chore(deps): bump the python-minor-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #317 · SocketDev/socket-python-cli

dependabot · 2026-08-24T09:13:44Z

Bumps the python-minor-patch group with 7 updates in the / directory:

Package	From	To
packaging	`26.2`	`26.3`
python-dotenv	`1.2.2`	`1.2.3`
ruff	`0.16.1`	`0.16.3`
uv	`0.12.0`	`0.12.5`
pre-commit	`4.6.1`	`4.6.2`
hatch	`1.17.1`	`1.18.0`
hatchling	`1.31.0`	`1.32.0`

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)

PEP 808: accept Metadata-Version: 2.6. (#1194)

Add a limit argument to parse_tag() for compressed tag sets. (#1220)

Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)

Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)

Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)

Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)

Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)

Fix an AttributeError when hashing internally trimmed versions. (#1242)

Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)

Normalize requested extra names before comparing or hashing requirements. (#644)

Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)

Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)

Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)

Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)

Keep the parentheses of a nested group when serializing markers. (#1316)

Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)

Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)

Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)

Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)

Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)

Accept the UTF-8 charset case-insensitively in email payloads. (#1330)

Reject malformed Description-Content-Type values. (#1329)

Don't rewrite user values that contain {field} placeholders in error messages. (#1327)

Route multipart email payloads to unparsed instead of asserting. (#1247)

Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)

Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() &lt;packaging.specifiers.SpecifierSet.to_range&gt;,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() &lt;packaging.specifiers.SpecifierSet.is_subset&gt;, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

929fd4b Bump for release
f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
413d006 docs: changelog for 26.3 (#1343)
4eb0753 docs(metadata): explain selective field validation (#1342)
77e9ed4 feat(tags): add pure Python tag generator (#1346)
7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
f7b18d9 fix: round-trip backslashes through set_key (#680)
751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

[pylint] Fix false negatives on negative numbers (PLR6104) (#27251)

[pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)

[pylint] Allow continue in finally on Python 3.8 (#27626)

[pylint] Fix PLE1307 false positive with bools (#27651)

[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)

[pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

[numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

Enable PGO for Linux x86-64 Ruff releases (#27570)

Enable PGO for Linux ARM64 Ruff releases (#27574)

Enable PGO for Windows x86-64 Ruff releases (#27573)

Enable PGO for macOS ARM64 Ruff releases (#27572)

Reduce Expr size to 64 bytes (#27591)

CLI

Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

[ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Use mimalloc v3 (#27586)

Contributors

@Andrej730

@alonfaraj

@romero-deshaw

@Avasam

@tjkuson

@charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

[pylint] Fix false negatives on negative numbers (PLR6104) (#27251)

[pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)

[pylint] Allow continue in finally on Python 3.8 (#27626)

[pylint] Fix PLE1307 false positive with bools (#27651)

[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)

[pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

[numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

Enable PGO for Linux x86-64 Ruff releases (#27570)

Enable PGO for Linux ARM64 Ruff releases (#27574)

Enable PGO for Windows x86-64 Ruff releases (#27573)

Enable PGO for macOS ARM64 Ruff releases (#27572)

Reduce Expr size to 64 bytes (#27591)

CLI

Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

[ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Use mimalloc v3 (#27586)

Contributors

@Andrej730

@alonfaraj

@romero-deshaw

@Avasam

@tjkuson

@charliermarsh

@chirizxc

... (truncated)

Commits

b0e4702 Bump 0.16.3 (#27723)
ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
59196ba [ty] Unify polarity-aware relation construction (#27707)
b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
2b0d210 [ty] Centralize matched argument relations (#27705)
a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
Additional commits viewable in compare view

Updates uv from 0.12.0 to 0.12.5

Release notes

Sourced from uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)

Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)

Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)

Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"
Download uv 0.12.5

File Platform Checksum

uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

uv-x86_64-apple-darwin.tar.gz Intel macOS checksum

uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

uv-i686-pc-windows-msvc.zip x86 Windows checksum

uv-x86_64-pc-windows-msvc.zip x64 Windows checksum

uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.5

Released on 2026-08-14.

Python

Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)

Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)

Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)

Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)

Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)

Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)

Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)

Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)

Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)

Allow uv lock to proceed when .venv is an unusable project environment (#21068)

Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)

Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits

210d1f6 Bump version to 0.12.5 (#21140)
802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
a6904bb Order equal-priority Python installations by key (#21134)
728a70d Improve automated fixes for related bug manifestations (#21102)
b82b038 Include hashes in cyclonedx exports (#21131)
8011778 Simplify editable requirement errors and hints (#21130)
dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
298dda4 Fix relative indexes in PEP 723 scripts (#21097)
Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Commits

9767b6c v4.6.2
42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
3056619 fix language: node for hooks with build scripts and npm 11.x
See full diff in compare view

Updates hatch from 1.17.1 to 1.18.0

Release notes

Sourced from hatch's releases.

Hatchling v1.18.0

Changed:

Drop support for Python 3.7

Added:

Update the list of directories that are always excluded for builds

Hatch v1.18.0

Changed:

Upgrade default CPython distributions to 20260807

Added:

Add the sources environment option, which redirects dependencies to a local path, Git repository, URL, alternate index, or workspace member at install time without altering published metadata. The top-level [tool.hatch.sources] table is an alias for the default environment, environments inherit sources entry by entry, the HATCH_NO_SOURCES environment variable disables them, and hatch dep show sources reports what each source redirects

Add the --all/-a flag to the build command to build the workspace root and every workspace member defined by the selected environment, consolidating artifacts in the workspace root's dist directory by default. A root that does not define a project table is skipped so that a top-level pyproject.toml may only contain workspace configuration

Add the tool.hatch.requires-hatch field, a version specifier set that commands reading the project's metadata enforce against the running version of Hatch

Add first-class support for free-threaded distribution names such as 3.13t and 3.14t to the python commands and environment python option, rather than requiring the HATCH_PYTHON_VARIANT_GIL environment variable

The version command can now bump versions that are statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Support managing Python 3.15 distributions, currently 3.15.0rc1

Fixed:

Erase stale coverage data before running hatch test --cover.

Fix environment creation crashing when a metadata hook exists that doesn’t happen to be installed in the hatch CLI’s environment.

Fix commands run by hatch run no longer being interruptible with Ctrl-C, which happened because the ignored SIGINT of the parent process was inherited by the child process.

Fix the generated Pyrefly config being invalid on Windows, since backslashes in the absolute paths were interpreted as TOML escape sequences.

Fix the hardcoded reliance on pip when installing dependencies internally by using uv instead.

Fix environment creation silently installing a GIL-enabled Python distribution when Hatch itself runs on a free-threaded build. The distribution matching the running interpreter, such as 3.14t, is now selected.

Fix free-threaded selectors such as 3.14t being rejected by an environment's python option, even though hatch python install 3.14t already accepted them.

Never automatically select a prerelease Python distribution, such as 3.15.0rc1, when falling back to the latest compatible version. A prerelease is still installed when requested explicitly.

Commits

558061c Fix ci (#2377)
bc6d1bc release Hatch v1.18.0 (#2376)
8429e5d release Hatchling v1.32.0 (#2375)
413b3a8 Prepare for release (#2374)
4ccc9ea Bug Fix - fix CTRL-C behavior to correctly handle signals (#2369)
a885803 Add sources to enable other types of local dependencies (#2313)
ab3e000 Add --all flag to hatch build for building all workspace members (#2352)
bb90277 fix: Allow the ; private annotation in import-names/import-namespaces p...
3a9d853 fix: prevent backward relative paths in readme (#2354)
c4dc4f8 test: Fix test expectations for metadata generated by flit-core (#2365)
Additional commits viewable in compare view

Updates hatchling from 1.31.0 to 1.32.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.32.0

Changed:

Bump default core metadata version to 2.5

Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.

Reject project.readme paths that are absolute or resolve outside of the project directory.

Commits

558061c Fix ci (#2377)
bc6d1bc release Hatch v1.18.0 (#2376)
8429e5d release Hatchling v1.32.0 (#2375)
413b3a8 Prepare for release (#2374)
4ccc9ea Bug Fix - fix CTRL-C behavior to correctly handle signals (#2369)
a885803 Add sources to enable other types of local dependencies (#2313)
ab3e000 Add --all flag to hatch build for building all workspace members (#2352)
bb90277 fix: Allow the ; private annotation in import-names/import-namespaces p...
3a9d853 fix: prevent backward relative paths in readme (#2354)
c4dc4f8 test: Fix test expectations for metadata generated by flit-core (#2365)
Additional commits viewable in compare view

socket-security · 2026-08-24T09:14:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/pre-commit@4.6.1 ⏵ 4.6.2	⁺¹
	pypi/hatch@1.17.1 ⏵ 1.18.0
	pypi/python-dotenv@1.2.2 ⏵ 1.2.3	⁺¹
	pypi/packaging@26.2 ⏵ 26.3	⁺¹
	pypi/uv@0.12.0 ⏵ 0.12.5	⁺¹
	pypi/ruff@0.16.1 ⏵ 0.16.3	⁺¹

View full report

socket-security-staging · 2026-08-24T09:26:18Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/pre-commit@4.6.1 ⏵ 4.6.2	⁺¹
	pypi/hatch@1.17.1 ⏵ 1.18.0
	pypi/python-dotenv@1.2.2 ⏵ 1.2.3	⁺¹
	pypi/packaging@26.2 ⏵ 26.3	⁺¹
	pypi/uv@0.12.0 ⏵ 0.12.5	⁺¹
	pypi/ruff@0.16.1 ⏵ 0.16.3	⁺¹

View full report

…h 7 updates Bumps the python-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.3` | | [uv](https://github.com/astral-sh/uv) | `0.12.0` | `0.12.5` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [hatch](https://github.com/pypa/hatch) | `1.17.1` | `1.18.0` | | [hatchling](https://github.com/pypa/hatch) | `1.31.0` | `1.32.0` | Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) Updates `ruff` from 0.16.1 to 0.16.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.1...0.16.3) Updates `uv` from 0.12.0 to 0.12.5 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.12.0...0.12.5) Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `hatch` from 1.17.1 to 1.18.0 - [Release notes](https://github.com/pypa/hatch/releases) - [Commits](pypa/hatch@hatch-v1.17.1...hatch-v1.18.0) Updates `hatchling` from 1.31.0 to 1.32.0 - [Release notes](https://github.com/pypa/hatch/releases) - [Commits](pypa/hatch@hatchling-v1.31.0...hatchling-v1.32.0) --- updated-dependencies: - dependency-name: hatch dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: hatchling dependency-version: 1.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.16.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: uv dependency-version: 0.12.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 24, 2026

dependabot Bot requested a review from a team as a code owner August 24, 2026 09:13

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 24, 2026

dependabot Bot force-pushed the dependabot/uv/python-minor-patch-c268283564 branch from 8cb08ff to 65fd653 Compare August 27, 2026 12:51

lelia approved these changes Aug 28, 2026

View reviewed changes

lelia merged commit fbc21ed into main Aug 28, 2026
26 checks passed

dependabot Bot deleted the dependabot/uv/python-minor-patch-c268283564 branch August 28, 2026 00:06

Navigation Menu

chore(deps): bump the python-minor-patch group across 1 directory with 7 updates - #317

chore(deps): bump the python-minor-patch group across 1 directory with 7 updates#317
lelia merged 1 commit into
mainfrom
dependabot/uv/python-minor-patch-c268283564

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 24, 2026 •

edited

Loading

Uh oh!

socket-security-staging Bot commented Aug 24, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.3

What's Changed

Features

Behavior adaptations

Fixes for versions and specifiers

Fixes for requirements and markers

Fixes for metadata and licenses

v1.2.3

Fixed

[1.2.3] - 2026-08-16

Fixed

0.16.3

Release Notes

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

0.16.3

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

0.12.5

Release Notes

Python

Enhancements

Preview features

Bug fixes

Install uv 0.12.5

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download uv 0.12.5

0.12.5

Python

Enhancements

Preview features

Bug fixes

0.12.4

Enhancements

Preview features

Performance

Bug fixes

pre-commit v4.6.2

Fixes

4.6.2 - 2026-08-10

Fixes

Hatchling v1.18.0

Hatch v1.18.0

Hatchling v1.32.0

Uh oh!

socket-security Bot commented Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security-staging Bot commented Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading

socket-security Bot commented Aug 24, 2026 •

edited

Loading

socket-security-staging Bot commented Aug 24, 2026 •

edited

Loading