Skip to content

[MAINT]: Bump the minor-and-patch group across 1 directory with 5 updates - #136

Merged
Spencer Schoenberg (spencrr) merged 1 commit into
mainfrom
dependabot/uv/minor-and-patch-7f6f82f580
Jul 28, 2026
Merged

[MAINT]: Bump the minor-and-patch group across 1 directory with 5 updates#136
Spencer Schoenberg (spencrr) merged 1 commit into
mainfrom
dependabot/uv/minor-and-patch-7f6f82f580

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
msgraph-sdk 1.59.2 1.60.0
hatchling 1.30.1 1.31.0
pre-commit 4.6.0 4.6.1
ty 0.0.59 0.0.64
mkdocs-material 9.7.6 9.7.7

Updates msgraph-sdk from 1.59.2 to 1.60.0

Release notes

Sourced from msgraph-sdk's releases.

v1.60.0

1.60.0 (2026-07-21)

Features

  • generation: update request builders and models (8799c4e)
Changelog

Sourced from msgraph-sdk's changelog.

1.60.0 (2026-07-21)

Features

  • generation: update request builders and models (8799c4e)
Commits
  • d9982ad Merge pull request #1555 from microsoftgraph/release-please--branches--main--...
  • 770dfb5 chore(main): release 1.60.0
  • 07414b3 Merge pull request #1554 from microsoftgraph/v1.0/pipelinebuild/227538
  • 8799c4e feat(generation): update request builders and models
  • See full diff in compare view

Updates hatchling from 1.30.1 to 1.31.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.31.0

Fixed

  • Only rewrite the shebang of a shared script when a Python shebang is present on the first line, preserving binary files and other content verbatim instead of dropping leading bytes.
Commits
  • 4b3fd7d release Hatchling v1.31.0
  • 19ced89 Fix env-dependency extras being dropped when a metadata hook is configured (#...
  • 3b45c75 Prepare hatchling for release 1.31.0 (#2330)
  • e3d9b95 Addresses bug where blank lines are dropped when there is no shebang (#2328)
  • 9bc573c Prepare for 1.17.1 hatch release (#2329)
  • bbb12bb Pass --no-header to uv pip compile for deterministic lockfiles (#2327)
  • 8c06373 Fix uv lock check header comparison (#2317)
  • 5cfbb54 fix: skip extend injection if already present in ruff config (#2305)
  • cf85971 fix: use TemporaryDirectory + pylock*.toml for temp lock files (#2303)
  • 40c471c Docs: Add hatch-calver to version scheme plugins (#1725)
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates ty from 0.0.59 to 0.0.64

Release notes

Sourced from ty's releases.

0.0.64

Release Notes

Released on 2026-07-27.

Bug fixes

  • Fix identity narrowing for NewTypes (#26439)
  • Make reachability analysis idempotent (#27163)

LSP server

  • Fix ParamSpec declaration hover and type navigation (#27183)
  • Implement LSP textDocument/implementation request (#25410)
  • Introduce shared primitives for parsing backticks in docstrings (#26928)
  • Render NumPy docstrings as structured Markdown (#25925)

CLI

  • Add --exclude-scripts and --include-scripts (#27169)
  • Discover uv workspace roots (#25551)

Diagnostics

  • Add a lint rule for combined abstract and final decorators (#26932)
  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
  • Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

  • Allow unresolved unused venv home paths (#27162)
  • Simplify script metadata query (#27121)

Core type checking

  • Decorate only overload implementation signatures (#27147)
  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
  • Improve identity comparison inference for singleton types (#27126)
  • Improve tuple membership and rich comparison inference (#27164)
  • Model walrus bindings from comprehensions (#26466)
  • Narrow tagged unions using identity comparisons (#27130)
  • Preserve Self in __new__ calls (#27003)
  • Preserve receiver constraints when binding overloaded methods (#27038)
  • Support generic manual PEP 695 type aliases (#27083)
  • Treat bivariance as covariant (#24319)

Performance

  • Avoid cycles when resolving ModuleType globals (#27182)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.64

Released on 2026-07-27.

Bug fixes

  • Fix identity narrowing for NewTypes (#26439)
  • Make reachability analysis idempotent (#27163)

LSP server

  • Fix ParamSpec declaration hover and type navigation (#27183)
  • Implement LSP textDocument/implementation request (#25410)
  • Introduce shared primitives for parsing backticks in docstrings (#26928)
  • Render NumPy docstrings as structured Markdown (#25925)

CLI

  • Add --exclude-scripts and --include-scripts (#27169)
  • Discover uv workspace roots (#25551)

Diagnostics

  • Add a lint rule for combined abstract and final decorators (#26932)
  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
  • Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

  • Allow unresolved unused venv home paths (#27162)
  • Simplify script metadata query (#27121)

Core type checking

  • Decorate only overload implementation signatures (#27147)
  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
  • Improve identity comparison inference for singleton types (#27126)
  • Improve tuple membership and rich comparison inference (#27164)
  • Model walrus bindings from comprehensions (#26466)
  • Narrow tagged unions using identity comparisons (#27130)
  • Preserve Self in __new__ calls (#27003)
  • Preserve receiver constraints when binding overloaded methods (#27038)
  • Support generic manual PEP 695 type aliases (#27083)
  • Treat bivariance as covariant (#24319)

Performance

  • Avoid cycles when resolving ModuleType globals (#27182)
  • Avoid expanding optional enum comparisons (#27105)

... (truncated)

Commits

Updates mkdocs-material from 9.7.6 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates.

The path forward is Zensical, our next-generation static site generator built from first principles. If you’re planning a new documentation project or thinking about your long-term setup, we encourage you to start exploring Zensical.

Organizations requiring support beyond this date can get in touch to discuss options.

Read the full announcement on our blog

Changes

  • Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

  • Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[MAINT]: Bump the minor-and-patch group across 1 directory with 5 upd…
6463c57 
…ates

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python) | `1.59.2` | `1.60.0` |
| [hatchling](https://github.com/pypa/hatch) | `1.30.1` | `1.31.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` |
| [ty](https://github.com/astral-sh/ty) | `0.0.59` | `0.0.64` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.6` | `9.7.7` |



Updates `msgraph-sdk` from 1.59.2 to 1.60.0
- [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases)
- [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md)
- [Commits](microsoftgraph/msgraph-sdk-python@v1.59.2...v1.60.0)

Updates `hatchling` from 1.30.1 to 1.31.0
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.30.1...hatchling-v1.31.0)

Updates `pre-commit` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

Updates `ty` from 0.0.59 to 0.0.64
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.59...0.0.64)

Updates `mkdocs-material` from 9.7.6 to 9.7.7
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.6...9.7.7)

---
updated-dependencies:
- dependency-name: msgraph-sdk
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: hatchling
  dependency-version: 1.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.64
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 28, 2026
@dependabot
dependabot Bot requested a review from a team July 28, 2026 18:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 28, 2026
@azure-pipelines

azure-pipelines Bot commented Jul 28, 2026

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@spencrr
Spencer Schoenberg (spencrr) merged commit 6475422 into main Jul 28, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/minor-and-patch-7f6f82f580 branch July 28, 2026 18:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@spencrr Spencer Schoenberg (spencrr) spencrr approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@spencrr