An open index of dependabot pull requests across open source projects.

build(deps-dev): bump the dev-dependencies group with 4 updates

Closed
Number: #63
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: December 08, 2025 at 03:22 AM UTC
(6 months ago)
Updated: December 08, 2025 at 03:23 AM UTC
(6 months ago)
Closed: December 08, 2025 at 03:23 AM UTC
(6 months ago)
Time to Close: 2 minutes
Labels:
dependencies python
Description:

Bumps the dev-dependencies group with 4 updates: ruff, black, boto3 and ipython.

Updates ruff from 0.14.7 to 0.14.8

Release notes

Sourced from ruff's releases.

0.14.8

Release Notes

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

  • Fix syntax error false positives for await outside functions (#21763)
  • [flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

  • Suggest using --output-file option in GitLab integration (#21706)

Other changes

  • [syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

Install ruff 0.14.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.ps1 | iex"

Download ruff 0.14.8

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.8

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

  • Fix syntax error false positives for await outside functions (#21763)
  • [flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

  • Suggest using --output-file option in GitLab integration (#21706)

Other changes

  • [syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

Commits
  • 9d4f1c6 Bump 0.14.8 (#21791)
  • 326025d [ty] Always register rename provider if client doesn't support dynamic regist...
  • 3aefe85 [ty] Ensure rename CursorTest calls can_rename before renaming (#21790)
  • b8ecc83 Fix clippy errors on main (#21788)
  • 6491932 [ty] Fix crash when hovering an unknown string annotation (#21782)
  • a9f2bb4 [ty] Don't send publish diagnostics for clients supporting pull diagnostics (...
  • e2b72fb [ty] cleanup test path (#21781)
  • 14fce0d [ty] Improve the display of various special-form types (#21775)
  • 8ebecb2 [ty] Add subdiagnostic hint if the user wrote X = Any rather than X: Any ...
  • 45ac30a [ty] Teach ty the meaning of desperation (try ancestor pyproject.tomls as...
  • Additional commits viewable in compare view

Updates black from 25.11.0 to 25.12.0

Release notes

Sourced from black's releases.

25.12.0

Please test out the draft 2026 style in version 26.1a1! This style will be finalized in the January release (26.1.0). Most of the changes in --preview will be in the 2026 stable style, but not all. Please share your feedback!

This release (25.12.0) will still produce the 2025 style.

Highlights

  • Black no longer supports running with Python 3.9 (#4842)

Stable style

  • Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
  • Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on string literals, or on dictionary entries with long lines (#4872)
  • Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

  • Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
  • Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
  • Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

  • Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)
Changelog

Sourced from black's changelog.

25.12.0

Highlights

  • Black no longer supports running with Python 3.9 (#4842)

Stable style

  • Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
  • Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on string literals, or on dictionary entries with long lines (#4872)
  • Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

  • Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
  • Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
  • Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

  • Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)
Commits
  • 782e560 Pin actions/checkout@v5.0.0 (#4895)
  • f0f4094 Fix new lines being added after imports with # fmt: skip on them (#4894)
  • 70fc194 Revert "Fix # fmt: skip ignored in deeply nested expressions" (#4893)
  • 7044b14 Prepare 25.12.0 release (#4891)
  • 5b470f0 Fix # fmt: skip ignored in deeply nested expressions (#4883)
  • 1b342ef Fix crash when multiple # fmt: skip comments are used in multi-part if-clau...
  • 7b265f1 Pin Hatch to hopefully fix Docker builds (#4878)
  • c9523f4 Attempt to fix Docker build failures (#4876)
  • 0f376e0 Fix crashes when fmt directives are indented (#4856)
  • a8bfcc1 Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Additional commits viewable in compare view

Updates boto3 from 1.42.0 to 1.42.4

Commits
  • 87d85be Merge branch 'release-1.42.4'
  • 2ed62e3 Bumping version to 1.42.4
  • 7df80a3 Add changelog entries from botocore
  • 3471175 Merge branch 'release-1.42.3'
  • dfb22ff Merge branch 'release-1.42.3' into develop
  • 2e3d125 Bumping version to 1.42.3
  • 04ebd3c Add changelog entries from botocore
  • cc95ab6 Merge branch 'release-1.42.2'
  • 743b8e4 Merge branch 'release-1.42.2' into develop
  • 8f7ba80 Bumping version to 1.42.2
  • Additional commits viewable in compare view

Updates ipython from 9.7.0 to 9.8.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
boto3
Ecosystem:
pip
Version Change:
1.42.0 → 1.42.4
Update Type:
Patch
Package:
black
Ecosystem:
pip
Version Change:
25.11.0 → 25.12.0
Update Type:
Minor
Package:
ruff
Ecosystem:
pip
Version Change:
0.14.7 → 0.14.8
Update Type:
Patch
Package:
ipython
Ecosystem:
pip
Version Change:
9.7.0 → 9.8.0
Update Type:
Minor
Technical Details
ID: 11817138
UUID: 3704477903
Node ID: PR_kwDOPNiOac63lDO2
Host: GitHub
Repository: NHSDigital/terraform-aws-metrics-lambda