Skip to content
This repository was archived by the owner on Aug 21, 2026. It is now read-only.

Bump the dev-dependencies group across 1 directory with 2 updates - #198

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/dev-dependencies-520f1dc786
Open

Bump the dev-dependencies group across 1 directory with 2 updates#198
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/dev-dependencies-520f1dc786

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on nox and uv to permit the latest version.
Updates nox to 2026.8.17

Changelog

Sourced from nox's changelog.

Changelog

2026.08.17

This is a small follow-up release to better support running the parallel mode on legacy windows.

We'd like to thank the following folks who contributed to this release:

Fixes:

Internal changes:

2026.08.10

This release can run sessions in parallel with --parallel/-j (experimental for now, report any bugs!). Requires session opt-in, or use --allow-parallel. Interpreter discovery now uses the python-discovery package, which should be better at finding Python and supports version specifier sets. Using this, script mode reads requires-python. Many bugs were fixed, mostly in Python version handling, conda version specifiers, and option precedence. Unrecognized global options are now an error.

We'd like to thank the following folks who contributed to this release:

Features:

... (truncated)

Commits
  • a976d7e docs: prepare 2026.08.17 release notes (#1168)
  • ade83de chore: tighten mypy and pytest config (#1167)
  • c699c47 fix: support legacy encodings in parallel reporter (#1160)
  • f85d050 chore(deps): bump pre-commit hooks, hold pyproject-fmt at 2.26.0 (#1163)
  • 4b9d946 chore(deps): bump the github-actions group with 2 updates (#1162)
  • See full diff in compare view

Updates uv to 0.12.5

Release notes

Sourced from uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"

Download uv 0.12.5

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.5

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

  • Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
  • Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
  • Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
  • Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

  • Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
  • Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

  • Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
  • Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

  • Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
  • Allow uv lock to proceed when .venv is an unusable project environment (#21068)
  • Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
  • Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits
  • 210d1f6 Bump version to 0.12.5 (#21140)
  • 802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
  • a6904bb Order equal-priority Python installations by key (#21134)
  • 728a70d Improve automated fixes for related bug manifestations (#21102)
  • b82b038 Include hashes in cyclonedx exports (#21131)
  • 8011778 Simplify editable requirement errors and hints (#21130)
  • dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
  • 3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
  • 7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
  • 298dda4 Fix relative indexes in PEP 723 scripts (#21097)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dev-dependencies group across 1 directory with 2 updates
bfb7447 
Updates the requirements on [nox](https://github.com/wntrblm/nox) and [uv](https://github.com/astral-sh/uv) to permit the latest version.

Updates `nox` to 2026.8.17
- [Release notes](https://github.com/wntrblm/nox/releases)
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md)
- [Commits](wntrblm/nox@2026.08.10...2026.08.17)

Updates `uv` to 0.12.5
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.3...0.12.5)

---
updated-dependencies:
- dependency-name: nox
  dependency-version: 2026.8.17
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: uv
  dependency-version: 0.12.5
  dependency-type: direct:development
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 18, 2026
@sonarqubecloud

sonarqubecloud Bot commented Aug 18, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants