Skip to content

Bump the minor-and-patch group across 1 directory with 6 updates#207

Merged
bh2smith merged 2 commits into
mainfrom
dependabot/uv/minor-and-patch-140a9c5aad
Jun 19, 2026
Merged

Bump the minor-and-patch group across 1 directory with 6 updates#207
bh2smith merged 2 commits into
mainfrom
dependabot/uv/minor-and-patch-140a9c5aad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 6 updates in the / directory:

Package From To
requests 2.33.1 2.34.2
ruff 0.13.2 0.15.17
tox 4.30.2 4.55.1
tox-uv 1.28.0 1.35.2
types-requests 2.32.4.20250913 2.33.0.20260518
types-deprecated 1.2.15.20250304 1.3.1.20260520

Updates requests from 2.33.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates ruff from 0.13.2 to 0.15.17

Release notes

Sourced from ruff's releases.

0.15.17

Release Notes

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.17

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Commits
  • 7c645a9 Bump 0.15.17 (#25872)
  • f381eb1 Prioritize human-readable names in CLI output (#25869)
  • b9b4546 Minor workflow simplification (#25870)
  • 1e77ba0 [ty] Move PreformattedBlockScanner to format-agnostic location. (#25856)
  • 6f2b772 [ty] Preserve nominal type of enum.property instances (#25849)
  • be4777c [ty] Fix site-package error when multiple versions of pythons are installed i...
  • 53f6ff7 Allow human-readable names in suppression comments (#25614)
  • 6740325 [ty] Restrict uncached raw signature access (#25866)
  • 970b1bf Auto-update snapshots when syncing typeshed (#25841)
  • 0785793 Fix handling of ignore comments within a disable/enable pair (#25845)
  • Additional commits viewable in compare view

Updates tox from 4.30.2 to 4.55.1

Release notes

Sourced from tox's releases.

v4.55.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.55.0...4.55.1

v4.55.0

What's Changed

Full Changelog: tox-dev/tox@4.54.0...4.55.0

v4.54.0

What's Changed

Full Changelog: tox-dev/tox@4.53.1...4.54.0

v4.53.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.53.0...4.53.1

v4.53.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.55.1

  • TOX_OVERRIDE (and -x/--override) now propagates through configuration references. Previously, overriding a base value that was later referenced via {[section]key} (ini) or {replace = "ref", of = [...]} (toml) was ignored because reference resolution read the raw file value, bypassing the override system - by :user:tales-aparecida. (:issue:3950) (:issue:3950)

v4.55.0 (2026-05-28)

Features - 4.55.0

  • Automatically pass the TERMINFO environment variable to tox subprocesses if the output is a TTY. This variable is used by Ghostty to communicate terminal capabilities to programs. (:issue:3946)

Bug fixes - 4.55.0

  • When the constraints configuration option is set, constrain_package_deps and use_frozen_constraints are now ignored. Previously, both the user-provided constraints file and the auto-generated constraints file were passed to pip during install_package_deps, which could cause resolver conflicts when the same package appeared in both files - by :user:gaborbernat. (:issue:3945) (:issue:3945)

v4.54.0 (2026-05-12)

Features - 4.54.0

  • Declare the runtime dependencies of the tox.pytest plugin (pytest, devpi-process and pytest-mock) under a new testing extra, so plugin authors can pull them in via tox[testing] - by :user:gaborbernat. (:issue:3938, :issue:3940)

Bug fixes - 4.54.0

  • Extend the generated TOML schema to cover every replace table form (env, ref, posargs, glob, if), including conditional replacements used inside commands. A guard test asserts the schema stays in sync with the loader implementation so future replace types cannot be added without a corresponding schema entry. (:issue:3939)

v4.53.1 (2026-05-02)

Bug fixes - 4.53.1

... (truncated)

Commits

Updates tox-uv from 1.28.0 to 1.35.2

Release notes

Sourced from tox-uv's releases.

1.35.2

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.35.1...1.35.2

1.35.1

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.35.0...1.35.1

1.35.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox-uv@1.34.0...1.35.0

1.34.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.33.4...1.34.0

1.33.4

What's Changed

... (truncated)

Commits
  • 595721d 🐛 fix(lock): honor --recreate in uv-venv-lock-runner (#338)
  • 1026808 [pre-commit.ci] pre-commit autoupdate (#337)
  • 3f7ea4d [pre-commit.ci] pre-commit autoupdate (#334)
  • f976fc1 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#333)
  • c0fabe3 Honor constraints opt for all packages (#332)
  • d4aa96d [pre-commit.ci] pre-commit autoupdate (#331)
  • ac78519 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#329)
  • 8bab9b8 [pre-commit.ci] pre-commit autoupdate (#328)
  • 8b0497e fix(lock-runner): respect UV_FROZEN env var and --frozen in uv_sync_flags (#327)
  • ad30d57 build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#324)
  • Additional commits viewable in compare view

Updates types-requests from 2.32.4.20250913 to 2.33.0.20260518

Commits

Updates types-deprecated from 1.2.15.20250304 to 1.3.1.20260520

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 18, 2026
@dependabot dependabot Bot requested a review from bh2smith as a code owner June 18, 2026 12:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 18, 2026
@cursor

cursor Bot commented Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
Bumps the core HTTP client (requests 2.34.x with new inline types and behavior fixes) while also upgrading Ruff across minor versions; no app code changed, so risk is mainly resolver/CI and subtle HTTP or typing regressions.

Overview
Dependency-only update: pyproject.toml widens the runtime requests constraint from ~=2.33.0 to >=2.33,<2.35, and uv.lock is refreshed so resolved requests moves 2.33.1 → 2.34.2 along with dev tools (ruff 0.13.2 → 0.15.16, tox 4.30.2 → 4.55.1, tox-uv 1.28.0 → 1.35.2, plus types-requests / types-deprecated stubs). Lockfile churn also reflects transitive updates (e.g. tox dropping chardet, adding tomli-w / python-discovery, tox-uv split into tox-uv + tox-uv-bare).

No library source changes; HTTP still goes through requests in dune_client/api/base.py. Reviewers should rely on CI/tox after the ruff major jump and confirm requests 2.34 typing/runtime behavior with mypy if types are strict.

Reviewed by Cursor Bugbot for commit c9ac9dc. Configure here.

@dependabot dependabot Bot changed the title Bump the minor-and-patch group with 6 updates Bump the minor-and-patch group across 1 directory with 6 updates Jun 18, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/minor-and-patch-140a9c5aad branch 2 times, most recently from 8847965 to 6ee22c2 Compare June 18, 2026 13:12
@bh2smith

bh2smith commented Jun 19, 2026

Copy link
Copy Markdown
Member

@dependabot rebase on latest main

@dependabot @github

dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@bh2smith

bh2smith commented Jun 19, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@bh2smith

bh2smith commented Jun 19, 2026

Copy link
Copy Markdown
Member

@cursor Can you fix the lint errors in this failing CI from this failed job: https://github.com/duneanalytics/dune-client/actions/runs/27761925587/job/82138298203?pr=207

@dependabot
Bump the minor-and-patch group across 1 directory with 6 updates
0403671 
Bumps the minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.13.2` | `0.15.17` |
| [tox](https://github.com/tox-dev/tox) | `4.30.2` | `4.55.1` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.28.0` | `1.35.2` |
| [types-requests](https://github.com/python/typeshed) | `2.32.4.20250913` | `2.33.0.20260518` |
| [types-deprecated](https://github.com/python/typeshed) | `1.2.15.20250304` | `1.3.1.20260520` |



Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `ruff` from 0.13.2 to 0.15.17
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.2...0.15.17)

Updates `tox` from 4.30.2 to 4.55.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.30.2...4.55.1)

Updates `tox-uv` from 1.28.0 to 1.35.2
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.28.0...1.35.2)

Updates `types-requests` from 2.32.4.20250913 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-deprecated` from 1.2.15.20250304 to 1.3.1.20260520
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.15.16
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tox
  dependency-version: 4.55.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tox-uv
  dependency-version: 1.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: types-deprecated
  dependency-version: 1.3.1.20260520
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@cursor

cursor Bot commented Jun 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Fixed — I pulled the failed job log and addressed the exact lint violation it reported.

What was failing

CI lint-format-types (3.13) failed on:

  • FURB110 in dune_client/api/base.py:202
  • Ruff requested replacing a ternary with or

Change made

In dune_client/api/base.py, I changed:

  • **headers if headers else {}
  • to **(headers or {})

inside the _post request headers merge.

Verification

Ran the same checks from CI locally:

  • make fmt-check
  • make lint

Both pass now.

The fix has been committed and pushed on the PR branch (c72aacd).

Open in Web Open in Cursor 

@dependabot dependabot Bot force-pushed the dependabot/uv/minor-and-patch-140a9c5aad branch from 6ee22c2 to 0403671 Compare June 19, 2026 09:08
@bh2smith bh2smith merged commit 8ea8961 into main Jun 19, 2026
2 checks passed
@bh2smith bh2smith deleted the dependabot/uv/minor-and-patch-140a9c5aad branch June 19, 2026 09:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bh2smith bh2smith bh2smith approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@bh2smith @cursoragent