Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 6 updates - #52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-dependencies-d577189c2c
Open

chore(deps): bump the all-dependencies group across 1 directory with 6 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-dependencies-d577189c2c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 6 updates in the / directory:

Package From To
tox 4.56.1 4.58.0
tox-uv 1.35.2 1.36.0
uv 0.11.16 0.11.32
ruff 0.15.20 0.16.0
mypy 2.1.0 2.3.0
marimo 0.23.9 0.23.15

Updates tox from 4.56.1 to 4.58.0

Release notes

Sourced from tox's releases.

v4.58.0

What's Changed

Full Changelog: tox-dev/tox@4.57.2...4.58.0

v4.57.2

What's Changed

Full Changelog: tox-dev/tox@4.57.1...4.57.2

v4.57.1

What's Changed

Full Changelog: tox-dev/tox@4.57.0...4.57.1

v4.57.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.56.4...4.57.0

... (truncated)

Changelog

Sourced from tox's changelog.

Miscellaneous internal changes - 4.58.0

  • Test against Python 3.15 (beta) in CI and declare its classifier - by :user:gaborbernat. (:issue:4001)

v4.57.2 (2026-07-21)

Bug fixes - 4.57.2

  • Fix package environment creation failures being misreported:

    • discard the partially registered configuration on failure, so the real error surfaces instead of a spurious duplicate configuration definition;
    • report the first creation failure in definition order, not a hash-random one;
    • build the PEP 517 frontend lazily, so tox c and tox l work when pyproject.toml cannot be read. (:issue:3987)

  • Fix state corruption in the environment creation machinery:

    • a failed run environment build no longer removes shared package environments other run environments still use;
    • a run environment registers with its package environment once, not twice with triple-counted usage;
    • circular depends reports the cycle as an error instead of a raw traceback;
    • Skip raised by a plugin for a package environment marks the run environment package-skipped instead of crashing with UnboundLocalError. (:issue:3991)

  • Fix two packaging regressions:

    • package = editable on a build backend without PEP-660 support now falls back to editable-legacy with a warning instead of crashing, also when the project metadata is static;
    • editable and wheel environments running after an sdist-wheel environment build from the project sources again, instead of a stale temporary copy that made source edits invisible. (:issue:3992)

  • An environment serving as both a run environment and a package environment now behaves predictably:

    • one defined through a [testenv:...]-style section and referenced by package_env inherits from pkgenv/env_pkg_base as documented, instead of silently keeping run environment defaults;
    • one listed in env_list while referenced as a package environment is reported as a configuration conflict up front, instead of failing late with cannot run packaging environment or silently disappearing from tox l. (:issue:3993)

  • pylock.toml installs now match the lock file:

    • a package locked once per Python range installs only the version matching the environment's interpreter;
    • packages locked to a local directory, VCS repository, or archive install from that source instead of resolving the name against the package index;
    • locked hashes are verified when every entry carries one;
    • changing a pip environment variable such as PIP_INDEX_URL reinstalls, as it already did for deps.

... (truncated)

Commits
  • 69e1bdc release 4.58.0
  • ea8734e 👷 ci: run the test matrix against Python 3.15 (#4001)
  • 2d8d5ae release 4.57.2
  • b74d78b 🐛 fix(ux): four run-edge polish fixes (#4000)
  • 09dad3d 🐛 fix(cli): honor tox c -o, clean devenv ALL error, correct provision pin (#3...
  • fa6ec2b 🐛 fix(run): honor the fail-fast contract, resilient teardown (#3999)
  • b1b0159 🐛 fix(pep723): honor metadata behind a BOM, fail cleanly on bad blocks (#3997)
  • a111ec6 🐛 fix(pip): stable rendering of set options in install cache (#3995)
  • e969723 🐛 fix(config): rebuild loader chains per config set (#3993)
  • 6a9b6a5 🐛 fix(cache): self-heal wrong-shape tox-info content (#3996)
  • Additional commits viewable in compare view

Updates tox-uv from 1.35.2 to 1.36.0

Release notes

Sourced from tox-uv's releases.

1.36.0

What's Changed

Full Changelog: tox-dev/tox-uv@1.35.2...1.36.0

Commits
  • 6268ef9 👷 ci: add Python 3.15 to the test matrix (#358)
  • 12edb70 [pre-commit.ci] pre-commit autoupdate (#357)
  • a6d24f8 Replace prettier with mdformat and yamlfmt (#356)
  • 8bab275 build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#355)
  • 75c7409 build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#354)
  • a4ef4f2 [pre-commit.ci] pre-commit autoupdate (#353)
  • 16203a1 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#352)
  • af040e7 [pre-commit.ci] pre-commit autoupdate (#351)
  • 1a09434 💰 Surface GitHub Sponsors + thanks.dev
  • 9781bb7 [pre-commit.ci] pre-commit autoupdate (#350)
  • Additional commits viewable in compare view

Updates uv from 0.11.16 to 0.11.32

Release notes

Sourced from uv's releases.

0.11.32

Release Notes

Released on 2026-07-23.

Preview features

  • Add --package and --all-packages selection to uv check (#20628)
  • Allow uv upgrade to update multiple marker-specific declarations of the same package (#20335)
  • Reject non-canonically formatted lockfiles in uv lock --check and commands using --locked (#20646)
  • Regenerate non-canonically formatted lockfiles with uv lock --refresh (#20634)
  • Include best-effort information about the active environment in uv workspace metadata by default (#20643)

Performance

  • Skip dependency-group conflict expansion when no additional conflicts can be inferred (#20611)

Bug fixes

  • Fork universal resolutions when Requires-Python is discovered only from distribution metadata (#20586)

Install uv 0.11.32

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.32/uv-installer.ps1 | iex"

Download uv 0.11.32

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum
uv-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum
uv-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

Changelog

0.12.0

Released on 2026-07-28.

Since we released uv 0.11.0 in March, we've accumulated changes that improve correctness, safety, and compatibility with specifications, but could break some workflows. This release contains those changes; many have been marked as breaking out of an abundance of caution.

We expect most users to be able to upgrade without making changes.

There are no breaking changes to the configuration of the uv build backend. If your [build-system] table includes an upper bound on uv_build, update it to allow uv_build 0.12, e.g., uv_build>=0.11.32,<0.13.

Breaking changes

  • Define build systems by default with uv init (#19197)

    Projects created with uv init now declare a build system and are packaged by default. This was the default project layout all the way back in v0.3, but we found that the use of the hatchling build system was confusing to newcomers and consequently dropped use of a build system by default in v0.4. Since then, we've created our own build system (uv_build) with tight integration with uv and are excited to restore the default to a best-practice project layout.

    Previously, uv init example created an unpackaged layout containing main.py and a pyproject.toml without a build system. The project could declare dependencies but was not itself installed into its virtual environment.

    Now, uv init example defines a [build-system] using uv_build, places application source code in src/example, and includes a [project.scripts] entry named example. Defining a build system allows the project to be imported from tests or other code, installed as a dependency, and run as a command:

    $ uv init example
$ cd example
$ uv run example
Hello from example!

    Existing projects are unaffected. Use uv init --no-package example to create the previous unpackaged layout without a build system.

    See the project creation documentation for more details.

    This stabilizes the packaged-init preview feature.

  • Reject unsupported source distribution and wheel archive formats (#18927)

    PEP 625 requires source distributions to use .tar.gz archives. Previously, uv also accepted legacy formats such as .tar.bz2 and .tar.xz. Those formats are now rejected, including when referenced by an existing lockfile. Legacy .zip source distributions remain supported for backwards compatibility.

    Wheels and other ZIP archives can no longer contain entries compressed with bzip2, LZMA, or XZ. Entries must use the stored, DEFLATE, or zstd compression methods.

    Removing support for uncommon compression methods reduces uv's compression dependencies and the attack surface exposed when processing untrusted packages.

    You cannot opt out of this behavior. If you depend on a legacy source distribution that uses an unsupported format, we recommend rebuilding it as a .tar.gz archive and regenerating any lockfile containing references to the legacy archive.

  • Reject wheel files that could replace the Python interpreter (#20748, #20749)

... (truncated)

Commits
  • 3010295 Bump version to 0.11.32 (#20654)
  • cb1bce0 Regenerate the uv.lock TOML with uv lock --refresh (#20634)
  • c2e07d5 Remove obsolete Python upgrade preview feature (#20651)
  • b6b2e76 Reject unformatted lockfiles in uv lock --check (and --locked) (#20646)
  • a549562 Enable Ruff default lint rules across the repository (and fix all the errors)...
  • e4e2f69 Fix uv check workspace snapshots and ruff lints (#20649)
  • 241df05 Add --package and --all-packages to uv check (#20628)
  • d332950 Include best-effort environment info by default in uv workspace metadata ...
  • b12ab98 Clarify first-party trust in the threat model (#20647)
  • 1fd5716 Use canonical issue references in Codex prompts (#20645)
  • Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    

    • 






... (truncated)





Commits

    

  • a2635fd Bump 0.16.0 (#27136)
    • 

  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
    • 

  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
    • 

  • 17ef711 Stabilize --add-ignore (#27125)
    • 

  • ef912bb Add newly stabilized rules to defaults (#27055)
    • 

  • b30f040 Stabilize new default rules (#27035)
    • 

  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
    • 

  • 87e51e2 Fix format --check spans for syntax errors (#27045)
    • 

  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
    • 

  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
    • 

  • Additional commits viewable in compare view
    • 







Updates mypy from 2.1.0 to 2.3.0



Changelog

Sourced from mypy's changelog.




Mypy Release Notes


Next Release


Packaging changes



Mypy 2.3


We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI).
Mypy is a static type checker for Python. This release includes new features, performance
improvements and bug fixes. You can install it as follows:


python3 -m pip install -U mypy



You can read the full documentation for this release on Read the Docs.


The Upcoming Switch to the New Native Parser


We are planning to enable the new native parser (--native-parser) by
default soon. We recommend that you test the native parser in your projects and report
any issues in the mypy issue tracker.


Mypyc Free-threading Memory Safety


Free-threaded Python builds that don't have the GIL require additional synchronization
primitives or lock-free algorithms to ensure memory safety when there are race conditions
(for example, when a thread reads a list item while another thread writes the same list
item concurrently). This release greatly improves memory safety of free threading.


List operations are now memory-safe on free threaded Python builds, even in the presence of
race conditions. This has some performance cost. For list-heavy workloads, using
librt.vecs.vec instead of list is often significantly faster, but note that vec is not
(and likely won't be) fully memory safe, and the user is expected to avoid race conditions.
The newly introduced librt.threading.Lock helps with this. Using variable-length tuples
can also be more efficient than lists, since tuples are immutable and don't require
expensive synchronization to ensure memory safety.


Instance attribute access is also (mostly) memory safe now on free-threaded builds in
the presence of race conditions. We are planning to fix the remaining unsafe cases in a
future release.


Full list of changes:


    

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
    • 

  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
    • 

  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
    • 

  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
    • 

  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)
    • 






... (truncated)





Commits

    

  • 8aabf84 Drop +dev from version
    • 

  • 4d8ad2a Update changelog for 2.3 release (#21728)
    • 

  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
    • 

  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
    • 

  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
    • 

  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
    • 

  • 24c237d [mypyc] Improve documentation of Final (#21713)
    • 

  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
    • 

  • cbcb51a Narrow for frozendict membership check (#21709)
    • 

  • af2bc0f Sync typeshed (#21707)
    • 

  • Additional commits viewable in compare view
    • 







Updates marimo from 0.23.9 to 0.23.15



Release notes

Sourced from marimo's releases.




0.23.15


What's Changed


✨ Enhancements


    

  • Prefill issue-report fields via include toggles (#10307)
    • 

  • Searchable combobox for secret/env fields (#10253)
    • 

  • Support default file browser selection (#10255)
    • 

  • Previewable issue diagnostics in the feedback modal (#10251)
    • 

  • Stream file-browser downloads from disk (#10247)
    • 

  • Support theme override via query param (#10196)
    • 

  • Target the current session so agents connect to the right notebook (#10169)
    • 

  • Propagate request trace context to the kernel (#10166)
    • 

  • Add deck-level content alignment control (#10176)
    • 

  • Update LLM model catalog (#10157)
    • 

  • Queue follow-up messages while assistant is streaming (#10174)
    • 



🐛 Bug fixes


    

  • Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
    • 

  • Reject catch-all getattr objects as DB connections (#10301)
    • 

  • Clamp dropdown to viewport and portal into fullscreen root (#10297)
    • 

  • Retain static output through initial hydration (#10298)
    • 

  • Exclude marimo package from modulefinder crawl (#10249)
    • 

  • Harden create-test-release action (#10278)
    • 

  • Remeasure container-width Vega charts when host gains size (#10266)
    • 

  • Avoid recursively scanning anywidget state (#10254)
    • 

  • Retry invalid anywidget modules (#10259)
    • 

  • Resolve pytest race condition during edit (#10139)
    • 

  • Canonicalize widget files in HTML exports (#10261)
    • 

  • Resolve version from marimo-base (#10260)
    • 

  • Handle PEP 695 TypeAlias in DeprivateVisitor (#10227)
    • 

  • Support Google Vertex with Pydantic-AI v2 (#10256)
    • 

  • Pin pydantic-ai instrumentation version (#10239)
    • 

  • Stringify bare pint values in JSON encoding (#10242)
    • 

  • Restore retina rendering for matplotlib figures (#10246)
    • 

  • Make long error toasts readable and copyable (#10243)
    • 

  • Serialize pandas via Arrow IPC instead of deprecated feather (#10244)
    • 

  • Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
    • 

  • Dismiss Jedi signature hint on Escape and closing paren (#10162)
    • 

  • prevent AI in-editor input from disappearing on rejection (#10206)
    • 

  • Disable scroll view on mobile to prevent crash (#10212)
    • 

  • Surface load errors instead of rendering a silent blank (#10121)
    • 

  • Scope skew-protection exemption to login form (#10164)
    • 

  • Skip missing-package nudge for marimo.* imports (#10167)
    • 

  • Resolve normalized package names to their module (#10165)
    • 

  • Sort packages panel list case-insensitively (#10168)
    • 

  • Do not fire anywidget change listeners at mount (#10179)
    • 

  • Preserve output DOM across present/edit mode toggles (#10160)
    • 

  • Do not broadcast anywidget echo_update acks back to clients (#10178)
    • 

  • Preserve leading underscores in to_camel_case (#10170)
    • 

  • Prevent marimo check from formatting regular markdown files (#10138)
    • 






... (truncated)





Commits






Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    • 




    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the all-dependencies group across 1 directory with …
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          ed9834f
        
      

    

  

    

      
…6 updates

Bumps the all-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tox](https://github.com/tox-dev/tox) | `4.56.1` | `4.58.0` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.35.2` | `1.36.0` |
| [uv](https://github.com/astral-sh/uv) | `0.11.16` | `0.11.32` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.0` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [marimo](https://github.com/marimo-team/marimo) | `0.23.9` | `0.23.15` |



Updates `tox` from 4.56.1 to 4.58.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.56.1...4.58.0)

Updates `tox-uv` from 1.35.2 to 1.36.0
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.35.2...1.36.0)

Updates `uv` from 0.11.16 to 0.11.32
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.16...0.11.32)

Updates `ruff` from 0.15.20 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.0)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `marimo` from 0.23.9 to 0.23.15
- [Release notes](https://github.com/marimo-team/marimo/releases)
- [Commits](marimo-team/marimo@0.23.9...0.23.15)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tox-uv
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: uv
  dependency-version: 0.11.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: marimo
  dependency-version: 0.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  python:uv

  Pull requests that update python:uv code

  labels


      Jul 31, 2026

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews





  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    python:uv

  Pull requests that update python:uv code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants