Skip to content

Bump the minor-and-patch-updates group across 1 directory with 5 updates - #131

Merged
bkircher merged 1 commit into
mainfrom
dependabot/pip/minor-and-patch-updates-1a90988b4f
Oct 1, 2026
Merged

Bump the minor-and-patch-updates group across 1 directory with 5 updates#131
bkircher merged 1 commit into
mainfrom
dependabot/pip/minor-and-patch-updates-1a90988b4f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch-updates group with 5 updates in the / directory:

Package From To
basedpyright 1.39.10 1.40.1
coverage 7.15.4 7.16.2
flit 4.0.2 4.1.0
pylint 4.0.7 4.0.9
rope 1.14.0 1.15.0

Updates basedpyright from 1.39.10 to 1.40.1

Release notes

Sourced from basedpyright's releases.

v1.40.1 (pyright 1.1.414)

What's Changed

Full Changelog: DetachHead/basedpyright@v1.40.0...v1.40.1

v1.40.0 (pyright 1.1.412)

What's Changed

New Contributors

Full Changelog: DetachHead/basedpyright@v1.39.10...v1.40.0

Commits
  • e7fca69 1.40.1
  • f7b6ad0 add checks when there are multiline indents for doc strings, update (#1882)
  • 1bc4879 fix broken docs links
  • 845bfe1 move and baseline basedpyright errors in new build scripts from upstream
  • a9189ef prettier fix
  • 756bfaa fix build:extension:dev script
  • a7a2efd syncpack fix
  • 5f6749f fix tests
  • bb9b24f fix zizmor errors in new workflows from upstream
  • b8ccd0e fix compile errors from merge
  • Additional commits viewable in compare view

Updates coverage from 7.15.4 to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

7.16.1

Version 7.16.1 — 2026-09-13

  • Fix: when the body of an irrefutable case (like case _:) is entirely excluded, the case line is now excluded too, just as an excluded else: body removes the else: line. Previously the case line was left behind and reported as missing. Closes issue 1563 with pull 2269.
  • Fix: using CoverageData.update() twice on an in-memory database would fail, as described in issue 2279. This is now fixed.

➡️  PyPI page: coverage 7.16.1. :arrow_right:  To install: python3 -m pip install coverage==7.16.1

7.16.0

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.
  • The Coverage.switch_context() method now returns the previous context.
  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.
  • Fixes to validation of options and configuration settings:
    • Negative precision settings now always cause useful error messages (pull 2261).
    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).
    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).
    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).
  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️  PyPI page: coverage 7.16.0. :arrow_right:  To install: python3 -m pip install coverage==7.16.0

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

  • Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

  • Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

  • Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Version 7.16.1 — 2026-09-13

  • Fix: when the body of an irrefutable case (like case _:) is entirely excluded, the case line is now excluded too, just as an excluded else: body removes the else: line. Previously the case line was left behind and reported as missing. Closes issue 1563_ with pull 2269_.

  • Fix: using :meth:.CoverageData.update twice on an in-memory database would fail, as described in issue 2279_. This is now fixed.

.. _issue 1563: coveragepy/coveragepy#1563 .. _pull 2269: coveragepy/coveragepy#2269 .. _issue 2279: coveragepy/coveragepy#2279

.. _changes_7-16-0:

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

  • The :meth:.Coverage.switch_context method now returns the previous context.

  • Fix: previously, a [paths] pattern would be replaced everywhere in a file

... (truncated)

Commits

Updates flit from 4.0.2 to 4.1.0

Changelog

Sourced from flit's changelog.

Release history

Version 4.1

  • License expressions with named exceptions, the WITH syntax, are accepted (:ghpull:809).
  • flit init allows dotted module names, for a component of a namespace package (:ghissue:822).
  • Fix line endings in .cmd script wrappers on Windows (:ghpull:824).

Version 4.0.3

  • Fix built wheels being created with overly restrictive 0600 permissions instead of the normal, world-readable 0644 (:ghpull:806).
Commits
  • 75b1c90 Merge pull request #826 from pypa/prepare-4.1
  • b5ad0d7 Add release note about PR #824
  • 9fb48c1 Bump version: 4.0.2 → 4.1.0
  • a4ea331 Prepare release notes for 4.1
  • 337c499 Merge pull request #824 from r3wretrhy/fix-win-cmd-crlf
  • 04cfa08 Merge pull request #825 from hxperl/docs-dynamic-fields
  • 33be607 doc: list all four fields accepted in project.dynamic
  • d538cb4 install: keep explicit CRLF in Windows .cmd wrappers
  • 3c92604 Merge pull request #809 from yangfan-yf-yf/fix/spdx-with-exceptions
  • 33a7a39 Clarify SPDX WITH version requirement and error message
  • Additional commits viewable in compare view

Updates pylint from 4.0.7 to 4.0.9

Release notes

Sourced from pylint's releases.

v4.0.9

What's new in Pylint 4.0.9?

Release date: 2026-09-23

Security Fixes

  • Someone without access to the configuration or linted code, but with access to the cache directory (predictable PYLINT_HOME on a multi-user host) can no longer write a crafted pickle that will runs arbitrary code when pylint access its stat cache. The result cache is now stored as JSON instead of pickle, preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint, is writable only by the user running pylint. (CVE with the same information pending)

False Positives Fixed

  • Fixed a false positive for no-self-use on a method that only uses self before a locally defined class (or other nested method), because the checker's could-be-a-function tracking state was not restored after visiting the nested method.

    Closes #3705

  • Fix a false positive for :ref:not-callable when calling functions constructed with types.FunctionType or types.LambdaType.

    Closes #7500

  • Fix a false positive for unnecessary-direct-lambda-call when a directly called lambda in a class body wraps a comprehension containing an assignment expression. PEP 572 makes that a SyntaxError without the lambda's scope, so following the message produced code that would not compile.

    Closes #9294

  • Fix a false positive for :ref:unnecessary-ellipsis when an ellipsis is the sole body statement of a method defined on a Protocol.

    Closes #9319

  • Fix a false positive for :ref:bad-exception-cause when the bases of the class being raised from cannot be inferred, such as an exception deriving from a C extension class. :ref:raising-non-exception and :ref:catching-non-exception already guard the same inherit_from_std_ex

... (truncated)

Commits
  • 303703f Bump pylint to 4.0.9, update changelog (#11448)
  • b342384 Fix block-scoped disable leaking into sibling elif/else blocks (#11429) (#11445)
  • 58c87cf Store the results cache as JSON instead of pickle
  • e3f4942 [Backport maintenance/4.0.x] Fix crash on failed attribute inference (#11443)
  • faf47f9 [Backport maintenance/4.0.x] Fix false positive no-self-use when a method con...
  • 20c7bb9 [Backport maintenance/4.0.x] Fix a crash in method-hidden for methods named a...
  • 47e6757 [Backport maintenance/4.0.x] Fix bad-exception-cause false positive when the ...
  • ae3ee53 [Backport maintenance/4.0.x] Fix not-callable false positive for types.Functi...
  • 3e444be [Backport maintenance/4.0.x] Fix a crash in unnecessary-default-type-args for...
  • 8f2dd4f [Backport maintenance/4.0.x] Fix declare-non-slot false positives for ClassVa...
  • Additional commits viewable in compare view

Updates rope from 1.14.0 to 1.15.0

Release notes

Sourced from rope's releases.

1.15.0

What's Changed

New Contributors

Full Changelog: python-rope/rope@1.14.0...1.15.0

Changelog

Sourced from rope's changelog.

Release 1.15.0

Commits
  • 2bd17a8 Update CHANGELOG.md
  • 4aeb7dd Bump version
  • 6f4371c Update CHANGELOG.md
  • 010d435 Merge pull request #884 from python-rope/mcepl-docs_warnings
  • acb9666 Update CHANGELOG.md
  • 2232616 Black
  • 538b3ef Merge remote-tracking branch 'origin/master' into docs_warnings
  • ded293c Merge pull request #883 from python-rope/all-contributors/add-marlon-costa-dc
  • 0e04fbb update .all-contributorsrc [skip ci]
  • 305ac5e update CONTRIBUTORS.md [skip ci]
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch-updates group across 1 directory with 5 updates
43ed829 
Bumps the minor-and-patch-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.39.10` | `1.40.1` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.4` | `7.16.2` |
| [flit](https://github.com/pypa/flit) | `4.0.2` | `4.1.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `4.0.7` | `4.0.9` |
| [rope](https://github.com/python-rope/rope) | `1.14.0` | `1.15.0` |



Updates `basedpyright` from 1.39.10 to 1.40.1
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.39.10...v1.40.1)

Updates `coverage` from 7.15.4 to 7.16.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.2)

Updates `flit` from 4.0.2 to 4.1.0
- [Changelog](https://github.com/pypa/flit/blob/main/doc/history.rst)
- [Commits](pypa/flit@4.0.2...4.1.0)

Updates `pylint` from 4.0.7 to 4.0.9
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.7...v4.0.9)

Updates `rope` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/python-rope/rope/releases)
- [Changelog](https://github.com/python-rope/rope/blob/master/CHANGELOG.md)
- [Commits](python-rope/rope@1.14.0...1.15.0)

---
updated-dependencies:
- dependency-name: basedpyright
  dependency-version: 1.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: coverage
  dependency-version: 7.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: flit
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: pylint
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: rope
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 1, 2026
@bkircher
bkircher merged commit b56878a into main Oct 1, 2026
14 checks passed
@bkircher
bkircher deleted the dependabot/pip/minor-and-patch-updates-1a90988b4f branch October 1, 2026 16:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bkircher bkircher bkircher approved these changes

Assignees

@bkircher bkircher

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bkircher