Sourced from tox's releases.

4.28.4

What's Changed

• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3570
• Pass ssh-agent variables by default by @​daniilgankov in tox-dev/tox#3572

New Contributors

• @​daniilgankov made their first contribution in tox-dev/tox#3572

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.3...4.28.4

4.28.3

What's Changed

• Fix typo on cmd_build filter check expression by @​gaborbernat in tox-dev/tox#3569

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.2...4.28.3

4.28.2

What's Changed

• Don't pass in the filter argument to tar.extractall on old Python versions by @​gaborbernat in tox-dev/tox#3568

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.1...4.28.2

4.28.1

What's Changed

• Fix an issue number typo in changelog by @​hroncok in tox-dev/tox#3563
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3564
• Only use tarfile.data_filter when it's available by @​gaborbernat in tox-dev/tox#3566

Full Changelog: https://github.com/tox-dev/tox/compare/4.28.0...4.28.1

Sourced from tox's changelog.

v4.28.4 (2025-07-31)

Features - 4.28.4

- Pass ssh-agent variables ``SSH_AGENT_PID`` and ``SSH_AUTH_SOCK`` in ``pass_env`` by default.
  - by :user:`daniilgankov` (:issue:`3572`)
v4.28.3 (2025-07-25)
No significant changes.
v4.28.2 (2025-07-25)
Bugfixes - 4.28.2

• Don't pass in the filter argument to tar.extractall on old Python versions - by :user:gaborbernat. (:issue:3568)

v4.28.1 (2025-07-22)

Bugfixes - 4.28.1

- Use `tarfile.data_filter <https://docs.python.org/3/library/tarfile.html#tarfile.data_filter>`_ with ``extractall``
  only on supported Python versions:

&gt;= 3.11.4
&gt;= 3.10.12 and &lt; 3.11
&gt;= 3.9.17 and &lt; 3.10

by :user:gaborbernat. (:issue:3565)

• 611b751 release 4.28.4
• 9f2db71 Pass ssh-agent variables by default (#3572)
• c28c4b1 [pre-commit.ci] pre-commit autoupdate (#3570)
• 815ca31 release 4.28.3
• 8a59b92 Fix type on expression (#3569)
• ebfaab6 release 4.28.2
• ae930db Don't pass in hte filter argument to tar.extractall on old Python versions (#...
• c836ab2 release 4.28.1
• c343b26 Only use tarfile.data_filter when it's available (#3566)
• 753dd62 [pre-commit.ci] pre-commit autoupdate (#3564)
• Additional commits viewable in compare view

Sourced from mypy's changelog.

Mypy 1.17.1

• Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
• Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
• Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Alexey Makridenko
• Brian Schubert
• Chad Dombrova
• Chainfire
• Charlie Denton
• Charulata
• Christoph Tyralla
• CoolCat467
• Donal Burns
• Guy Wilson
• Ivan Levkivskyi
• johnthagen
• Jukka Lehtosalo
• Łukasz Kwieciński
• Marc Mueller
• Michael J. Sullivan
• Mikhail Golubev
• Sebastian Rittau
• Shantanu
• Stanislav Terliakov
• wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table> 

... (truncated)

• acb2983 Bump version to 1.17.1
• 933c913 Retain None as constraints bottom if no bottoms were provided (#19485)
• 5f4428f Fix "ignored exception in hasattr" in dmypy (#19428)
• 88fdeaa Prevent a crash when InitVar is redefined with a method in a subclass (#19453)
• e44d14f Bump version to 1.17.1+dev
• See full diff in compare view

Sourced from ruff's releases.

0.12.7

Release Notes

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6 Release Notes

Preview features

• [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
• [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
• [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

• Support .pyi files in ruff analyze graph (#19611)
• [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
• [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
• [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
• [refurb] Ignore decorated functions for FURB118 (#19339)
• [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
• [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

• [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

• Add support for specifying minimum dots in detected string imports (#19538)

Contributors

• @​AlexWaygood
• @​BurntSushi
• @​CodeMan62
• @​DimitriPapadopoulos
• @​IDrokin117
• @​Luunynliny
• @​MichaReiser
• @​UnboundVariable
• @​carljm
• @​charliermarsh
• @​clockback
• @​danparizher
• @​dcreager
• @​dhruvmanila
• @​dylwil3
• @​github-actions
• @​junhsonjb
• @​mtshiba

... (truncated)

Sourced from ruff's changelog.

0.12.7

This is a follow-up release to 0.12.6. Because of an issue in the package metadata, 0.12.6 failed to publish fully to PyPI and has been yanked. Similarly, there is no GitHub release or Git tag for 0.12.6. The contents of the 0.12.7 release are identical to 0.12.6, except for the updated metadata.

0.12.6

Preview features

• [flake8-commas] Add support for trailing comma checks in type parameter lists (COM812, COM819) (#19390)
• [pylint] Implement auto-fix for missing-maxsplit-arg (PLC0207) (#19387)
• [ruff] Offer fixes for RUF039 in more cases (#19065)

Bug fixes

• Support .pyi files in ruff analyze graph (#19611)
• [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
• [perflint] Ignore rule if target is global or nonlocal (PERF401) (#19539)
• [pyupgrade] Fix UP030 to avoid modifying double curly braces in format strings (#19378)
• [refurb] Ignore decorated functions for FURB118 (#19339)
• [refurb] Mark int and bool cases for Decimal.from_float as safe fixes (FURB164) (#19468)
• [ruff] Fix RUF033 for named default expressions (#19115)

Rule changes

• [flake8-blind-except] Change BLE001 to permit logging.critical(..., exc_info=True) (#19520)

Performance

• Add support for specifying minimum dots in detected string imports (#19538)

0.12.5

Preview features

• [flake8-use-pathlib] Add autofix for PTH101, PTH104, PTH105, PTH121 (#19404)
• [ruff] Support byte strings (RUF055) (#18926)

Bug fixes

• Fix unreachable panic in parser (#19183)
• [flake8-pyi] Skip fix if all Union members are None (PYI016) (#19416)
• [perflint] Parenthesize generator expressions (PERF401) (#19325)
• [pylint] Handle empty comments after line continuation (PLR2044) (#19405)

Rule changes

• [pep8-naming] Fix N802 false positives for CGIHTTPRequestHandler and SimpleHTTPRequestHandler (#19432)

• c5ac998 Bump 0.12.7 (#19627)
• 04a8f64 Revert license and license-files changes in pyproject.toml (#19624)
• 6e00adf Bump 0.12.6 (#19622)
• 864196b Add Checker::context method, deduplicate Unicode checks (#19609)
• ae26fa0 [flake8-pyi] Preserve inline comment in ellipsis removal (PYI013) (#19399)
• 88a6799 [ty] Add flow diagram for import resolution
• 941be52 [ty] Add comments to some core resolver functions
• 13624ce [ty] Add missing ticks and use consistent quoting
• edb2f8e [ty] Reflow some long lines
• 5e6ad84 [ty] Unexport helper function
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions