CityApper/dulwich

deps(deps-dev): bump the pip group with 2 updates (#2015)

Bumps the pip group with 2 updates:
[ruff](https://github.com/astral-sh/ruff) and
[mypy](https://github.com/python/mypy).

Updates `ruff` from 0.14.3 to 0.14.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.14.7</h2>
<h2>Release Notes</h2>
<p>Released on 2025-11-28.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bandit</code>] Handle string literal bindings in
suspicious-url-open-usage (<code>S310</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21469">#21469</a>)</li>
<li>[<code>pylint</code>] Fix <code>PLR1708</code> false positives on
nested functions (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21177">#21177</a>)</li>
<li>[<code>pylint</code>] Fix suppression for empty dict without tuple
key annotation (<code>PLE1141</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21290">#21290</a>)</li>
<li>[<code>ruff</code>] Add rule <code>RUF066</code> to detect
unnecessary class properties (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21535">#21535</a>)</li>
<li>[<code>ruff</code>] Catch more dummy variable uses
(<code>RUF052</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19799">#19799</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[server] Set severity for non-rule diagnostics (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21559">#21559</a>)</li>
<li>[<code>flake8-implicit-str-concat</code>] Avoid invalid fix in
(<code>ISC003</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21517">#21517</a>)</li>
<li>[<code>parser</code>] Fix panic when parsing IPython escape command
expressions (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21480">#21480</a>)</li>
</ul>
<h3>CLI</h3>
<ul>
<li>Show partial fixability indicator in statistics output (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21513">#21513</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/mikeleppane"><code>@mikeleppane</code></a></li>
<li><a href="https://github.com/senekor"><code>@senekor</code></a></li>
<li><a
href="https://github.com/ShaharNaveh"><code>@ShaharNaveh</code></a></li>
<li><a
href="https://github.com/JumboBear"><code>@JumboBear</code></a></li>
<li><a
href="https://github.com/prakhar1144"><code>@prakhar1144</code></a></li>
<li><a href="https://github.com/tsvikas"><code>@tsvikas</code></a></li>
<li><a
href="https://github.com/danparizher"><code>@danparizher</code></a></li>
<li><a
href="https://github.com/chirizxc"><code>@chirizxc</code></a></li>
<li><a
href="https://github.com/AlexWaygood"><code>@AlexWaygood</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@MichaReiser</code></a></li>
</ul>
<h2>Install ruff 0.14.7</h2>
<h3>Install prebuilt binaries via shell script</h3>
<pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf
https://github.com/astral-sh/ruff/releases/download/0.14.7/ruff-installer.sh
| sh
</code></pre>
<h3>Install prebuilt binaries via powershell script</h3>
<pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c &quot;irm
https://github.com/astral-sh/ruff/releases/download/0.14.7/ruff-installer.ps1
| iex&quot;
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.14.7</h2>
<p>Released on 2025-11-28.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bandit</code>] Handle string literal bindings in
suspicious-url-open-usage (<code>S310</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21469">#21469</a>)</li>
<li>[<code>pylint</code>] Fix <code>PLR1708</code> false positives on
nested functions (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21177">#21177</a>)</li>
<li>[<code>pylint</code>] Fix suppression for empty dict without tuple
key annotation (<code>PLE1141</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21290">#21290</a>)</li>
<li>[<code>ruff</code>] Add rule <code>RUF066</code> to detect
unnecessary class properties (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21535">#21535</a>)</li>
<li>[<code>ruff</code>] Catch more dummy variable uses
(<code>RUF052</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19799">#19799</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[server] Set severity for non-rule diagnostics (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21559">#21559</a>)</li>
<li>[<code>flake8-implicit-str-concat</code>] Avoid invalid fix in
(<code>ISC003</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21517">#21517</a>)</li>
<li>[<code>parser</code>] Fix panic when parsing IPython escape command
expressions (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21480">#21480</a>)</li>
</ul>
<h3>CLI</h3>
<ul>
<li>Show partial fixability indicator in statistics output (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21513">#21513</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/mikeleppane"><code>@mikeleppane</code></a></li>
<li><a href="https://github.com/senekor"><code>@senekor</code></a></li>
<li><a
href="https://github.com/ShaharNaveh"><code>@ShaharNaveh</code></a></li>
<li><a
href="https://github.com/JumboBear"><code>@JumboBear</code></a></li>
<li><a
href="https://github.com/prakhar1144"><code>@prakhar1144</code></a></li>
<li><a href="https://github.com/tsvikas"><code>@tsvikas</code></a></li>
<li><a
href="https://github.com/danparizher"><code>@danparizher</code></a></li>
<li><a
href="https://github.com/chirizxc"><code>@chirizxc</code></a></li>
<li><a
href="https://github.com/AlexWaygood"><code>@AlexWaygood</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@MichaReiser</code></a></li>
</ul>
<h2>0.14.6</h2>
<p>Released on 2025-11-21.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bandit</code>] Support new PySNMP API paths
(<code>S508</code>, <code>S509</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21374">#21374</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Adjust own-line comment placement between branches (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21185">#21185</a>)</li>
<li>Avoid syntax error when formatting attribute expressions with outer
parentheses, parenthesized value, and trailing comment on value (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20418">#20418</a>)</li>
<li>Fix panic when formatting comments in unary expressions (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21501">#21501</a>)</li>
<li>Respect <code>fmt: skip</code> for compound statements on a single
line (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20633">#20633</a>)</li>
<li>[<code>refurb</code>] Fix <code>FURB103</code> autofix (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21454">#21454</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/ecab623fb2fe3846de4cafa0dfef0385a7245941"><code>ecab623</code></a>
Bump 0.14.7 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21684">#21684</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/42f152108aad444b7d65359aea931be4dd15dffd"><code>42f1521</code></a>
[ty] Generic types aliases (implicit and PEP 613) (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21553">#21553</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/594b7b04d3b04bcf42861f86207017c8117678ca"><code>594b7b0</code></a>
[ty] Preserve quoting style when autofixing <code>TypedDict</code> keys
(<a
href="https://redirect.github.com/astral-sh/ruff/issues/21682">#21682</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/b5b4917d7f4a324f5d32cc55dfb1d08e75cc9e6f"><code>b5b4917</code></a>
[ty] Fix override of final method summary (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21681">#21681</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/0084e94f78742685ddacf2dab28530c2ece3393e"><code>0084e94</code></a>
[ty] Fix subtyping of <code>type[Any]</code> / <code>type[T]</code> and
protocols (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21678">#21678</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/566c959add8c5aa5d25fd14db513c792e4048b50"><code>566c959</code></a>
[ty] Rename <code>ReferenceRequestHandler</code> file (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21680">#21680</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/8bcfc198b83051db0c8a3c7b8f0c8a8c339947c7"><code>8bcfc19</code></a>
[ty] Implement <code>typing.final</code> for methods (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21646">#21646</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/c534bfaf01671b8020edd440bc7f4f22070af583"><code>c534bfa</code></a>
[ty] Implement patterns and typevars in the LSP (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21671">#21671</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/5e1b2eef5797b00de8329bf38ceacf5cacd00c87"><code>5e1b2ee</code></a>
[ty] implement rendering of <code>.. code:: lang</code> in docstrings
(<a
href="https://redirect.github.com/astral-sh/ruff/issues/21665">#21665</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/98681b9356bd0b8ef086cc54118b58de532c5310"><code>98681b9</code></a>
[ty] Add <code>db</code> parameter to <code>Parameters::new</code>
method (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21674">#21674</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.14.3...0.14.7">compare
view</a></li>
</ul>
</details>
<br />

Updates `mypy` from 1.18.2 to 1.19.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h1>Mypy Release Notes</h1>
<h2>Next Release</h2>
<h3>Drop Support for Python 3.9</h3>
<p>Mypy no longer supports running with Python 3.9, which has reached
end-of-life.
When running mypy with Python 3.10+, it is still possible to type check
code
that needs to support Python 3.9 with the <code>--python-version
3.9</code> argument.
Support for this will be dropped in the first half of 2026!</p>
<p>Contributed by Marc Mueller (PR <a
href="https://redirect.github.com/python/mypy/pull/20156">20156</a>).</p>
<h2>Mypy 1.19</h2>
<p>We’ve just uploaded mypy 1.19.0 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features, performance
improvements and bug fixes. You can install it as follows:</p>
<pre><code>python3 -m pip install -U mypy
</code></pre>
<p>You can read the full documentation for this release on <a
href="http://mypy.readthedocs.io">Read the Docs</a>.</p>
<h3>Python 3.9 Support Ending Soon</h3>
<p>This is the last mypy feature release that supports Python 3.9, which
reached
end of life in October 2025.</p>
<h3>Performance Improvements</h3>
<ul>
<li>Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR
<a
href="https://redirect.github.com/python/mypy/pull/20053">20053</a>)</li>
<li>Speed up type aliases (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19810">19810</a>)</li>
</ul>
<h3>Fixed‑Format Cache Improvements</h3>
<p>Mypy uses a cache by default to speed up incremental runs by reusing
partial results
from earlier runs. Mypy 1.18 added a new binary fixed-format cache
representation as
an experimental feature. The feature is no longer experimental, and we
are planning
to enable it by default in a future mypy release (possibly 1.20), since
it's faster
and uses less space than the original, JSON-based cache format. Use
<code>--fixed-format-cache</code> to enable the fixed-format cache.</p>
<p>Mypy now has an extra dependency on the <code>librt</code> PyPI
package, as it's needed for
cache serialization and deserialization.</p>
<p>Mypy ships with a tool to convert fixed-format cache files to the old
JSON format.
Example of how to use this:</p>
<pre><code>$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/0f068c9ec604daa09e69c92545b059f4b44f566e"><code>0f068c9</code></a>
Remove +dev</li>
<li><a
href="https://github.com/python/mypy/commit/6d5cf52e67da306b62455cdce4ce9a9ccec35d02"><code>6d5cf52</code></a>
Various updates to 1.19 changelog (<a
href="https://redirect.github.com/python/mypy/issues/20304">#20304</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/3c813083b27c87cf3a32e7422191b02bf59fab6e"><code>3c81308</code></a>
Add draft version of 1.19 release notes (<a
href="https://redirect.github.com/python/mypy/issues/20296">#20296</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/1999a20e9898f673fa2f4c9a91790c075141ba71"><code>1999a20</code></a>
[mypyc] librt base64: use existing SIMD CPU dispatch by customizing
build fla...</li>
<li><a
href="https://github.com/python/mypy/commit/1b94fbb9fbc581de7e057d71e9892e3acbf9a7d3"><code>1b94fbb</code></a>
[mypyc] Fix vtable pointer with inherited dunder new (<a
href="https://redirect.github.com/python/mypy/issues/20302">#20302</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/13369cb25fe450f755f63e59156b86df84c08b3d"><code>13369cb</code></a>
[mypyc] Fix crash on super in generator (<a
href="https://redirect.github.com/python/mypy/issues/20291">#20291</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/a087a5894935cfdbc2eba27a6d04ebca38fd6659"><code>a087a58</code></a>
Update import map when new modules added (<a
href="https://redirect.github.com/python/mypy/issues/20271">#20271</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/35e843cc38cedc1bdf87d9937c06d51189ad0e45"><code>35e843c</code></a>
[mypyc] Add efficient librt.base64.b64decode (<a
href="https://redirect.github.com/python/mypy/issues/20263">#20263</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/094f66dc742cec2d69add9296fb21cdef50624d0"><code>094f66d</code></a>
[mypyc] Add <strong>repr</strong> to AssignmentTarget subclasses (<a
href="https://redirect.github.com/python/mypy/issues/20258">#20258</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/0738db3f9d336622923c7ee143e1c3adf7600a31"><code>0738db3</code></a>
Do not push partial types to the binder (<a
href="https://redirect.github.com/python/mypy/issues/20202">#20202</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v1.18.2...v1.19.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] 1 месяц назад

Родитель

17a45539a5

Сommit

e7572ad256

1 измененных файлов с 2 добавлено и 2 удалено

Разделённый вид Показать статистику Diff

						
							+ 2
							
							- 2
						
pyproject.toml
							 
								Просмотреть файл
							
				@@ -43,8 +43,8 @@ pgp = ["gpg"]
			
				 paramiko = ["paramiko"]
			
				 colordiff = ["rich"]
			
				 dev = [
			
				-    "ruff==0.14.3",
			
				-    "mypy==1.18.2",
			
				+    "ruff==0.14.7",
			
				+    "mypy==1.19.0",
			
				     "dissolve>=0.1.1",
			
				     "codespell==2.4.1",
			
				 ]

deps(deps-dev): bump the pip group with 2 updates (#2015)

+ 2 - 2 pyproject.toml Просмотреть файл

+ 2 - 2
pyproject.toml
Просмотреть файл