Bump the patch group with 3 updates
Type: Pull Request
State: Closed
![dependabot[bot]](https://github.com/dependabot.png){kind=small}
dependabot[bot]Association: Unknown
Comments: 1
(5 months ago)
(4 months ago)
(4 months ago)
part:tooling type:tech-debt part:dispatcher auto-merged
Bumps the patch group with 3 updates: mkdocs-material, mypy and uv.
Updates mkdocs-material from 9.7.0 to 9.7.1
Release notes
Sourced from mkdocs-material's releases.
mkdocs-material-9.7.1
- Updated requests to 2.30+ to mitigate CVE in urllib
- Fixed privacy plugin not picking up protocol-relative URLs
- Fixed #8542: false positives and negatives captured in privacy plugin
Changelog
Sourced from mkdocs-material's changelog.
mkdocs-material-9.7.1 (2025-12-18)
- Updated requests to 2.30+ to mitigate CVE in urllib
- Fixed privacy plugin not picking up protocol-relative URLs
- Fixed #8542: false positives and negatives captured in privacy plugin
mkdocs-material-9.7.0 (2025-11-11)
⚠️ Material for MkDocs is now in maintenance mode
This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.
Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/
This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.
Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.
Changes:
- Added support for pinned blog posts and author profiles
- Added support for customizing pagination for blog index pages
- Added support for customizing blog category sort order
- Added support for staying on page when switching languages
- Added support for disabling tags in table of contents
- Added support for nested tags and shadow tags
- Added support for footnote tooltips
- Added support for instant previews
- Added support for instant prefetching
- Added support for custom social card layouts
- Added support for custom social card background images
- Added support for selectable rangs in code blocks
- Added support for custom selectors for code annotations
- Added support for configurable log level in privacy plugin
- Added support for processing of external links in privacy plugin
- Added support for automatic image optimization via optimize plugin
- Added support for navigation paths (breadcrumbs)
- Fixed #8519: Vector accents do not render when using KaTeX
mkdocs-material-9.6.23 (2025-11-01)
- Updated Burmese translation
... (truncated)
Commits
7e236f6Temporarily disable publishing3941491Fixed CI034eaf7Prepare 9.7.1 release79ba428Fixed privacy plugin not picking up protocol-relative URLs61cad24Updated dependenciesdde13ceFixed false positives and negatives captured in privacy plugin (#8542)291012dUpdated requests to 2.30+ to mitigate CVE in urllib673d8caFixed links1722784Documentationaee925fFixed links- Additional commits viewable in compare view
Updates mypy from 1.19.0 to 1.19.1
Changelog
Sourced from mypy's changelog.
Mypy 1.19.1
- Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
- Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
- Allow
types.NoneTypein match cases (A5rocks, PR 20383)- Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
- Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
- Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
- Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
- Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)
Acknowledgements
Thanks to all mypy contributors who contributed to this release:
- A5rocks
- BobTheBuidler
- bzoracler
- Chainfire
- Christoph Tyralla
- David Foster
- Frank Dana
- Guo Ci
- iap
- Ivan Levkivskyi
- James Hilton-Balfe
- jhance
- Joren Hammudoglu
- Jukka Lehtosalo
- KarelKenens
- Kevin Kannammalil
- Marc Mueller
- Michael Carlstrom
- Michael J. Sullivan
- Piotr Sawicki
- Randolf Scholz
- Shantanu
- Sigve Sebastian Farstad
- sobolevn
- Stanislav Terliakov
- Stephen Morton
- Theodore Ando
- Thiago J. Barbalho
- wyattscarpenter
I’d also like to thank my employer, Dropbox, for supporting mypy development.
Mypy 1.18
We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance
... (truncated)
Commits
412c19aBump version to 1.19.120aea0aUpdate changelog for 1.19.1 (#20414)2b23b50Serialize raw errors in cache metas (#20372)f60f90fFail on PyPy in main instead of setup.py (#20389)58d485bFail with an explicit error on PyPy (#20384)a4b31a2Allowtypes.NoneTypein match cases (#20383)8a6eff4[mypyc] fix generator regression with empty tuple (#20371)70eceeaFix noncommutative joins with bounded TypeVars (#20345)3890fc4Fix crash involving Unpack-ed TypeVarTuple (#20323)c93d917Fix crash on star import of redefinition (#20333)- Additional commits viewable in compare view
Updates uv from 0.9.17 to 0.9.21
Release notes
Sourced from uv's releases.
0.9.21
Release Notes
Released on 2025-12-30.
Bug fixes
- Fix regression where zstd distribution hashes were not considered valid (#17265)
Documentation
- Fix a typo in the resolution documentation (#17258)
- Fix a typo in
python install --defaultdocumentation (#9826)Install uv 0.9.21
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.9.21/uv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.9.21/uv-installer.ps1 | iex"Download uv 0.9.21
... (truncated)
Changelog
Sourced from uv's changelog.
0.9.21
Released on 2025-12-30.
Bug fixes
- Fix regression where zstd distribution hashes were not considered valid (#17265)
Documentation
- Fix a typo in the resolution documentation (#17258)
- Fix a typo in
python install --defaultdocumentation (#9826)0.9.20
Released on 2025-12-29.
This is a re-release of 0.9.19, with internal crate versions incremented to enable publishing to crates.io.
0.9.19
Released on 2025-12-29.
Python
- Add CPython 3.15.0a3 (#17165)
Enhancements
- Allow
uv pip compileto install missing python interpreters in cases where it would otherwise fail (#17216)- Avoid creating file contents with
uv init --bare --script(#17162)- Respect
--torch-backendinuv toolcommands (#17117)- Support comma-separated values in
--no-binaryand--only-binary(#17185)Preview features
- Summarize package changes in
uv syncwith JSON output format (#16981)Performance
- Avoid two hot
Stringallocations in deserialization (#17221)- Cache NVIDIA-hosted wheels by default (#17164)
Bug fixes
... (truncated)
Commits
0dc9556Bump version to 0.9.21 (#17270)c26a576Fix regression where zstd distribution hashes were not considered valid (#17265)071c692Fix typo in 0.9.20 changelog entry (#17262)53cc00eFix a small typo in the resolution docs (#17258)8c429c8Fix typo inpython install --defaultdocumentation (#9826)edafa2cUpdate actions/checkout digest to 8e8c483 (#13905)3d745d2Update actions/attest-build-provenance digest to 00014ed (#16556)765a967Bump version to 0.9.20 (#17256)a45f502Bump version to 0.9.19 (#17254)936da00Improve reliability of certain managed python tests on Windows CI (#17177)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Technical Details
| ID: | 13344087 |
| UUID: | 3774095024 |
| Node ID: | PR_kwDOLWfGeM67LDT8 |
| Host: | GitHub |
| Repository: | frequenz-floss/frequenz-dispatch-python |