Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 6 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-0ceaeb6eab
Open

chore(deps): bump the python-dependencies group across 1 directory with 6 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-0ceaeb6eab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 6 updates in the / directory:

Package From To
packaging 26.2 26.3
textual 8.2.7 8.2.8
pyinstaller 6.20.0 6.21.0
pyrefly 1.1.1 1.2.0
ruff 0.15.20 0.16.1
setuptools 82.0.1 83.0.0

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

  • Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
  • PEP 808: accept Metadata-Version: 2.6. (#1194)
  • Add a limit argument to parse_tag() for compressed tag sets. (#1220)
  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
  • Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
  • Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
  • Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

  • Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
  • Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
  • Fix an AttributeError when hashing internally trimmed versions. (#1242)
  • Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

  • Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
  • Normalize requested extra names before comparing or hashing requirements. (#644)
  • Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
  • Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
  • Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
  • Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
  • Keep the parentheses of a nested group when serializing markers. (#1316)
  • Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
  • Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
  • Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
  • Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
  • Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

  • Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
  • Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
  • Reject malformed Description-Content-Type values. (#1329)
  • Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
  • Route multipart email payloads to unparsed instead of asserting. (#1247)
  • Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
  • Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

    

  • Add a public :class:~packaging.ranges.VersionRange API and
    
:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,
    
representing the versions a specifier set accepts as an interval set that
    
supports intersection, union, difference, complement, set relations,
    
membership tests, and filtering.
    
:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back
    
to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.
    
(:pull:1267, :pull:1270, :pull:1298)
    • 

  • PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
    • 

  • Add a limit argument to parse_tag() for compressed tag sets.
    
(:issue:1220)
    • 

  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer
    
source distributions over wheels for selected packages. (:pull:1334)
    • 

  • Add :func:~packaging.tags.pure_python_tags to generate the pure-Python
    
tags for a Python version without touching the running platform.
    
(:pull:1346)
    • 

  • Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,
    
and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the
    
versions two specifier sets accept. (:pull:1313)
    • 



Behavior adaptations:


    

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later.
    
(:pull:1157)
    • 

  • Prefer native linux_* platform tags over manylinux and musllinux
    
tags on Linux. (:issue:160)
    • 



Fixes for versions and specifiers:


    

  • Raise InvalidVersion instead of TypeError when Version is given a
    
non-string. (:pull:1319)
    • 

  • Raise InvalidVersion for non-string pre-release letters passed to
    
Version.from_parts. (:pull:1241)
    • 

  • Fix an AttributeError when hashing internally trimmed versions.
    
(:pull:1242)
    • 

  • Fix SpecifierSet.is_unsatisfiable for post-release boundary
    
intersections. (:pull:1257)
    • 



Fixes for requirements and markers:


    

  • Make Requirement.__hash__ consistent with __eq__ for
    
trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and
    
foo==1.0.0.0), so equal requirements hash equal and deduplicate in
    
sets and dicts. (:pull:1232)
    
</tr></table>

... (truncated)

Commits
  • 929fd4b Bump for release
  • f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
  • f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
  • b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
  • 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
  • 413d006 docs: changelog for 26.3 (#1343)
  • 4eb0753 docs(metadata): explain selective field validation (#1342)
  • 77e9ed4 feat(tags): add pure Python tag generator (#1346)
  • 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
  • 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
  • Additional commits viewable in compare view

Updates textual from 8.2.7 to 8.2.8

Release notes

Sourced from textual's releases.

The more super release

Fixes for extended key processing, and a crash bug for clicking the screen padding area.

[8.2.8] - 2026-06-30

Fixed

Changed

Changelog

Sourced from textual's changelog.

[8.2.8] - 2026-06-30

Fixed

Changed

Commits

Updates pyinstaller from 6.20.0 to 6.21.0

Release notes

Sourced from pyinstaller's releases.

v6.21.0

Please see the v6.21.0 section of the changelog for a list of the changes since v6.20.0.

Changelog

Sourced from pyinstaller's changelog.

6.21.0 (2026-06-13)

Features


* Add support for Python 3.15. (:issue:`9456`)
* Initial support for setting :ref:`alternative splash screen centering modes
  <splash screen centering>` for multi-monitor setups. (:issue:`6271`)

Hooks



* Prevent ``_ios_support`` and ``libobjc.so`` from being collected on non-IOS
  platforms if :mod:`webbrowser` is imported. (:issue:`9436`)
* Update ``scipy`` hook for compatibility with upcoming ``scipy`` v1.18.0.
  (:issue:`9450`)
* Update the ``gi.repository.Adw`` hook to collect translation files
  for ``libadwaita``. (:issue:`9444`)

Documentation

</code></pre>

<ul>

<li>Document known issues with using splash screen in <code>onedir</code> GUI-based

applications. (:issue:<code>9425</code>)</li>

<li>Document the &quot;glowing magenta border&quot; problem in splash screen when

splash screen image contains semi-transparent pixels (for example,

due to feathered edges). (:issue:<code>9425</code>)</li>

</ul>

</blockquote>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/1cda34561015a90b6e1ae31dc89703799adaf13e&quot;&gt;&lt;code&gt;1cda345&lt;/code&gt;&lt;/a> Release v6.21.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/14b6af36cd7284360e7094e66e97ddef76412876&quot;&gt;&lt;code&gt;14b6af3&lt;/code&gt;&lt;/a> tests: use different module in TestModuleGraph::test_find_module</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/6041ae39584fbb0606c1f936e33e656c075859a8&quot;&gt;&lt;code&gt;6041ae3&lt;/code&gt;&lt;/a> tests: modulegraph: skip tests that are incompatible with python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/dd3c5601e58fa3b7993486d5bd9f769653f6ee24&quot;&gt;&lt;code&gt;dd3c560&lt;/code&gt;&lt;/a> tests: adjust bytecode sanity-check tests for python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/08f4d82600302727dfc210ec38aa9eeebaf7a671&quot;&gt;&lt;code&gt;08f4d82&lt;/code&gt;&lt;/a> modulegraph: adapt _scan_bytecode() for changes in python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/13c2e638918528e7b15b7f048aa01d6de9fe9b50&quot;&gt;&lt;code&gt;13c2e63&lt;/code&gt;&lt;/a> modulegraph: improve assert messages in _scan_bytecode()</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/d4fd4f442a214a656e4fc690f86e998d08d46bcb&quot;&gt;&lt;code&gt;d4fd4f4&lt;/code&gt;&lt;/a> depend: bytecode: add support for LOAD_COMMON_CONSTANT</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/5a9f21030ed91f7dc394a24c4e660c742ad6bf07&quot;&gt;&lt;code&gt;5a9f210&lt;/code&gt;&lt;/a> bootstrap: fix issues caused by encodings being frozen in python 3.15</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/8d97d35a2c04162be04a33748318308e09d398a4&quot;&gt;&lt;code&gt;8d97d35&lt;/code&gt;&lt;/a> tests: test_spec_options: explicitly disable argparse colored output</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/10d0772984f885246d002a7963c728c118639225&quot;&gt;&lt;code&gt;10d0772&lt;/code&gt;&lt;/a> tests: use can_import_module('tkinter') with all tkinter/splash tests</li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.20.0...v6.21.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates pyrefly from 1.1.1 to 1.2.0



Release notes

Sourced from pyrefly's releases.




Pyrefly v1.2.0


Release date: July 31, 2026


Pyrefly v1.2.0 bundles 901 commits from 59 contributors.




✨ New & Improved


Type Checking


    

  • Attrs classes are now fully supported with comprehensive field synthesis, validation, and special-method generation. Pyrefly recognizes @attr.s, @define, @frozen, and their variants, handling field specifiers (attr.ib(), field()), converters, validators, defaults, and private-field aliasing. Converters are typed from their real input type rather than Any, including the @<field>.converter decorator, attrs.converters.pipe, attrs.converters.default_if_none, and generic converters like copy.deepcopy. See the new attrs documentation for details.
    • 

  • functools.partial is now type-checked instead of treated as opaque. Bound arguments are validated at construction and Pyrefly synthesizes a precise residual signature for the remaining parameters, so errors surface at both the partial(...) call and the later invocation. Generic functions, overloads, constructors, bound methods, and **Unpack[TypedDict] parameters are supported, and results expose .func, .args, and .keywords. Precise residual callable assignment is enabled by the strict and all presets or explicitly with strict-partial-subtyping.
    • 

  • Functions decorated with functools.singledispatch now type-check calls using the signature of the function you decorated, and registered implementations are checked against that function's first parameter. Generic singledispatch functions infer from call arguments instead of reporting Unknown.
    • 

  • Pyrefly can now warn when a function declared to return a concrete type returns Any, with separate diagnostics for explicit and inferred cases. Off by default, and migrated automatically from mypy's warn_return_any.
    • 

  • Pattern matching is substantially more precise: positional class patterns resolve attribute names from __match_args__ at solve time, sequence element captures read from the narrowed subject so sibling constraints refine them, and isinstance on a facet filters the parent union to matching members. Fully covered class and sequence patterns now subtract their union member from later cases.
    • 

  • Unpacking a variadic tuple with a fixed prefix and suffix no longer smears those elements into the starred capture, so a, *rest, b = t where t: tuple[int, *tuple[bool, ...], str] types rest as list[bool].
    • 

  • TypedDict classes now synthesize __required_keys__ and __optional_keys__, so protocols requiring them (like those in langgraph) satisfy structural checks. .get() and .pop() with literal defaults preserve the field type.
    • 

  • Overload handling improved throughout: constrained TypeVar arguments expand during resolution, rejected overloads no longer leak argument errors into diagnostics, and exact callback-forwarding signatures resolve overloaded callbacks against forwarded arguments for helpers like asyncio.to_thread.
    • 

  • Enum .value on an enum type now infers as the union of member literal values instead of widening to the mixed-in data type.
    • 

  • Lambda parameters are contextually typed more thoroughly. Types are stored directly rather than resolved through inference variables, and *args/**kwargs resolve from callable hints to tuple[...] and dict[str, ...] inside the body while preserving element types in the signature.
    • 

  • All properties are now treated as data descriptors, and reflected binary-operation dunders are tried first for proper subclasses, fixing a class of incorrect attribute and operator results.
    • 

  • Cyclic type aliases reachable from an annotation are now detected instead of hanging, and class finality is taken into account when deciding whether a condition is redundant.
    • 

  • Continued basedpyright parity work: class instance truthiness is recognized, code under if TYPE_CHECKING is handled consistently, typing_extensions.sentinel is supported with relaxed naming restrictions, and super(cls, cls) is accepted.
    • 

  • copy.replace is now type-checked like dataclass replacement, and isinstance(x, type) preserves type arguments when narrowing unions.
    • 

  • Narrowing a receiver typed as Self to a subclass now preserves Self, eliminating false return errors in methods that return the narrowed receiver.
    • 



Library Support


    

  • Pydantic constructor synthesis now honors populate_by_name and built-in alias_generator functions, ignores Field(init=False) to match runtime, and treats frozen as a readonly field reason.
    • 

  • Django ForeignKey targets now resolve attribute expressions and string references such as "app_label.Model", preserving the generated relation and <field>_id types.
    • 

  • Bare factory-boy factory calls now return the model type via FactoryMetaClass.
    • 

  • PEP 561 partial stub packages are now supported in imports. Pyrefly reads the partial marker from py.typed and merges the stubs with the runtime package, deferring to the runtime package for omitted modules while preserving .pyi-before-.py precedence for provided ones.
    • 

  • A configured typeshed-path now supplies stdlib stubs as well as third-party stubs, enabling complete custom-typeshed testing and overrides.
    • 



Language Server


    

  • Hover now resolves keyword arguments, renders callable protocols as their __call__ signature, preserves overload docstrings at call sites, shows enum fields, wraps nested callable and Concatenate[...] signatures for readability, and covers and/or operators, augmented assignments, and union methods.
    • 

  • Auto-import completions respect python.analysis.autoImportCompletions, rank deprecated stdlib typing aliases below their modern equivalents, avoid duplicates for already-imported modules, and preserve import aliases correctly.
    • 

  • Rename now works on aliased imports and across files for keyword arguments, and renaming a Protocol class targets the class rather than __init__.
    • 

  • Go-to-definition now navigates directly to symbols in non-Python files such as .thrift, including nested attribute and enum access and intermediate components of multi-dotted imports.
    • 

  • Inlay hints debounce server-side (default 150ms), preventing width jitter while typing. NewType values now use their callable constructor signature instead of producing an invalid type[N] annotation.
    • 

  • Notebook support improved: hover and type lookups work past the first cell, and inlay hints, document symbols, references, and diagnostic grouping work in cells following markdown cells.
    • 

  • Document symbols fall back to flat SymbolInformation for clients such as Helix, semantic tokens cover with ... as and except ... as bindings, and cross-file diagnostics refresh on save in strict-spec clients such as Zed.
    • 

  • #region/#endregion markers create folding regions, and selection ranges now follow AST nesting from expression to statement to scope to document.
    • 

  • Baselined errors now appear as hints instead of errors, making it easier to distinguish new issues from known technical debt. Baselining also now applies correctly to unused-ignore diagnostics.
    • 

  • Match captures receive consistent semantic highlighting and preserve their declaration identity for go-to-definition.
    • 

  • lspArguments defaults to ["lsp"] when empty, preventing startup failures in dev containers and remote environments.
    • 

  • The VSCode extension adds an "Infer Types for Current File" command to the command palette.
    • 






... (truncated)





Commits

    

  • 1933169 cut 1.2.0
    • 

  • df11f5d Enforce call-boundary consumption in production
    • 

  • e67bc8e Transfer quantified handles to call boundaries
    • 

  • 6ba516f Move deferred call state into its boundary
    • 

  • 8888e70 Scope call contexts to a lexical boundary
    • 

  • f8c9e7c LSP: default lspArguments to ["lsp"] when empty
    • 

  • 3f0c228 Remove dead .hgignore
    • 

  • 335510d improve Sandbox: link shortening #1063 (#4327)
    • 

  • 41094b9 Keep lambda hint decomposition transactional
    • 

  • 3193b6a fix behavior of init=False for pydantic.BaseModel (#4352)
    • 

  • Additional commits viewable in compare view
    • 







Updates ruff from 0.15.20 to 0.16.1



Release notes

Sourced from ruff's releases.




0.16.1


Release Notes


Released on 2026-07-30.


Preview features


    

  • Add an option to opt out of human-readable names (#27160)
    • 

  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
    • 

  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
    • 

  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
    • 



Bug fixes


    

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
    • 

  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
    • 

  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
    • 

  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
    • 

  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
    • 

  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
    • 



Rule changes


    

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
    • 

  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
    • 



Server


    

  • Fix indexing of excluded nested Ruff workspaces (#27303)
    • 

  • Lint TOML files in the LSP (#26862)
    • 



Documentation


    

  • Cover pycon Markdown formatting (#27153)
    • 

  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
    • 

  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
    • 

  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)
    • 



Other changes


    

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
    • 

  • Vendor latest annotate-snippets (#27033)
    • 



Contributors






... (truncated)





Changelog

Sourced from ruff's changelog.




0.16.1


Released on 2026-07-30.


Preview features


    

  • Add an option to opt out of human-readable names (#27160)
    • 

  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
    • 

  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
    • 

  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
    • 



Bug fixes


    

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
    • 

  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
    • 

  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
    • 

  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
    • 

  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
    • 

  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
    • 



Rule changes


    

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
    • 

  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
    • 



Server


    

  • Fix indexing of excluded nested Ruff workspaces (#27303)
    • 

  • Lint TOML files in the LSP (#26862)
    • 



Documentation


    

  • Cover pycon Markdown formatting (#27153)
    • 

  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
    • 

  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
    • 

  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)
    • 



Other changes


    

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
    • 

  • Vendor latest annotate-snippets (#27033)
    • 



Contributors






... (truncated)





Commits

    

  • 80790b3 Bump 0.16.1 (#27330)
    • 

  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
    • 

  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
    • 

  • 0d80497 Lint TOML files in the LSP (#26862)
    • 

  • d91586b Update prek dependencies (#27293)
    • 

  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
    • 

  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
    • 

  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
    • 

  • 7c3e2db [ty] Fix enum class container assignability (#27318)
    • 

  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
    • 

  • Additional commits viewable in compare view
    • 







Updates setuptools from 82.0.1 to 83.0.0



Changelog

Sourced from setuptools's changelog.




v83.0.0


Features


    

  • Require Python 3.10 or later.
    • 



Bugfixes


    

  • MANIFEST.in matching (via FileList) is now insensitive to Unicode
normalization form. A pattern authored in one form (e.g. NFC, as typically
saved by editors) now matches a file whose name is stored on disk in another
(e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude,
global-exclude, recursive-exclude, or prune rule could silently
fail to drop a non-ASCII-named file from the source distribution, publishing
it despite the exclusion -- see GHSA-h35f-9h28-mq5c.
    • 



Deprecations and Removals


    

  • pypa/distutils#334
    • 








Commits

    

  • 6519f72 Bump version: 82.0.1 → 83.0.0
    • 

  • d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
    • 

  • a2df31e Capture removal of dry_run parameter in changelog.
    • 

  • 00144dc Moved newsfragment to the release where it occurred.
    • 

  • a4a5a2b Add news fragment.
    • 

  • 77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
    • 

  • 3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
    • 

  • bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
    • 

  • a2bc3ac Fix broken intersphinx reference to build's installation docs
    • 

  • 2d6a739 Use stacked parametrize decorators instead of itertools.product
    • 

  • Additional commits viewable in compare view
    • 







Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    •

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
c65c840 
…th 6 updates

Bumps the python-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [textual](https://github.com/Textualize/textual) | `8.2.7` | `8.2.8` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.20.0` | `6.21.0` |
| [pyrefly](https://github.com/facebook/pyrefly) | `1.1.1` | `1.2.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.1` |
| [setuptools](https://github.com/pypa/setuptools) | `82.0.1` | `83.0.0` |



Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `textual` from 8.2.7 to 8.2.8
- [Release notes](https://github.com/Textualize/textual/releases)
- [Changelog](https://github.com/Textualize/textual/blob/main/CHANGELOG.md)
- [Commits](Textualize/textual@v8.2.7...v8.2.8)

Updates `pyinstaller` from 6.20.0 to 6.21.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.20.0...v6.21.0)

Updates `pyrefly` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@1.1.1...1.2.0)

Updates `ruff` from 0.15.20 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.1)

Updates `setuptools` from 82.0.1 to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v83.0.0)

---
updated-dependencies:
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: textual
  dependency-version: 8.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyinstaller
  dependency-version: 6.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyrefly
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants