Bump the lockfile-bumps group across 1 directory with 12 updates by dependabot[bot] · Pull Request #372 · ekiefl/pooltool

dependabot · 2026-08-01T00:52:54Z

Bumps the lockfile-bumps group with 12 updates in the / directory:

Package	From	To
pillow	`12.2.0`	`12.3.0`
rich	`14.3.4`	`15.0.0`
pre-commit	`4.6.0`	`4.6.1`
ruff	`0.15.20`	`0.16.0`
jupyterlab	`4.6.0`	`4.6.2`
plotly	`6.8.0`	`6.9.0`
furo	`2024.8.6`	`2025.12.19`
sphinx-autoapi	`3.6.0`	`3.8.0`
astroid	`3.3.11`	`4.1.2`
sphinx-tabs	`3.4.7`	`3.5.0`
nbsphinx	`0.9.7`	`0.9.8`
sphinx-togglebutton	`0.3.2`	`0.4.5`

Updates pillow from 12.2.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

... (truncated)

Commits

bb1d8e8 12.3.0 version bump
e63fc48 Add release notes for SBOM and performance improvements (#9747)
13b701b Add release notes for #9679
5564ca7 List methods
a0920fd Speed up ImageChops operations (#9738)
07e9a6c Speed up Image.filter() (#9736)
a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
af03747 Speed up Image.resample() (#9739)
5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
Additional commits viewable in compare view

Updates rich from 14.3.4 to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

Breaking change: Dropped support for Python3.8

Fixed

Fixed empty print ignoring the end parameter Textualize/rich#4075

Fixed Text.from_ansi removing newlines Textualize/rich#4076

Fixed FileProxy.isatty not proxying Textualize/rich#4077

Fixed inline code in Markdown tables cells Textualize/rich#4079

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

Breaking change: Dropped support for Python3.8

Fixed

Fixed empty print ignoring the end parameter Textualize/rich#4075

Fixed Text.from_ansi removing newlines Textualize/rich#4076

Fixed FileProxy.isatty not proxying Textualize/rich#4077

Fixed inline code in Markdown tables cells Textualize/rich#4079

Commits

6ac483c correction
458a910 Merge pull request #4080 from Textualize/bump1500
82e06e0 changelog
d6556bc bump to 15.0.0
ffe2edc Merge pull request #4079 from Textualize/inline-table-code
cf3b5a1 changelog
77f0edb remove comments
7ef2d05 fix inline code in table cells
19c67b9 Merge pull request #4077 from Textualize/isattry
494b795 changelog
Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Commits

242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
1d811d9 Return an error for invalid --repo
374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
1e7994f set JULIA_DEPOT_PATH
b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:
❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted
See the CLI help or documentation for the full list of supported formats.
The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes
Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.
Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:
import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os
Fixes are now shown in check and format --check output:
❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted
This example also shows off the Markdown formatting.
format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

... (truncated)

Commits

a2635fd Bump 0.16.0 (#27136)
3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
17ef711 Stabilize --add-ignore (#27125)
ef912bb Add newly stabilized rules to defaults (#27055)
b30f040 Stabilize new default rules (#27035)
bcd70c5 Exclude Markdown files from format-dev runs (#27052)
87e51e2 Fix format --check spans for syntax errors (#27045)
afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
Additional commits viewable in compare view

Updates jupyterlab from 4.6.0 to 4.6.2

Release notes

Sourced from jupyterlab's releases.

v4.6.2

4.6.2

(Full Changelog)

Security patches

GHSA-gx64-gj6p-pc4c: Image viewer allows XSS when opening malicious image in new browser tab

GHSA-89vp-jrxv-24w8: PyPI extension blocklist package-name canonicalization bypass

GHSA-h5v5-8746-g7mm: PluginManager lock-rule enforcement bypass

GHSA-pppj-hq3g-57pj: Cross-site scripting (XSS) via crafted settings file (overrides.json)

GHSA-whvh-wf3x-g77j: Allowlist/blocklist check in PyPIExtensionManager.install() not enforced for direct callers (missing await)

Bugs fixed

Backport of security patches to 4.6.x branch #19185 (@krassowski, @MUFFANUJ)

Fix resolving platform-specific shortcuts in keyboard shortcuts #19112 (@krassowski)

Clear stale Table of Contents error markers #19143 (@MUFFANUJ)

Fix stale document load after rename during initialization #19144 (@MUFFANUJ)

Fix notebook initialization stealing focus #19149 (@MUFFANUJ)

Fix spurious 3s kernel restart delay #19126 (@afshin)

Stabilize Open in Terminal Galata test on Firefox #19152 (@MUFFANUJ)

Fix bottom activity bar restoring as collapsed #19136 (@MUFFANUJ)

Handle invalid file browser drag target #19122 (@GagandeepSingh20)

Stabilize flaky Firefox notebook Galata tests #19008 (@MUFFANUJ)

Maintenance and upkeep improvements

Update Jupyter Releaser GitHub Actions #19145 (@jtpio)

Documentation improvements

Fix a typo in release notes #19116 (@krassowski)

Update migration guide - 4.6 was released #19108 (@krassowski)

Other merged PRs

Bump brace-expansion from 1.1.11 to 1.1.16 in /jupyterlab/tests/mock_packages/test_no_hyphens #19179 (@dependabot[bot])

Bump axios from 1.16.0 to 1.18.1 #19178 (@dependabot[bot])

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@afshin (activity) | @GagandeepSingh20 (activity) | @jtpio (activity) | @krassowski (activity) | @MUFFANUJ (activity)

... (truncated)

Commits

150ba51 [ci skip] Publish 4.6.2
f1beab4 Backport of security patches to 4.6.x branch (#19185)
abdd427 Backport PR #19112 on branch 4.6.x (Fix resolving platform-specific shortcuts...
98a615c Backport PR #19143 on branch 4.6.x (Clear stale Table of Contents error marke...
1ec91a4 Backport PR #19179 on branch 4.6.x (Bump brace-expansion from 1.1.11 to 1.1.1...
8d66183 Backport PR #19178 on branch 4.6.x (Bump axios from 1.16.0 to 1.18.1) (#19180)
34ca550 Backport PR #19144 on branch 4.6.x (Fix stale document load after rename duri...
172a7f6 Backport PR #19149 on branch 4.6.x (Fix notebook initialization stealing focu...
34e1782 Backport PR #19126 on branch 4.6.x (Fix spurious 3s kernel restart delay) (#1...
57e5afd Backport PR #19152 on branch 4.6.x (Stabilize Open in Terminal Galata test on...
Additional commits viewable in compare view

Updates plotly from 6.8.0 to 6.9.0

Release notes

Sourced from plotly's releases.

v6.9.0

Fixed

Raise a clear ValueError when an unsupported marginal plot type is passed to Plotly Express, instead of failing later with a cryptic 'NoneType' object has no attribute 'constructor' message [#5625], with thanks to @eugen-goebel for the contribution!

Updated

Update plotly.js from version 3.6.0 to version 3.7.0. See the plotly.js release notes for more information [#5639]. Notable changes include:

Rename sendDataToCloud modebar button to sendChartToCloud, and update to upload chart to Plotly Cloud [#7802, #7852, #7854]. NOTE: The Plotly Cloud endpoint for receiving charts is not yet functional, so this button won't complete the upload.

Fix stale scattergl error bars after toggling traces with mixed error bar visibility [#7773], with thanks to @JulienIcon for the contribution!

Fix geo fitbounds to choose a compact longitude range when point data straddles the antimeridian [#7837], with thanks to @SharadhNaidu for the contribution!

Full Changelog: plotly/plotly.py@v6.8.0...v6.9.0

Changelog

Sourced from plotly's changelog.

[6.9.0] - 2026-07-09

Fixed

Raise a clear ValueError when an unsupported marginal plot type is passed to Plotly Express, instead of failing later with a cryptic 'NoneType' object has no attribute 'constructor' message [#5625], with thanks to @eugen-goebel for the contribution!

Read and write figure JSON files as UTF-8 in read_json/write_json so figures containing non-ASCII text are handled correctly on platforms whose default encoding is not UTF-8 (e.g. cp1252 on Windows) [#5633]

Updated

Update plotly.js from version 3.6.0 to version 3.7.0. See the plotly.js release notes for more information [#5639]. Notable changes include:

Rename sendDataToCloud modebar button to sendChartToCloud, and update to upload chart to Plotly Cloud [#7802, #7852, #7854]. NOTE: The Plotly Cloud endpoint for receiving charts is not yet functional, so this button won't complete the upload.

Fix stale scattergl error bars after toggling traces with mixed error bar visibility [#7773], with thanks to @JulienIcon for the contribution!

Fix geo fitbounds to choose a compact longitude range when point data straddles the antimeridian [#7837], with thanks to @SharadhNaidu for the contribution!

Commits

495134a update date
2e824d8 version changes for v6.9.0
c27c986 Merge pull request #5639 from plotly/update-plotlyjs-3.7.0
3d63d05 typos
fd7e3f1 update commands.py and CONTRIBUTING.md to reflect the fact that JS build arti...
9a753fe update changelog
4ff6656 update built JS artifacts
b3facc7 update plotly.js to v3.7.0
5cdb606 Merge pull request #5630 from eugen-goebel/fix-marginal-error-message-spacing
8d47808 Add missing space in unsupported-marginal error message
Additional commits viewable in compare view

Updates furo from 2024.8.6 to 2025.12.19

Release notes

Sourced from furo's releases.

2025.12.19

Bump the supported Sphinx version range

Full Changelog: pradyunsg/furo@2025.09.25...2025.12.19

2025.09.25

What's Changed

page.html: fix invalid HTML5 by @haampie in pradyunsg/furo#894

base.html: fix trailing slash on void elements by @haampie in pradyunsg/furo#895

_scaffold.sass: remove old scrollbar selectors by @haampie in pradyunsg/furo#892

Add Blender to "used by" section by @struffel in pradyunsg/furo#898

New Contributors

@haampie made their first contribution in pradyunsg/furo#894

@struffel made their first contribution in pradyunsg/furo#898

Full Changelog: pradyunsg/furo@2025.07.19...2025.09.25

2025.07.19

What's Changed

Remove "debug printf" for headerTop value by @ferdnyc in pradyunsg/furo#847

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pradyunsg/furo#826

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pradyunsg/furo#861

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pradyunsg/furo#873

Add rel=edit attribute to "Edit this page" link/icon by @capjamesg in pradyunsg/furo#880

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in pradyunsg/furo#879

Fix flickering header drop shadow by @holesch in pradyunsg/furo#884

Make current page section detection resilient to sticky elements above header by @Eric-Arellano in pradyunsg/furo#664

New Contributors

@capjamesg made their first contribution in pradyunsg/furo#880

@holesch made their first contribution in pradyunsg/furo#884

Full Changelog: pradyunsg/furo@2024.08.06...2025.07.19

Changelog

Sourced from furo's changelog.

2025.12.19 -- Harmonious Honeydew

✨ Add support for Sphinx 9.

Drop support for Sphinx 6.

2025.09.25 -- Gleaming Green

Change the dark mode code back to native.

2025.07.19 -- Frozen Flame

✨ Switch to accessible-pygments themes

✨ Prefetch the sidebar logos

✨ Fix flickering header drop shadow on Safari

Add rel=edit attribute to "Edit this page" link/icon

Bump NodeJS and npm dependency versions

Bump Saas & Webpack major versions

Improve current page detection to be resilient to sticky elements above header

Modernise Sass and use @use + @forward

Remove top of code border-radius with captions

Remove "debug printf" for headerTop value

Use distinct images for light and dark mode in the documentation

Use the modern Saas Modules

2024.08.06 -- Energetic Eminence

✨ Add support for Sphinx 8

✨ Add smoother transitions between breakpoints

Increase specificity of table-wrapper selector

Avoid page breaks inside paragraphs

2024.07.18 -- Dull Denim

Improve how icons are handled and aligned.

Improve scroll event handler.

Hide the copybutton by default.

Fix source_view_link configuration handling.

Fix close tag on pencil icon.

2024.05.06 -- Cheerful Cerulean

✨ Add new custom icons for auto mode, reflecting the currently active theme.

✨ Add a view this page button.

✨ Add colours and highlighting to "version modified" API helpers.

✨ Add release information to various customisation knobs.

Make all icons bigger and use a thinner stroke with them.

2024.04.27 -- Bold Burgundy

Add a skip to content link.

... (truncated)

Commits

dd9e9f9 Prepare release: 2025.12.19
d43f7e9 Update changelog
d27cab5 Bump the supported Sphinx version range
12f288e Back to development
7c5f8fa Prepare release: 2025.09.25
8bfdc54 Update changelog
d92b62f Switch the dark mode theme back to native
83c3446 Add Blender to "used by" section (#898)
426ea05 Remove old scrollbar selectors (#892)
d22d31c Remove trailing slash on void elements (#895)
Additional commits viewable in compare view

Updates sphinx-autoapi from 3.6.0 to 3.8.0

Release notes

Sourced from sphinx-autoapi's releases.

v3.8.0

Features

Autodoc-style directives can access members excluded by autoapi_options

Misc

#553

v3.7.0

Features

Added autoapi.import warning for when AutoAPI directives are given non-existent objects

Adding autoapi_follow_symlinks, which allows api to traverse into symlinked directories when generating the API documentation.

Drop support for Python 3.9 and officially support Python 3.14

Support rendering PEP-695 type parameters

Bugfixes

Render typing_extensions.TypeAlias like other type aliases (#520)

Fix PythonFunction.overloads typing when source code overload(s) do not provide a return type (#523)

Misc

Fix deprecation warnings raised by astroid and sphinx

Handling case where match returns None to fix mypy unit test.

v3.6.1

Bugfixes

Update the supported versions of astroid. Fix the breaking change to Import and pass in the AstroidManager to the AstroidBuilder (#536)

Changelog

Sourced from sphinx-autoapi's changelog.

v3.8.0 (2026-03-07)

Features ^^^^^^^^

Autodoc-style directives can access members excluded by autoapi_options

Misc ^^^^

#553

v3.7.0 (2026-02-10)

Features ^^^^^^^^

Added autoapi.import warning for when AutoAPI directives are given non-existent objects

Adding autoapi_follow_symlinks, which allows api to traverse into symlinked directories when generating the API documentation.

Drop support for Python 3.9 and officially support Python 3.14

Support rendering PEP-695 type parameters

Bugfixes ^^^^^^^^

Render typing_extensions.TypeAlias like other type aliases (#520)

Fix PythonFunction.overloads typing when source code overload(s) do not provide a return type (#523)

Misc ^^^^

Fix deprecation warnings raised by astroid and sphinx

Handling case where match returns None to fix mypy unit test.

v3.6.1 (2025-10-06)

Bugfixes ^^^^^^^^

Update the supported versions of astroid. Fix the breaking change to Import and pass in the AstroidManager to the AstroidBuilder (#536)

Commits

75cbffd Version 3.8.0
7838cf6 Bump the github-actions group with 2 updates
f1cdd30 Attempt to fix macos-latest build
34bb24c Autodoc-style directives can access members excluded by autoapi_options
ccb2e89 astroid requirement is consistent across all versions of Python
0917ed2 Version 3.7.0
394beb4 Add warning for missing import
96cd74d Update changelog
c248b85 Render typing_extensions.TypeAlias like other type aliases
a2f49c9 Fix deprecation warnings raised by astroid and sphinx
Additional commits viewable in compare view

Updates astroid from 3.3.11 to 4.1.2

Release notes

Sourced from astroid's releases.

v4.1.2

What's New in astroid 4.1.2?

Release date: 2026-03-22

Fix crash accessing property fset in generic classes with type annotations. Closes #2996

Fix infinite recursion caused by cyclic inference in Constraint.

Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

Closes #2967 Closes pylint-dev/pylint#10821

Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

Closes #2628

Fix FunctionModel returning descriptor attributes for builtin functions.

Closes #2743

Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

Closes #2762

Fix ValueError in __str__/repr and error messages when nodes have extreme values (very long identifiers or large integers). Clamp pprint width to a minimum of 1 and truncate oversized values in error messages.

Closes #2764

v4.1.1

What's New in astroid 4.1.1?

Release date: 2026-02-22

Let UnboundMethodModel inherit from FunctionModel to improve inference of dunder methods for unbound methods.

Refs #2741

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.1.2?

Release date: 2026-03-22

Fix crash accessing property fset in generic classes with type annotations. Closes #2996

Fix infinite recursion caused by cyclic inference in Constraint.

Fix RecursionError in _compute_mro() when circular class hierarchies are created through runtime name rebinding. Circular bases are now resolved to the original class instead of recursing.

Closes #2967 Closes pylint-dev/pylint#10821

Fix DuplicateBasesError crash in dataclass transform when a class has duplicate bases in its MRO (e.g., Protocol appearing both directly and indirectly). Catch MroError at .mro() call sites in brain_dataclasses.py, consistent with the existing pattern elsewhere.

Closes #2628

Fix FunctionModel returning descriptor attributes for builtin functions.

Closes #2743

Catch MemoryError when inferring f-strings with extremely large format widths (e.g. f'{0:11111111111}') so that inference yields Uninferable instead of crashing.

Closes

Bumps the lockfile-bumps group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pillow](https://github.com/python-pillow/Pillow) | `12.2.0` | `12.3.0` | | [rich](https://github.com/Textualize/rich) | `14.3.4` | `15.0.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.0` | | [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.6.0` | `4.6.2` | | [plotly](https://github.com/plotly/plotly.py) | `6.8.0` | `6.9.0` | | [furo](https://github.com/pradyunsg/furo) | `2024.8.6` | `2025.12.19` | | [sphinx-autoapi](https://github.com/readthedocs/sphinx-autoapi) | `3.6.0` | `3.8.0` | | [astroid](https://github.com/pylint-dev/astroid) | `3.3.11` | `4.1.2` | | [sphinx-tabs](https://github.com/executablebooks/sphinx-tabs) | `3.4.7` | `3.5.0` | | [nbsphinx](https://github.com/spatialaudio/nbsphinx) | `0.9.7` | `0.9.8` | | [sphinx-togglebutton](https://github.com/executablebooks/sphinx-togglebutton) | `0.3.2` | `0.4.5` | Updates `pillow` from 12.2.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.2.0...12.3.0) Updates `rich` from 14.3.4 to 15.0.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.4...v15.0.0) Updates `pre-commit` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `ruff` from 0.15.20 to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.16.0) Updates `jupyterlab` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.6.0...@jupyterlab/lsp@4.6.2) Updates `plotly` from 6.8.0 to 6.9.0 - [Release notes](https://github.com/plotly/plotly.py/releases) - [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md) - [Commits](plotly/plotly.py@v6.8.0...v6.9.0) Updates `furo` from 2024.8.6 to 2025.12.19 - [Release notes](https://github.com/pradyunsg/furo/releases) - [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md) - [Commits](pradyunsg/furo@2024.08.06...2025.12.19) Updates `sphinx-autoapi` from 3.6.0 to 3.8.0 - [Release notes](https://github.com/readthedocs/sphinx-autoapi/releases) - [Changelog](https://github.com/readthedocs/sphinx-autoapi/blob/main/CHANGELOG.rst) - [Commits](readthedocs/sphinx-autoapi@v3.6.0...v3.8.0) Updates `astroid` from 3.3.11 to 4.1.2 - [Release notes](https://github.com/pylint-dev/astroid/releases) - [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog) - [Commits](pylint-dev/astroid@v3.3.11...v4.1.2) Updates `sphinx-tabs` from 3.4.7 to 3.5.0 - [Release notes](https://github.com/executablebooks/sphinx-tabs/releases) - [Changelog](https://github.com/executablebooks/sphinx-tabs/blob/main/CHANGELOG.md) - [Commits](executablebooks/sphinx-tabs@v3.4.7...v3.5.0) Updates `nbsphinx` from 0.9.7 to 0.9.8 - [Release notes](https://github.com/spatialaudio/nbsphinx/releases) - [Changelog](https://github.com/spatialaudio/nbsphinx/blob/master/NEWS.rst) - [Commits](spatialaudio/nbsphinx@0.9.7...0.9.8) Updates `sphinx-togglebutton` from 0.3.2 to 0.4.5 - [Release notes](https://github.com/executablebooks/sphinx-togglebutton/releases) - [Changelog](https://github.com/executablebooks/sphinx-togglebutton/blob/master/CHANGELOG.md) - [Commits](executablebooks/sphinx-togglebutton@v0.3.2...v0.4.5) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: lockfile-bumps - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: lockfile-bumps - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: lockfile-bumps - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lockfile-bumps - dependency-name: jupyterlab dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: lockfile-bumps - dependency-name: plotly dependency-version: 6.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lockfile-bumps - dependency-name: furo dependency-version: 2025.12.19 dependency-type: direct:development update-type: version-update:semver-major dependency-group: lockfile-bumps - dependency-name: sphinx-autoapi dependency-version: 3.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lockfile-bumps - dependency-name: astroid dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: lockfile-bumps - dependency-name: sphinx-tabs dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lockfile-bumps - dependency-name: nbsphinx dependency-version: 0.9.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: lockfile-bumps - dependency-name: sphinx-togglebutton dependency-version: 0.4.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: lockfile-bumps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026

dependabot Bot requested a review from ekiefl as a code owner August 1, 2026 00:52

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the lockfile-bumps group across 1 directory with 12 updates - #372

Bump the lockfile-bumps group across 1 directory with 12 updates#372
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/lockfile-bumps-e7091d8848

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

12.3.0

Removals

Documentation

Dependencies

Testing

The So Long 3.8 Release

[15.0.0] - 2026-04-12

Changed

Fixed

[15.0.0] - 2026-04-12

Changed

Fixed

pre-commit v4.6.1

Fixes

4.6.1 - 2026-07-21

Fixes

0.16.0

Release Notes

Breaking changes

0.16.0

Breaking changes

v4.6.2

4.6.2

Security patches

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Other merged PRs

Contributors to this release

v6.9.0

Fixed

Updated

[6.9.0] - 2026-07-09

Fixed

Updated

2025.12.19

2025.09.25

What's Changed

New Contributors

2025.07.19

What's Changed

New Contributors

2025.12.19 -- Harmonious Honeydew

2025.09.25 -- Gleaming Green

2025.07.19 -- Frozen Flame

2024.08.06 -- Energetic Eminence

2024.07.18 -- Dull Denim

2024.05.06 -- Cheerful Cerulean

2024.04.27 -- Bold Burgundy

v3.8.0

Features

Misc

v3.7.0

Features

Bugfixes

Misc

v3.6.1

Bugfixes

v3.8.0 (2026-03-07)

v3.7.0 (2026-02-10)

v3.6.1 (2025-10-06)

v4.1.2

What's New in astroid 4.1.2?

v4.1.1

What's New in astroid 4.1.1?

What's New in astroid 4.1.2?

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants