Bump the python-minor-and-patch group with 8 updates by dependabot[bot] · Pull Request #52 · finite-sample/pyppur

dependabot · 2026-10-26T15:51:06Z

Bumps the python-minor-and-patch group with 8 updates:

Package	From	To
sphinx-autodoc-typehints	`3.13.9`	`3.17.2`
ruff	`0.17.0`	`0.17.1`
pre-commit	`4.6.2`	`4.7.0`
distlib	`0.4.3`	`0.4.4`
fonttools	`4.66.1`	`4.67.0`
platformdirs	`4.13.0`	`4.13.5`
pluggy	`1.6.0`	`1.7.0`
python-discovery	`1.6.2`	`1.6.4`

Updates sphinx-autodoc-typehints from 3.13.9 to 3.17.2

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.17.2

Link an overridden method to a documented public owner when its defining class is private and absent from the intersphinx inventory. #1090

PyPI release

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.17.1...3.17.2

3.17.1

Describe the package as rendering Python type hints in Sphinx autodoc documentation. #1089

PyPI release

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.17.0...3.17.1

3.17.0

Add typehints_modernize_annotations to render legacy typing aliases with current Python spelling. #1085

Add an "optional" default style that marks parameters callers may omit without printing their default values. #1086

Allow a callback to read descriptions from Annotated metadata classes other than Doc. #1088

Explain how Sphinx's autodoc_preserve_defaults applies to default values in parameter descriptions. #1087

PyPI release

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.16.0...3.17.0

3.16.0

Read Doc descriptions from annotated-doc as well as typing_extensions. #1083

Register the value stylesheet through Sphinx's static-directory API, so loading the extension does not change html_static_path. #1079

Honor autodoc_use_type_comments = False when reading types from a function's # type: comment. #1080

Use the build platform and false constants when choosing a TYPE_CHECKING guard's branch; skip guards whose other conditions cannot be determined without running code. #1081

Keep single-word prose in hand-written :Returns: fields, and recognize numpydoc return types containing spaces. #1082

Document support for both Sphinx autodoc implementations and cover re-exported types and NamedTuple references in both modes. #1084

PyPI release

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.15.0...3.16.0

3.15.0

Allow projects to show selected Annotated metadata in rendered types with typehints_annotated_metadata. #1071

Process method signatures of classes defined inside functions when the module exports the class under a name autodoc can import. #1072

Let typehints_formatter receive whether a type appears in a parameter, return, attribute or base when typehints_formatter_pass_context is enabled. #1073

Reread documents when typehints_formatter changes in an incremental build, so their rendered types update without sphinx-build -E. #1069

Stop an unchanged incremental build from reporting html_static_path as changed after the extension adds its stylesheet. #1070

Document inherited special methods of a generic subclass without raising Cannot subscript already-subscripted typing.Generic. #1074

Show a property setter's type when Annotated metadata raises during comparison with the getter type, instead of failing the build. #1076

Keep the description in a hand-written :Returns: field instead of interpreting it as a numpydoc return type. #1077

Skip imports under if TYPE_CHECKING and False instead of resolving types the branch never defines. #1078

... (truncated)

Changelog

Sourced from sphinx-autodoc-typehints's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.17.2 (2026-10-17)

Link an overridden method to a documented public owner when its defining class is private and absent from the intersphinx inventory. :pr:1090

3.17.1 (2026-10-17)

Describe the package as rendering Python type hints in Sphinx autodoc documentation. :pr:1089

3.17.0 (2026-10-17)

Add typehints_modernize_annotations to render legacy typing aliases with current Python spelling. :pr:1085

Add an "optional" default style that marks parameters callers may omit without printing their default values. :pr:1086

Allow a callback to read descriptions from Annotated metadata classes other than Doc. :pr:1088

Explain how Sphinx's autodoc_preserve_defaults applies to default values in parameter descriptions. :pr:1087

3.16.0 (2026-10-17)

Read Doc descriptions from annotated-doc as well as typing_extensions. :pr:1083

Register the value stylesheet through Sphinx's static-directory API, so loading the extension does not change html_static_path. :pr:1079

Honor autodoc_use_type_comments = False when reading types from a function's # type: comment. :pr:1080

Use the build platform and false constants when choosing a TYPE_CHECKING guard's branch; skip guards whose other conditions cannot be determined without running code. :pr:1081

Keep single-word prose in hand-written :Returns: fields, and recognize numpydoc return types containing spaces. :pr:1082

Document support for both Sphinx autodoc implementations and cover re-exported types and NamedTuple references in both modes. :pr:1084

3.15.0 (2026-10-16)

Allow projects to show selected Annotated metadata in rendered types with typehints_annotated_metadata. :pr:1071

Process method signatures of classes defined inside functions when the module exports the class under a name autodoc can import. :pr:1072

... (truncated)

Commits

24862ab Release 3.17.2
7527564 🐛 fix(overrides): link documented public owner (#1090)
b8e7ae2 Release 3.17.1
3033124 📝 docs(metadata): update package summary (#1089)
5de7ecb Release 3.17.0
57770ef ✨ feat(defaults): mark defaulted args optional (#1086)
fb8b082 ✨ feat(types): modernize rendered annotations (#1085)
f8c4447 📝 docs(defaults): show source expressions (#1087)
0043f27 ✨ feat(annotated): read metadata descriptions (#1088)
c5f6083 Release 3.16.0
Additional commits viewable in compare view

Updates ruff from 0.17.0 to 0.17.1

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

Install ruff 0.17.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"
Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

[pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

Fix dedent with multiple leading comments (#29382)

[flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)

[flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)

[perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

Treat more collections and weakref containers as mutable (#29213)

Documentation

[flake8-import-conventions] Update default and example aliases (#29333)

Contributors

@fixfon

@mmaxjr

@joshuavetos

@nekomario28

@ntBre

@shan3520

Commits

4683270 Bump version to 0.17.1 (#29420)
3514027 [ty] Update typing conformance suite pin (#29417)
8294556 Update referenced PR security-review workflow (#29237)
d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
83a3afc Fix dedent with multiple leading comments (#29382)
b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
d01678e [ty] Clarify object attribute write-contract rationale (#29384)
355b42a [ty] Avoid writable override contracts from object (#29373)
e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Fix language: node hooks during commit with -a or inside a submodule.

Regressed in 4.6.1.

#3773 issue by @cbirkhold.

#3774 PR by @cbirkhold.

Commits

65bb884 v4.7.0
73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
860d07d don't leak GIT_* env into npm install for language: node
9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
9905e88 use contextlib.chdir
59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
2be1701 remove triple-nested withs for 3.14 coverage
4c8d22a py311+
c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
f49e251 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates distlib from 0.4.3 to 0.4.4

Changelog

Sourced from distlib's changelog.

0.4.4


Released: 2026-10-16


compat

Fixed a missing import. Thanks to Andrej730 for the patch.



markers

Fixed #273: Enforce compatible-release bounds in environment markers.
Thanks to Luochenchen for the patch.



metadata

Fix #194: Add an urls property to expose project and home URLs. Thanks to
Sinkleberg for the patch.



scripts


Raise the correct exception when a launcher can't be written. Thanks to
candygoogy for the patch.


Fix #144: Detect shell-script Python executables in ScriptMaker shebangs.
Thanks to Alex Chen for the patch.




util


Improve performance of export entry search to take linear time. Thanks to
Brian Willows for the patch.


Use tarfile.data_filter rather than tarfile.tar_filter in unarchive()
when extraction filters are available, matching the Python 3.14 default. Path and
link containment checks now use os.path.realpath and no longer fail with
IndexError for members such as . or ./. Thanks to Kobain for the patch.


unarchive() now resolves member paths through symlinks seen earlier in the
same archive, so a chain of individually harmless-looking links cannot be used
to write outside the destination on Pythons without extraction filters. Thanks to
Kobain for the patch.




version


Improve NormalizedVersion by addressing correctness and performance gaps
found by comparison with packaging. Thanks to Damian Shaw for the patch.


Improve SemanticVersion by comparing numeric prerelease identifiers,
including those longer than 8 digits. Thanks to Muneeb Sheikh for the
patch.

Commits

25eed06 Changes for 0.4.4.
8ffee6f Resolve member paths through earlier archive symlinks in unarchive()
ef4a390 Test that data_filter rejects absolute symlinks with check=False
380b6a9 Use data_filter and realpath containment checks in unarchive()
7b7c572 fix: enforce compatible-release bounds in markers (#274)
38811dd Detect shell-script Python executables in ScriptMaker shebangs (#144) (#264)
06ddb5d Compare numeric prerelease identifiers without a digit limit (#270)
e54dd8c Raise the original error when a launcher can't be written (#269)
c6270e3 Fix NormalizedVersion gaps found by comparison with packaging (#271)
5b3092b Search export entries in linear time (#266)
Additional commits viewable in compare view

Updates fonttools from 4.66.1 to 4.67.0

Release notes

Sourced from fonttools's releases.

4.67.0

[varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).

[designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).

[designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).

[designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).

[varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).

[varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).

[varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).

[varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).

[varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).

[varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).

[varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).

[featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).

[ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).

[ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).

[VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).

[VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).

[varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).

[otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).

[ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).

[scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).

[cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or all single-byte codes map to .notdef (#4215). Formats 2 and 4 now reject glyph IDs above 65535 instead of wrapping them (#4226). Split format 14 default UVS ranges longer than 256 codepoints (#4229). Empty format 12 and 13 subtables round-trip (#4246).

[glyf] Use unsigned instruction lengths, so programs of 32768-65535 bytes compile and decompile correctly (#4227). Keep instructions in zero-contour glyphs (#4228).

[pens] Fix cubic off-curve detection in TTGlyphPointPen across contour starts (#4224). Glyph.drawPoints() now raises NotImplementedError for an all-off-curve cubic contour, which the point pen protocol cannot express (#3191, #4225). RoundingPen passes the all-off-curve None sentinel through (#4311, #4312).

[CFF2] Preserve operands when a blend has zero regions (#4240).

[cffLib] Read CFF font names as Latin-1, matching how they are written (#4253). Deleting a CFF dict attribute now actually removes it (#2725, #4264).

[CFF2ToCFF] Fix conversion of fonts with local subroutines (#4258). A CFF2 table with a single FontDict is now converted to a name-keyed CFF font that keeps its glyph names (#3890, #4265).

[subset] Handle a null GDEF variation store (#4230).

[merge] Support merging fonts that both have a MATH table (#3823, #4257).

[feaLib] Reject the same mark class used twice in one anchor list (#3628, #4255). Don't crash on value records whose devices are all NULL (#2396, #4261). Pad a short OS/2 Vendor with spaces (#4259).

[feaLib] Raise FeatureLibError with a location, instead of a bare Python error, for: a BASE script list without a matching tag list (#4263), a UnicodeRange bit outside 0-127 (#4266), a name string that cannot be decoded (#4267), a STAT axis location with no or too many values (#4268), and a non-ASCII OS/2 Vendor (#4269).

[name] Fix the BCP 47 tags of some Mac and Windows language IDs, e.g. es was mapped to Mac Estonian (#3733, #4256). getDebugName prefers the Windows English name over the Mac one (#3969, #4273).

[post] Don't crash on a format 2.0 table with numGlyphs set to 0 (#3060, #4274).

[VDMX] Recompute numRecs and numRatios when compiling (#4293).

[Silf] Fix compiling a Silf table that was decompiled from binary (#4294).

[woff2] Preserve minorVersion when copying flavor data (#4249, #4250).

[ttGlyphSet] Compute glyph width lazily for glyf variable fonts without HVAR, so .width is correct before drawing (#3964, #4260).

[varLib.interpolatable] Respect designspace source layers (#3951, #4275); fix --json output with SciPy (#3870, #4276).

[misc.psLib] Fix tokenizing of escaped parentheses in PostScript strings (#4207).

[svgLib] Raise ValueError instead of IndexError on a truncated path command (#4254).

[misc.transform] Preserve the direction of the remaining axis when decomposing a transform whose first column is zero (#4242).

[misc.textTools] Tag.__ne__ returns NotImplemented for unsupported types (#4305, #4306).

[misc.dictTools] hashdict rejects in-place union (|=) (#4313, #4314).

[misc.xmlReader] Close owned input streams when parsing fails (#4298).

[misc.filesystem] WriteZipFS.close() can be called more than once (#4309, #4310).

[EBDT] Keep EBDT/CBDT glyph metrics after probing a missing attribute (#3806, #4216).

Changelog

Sourced from fonttools's changelog.

4.67.0 (released 2026-10-14)

[varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).

[designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).

[designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).

[designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).

[varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).

[varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).

[varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).

[varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).

[varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).

[varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).

[varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).

[featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).

[ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).

[ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).

[VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).

[VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).

[varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).

[otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).

[ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).

[scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).

[cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or

... (truncated)

Commits

16f88cb Release 4.67.0
5049c83 Update NEWS.rst [skip ci]
fdfd15f Merge pull request #4314 from xiehuanyi/fix/hashdict-inplace-union-20261014
87ee7d3 Merge pull request #4312 from xiehuanyi/fix/roundingpen-offcurve-none-20261014
e6e65d3 [dictTools] Reject in-place union on hashdict
10cfefe Merge pull request #4310 from xiehuanyi/fix/writezipfs-idempotent-close-20261014
06157e4 Merge pull request #4300 from CAOShurong/codex/3751-missing-fvar
2940a2e Merge pull request #4298 from xiehuanyi/fix-xml-reader-failure-cleanup
821805d Merge pull request #4306 from xiehuanyi/fix/tag-notimplemented-comparison-202...
85538d6 [roundingPen] Preserve all-off-curve quadratic sentinel
Additional commits viewable in compare view

Updates platformdirs from 4.13.0 to 4.13.5

Release notes

Sourced from platformdirs's releases.

4.13.5

Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. #631

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.4...4.13.5

4.13.4

Require a complete files path segment when locating Android app directories from sys.path. #621

Keep root directory tests independent of inherited XDG environment variables. #622

Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. #624

Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. #625

Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. #627

Correct the contributor guide to name ty as the type checker used by the type environment. #623

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.3...4.13.4

4.13.3

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.2...4.13.3

4.13.2

Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. #619

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.1...4.13.2

4.13.1

Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. #618

Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.0...4.13.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.13.5 (2026-10-19)

Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. :pr:631

4.13.4 (2026-10-17)

Require a complete files path segment when locating Android app directories from sys.path. :pr:621

Keep root directory tests independent of inherited XDG environment variables. :pr:622

Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. :pr:624

Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. :pr:625

Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. :pr:627

Correct the contributor guide to name ty as the type checker used by the type environment. :pr:623

4.13.3 (2026-10-16)

4.13.2 (2026-10-16)

Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. :pr:619

4.13.1 (2026-10-15)

Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. :pr:618

Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

4.13.0 (2026-10-10)

... (truncated)

Commits

5702904 Release 4.13.5
4b2b6a5 🐛 fix(release): trim GitHub release notes (#631)
6f7e3e2 👷 ci: collect required checks (#628)
caa5626 Release 4.13.4
9b5c0fd fix(windows): raise when no home directory resolves (#627)
da72995 fix: require a complete files segment when finding Android app folders (#621)
da89726 test: isolate root directory checks from inherited XDG settings (#622)
fb0b1a9 fix: keep root directory accessors consistent during isolation (#625)
91f7775 fix(ios): raise when no home directory resolves (#624)
ed9f25f ci: rerun news check on label changes (#626)
Additional commits viewable in compare view

Updates pluggy from 1.6.0 to 1.7.0

Changelog

Sourced from pluggy's changelog.

pluggy 1.7.0 (2026-10-14)

Deprecations and Removals

[#632](https://github.com/pytest-dev/pluggy/issues/632) <https://github.com/pytest-dev/pluggy/issues/632>_: Hookspec methods defined without self as the first parameter now emit a :class:DeprecationWarning. Add self as the first parameter or use @staticmethod.

Features

[#170](https://github.com/pytest-dev/pluggy/issues/170) <https://github.com/pytest-dev/pluggy/issues/170>_: Hookspecs can now declare default values for arguments, using the usual def myhook(myarg="default") syntax. This is mainly a backward compatibility feature, to allow a hookspec to add new parameters to an existing hook without breaking existing callers. See :ref:hookspec_arg_default for details.

[#729](https://github.com/pytest-dev/pluggy/issues/729) <https://github.com/pytest-dev/pluggy/issues/729>_: Tracing now adds detail where str() is ambiguous: empty strings and strings containing whitespace are quoted, and enums and paths show their repr().

A value spanning several lines is now displayed as a block instead of running into the surrounding trace.

Bug Fixes

[#629](https://github.com/pytest-dev/pluggy/issues/629) <https://github.com/pytest-dev/pluggy/issues/629>_: Fix hooks failing to register on Python 3.14+ when type annotations use forward references.

[#315](https://github.com/pytest-dev/pluggy/issues/315) <https://github.com/pytest-dev/pluggy/issues/315>_: Source archives created by git archive (including GitHub's "Source code" downloads) now carry version information, so building pluggy from them no longer fails with a missing version.

[#442](https://github.com/pytest-dev/pluggy/issues/442) <https://github.com/pytest-dev/pluggy/issues/442>_: With the addition of default values for hookspec arguments, we also changed the precedence of default values for hookimpl arguments. Previously, if a hookimpl function declared a default for an argument, it was always used, even if the hook call passed an explicit value. Now the precedence is changed to: hook call passed value > hookspec default value > hookimpl default value. See :ref:hookimpl_arg_defaults.

[#701](https://github.com/pytest-dev/pluggy/issues/701) <https://github.com/pytest-dev/pluggy/issues/701>_: Hookimpls and hookspecs are now discovered via :func:inspect.getattr_static, so properties, cached_property and other descriptors are no longer executed while scanning a plugin. Hooks declared through such a descriptor are not supported.

As a side effect, @hookimp...
Description has been truncated

Bumps the python-minor-and-patch group with 8 updates: | Package | From | To | | --- | --- | --- | | [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.13.9` | `3.17.2` | | [ruff](https://github.com/astral-sh/ruff) | `0.17.0` | `0.17.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` | | [distlib](https://github.com/pypa/distlib) | `0.4.3` | `0.4.4` | | [fonttools](https://github.com/fonttools/fonttools) | `4.66.1` | `4.67.0` | | [platformdirs](https://github.com/tox-dev/platformdirs) | `4.13.0` | `4.13.5` | | [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.6.2` | `1.6.4` | Updates `sphinx-autodoc-typehints` from 3.13.9 to 3.17.2 - [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases) - [Changelog](https://github.com/tox-dev/sphinx-autodoc-typehints/blob/main/docs/changelog.rst) - [Commits](tox-dev/sphinx-autodoc-typehints@3.13.9...3.17.2) Updates `ruff` from 0.17.0 to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.17.0...0.17.1) Updates `pre-commit` from 4.6.2 to 4.7.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0) Updates `distlib` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/pypa/distlib/releases) - [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst) - [Commits](pypa/distlib@0.4.3...0.4.4) Updates `fonttools` from 4.66.1 to 4.67.0 - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.66.1...4.67.0) Updates `platformdirs` from 4.13.0 to 4.13.5 - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst) - [Commits](tox-dev/platformdirs@4.13.0...4.13.5) Updates `pluggy` from 1.6.0 to 1.7.0 - [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pluggy@1.6.0...1.7.0) Updates `python-discovery` from 1.6.2 to 1.6.4 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst) - [Commits](tox-dev/python-discovery@1.6.2...1.6.4) --- updated-dependencies: - dependency-name: sphinx-autodoc-typehints dependency-version: 3.17.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: pre-commit dependency-version: 4.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: distlib dependency-version: 0.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: fonttools dependency-version: 4.67.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: platformdirs dependency-version: 4.13.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: pluggy dependency-version: 1.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: python-discovery dependency-version: 1.6.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: python-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 26, 2026

github-actions Bot enabled auto-merge (squash) October 26, 2026 15:51

github-actions Bot merged commit 34c821a into main Oct 26, 2026
13 checks passed

github-actions Bot deleted the dependabot/uv/python-minor-and-patch-f31b1fd2f5 branch October 26, 2026 15:52

Navigation Menu

Repository navigation

Bump the python-minor-and-patch group with 8 updates - #52

Bump the python-minor-and-patch group with 8 updates#52
github-actions[bot] merged 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-f31b1fd2f5

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

3.17.2

3.17.1

3.17.0

3.16.0

3.15.0

0.17.1

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

Install ruff 0.17.1

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.1

0.17.1

Preview features

Bug fixes

Rule changes

Documentation

Contributors

pre-commit v4.7.0

Fixes

4.7.0 - 2026-10-12

Fixes

4.67.0

4.67.0 (released 2026-10-14)

4.13.5

4.13.4

4.13.3

4.13.2

4.13.1

pluggy 1.7.0 (2026-10-14)

Deprecations and Removals

Features

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants