An open index of dependabot pull requests across open source projects.

build(deps-dev): bump the dev-dependencies group with 4 updates

Merged
Number: #31
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 22, 2025 at 09:02 AM UTC
(10 days ago)
Updated: September 22, 2025 at 09:03 AM UTC
(10 days ago)
Merged: September 22, 2025 at 09:03 AM UTC
(10 days ago)
by github-actions[bot]
Time to Close: 1 minute
Labels:
dependencies python
Description:

Bumps the dev-dependencies group with 4 updates: mypy, ruff, black and boto3.

Updates mypy from 1.18.1 to 1.18.2

Changelog

Sourced from mypy's changelog.

Mypy 1.18.1

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Mypy Performance Improvements

Mypy 1.18.1 includes numerous performance improvements, resulting in about 40% speedup compared to 1.17 when type checking mypy itself. In extreme cases, the improvement can be 10x or higher. The list below is an overview of the various mypy optimizations. Many mypyc improvements (discussed in a separate section below) also improve performance.

Type caching optimizations have a small risk of causing regressions. When reporting issues with unexpected inferred types, please also check if --disable-expression-cache will work around the issue, as it turns off some of these optimizations.

  • Improve self check performance by 1.8% (Jukka Lehtosalo, PR 19768, 19769, 19770)
  • Optimize fixed-format deserialization (Ivan Levkivskyi, PR 19765)
  • Use macros to optimize fixed-format deserialization (Ivan Levkivskyi, PR 19757)
  • Two additional micro‑optimizations (Ivan Levkivskyi, PR 19627)
  • Another set of micro‑optimizations (Ivan Levkivskyi, PR 19633)
  • Cache common types (Ivan Levkivskyi, PR 19621)
  • Skip more method bodies in third‑party libraries for speed (Ivan Levkivskyi, PR 19586)
  • Simplify the representation of callable types (Ivan Levkivskyi, PR 19580)
  • Add cache for types of some expressions (Ivan Levkivskyi, PR 19505)
  • Use cache for dictionary expressions (Ivan Levkivskyi, PR 19536)
  • Use cache for binary operations (Ivan Levkivskyi, PR 19523)
  • Cache types of type objects (Ivan Levkivskyi, PR 19514)
  • Avoid duplicate work when checking boolean operations (Ivan Levkivskyi, PR 19515)
  • Optimize generic inference passes (Ivan Levkivskyi, PR 19501)
  • Speed up the default plugin (Jukka Lehtosalo, PRs 19385 and 19462)
  • Remove nested imports from the default plugin (Ivan Levkivskyi, PR 19388)
  • Micro‑optimize type expansion (Jukka Lehtosalo, PR 19461)
  • Micro‑optimize type indirection (Jukka Lehtosalo, PR 19460)
  • Micro‑optimize the plugin framework (Jukka Lehtosalo, PR 19464)
  • Avoid temporary set creation in subtype checking (Jukka Lehtosalo, PR 19463)
  • Subtype checking micro‑optimization (Jukka Lehtosalo, PR 19384)
  • Return early where possible in subtype check (Stanislav Terliakov, PR 19400)
  • Deduplicate some types before joining (Stanislav Terliakov, PR 19409)
  • Speed up type checking by caching argument inference context (Jukka Lehtosalo, PR 19323)
  • Optimize binding method self argument type and deprecation checks (Ivan Levkivskyi, PR 19556)
  • Keep trivial instance types/aliases during expansion (Ivan Levkivskyi, PR 19543)

Fixed‑Format Cache (Experimental)

... (truncated)

Commits
  • df05f05 remove +dev from version
  • 01a7a12 Update changelog for 1.18.2 (#19873)
  • ca5abf0 Typeshed cherry-pick: Make type of unitest.mock.Any a subclass of Any (#1...
  • 9d794b5 [mypyc] fix: inappropriate Nones in f-strings (#19846)
  • 2c0510c stubtest: additional guidance on errors when runtime is object.init (#19733)
  • 2f3f03c Bump version to 1.18.2+dev for point release
  • 7669841 Fix crash on recursive alias in indirection.py (#19845)
  • See full diff in compare view

Updates ruff from 0.13.0 to 0.13.1

Release notes

Sourced from ruff's releases.

0.13.1

Release Notes

Released on 2025-09-18.

Preview features

  • [flake8-simplify] Detect unnecessary None default for additional key expression types (SIM910) (#20343)
  • [flake8-use-pathlib] Add fix for PTH123 (#20169)
  • [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • [flake8-use-pathlib] Make PTH111 fix unsafe because it can change behavior (#20215)
  • [pycodestyle] Fix E301 to only trigger for functions immediately within a class (#19768)
  • [refurb] Mark single-item-membership-test fix as always unsafe (FURB171) (#20279)

Bug fixes

  • Handle t-strings for token-based rules and suppression comments (#20357)
  • [flake8-bandit] Fix truthiness: dict-only ** displays not truthy for shell (S602, S604, S609) (#20177)
  • [flake8-simplify] Fix diagnostic to show correct method name for str.rsplit calls (SIM905) (#20459)
  • [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (#20197)
  • [pyupgrade] Fix false positive when class name is shadowed by local variable (UP008) (#20427)
  • [pyupgrade] Prevent infinite loop with I002 and UP026 (#20327)
  • [ruff] Recognize t-strings, generators, and lambdas in invalid-index-type (RUF016) (#20213)

Rule changes

  • [RUF102] Respect rule redirects in invalid rule code detection (#20245)
  • [flake8-bugbear] Mark the fix for unreliable-callable-check as always unsafe (B004) (#20318)
  • [ruff] Allow dataclass attribute value instantiation from nested frozen dataclass (RUF009) (#20352)

CLI

  • Add fixes to output-format=sarif (#20300)
  • Treat panics as fatal diagnostics, sort panics last (#20258)

Documentation

  • [ruff] Add analyze.string-imports-min-dots to settings (#20375)
  • Update README.md with Albumentations new repository URL (#20415)

Other changes

  • Bump MSRV to Rust 1.88 (#20470)
  • Enable inline noqa for multiline strings in playground (#20442)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.13.1

Released on 2025-09-18.

Preview features

  • [flake8-simplify] Detect unnecessary None default for additional key expression types (SIM910) (#20343)
  • [flake8-use-pathlib] Add fix for PTH123 (#20169)
  • [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • [flake8-use-pathlib] Make PTH111 fix unsafe because it can change behavior (#20215)
  • [pycodestyle] Fix E301 to only trigger for functions immediately within a class (#19768)
  • [refurb] Mark single-item-membership-test fix as always unsafe (FURB171) (#20279)

Bug fixes

  • Handle t-strings for token-based rules and suppression comments (#20357)
  • [flake8-bandit] Fix truthiness: dict-only ** displays not truthy for shell (S602, S604, S609) (#20177)
  • [flake8-simplify] Fix diagnostic to show correct method name for str.rsplit calls (SIM905) (#20459)
  • [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (#20197)
  • [pyupgrade] Fix false positive when class name is shadowed by local variable (UP008) (#20427)
  • [pyupgrade] Prevent infinite loop with I002 and UP026 (#20327)
  • [ruff] Recognize t-strings, generators, and lambdas in invalid-index-type (RUF016) (#20213)

Rule changes

  • [RUF102] Respect rule redirects in invalid rule code detection (#20245)
  • [flake8-bugbear] Mark the fix for unreliable-callable-check as always unsafe (B004) (#20318)
  • [ruff] Allow dataclass attribute value instantiation from nested frozen dataclass (RUF009) (#20352)

CLI

  • Add fixes to output-format=sarif (#20300)
  • Treat panics as fatal diagnostics, sort panics last (#20258)

Documentation

  • [ruff] Add analyze.string-imports-min-dots to settings (#20375)
  • Update README.md with Albumentations new repository URL (#20415)

Other changes

  • Bump MSRV to Rust 1.88 (#20470)
  • Enable inline noqa for multiline strings in playground (#20442)

Contributors

... (truncated)

Commits
  • 706be0a Add pyproject.toml to rooster config version_files and bump to 0.13.1 (#2...
  • 7b40428 Bump 0.13.1 (#20473)
  • b9b5755 Upgrade to the latest rooster version and include contributors in CHANGELOG (...
  • b4b5d67 [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (...
  • 0b60584 Bump MSRV to Rust 1.88 (#20470)
  • 821b2f8 [refurb] Mark single-item-membership-test fix as always unsafe (FURB171...
  • 1758f26 Update rust toolchain to 1.90 (#20469)
  • 2502ff7 [ty] Make TypeIs invariant in its type argument (#20428)
  • 144373f [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • 91995aa [pyupgrade] Fix false positive when class name is shadowed by local variabl...
  • Additional commits viewable in compare view

Updates black from 25.1.0 to 25.9.0

Release notes

Sourced from black's releases.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
  • Build gallery docker image with python3-slim and reduce image size (#4686)

... (truncated)

Changelog

Sourced from black's changelog.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)

... (truncated)

Commits

Updates boto3 from 1.40.33 to 1.40.35

Commits
  • 22fa3d5 Merge branch 'release-1.40.35'
  • 021298e Bumping version to 1.40.35
  • 02961e6 Add changelog entries from botocore
  • 1564e42 Merge branch 'release-1.40.34'
  • b5c8399 Merge branch 'release-1.40.34' into develop
  • dd6d06b Bumping version to 1.40.34
  • 80c94bf Add changelog entries from botocore
  • 09242b8 Merge branch 'release-1.40.33' into develop
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+110
Deletions:
-94
Package Dependencies
Package:
mypy
Ecosystem:
pip
Version Change:
1.18.1 → 1.18.2
Update Type:
Patch
Package:
boto3
Ecosystem:
pip
Version Change:
1.40.33 → 1.40.35
Update Type:
Patch
Package:
black
Ecosystem:
pip
Version Change:
25.1.0 → 25.9.0
Update Type:
Minor
Package:
ruff
Ecosystem:
pip
Version Change:
0.13.0 → 0.13.1
Update Type:
Patch
Technical Details
ID: 8162446
UUID: 2848522088
Node ID: PR_kwDOPNiOac6pyP9o
Host: GitHub
Repository: NHSDigital/terraform-aws-metrics-lambda
Merge State: Unknown