Skip to content

chore(deps): bump the minor-patch group with 5 updates - #680

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-patch-71d6067c9e
Open

chore(deps): bump the minor-patch group with 5 updates#680
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-patch-71d6067c9e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 5 updates:

Package From To
cmake 4.4.2 4.4.3
ninja 1.13.0 1.13.2
conan 2.31.2 2.32.0
ruff 0.16.4 0.16.8
check-jsonschema 0.38.0 0.38.2

Updates cmake from 4.4.2 to 4.4.3

Release notes

Sourced from cmake's releases.

4.4.3

What's Changed

Full Changelog: scikit-build/cmake-python-distributions@4.4.2...4.4.3

Commits
  • 6003035 [Bot] Update to CMake 4.4.3 (#727)
  • 23030f4 chore(deps): bump the actions group with 2 updates (#728)
  • ceee561 [Bot] Update to OpenSSL 3.5.8 (#726)
  • ce3a7eb chore(deps): bump the actions group with 2 updates (#725)
  • f320aff chore(deps): bump pypa/cibuildwheel (#724)
  • 0cb59ec ci: use actions/attest instead of actions/attest-build-provenance (#723)
  • 030dd2a chore(deps): update pre-commit hooks (#720)
  • 140e91c chore(deps): bump the actions group with 2 updates (#721)
  • See full diff in compare view

Updates ninja from 1.13.0 to 1.13.2

Release notes

Sourced from ninja's releases.

v1.13.2

  • Fix Ninja exit code when interrupted (issue #2681) #2690

v1.13.1

Bugfixes:

  • Fix LINK : fatal error LNK1104: cannot open file on Windows in some cases #2616
  • Compatibility with older distros for Linux ARM version #2619
  • Restore "multiple rules generate" error with dyndep #2621
Commits
  • 3441b63 v1.13.2
  • bd56313 Fix Ninja exit code when interrupted.
  • 79feac0 v1.13.1
  • 5807cf7 Merge branch 'master' into release
  • 31af250 Merge pull request #2636 from jhasse/rsp-crlf
  • 516a0dd Add output test for multiple rules + dyndep, fix #2621
  • 114fb93 Convert \n to \r\n on Windows in rsp files, fix #2616
  • d60673d Merge pull request #2628 from userdocs/workflows-fix-triggers
  • 9659311 prevent duplicate runs being triggered when a release tag is published.
  • b783add Merge pull request #2627 from userdocs/linux.yml-build
  • Additional commits viewable in compare view

Updates conan from 2.31.2 to 2.32.0

Release notes

Sourced from conan's releases.

2.32.0 (31-Aug-2026)

  • Feature: Add basic LoongArch64 architecture support and host detection. (conan-io/conan#20288)
  • Feature: Add support for Xcode 26.6. (conan-io/conan#20280)
  • Feature: Add support for gcc 16.2. (conan-io/conan#20280)
  • Feature: Parse reference attributes from --ref in workspace add. (conan-io/conan#20269)
  • Feature: Add raise_on_errors=True arg to CommandAPI.run, it now raises on all errors returned by commands. (conan-io/conan#20266)
  • Feature: XcodeToolchain now accepts arbitrary extra xcconfig settings via tc.build_settings, for build settings with no dedicated conf. (conan-io/conan#20256). Docs: 📃
  • Feature: conan workspace open with no arguments will read the conanws file and try to open the defined references there into their respective folders if they are not present. (conan-io/conan#20247). Docs: 📃
  • Feature: conan workspace open and conan workspace add --ref learned a new --folder argument to indicate the relative location wrt the workspace root for the cloning of the repository. (conan-io/conan#20247). Docs: 📃
  • Feature: Add architecture_bits build helper to detect when the target architecture is 64-bit. (conan-io/conan#20246). Docs: 📃
  • Feature: Compute CMAKE_Swift_COMPILER_TARGET in CMakeToolchain for Apple Swift cross-builds. (conan-io/conan#20243). Docs: 📃
  • Feature: Add recipe_metadata()/package_metadata() API to download metadata to a user folder. (conan-io/conan#20240). Docs: 📃
  • Feature: Improve source step output. (conan-io/conan#20234)
  • Feature: Make conan report diff -f=html use a dark theme by default. (conan-io/conan#20229)
  • Feature: Add package_type_traits attribute to force requirement traits by package_type (run only for now). (conan-io/conan#20228). Docs: 📃
  • Feature: Add --ref argument to conan editable add <path> as a shortcut to define name, version, etc. (conan-io/conan#20218)
  • Feature: Feature: Allow copy() to accept multiple patterns, also used by exports/exports_sources, for speedup. (conan-io/conan#20217). Docs: 📃
  • Feature: Add qbs_file_name property to override the generated Qbs module name and avoid collisions. (conan-io/conan#20215). Docs: 📃
  • Feature: Allow conan run without a conanfile to run executables from the profile's [tool_requires]. (conan-io/conan#20214). Docs: 📃
  • Feature: Rework the conan graph build-order HTML formatter with search and full offline support. (conan-io/conan#20174)
  • Feature: Populate the download cache with uploaded artifacts if core.download:download_cache is set. (conan-io/conan#20163). Docs: 📃
  • Feature: Accept CMake 4.4 --preset-file presets generated outside the CMake root. (conan-io/conan#20158). Docs: 📃
  • Feature: Add !settings.build_type syntax to exclude build_type from cmake_layout's build_folder_vars. (conan-io/conan#17331). Docs: 📃
  • Fix: Do not force CONFIG requires for transitive dependencies in CMakeConfigDeps. (conan-io/conan#20283)
  • Fix: Correct a typo in the CycloneDX component recipe revision. (conan-io/conan#20271)
  • Fix: Failed creates in workspace subcommands now raise errors as expected. (conan-io/conan#20266)
  • Fix: Add support for python requires in remotes for conan workspace create. (conan-io/conan#20265)
  • Fix: Add support for lockfile reading in conan source for Python requires. (conan-io/conan#20264)
  • Fix: Generate valid CycloneDX SBOMs for recipes without a description attribute. (conan-io/conan#20263)
  • Fix: Match the dll.a extension (MinGW) in deduce_full_cpp_info. (conan-io/conan#20259)
  • Fix: Make test_linker_script test resilient to the exact linker error text, which changed with Meson >= 1.12. (conan-io/conan#20257)
  • Fix: XcodeToolchain's extra flags (tools.build:cflags/cxxflags/ldflags/defines) no longer get overwritten when installing more than one configuration for the same project. (conan-io/conan#20255). Docs: 📃
  • Fix: Correct filename parsing in conan report diff -f=html for non-ASCII filenames. (conan-io/conan#20229)
  • Fix: Remove the Vigenère cipher used to store JWTs, since it provided no real security benefit. (conan-io/conan#20227)
  • Fix: Improve copy() performance when using lists of patterns. (conan-io/conan#20226)
  • Fix: Warn when tools.build:compiler_executables keys are unknown or unused by CMakeToolchain/AutotoolsToolchain. (conan-io/conan#20219). Docs: 📃
  • Fix: Add objc, objcpp and asm as tools.build:compiler_executables for AutotoolsToolchain. (conan-io/conan#20219). Docs: 📃
  • Fix: Make conan lock upgrade-config's path argument point to a conanconfig.yml file, not a conanfile.py. (conan-io/conan#20208). Docs: 📃
  • Fix: Remove the deprecated --order-by behavior and empty version ranges, as planned for Conan 2.32. (conan-io/conan#20207). Docs: 📃
  • Bugfix: intel-cc default compilers on Windows. Classic mode now defaults to icl (not icc/icpc), icx mode to icx (not icx-cl, which is absent in older oneAPI), and CMakeToolchain now honors CC/CXX from [buildenv] over the hard-coded defaults. (conan-io/conan#20233)
  • Bugfix: Keep the local recipe index cache folder when conan remote add fails on a duplicate without --force. (conan-io/conan#20210)
  • Bugfix: Make CMakeConfigDeps generate common files only for the host context, avoiding lost CMake variables. (conan-io/conan#20198)
Commits
  • 1521d2c Conan 2.32.0
  • 226b40a Feature: Parse reference attributes from --ref in workspace add (#20261) (#20...
  • 7ace888 Add LoongArch64 architecture setting and host detection (#20288)
  • a8f9da3 package_type_traits attribute for recipes (#20228)
  • bff8217 Fix intel-cc default compilers on Windows (classic icl, icx icx, honor builde...
  • b897d9d Add raise_on_errors to CommandAPI.run (#20266)
  • 819005c Add support for !settings.build_type syntax in `tools.cmake.cmake_layout:bu...
  • 9dd3522 workspace: support opening all conanws refs; add --folder option to open/add ...
  • 18a39a3 [fix] Accept .dll.a extension for deduce_full_cpp_info (#20259)
  • 0a733db Add support for lockfile reading in conan source for Python Requires (#20264)
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates check-jsonschema from 0.38.0 to 0.38.2

Release notes

Sourced from check-jsonschema's releases.

0.38.2

  • Update the version of click declared as a dependency

0.38.1

  • Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
  • check-jsonschema now has a logo. Thanks to Mylah Birdie!
Changelog

Sourced from check-jsonschema's changelog.

0.38.2

  • Update the version of click declared as a dependency

0.38.1

  • Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
  • check-jsonschema now has a logo. Thanks to Mylah Birdie <https://www.instagram.com/mylahbirdie>__!
Commits
  • 0494aa7 Bump version for release
  • 9ef41c1 Merge pull request #720 from sirosen/update-click-deps
  • 91e96dc Update bounds on click
  • 99f2dd3 Bump version for release
  • 7bae1f5 Add logo to readme
  • 44420b0 Merge pull request #718 from sirosen/use-logo
  • cfed2c5 Add the new logo!
  • c538a21 Merge pull request #717 from python-jsonschema/vendor-schemas-auto
  • e594040 [vendor-schemas] automated update
  • 27796f7 Merge pull request #709 from python-jsonschema/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-patch group with 5 updates
0bd8266 
Bumps the minor-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [cmake](https://github.com/scikit-build/cmake-python-distributions) | `4.4.2` | `4.4.3` |
| [ninja](https://github.com/ninja-build/ninja) | `1.13.0` | `1.13.2` |
| [conan](https://github.com/conan-io/conan) | `2.31.2` | `2.32.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.8` |
| [check-jsonschema](https://github.com/python-jsonschema/check-jsonschema) | `0.38.0` | `0.38.2` |


Updates `cmake` from 4.4.2 to 4.4.3
- [Release notes](https://github.com/scikit-build/cmake-python-distributions/releases)
- [Changelog](https://github.com/scikit-build/cmake-python-distributions/blob/main/HISTORY.rst)
- [Commits](scikit-build/cmake-python-distributions@4.4.2...4.4.3)

Updates `ninja` from 1.13.0 to 1.13.2
- [Release notes](https://github.com/ninja-build/ninja/releases)
- [Commits](ninja-build/ninja@v1.13.0...v1.13.2)

Updates `conan` from 2.31.2 to 2.32.0
- [Release notes](https://github.com/conan-io/conan/releases)
- [Commits](conan-io/conan@2.31.2...2.32.0)

Updates `ruff` from 0.16.4 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.8)

Updates `check-jsonschema` from 0.38.0 to 0.38.2
- [Release notes](https://github.com/python-jsonschema/check-jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/check-jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/check-jsonschema@0.38.0...0.38.2)

---
updated-dependencies:
- dependency-name: cmake
  dependency-version: 4.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ninja
  dependency-version: 1.13.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: conan
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: check-jsonschema
  dependency-version: 0.38.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file minor Minor severity labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from mvillmow as a code owner October 1, 2026 08:48
@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added minor Minor severity dependencies Pull requests that update a dependency file labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mvillmow mvillmow mvillmow approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file minor Minor severity

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mvillmow