ruff](https://docs.astral.sh/ruff)
([source](https://redirect.github.com/astral-sh/ruff),
[changelog](https://redirect.github.com/astral-sh/ruff/blob/main/CHANGELOG.md))
| `0.14.8` → `0.14.14` |

|

|

|

|
---
### Release Notes
<details>
<summary>python-jsonschema/jsonschema (jsonschema)</summary>
###
[`v4.26.0`](https://redirect.github.com/python-jsonschema/jsonschema/blob/HEAD/CHANGELOG.rst#v4260)
[Compare
Source](https://redirect.github.com/python-jsonschema/jsonschema/compare/v4.25.1...v4.26.0)
\=======
- Decrease import time by delaying importing of `urllib.request`
([#​1416](https://redirect.github.com/python-jsonschema/jsonschema/issues/1416)).
</details>
<details>
<summary>python/mypy (mypy)</summary>
###
[`v1.19.1`](https://redirect.github.com/python/mypy/blob/HEAD/CHANGELOG.md#Mypy-1191)
[Compare
Source](https://redirect.github.com/python/mypy/compare/v1.19.0...v1.19.1)
- Fix noncommutative joins with bounded TypeVars (Shantanu, PR
[20345](https://redirect.github.com/python/mypy/pull/20345))
- Respect output format for cached runs by serializing raw errors in
cache metas (Ivan Levkivskyi, PR
[20372](https://redirect.github.com/python/mypy/pull/20372))
- Allow `types.NoneType` in match cases (A5rocks, PR
[20383](https://redirect.github.com/python/mypy/pull/20383))
- Fix mypyc generator regression with empty tuple (BobTheBuidler, PR
[20371](https://redirect.github.com/python/mypy/pull/20371))
- Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR
[20323](https://redirect.github.com/python/mypy/pull/20323))
- Fix crash on star import of redefinition (Ivan Levkivskyi, PR
[20333](https://redirect.github.com/python/mypy/pull/20333))
- Fix crash on typevar with forward ref used in other module (Ivan
Levkivskyi, PR
[20334](https://redirect.github.com/python/mypy/pull/20334))
- Fail with an explicit error on PyPy (Ivan Levkivskyi, PR
[20389](https://redirect.github.com/python/mypy/pull/20389))
</details>
<details>
<summary>astral-sh/ruff (ruff)</summary>
###
[`v0.14.14`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01414)
[Compare
Source](https://redirect.github.com/astral-sh/ruff/compare/0.14.13...0.14.14)
Released on 2026-01-22.
##### Preview features
- Preserve required parentheses in lambda bodies
([#​22747](https://redirect.github.com/astral-sh/ruff/pull/22747))
- Combine range suppression code diagnostics
([#​22613](https://redirect.github.com/astral-sh/ruff/pull/22613))
- \[`airflow`] Second positional argument to `Asset`/`Dataset` should
not be a dictionary (`AIR303`)
([#​22453](https://redirect.github.com/astral-sh/ruff/pull/22453))
- \[`ruff`] Detect duplicate entries in `__all__` (`RUF068`)
([#​22114](https://redirect.github.com/astral-sh/ruff/pull/22114))
##### Bug fixes
- \[`pyupgrade`] Allow shadowing non-builtin bindings (`UP029`)
([#​22749](https://redirect.github.com/astral-sh/ruff/pull/22749))
- \[`pyupgrade`] Apply `UP045` to string arguments of `typing.cast`
([#​22320](https://redirect.github.com/astral-sh/ruff/pull/22320))
- \[`flake8-pie`] Detect duplicated declared class fields in `PIE794`
([#​22717](https://redirect.github.com/astral-sh/ruff/pull/22717))
##### Rule changes
- \[`flake8-pyi`] Fix inconsistent handling of forward references for
`__new__`, `__enter__`, `__aenter__` in `PYI034`
([#​22798](https://redirect.github.com/astral-sh/ruff/pull/22798))
- \[`flake8-pytest-style`] Support `check` parameter in `PT011`
([#​22725](https://redirect.github.com/astral-sh/ruff/pull/22725))
- \[`ruff`] Add exception for `ctypes.Structure._fields_` (`RUF012`)
([#​22559](https://redirect.github.com/astral-sh/ruff/pull/22559))
- Many fixes are now marked unsafe if they would remove comments:
- \[`flake8-bugbear`]
[`B009`](https://redirect.github.com/astral-sh/ruff/pull/22656),
[`B010`](https://redirect.github.com/astral-sh/ruff/pull/22657),
[`B013`](https://redirect.github.com/astral-sh/ruff/pull/22658),
[`B014`](https://redirect.github.com/astral-sh/ruff/pull/22659),
[`B033`](https://redirect.github.com/astral-sh/ruff/pull/22632)
- \[`flake8-simplify`]
[`SIM910`](https://redirect.github.com/astral-sh/ruff/pull/22662),
[`SIM911`](https://redirect.github.com/astral-sh/ruff/pull/22661)
- \[`pyupgrade`]
[`UP007`](https://redirect.github.com/astral-sh/ruff/pull/22772),
[`UP039`](https://redirect.github.com/astral-sh/ruff/pull/22774),
[`UP041`](https://redirect.github.com/astral-sh/ruff/pull/22773),
[`UP045`](https://redirect.github.com/astral-sh/ruff/pull/22772)
- \[`refurb`]
[`FURB105`](https://redirect.github.com/astral-sh/ruff/pull/22767),
[`FURB116`](https://redirect.github.com/astral-sh/ruff/pull/22681),
[`FURB136`](https://redirect.github.com/astral-sh/ruff/pull/22680),
[`FURB140`](https://redirect.github.com/astral-sh/ruff/pull/22679),
[`FURB145`](https://redirect.github.com/astral-sh/ruff/pull/22670),
[`FURB154`](https://redirect.github.com/astral-sh/ruff/pull/22669),
[`FURB157`](https://redirect.github.com/astral-sh/ruff/pull/22668),
[`FURB164`](https://redirect.github.com/astral-sh/ruff/pull/22667),[`FURB181`](https://redirect.github.com/astral-sh/ruff/pull/22666),
[`FURB188`](https://redirect.github.com/astral-sh/ruff/pull/22665)
- \[`ruff`]
[`RUF019`](https://redirect.github.com/astral-sh/ruff/pull/22663),
[`RUF020`](https://redirect.github.com/astral-sh/ruff/pull/22664)
##### Documentation
- Add `--exit-non-zero-on-format` to formatter exit codes section
([#​22761](https://redirect.github.com/astral-sh/ruff/pull/22761))
- Update contributing guide for adding a new rule
([#​22779](https://redirect.github.com/astral-sh/ruff/pull/22779))
- \[`FastAPI`] Document fix safety for `FAST001`
([#​22655](https://redirect.github.com/astral-sh/ruff/pull/22655))
- \[`flake8-async`] Tweak explanation to focus on latency/efficiency
tradeoff (`ASYNC110`)
([#​22715](https://redirect.github.com/astral-sh/ruff/pull/22715))
- \[`pandas-vet`] Make example error out-of-the-box (`PD002`)
([#​22561](https://redirect.github.com/astral-sh/ruff/pull/22561))
- \[`refurb`] Make the example work out of box (`FURB101`)
([#​22770](https://redirect.github.com/astral-sh/ruff/pull/22770))
- \[`refurb`] Make the example work out of box (`FURB103`)
([#​22769](https://redirect.github.com/astral-sh/ruff/pull/22769))
##### Contributors
- [@​alejsdev](https://redirect.github.com/alejsdev)
- [@​ntBre](https://redirect.github.com/ntBre)
- [@​caiquejjx](https://redirect.github.com/caiquejjx)
- [@​chirizxc](https://redirect.github.com/chirizxc)
- [@​denyszhak](https://redirect.github.com/denyszhak)
- [@​sjyangkevin](https://redirect.github.com/sjyangkevin)
- [@​MeGaGiGaGon](https://redirect.github.com/MeGaGiGaGon)
- [@​leandrobbraga](https://redirect.github.com/leandrobbraga)
- [@​MichaReiser](https://redirect.github.com/MichaReiser)
- [@​carljm](https://redirect.github.com/carljm)
- [@​amyreese](https://redirect.github.com/amyreese)
- [@​zsol](https://redirect.github.com/zsol)
- [@​harupy](https://redirect.github.com/harupy)
###
[`v0.14.13`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01413)
Released on 2026-01-15.
This is a follow-up release to 0.14.12. Because of an issue publishing
the WASM packages, there is no GitHub release or Git tag for 0.14.12,
although the package was published to PyPI. The contents of the 0.14.13
release are identical to 0.14.12.
###
[`v0.14.12`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01412)
Released on 2026-01-15.
##### Preview features
- \[`flake8-blind-except`] Allow more logging methods (`BLE001`)
([#​22057](https://redirect.github.com/astral-sh/ruff/pull/22057))
- \[`ruff`] Respect `lint.pydocstyle.property-decorators` in `RUF066`
([#​22515](https://redirect.github.com/astral-sh/ruff/pull/22515))
##### Bug fixes
- Fix configuration path in `--show-settings`
([#​22478](https://redirect.github.com/astral-sh/ruff/pull/22478))
- Respect `fmt: skip` for multiple statements on the same logical line
([#​22119](https://redirect.github.com/astral-sh/ruff/pull/22119))
##### Rule changes
- \[`pydocstyle`] Update Rust crate imperative to v1.0.7 (`D401`)
([#​22519](https://redirect.github.com/astral-sh/ruff/pull/22519))
- \[`isort`] Insert imports in alphabetical order (`I002`)
([#​22493](https://redirect.github.com/astral-sh/ruff/pull/22493))
##### Documentation
- Add llms.txt support for documentation
([#​22463](https://redirect.github.com/astral-sh/ruff/pull/22463))
- Use prek in documentation and CI
([#​22505](https://redirect.github.com/astral-sh/ruff/pull/22505))
- \[`flake8-pytest-style`] Add `check` parameter example to `PT017` docs
([#​22546](https://redirect.github.com/astral-sh/ruff/pull/22546))
- \[`ruff`] Make example error out-of-the-box (`RUF103`)
([#​22558](https://redirect.github.com/astral-sh/ruff/pull/22558))
- \[`ruff`] document `RUF100` trailing comment fix behavior
([#​22479](https://redirect.github.com/astral-sh/ruff/pull/22479))
##### Other changes
- wasm: Require explicit logging initialization
([#​22587](https://redirect.github.com/astral-sh/ruff/pull/22587))
##### Contributors
- [@​terror](https://redirect.github.com/terror)
- [@​harupy](https://redirect.github.com/harupy)
- [@​Jkhall81](https://redirect.github.com/Jkhall81)
- [@​dhruvmanila](https://redirect.github.com/dhruvmanila)
- [@​lubaskinc0de](https://redirect.github.com/lubaskinc0de)
- [@​zanieb](https://redirect.github.com/zanieb)
- [@​MeGaGiGaGon](https://redirect.github.com/MeGaGiGaGon)
- [@​charliermarsh](https://redirect.github.com/charliermarsh)
- [@​renovate](https://redirect.github.com/renovate)
- [@​dylwil3](https://redirect.github.com/dylwil3)
- [@​MichaReiser](https://redirect.github.com/MichaReiser)
- [@​11happy](https://redirect.github.com/11happy)
###
[`v0.14.11`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01411)
[Compare
Source](https://redirect.github.com/astral-sh/ruff/compare/0.14.10...0.14.11)
Released on 2026-01-08.
##### Preview features
- Consolidate diagnostics for matched disable/enable suppression
comments
([#​22099](https://redirect.github.com/astral-sh/ruff/pull/22099))
- Report diagnostics for invalid/unmatched range suppression comments
([#​21908](https://redirect.github.com/astral-sh/ruff/pull/21908))
- \[`airflow`] Passing positional argument into
`airflow.lineage.hook.HookLineageCollector.create_asset` is not allowed
(`AIR303`)
([#​22046](https://redirect.github.com/astral-sh/ruff/pull/22046))
- \[`refurb`] Mark `FURB192` fix as always unsafe
([#​22210](https://redirect.github.com/astral-sh/ruff/pull/22210))
- \[`ruff`] Add `non-empty-init-module` (`RUF067`)
([#​22143](https://redirect.github.com/astral-sh/ruff/pull/22143))
##### Bug fixes
- Fix GitHub format for multi-line diagnostics
([#​22108](https://redirect.github.com/astral-sh/ruff/pull/22108))
- \[`flake8-unused-arguments`] Mark `**kwargs` in `TypeVar` as used
(`ARG001`)
([#​22214](https://redirect.github.com/astral-sh/ruff/pull/22214))
##### Rule changes
- Add `help:` subdiagnostics for several Ruff rules that can sometimes
appear to disagree with `ty`
([#​22331](https://redirect.github.com/astral-sh/ruff/pull/22331))
- \[`pylint`] Demote `PLW1510` fix to display-only
([#​22318](https://redirect.github.com/astral-sh/ruff/pull/22318))
- \[`pylint`] Ignore identical members (`PLR1714`)
([#​22220](https://redirect.github.com/astral-sh/ruff/pull/22220))
- \[`pylint`] Improve diagnostic range for `PLC0206`
([#​22312](https://redirect.github.com/astral-sh/ruff/pull/22312))
- \[`ruff`] Improve fix title for `RUF102` invalid rule code
([#​22100](https://redirect.github.com/astral-sh/ruff/pull/22100))
- \[`flake8-simplify`]: Avoid unnecessary builtins import for `SIM105`
([#​22358](https://redirect.github.com/astral-sh/ruff/pull/22358))
##### Configuration
- Allow Python 3.15 as valid `target-version` value in preview
([#​22419](https://redirect.github.com/astral-sh/ruff/pull/22419))
- Check `required-version` before parsing rules
([#​22410](https://redirect.github.com/astral-sh/ruff/pull/22410))
- Include configured `src` directories when resolving graphs
([#​22451](https://redirect.github.com/astral-sh/ruff/pull/22451))
##### Documentation
- Update `T201` suggestion to not use root logger to satisfy `LOG015`
([#​22059](https://redirect.github.com/astral-sh/ruff/pull/22059))
- Fix `iter` example in unsafe fixes doc
([#​22118](https://redirect.github.com/astral-sh/ruff/pull/22118))
- \[`flake8_print`] better suggestion for `basicConfig` in `T201` docs
([#​22101](https://redirect.github.com/astral-sh/ruff/pull/22101))
- \[`pylint`] Restore the fix safety docs for `PLW0133`
([#​22211](https://redirect.github.com/astral-sh/ruff/pull/22211))
- Fix Jupyter notebook discovery info for editors
([#​22447](https://redirect.github.com/astral-sh/ruff/pull/22447))
##### Contributors
- [@​charliermarsh](https://redirect.github.com/charliermarsh)
- [@​ntBre](https://redirect.github.com/ntBre)
- [@​cenviity](https://redirect.github.com/cenviity)
- [@​njhearp](https://redirect.github.com/njhearp)
- [@​cbachhuber](https://redirect.github.com/cbachhuber)
- [@​jelle-openai](https://redirect.github.com/jelle-openai)
- [@​AlexWaygood](https://redirect.github.com/AlexWaygood)
- [@​ValdonVitija](https://redirect.github.com/ValdonVitija)
- [@​BurntSushi](https://redirect.github.com/BurntSushi)
- [@​Jkhall81](https://redirect.github.com/Jkhall81)
- [@​PeterJCLaw](https://redirect.github.com/PeterJCLaw)
- [@​harupy](https://redirect.github.com/harupy)
- [@​amyreese](https://redirect.github.com/amyreese)
- [@​sjyangkevin](https://redirect.github.com/sjyangkevin)
- [@​woodruffw](https://redirect.github.com/woodruffw)
###
[`v0.14.10`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#01410)
[Compare
Source](https://redirect.github.com/astral-sh/ruff/compare/0.14.9...0.14.10)
Released on 2025-12-18.
##### Preview features
- \[formatter] Fluent formatting of method chains
([#​21369](https://redirect.github.com/astral-sh/ruff/pull/21369))
- \[formatter] Keep lambda parameters on one line and parenthesize the
body if it expands
([#​21385](https://redirect.github.com/astral-sh/ruff/pull/21385))
- \[`flake8-implicit-str-concat`] New rule to prevent implicit string
concatenation in collections (`ISC004`)
([#​21972](https://redirect.github.com/astral-sh/ruff/pull/21972))
- \[`flake8-use-pathlib`] Make fixes unsafe when types change in
compound statements (`PTH104`, `PTH105`, `PTH109`, `PTH115`)
([#​22009](https://redirect.github.com/astral-sh/ruff/pull/22009))
- \[`refurb`] Extend support for `Path.open` (`FURB101`, `FURB103`)
([#​21080](https://redirect.github.com/astral-sh/ruff/pull/21080))
##### Bug fixes
- \[`pyupgrade`] Fix parsing named Unicode escape sequences (`UP032`)
([#​21901](https://redirect.github.com/astral-sh/ruff/pull/21901))
##### Rule changes
- \[`eradicate`] Ignore `ruff:disable` and `ruff:enable` comments in
`ERA001`
([#​22038](https://redirect.github.com/astral-sh/ruff/pull/22038))
- \[`flake8-pytest-style`] Allow `match` and `check` keyword arguments
without an expected exception type (`PT010`)
([#​21964](https://redirect.github.com/astral-sh/ruff/pull/21964))
- \[syntax-errors] Annotated name cannot be global
([#​20868](https://redirect.github.com/astral-sh/ruff/pull/20868))
##### Documentation
- Add `uv` and `ty` to the Ruff README
([#​21996](https://redirect.github.com/astral-sh/ruff/pull/21996))
- Document known lambda formatting deviations from Black
([#​21954](https://redirect.github.com/astral-sh/ruff/pull/21954))
- Update `setup.md`
([#​22024](https://redirect.github.com/astral-sh/ruff/pull/22024))
- \[`flake8-bandit`] Fix broken link (`S704`)
([#​22039](https://redirect.github.com/astral-sh/ruff/pull/22039))
##### Other changes
- Fix playground Share button showing "Copied!" before clipboard copy
completes
([#​21942](https://redirect.github.com/astral-sh/ruff/pull/21942))
##### Contributors
- [@​dylwil3](https://redirect.github.com/dylwil3)
-
[@​charliecloudberry](https://redirect.github.com/charliecloudberry)
- [@​charliermarsh](https://redirect.github.com/charliermarsh)
- [@​chirizxc](https://redirect.github.com/chirizxc)
- [@​ntBre](https://redirect.github.com/ntBre)
- [@​zanieb](https://redirect.github.com/zanieb)
- [@​amyreese](https://redirect.github.com/amyreese)
- [@​hauntsaninja](https://redirect.github.com/hauntsaninja)
- [@​11happy](https://redirect.github.com/11happy)
- [@​mahiro72](https://redirect.github.com/mahiro72)
- [@​MichaReiser](https://redirect.github.com/MichaReiser)
- [@​phongddo](https://redirect.github.com/phongddo)
- [@​PeterJCLaw](https://redirect.github.com/PeterJCLaw)
###
[`v0.14.9`](https://redirect.github.com/astral-sh/ruff/blob/HEAD/CHANGELOG.md#0149)
[Compare
Source](https://redirect.github.com/astral-sh/ruff/compare/0.14.8...0.14.9)
Released on 2025-12-11.
##### Preview features
- \[`ruff`] New `RUF100` diagnostics for unused range suppressions
([#​21783](https://redirect.github.com/astral-sh/ruff/pull/21783))
- \[`pylint`] Detect subclasses of builtin exceptions (`PLW0133`)
([#​21382](https://redirect.github.com/astral-sh/ruff/pull/21382))
##### Bug fixes
- Fix comment placement in lambda parameters
([#​21868](https://redirect.github.com/astral-sh/ruff/pull/21868))
- Skip over trivia tokens after re-lexing
([#​21895](https://redirect.github.com/astral-sh/ruff/pull/21895))
- \[`flake8-bandit`] Fix false positive when using non-standard
`CSafeLoader` path (S506).
([#​21830](https://redirect.github.com/astral-sh/ruff/pull/21830))
- \[`flake8-bugbear`] Accept immutable slice default arguments (`B008`)
([#​21823](https://redirect.github.com/astral-sh/ruff/pull/21823))
##### Rule changes
- \[`pydocstyle`] Suppress `D417` for parameters with `Unpack`
annotations
([#​21816](https://redirect.github.com/astral-sh/ruff/pull/21816))
##### Performance
- Use `memchr` for computing line indexes
([#​21838](https://redirect.github.com/astral-sh/ruff/pull/21838))
##### Documentation
- Document `*.pyw` is included by default in preview
([#​21885](https://redirect.github.com/astral-sh/ruff/pull/21885))
- Document range suppressions, reorganize suppression docs
([#​21884](https://redirect.github.com/astral-sh/ruff/pull/21884))
- Update mkdocs-material to 9.7.0 (Insiders now free)
([#​21797](https://redirect.github.com/astral-sh/ruff/pull/21797))
##### Contributors
- [@​Avasam](https://redirect.github.com/Avasam)
- [@​MichaReiser](https://redirect.github.com/MichaReiser)
- [@​charliermarsh](https://redirect.github.com/charliermarsh)
- [@​amyreese](https://redirect.github.com/amyreese)
- [@​phongddo](https://redirect.github.com/phongddo)
- [@​prakhar1144](https://redirect.github.com/prakhar1144)
- [@​mahiro72](https://redirect.github.com/mahiro72)
- [@​ntBre](https://redirect.github.com/ntBre)
- [@​LoicRiegel](https://redirect.github.com/LoicRiegel)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/DrupalSecurityTeam/drupal-advisory-database).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuODUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 9b8be8d commit 518eea2
1 file changed
Lines changed: 183 additions & 181 deletions
0 commit comments