⬆ Bump the python-packages group with 4 updates - #2466

Merged
YuriiMotov merged 3 commits into
masterfrom
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged

⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom
dependabot/uv/python-packages-20eb019360

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubSep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.

Updates prek from 0.4.11 to 0.4.14

Release notes

Sourced from prek's releases.

0.4.14

Release Notes

Released on 2026-08-17.

Enhancements

  • Support check-yaml unsafe mode (#2546)

Performance

  • Reuse allocations in common filters (#2548)

Bug fixes

  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)

Contributors

Install prek 0.4.14

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.14

FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.14

Released on 2026-08-17.

Enhancements

  • Support check-yaml unsafe mode (#2546)

Performance

  • Reuse allocations in common filters (#2548)

Bug fixes

  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)

Contributors

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

... (truncated)

Commits

Updates typer from 0.26.8 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0

Breaking Changes

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0

Release notes

Sourced from zizmor's releases.

v1.29.0

New Features 🌈🔗

  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)

  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)

  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)

Changes ⚠️🔗

Removals 🌅🔗

  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)

  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)

  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)

Changelog

Sourced from zizmor's changelog.

1.29.0

New Features 🌈

  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)

  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)

  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and #!yaml uses: ./foo/bar (#2248)

Changes ⚠️

  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly: [unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses, whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses (in addition to already checking other image references) (#2222)

Removals 🌅

  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)

Bug Fixes 🐛

  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)

  • Fixed a bug where the [github-app] audit would incorrectly flag some usages as needing a #!yaml repositories: key, despite requesting organization-level-only permissions (#2227)

  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)

Commits

Updates alembic from 1.18.5 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

    References: #1842

1.19.0

Released: August 4, 2026

changed

  • [changed] [installation] Environmental updates:

    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature

  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

    References: #508

bug

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file internal Internal changes labels Sep 1, 2026
@YuriiMotov
YuriiMotov merged commit 10dd26c into masterSep 1, 2026
23 checks passed
@YuriiMotov
YuriiMotov deleted the dependabot/uv/python-packages-20eb019360 branch September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
⬆ Bump the python-packages group with 4 updates - #2466
Merged
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Sep 1, 2026
Merged
⬆ Bump the python-packages group with 4 updates#2466
YuriiMotov merged 3 commits into
masterfrom 
dependabot/uv/python-packages-20eb019360
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Contributor
Bumps the python-packages group with 4 updates: prek, typer, zizmor and alembic.
Updates prek from 0.4.11 to 0.4.14
Release notes
Sourced from prek's releases.
0.4.14
Release Notes
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
Install prek 0.4.14
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install prek
Download prek 0.4.14
FilePlatformChecksum
prek-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
prek-x86_64-apple-darwin.tar.gzIntel macOSchecksum
prek-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
... (truncated)
Changelog
Sourced from prek's changelog.
0.4.14
Released on 2026-08-17.
Enhancements
  • Support check-yaml unsafe mode (#2546)
Performance
  • Reuse allocations in common filters (#2548)
Bug fixes
  • Accept non-finite floats in check-yaml (#2545)
  • Allow comment-heavy YAML in check-yaml (#2554)
  • Sanitize captured terminal output before replay (#2552)
Contributors
0.4.13
Released on 2026-08-10.
Highlights
Manage hook tools with mise
The new language: mise support lets hooks install tools using
mise in an isolated environment:
repos:
- repo: localhooks:
- id: golangci-lintname: golangci-lintlanguage: miseadditional_dependencies: ["aqua:golangci/golangci-lint@2"]entry: golangci-lint run --fast-only ./...pass_filenames: false
Run commands in hook environments
The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:
... (truncated)
Commits

Updates typer from 0.26.8 to 0.27.1
Release notes
Sourced from typer's releases.
0.27.1
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0
Breaking Changes
Internal
Changelog
Sourced from typer's changelog.
0.27.1 (2026-08-03)
Features
  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.
Docs
Internal
0.27.0 (2026-07-15)
Breaking Changes
Internal
Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates zizmor from 1.28.0 to 1.29.0
Release notes
Sourced from zizmor's releases.
v1.29.0
New Features 🌈🔗
  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)
Changes ⚠️🔗
Removals 🌅🔗
  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)
Bug Fixes 🐛🔗
  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)
  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)
Changelog
Sourced from zizmor's changelog.
1.29.0
New Features 🌈
  • zizmor now has experimental support for auditing pre-commit inputs,
meaning both pre-commit configuration and hook definitions (#2209)
  • New audit: [insecure-url-scheme] detects usages of insecure (i.e. plaintext)
protocols when making network requests. The initial version of this audit
is limited to pre-commit inputs only (#2228)
  • zizmor now supports GitHub's "self-repository" reference syntax for local
actions, e.g. #!yaml uses: $/foo/bar instead of a manual checkout and
#!yaml uses: ./foo/bar (#2248)
Changes ⚠️
  • The [unpinned-uses] and [unpinned-images] audits have been separated more cleanly:
[unpinned-uses] is now principally responsible for Git-style #!yaml uses: clauses,
whereas [unpinned-images] is now responsible for docker://-style #!yaml uses: clauses
(in addition to already checking other image references) (#2222)
Removals 🌅
  • --collect=workflows-only and --collect=actions-only have been fully removed.
Use --collect=workflows and --collect=actions for the replacement behavior
(#2242)
Bug Fixes 🐛
  • Fixed a bug where zizmor would reject a valid workflow definition for
containing a literal jobs.<job>.outputs.<name> value for being a non-string (#2220)
  • Fixed a bug where the [github-app] audit would incorrectly flag some usages
as needing a #!yaml repositories: key, despite requesting organization-level-only
permissions (#2227)
  • Fixed a class of bugs where zizmor would discover the user's configuration in
unintuitive ways. When auditing from a Git repository, zizmor now uses the repository
root to discover configuration consistently (#2234)
Commits

Updates alembic from 1.18.5 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
⬆ Bump the python-packages group with 4 updates
beb9f5f
Bumps the python-packages group with 4 updates: [prek](https://github.com/j178/prek), [typer](https://github.com/fastapi/typer), [zizmor](https://github.com/zizmorcore/zizmor) and [alembic](https://github.com/sqlalchemy/alembic).
Updates `prek` from 0.4.11 to 0.4.14
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.11...v0.4.14)
Updates `typer` from 0.26.8 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.1)
Updates `zizmor` from 1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.28.0...v1.29.0)
Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
---
updated-dependencies:
- dependency-name: prek
dependency-version: 0.4.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-packages
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: zizmor
dependency-version: 1.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-packages
- dependency-name: alembic
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-packages
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
internal
Internal changes
labels
Sep 1, 2026
@YuriiMotov
YuriiMotov
merged commit 10dd26c
into
masterSep 1, 2026

23 checks passed

@YuriiMotov
YuriiMotov
deleted the

dependabot/uv/python-packages-20eb019360

branch
September 1, 2026 12:16
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency fileinternalInternal changes

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@tiangolo@YuriiMotov