MAINT: Bump the minor-and-patch group across 1 directory with 11 updates by dependabot[bot] · Pull Request #2326 · microsoft/PyRIT

dependabot · 2026-08-04T20:43:56Z

Bumps the minor-and-patch group with 11 updates in the / directory:

Package	From	To
datasets	`5.0.0`	`5.0.1`
fastapi	`0.139.2`	`0.141.1`
openai	`2.46.0`	`2.52.0`
tinytag	`2.2.1`	`2.3.0`
tqdm	`4.69.0`	`4.70.0`
playwright	`1.61.0`	`1.62.0`
azure-cognitiveservices-speech	`1.51.0`	`1.51.1`
litellm	`1.91.4`	`1.95.0`
ty	`0.0.62`	`0.0.65`
diff-cover	`10.4.0`	`10.4.1`
ruff	`0.15.22`	`0.16.1`

Updates datasets from 5.0.0 to 5.0.1

Release notes

Sourced from datasets's releases.

5.0.1

Bug fixes

Fix version string in init.py by @qgallouedec in huggingface/datasets#8244

fix conda build by @lhoestq in huggingface/datasets#8250

Fix JSON loader schema inference for files starting with a UTF-8 BOM (#8241) by @archievi in huggingface/datasets#8243

Support hermes traces by @lhoestq in huggingface/datasets#8255

Fix batch(by_column=...) crashing after shard/shuffle/split by @pkooij in huggingface/datasets#8259

fix traces streaming by @lhoestq in huggingface/datasets#8277

support droid agent traces by @cfahlgren1 in huggingface/datasets#8263

Fix CI: commit operation equality (hfh 1.20.0) and pytest parametrize collection error by @Wauplin in huggingface/datasets#8283

Fix lance auth by @lhoestq in huggingface/datasets#8301

Fix symlink-following arbitrary file write in archive extraction by @AAtomical in huggingface/datasets#8303

Bug Fix: Resuming Twice Resets the Dataloader by @francesco-bertolotti in huggingface/datasets#8295

Bump fsspec and simpler wds compr by @lhoestq in huggingface/datasets#8337

fix: validate Arrow IPC record batches by @XciD in huggingface/datasets#8350

Make the dataset fingerprint independent of Arrow chunking by @SuryanshSS1011 in huggingface/datasets#8339

Fix casting a nullable LargeList to a different inner type by @vineethsaivs in huggingface/datasets#8346

docs: replace AutoFeatureExtractor with AutoImageProcessor in image preprocessing docs by @gautamkishore in huggingface/datasets#8326

Fix column drop in Arrow path of axis=1 concatenation by @ebarkhordar in huggingface/datasets#8342

Raise on length mismatch in batched IterableDataset.map by @sohumt123 in huggingface/datasets#8332

Fix require_storage_embed recursing into require_storage_cast by @vineethsaivs in huggingface/datasets#8349

Fix path traversal via metadata file_name in folder-based builders by @Kaif10 in huggingface/datasets#8325

Support batched=True in Dataset.to_dict by @vineethsaivs in huggingface/datasets#8333

Fix hdf5 external files by @lhoestq in huggingface/datasets#8355

remove bad require_storage test by @lhoestq in huggingface/datasets#8357

ensure fiels are in repo by @lhoestq in huggingface/datasets#8356

Keep flat numeric columns with nulls numeric in numpy format by @ebarkhordar in huggingface/datasets#8352

Fix bucket dataset card handling and push metadata accounting by @pjh4993 in huggingface/datasets#8354

Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 by @ebarkhordar in huggingface/datasets#8358

Keep integers on the python read path for fixed-shape ArrayXD columns with nulls by @ebarkhordar in huggingface/datasets#8363

Rebatch arrow source before formatting in IterableDataset.filter to fix resume data loss by @ebarkhordar in huggingface/datasets#8360

Decode Json() columns in Dataset.to_pandas() by @ebarkhordar in huggingface/datasets#8344

fix buckets on windows by @lhoestq in huggingface/datasets#8369

Fix DatasetDict.push_to_hub leaving removed splits in the dataset card by @pjh4993 in huggingface/datasets#8367

Preserve nullable integer columns in to_json/to_csv/to_sql by @ebarkhordar in huggingface/datasets#8366

Docs

docs: fix duplicate "to" in IterableDataset push-to-hub example by @DaoyuanLi2816 in huggingface/datasets#8252

Clarify dataset creation vs loading workflows in create_dataset tutorial by @zanvari in huggingface/datasets#8235

New Contributors

@DaoyuanLi2816 made their first contribution in huggingface/datasets#8252

@zanvari made their first contribution in huggingface/datasets#8235

@archievi made their first contribution in huggingface/datasets#8243

@pkooij made their first contribution in huggingface/datasets#8259

@AAtomical made their first contribution in huggingface/datasets#8303

@francesco-bertolotti made their first contribution in huggingface/datasets#8295

@XciD made their first contribution in huggingface/datasets#8350

@SuryanshSS1011 made their first contribution in huggingface/datasets#8339

@vineethsaivs made their first contribution in huggingface/datasets#8346

... (truncated)

Commits

921c2a7 release: 5.0.1 (#8370)
c6fc5cd Preserve nullable integer columns in to_json/to_csv/to_sql (#8366)
6747b87 Fix DatasetDict.push_to_hub leaving removed splits in the dataset card (#8367)
b305031 fix buckets on windows (#8369)
030a3e5 Decode Json() columns in Dataset.to_pandas() (#8344)
0f207a0 Rebatch arrow source before formatting in IterableDataset.filter to fix resum...
adad35d Keep integers on the python read path for fixed-shape ArrayXD columns with nu...
8966746 Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 (#8358)
b8e861a Fix bucket dataset card handling and push metadata accounting (#8354)
521a590 Keep flat numeric columns with nulls numeric in numpy format (#8352)
Additional commits viewable in compare view

Updates fastapi from 0.139.2 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo.

Docs

📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

0.141.0

Features

✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @tiangolo.

0.140.13

Fixes

🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @SAURABHSALVE.

Docs

📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @AshNicolus.

📝 Add API reference page for fastapi.sse. PR #15930 by @SAURABHSALVE.

0.140.12

Fixes

🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @Zawwarsami16.

0.140.11

Fixes

🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @YuriiMotov.

0.140.10

Fixes

🐛 Fix handling sequences with nested Annotated types. PR #14874 by @YuriiMotov.

Internal

🐛 Accept any base test failure as regression. PR #16092 by @tiangolo.

🐛 Preserve pytest exit code in regression check. PR #16091 by @tiangolo.

✅ Test PR regressions against base code. PR #16090 by @tiangolo.

0.140.9

Fixes

🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @MBGrao.

... (truncated)

Commits

95f8322 🔖 Release version 0.141.1 (#16106)
f137944 📝 Update release notes
d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
1d211b9 📝 Update release notes
8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
c7e7b65 🔖 Release version 0.141.0 (#16103)
6bceb84 📝 Update release notes
5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
628663f 🔖 Release version 0.140.13 (#16096)
0b54fd0 📝 Update release notes
Additional commits viewable in compare view

Updates openai from 2.46.0 to 2.52.0

Release notes

Sourced from openai's releases.

v2.52.0

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

api: content provenance checks (1d6c118)

Bug Fixes

client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

add API-key mTLS HTTP client recipes (#3552) (7a3d5e4)

v2.51.0

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

api: fast tier (8808ed2)

Bug Fixes

api: add fast tier to helper methods (6064126)

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

... (truncated)

Changelog

Sourced from openai's changelog.

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

api: content provenance checks (1d6c118)

Bug Fixes

client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

add API-key mTLS HTTP client recipes (#3552) (7a3d5e4)

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

api: fast tier (8808ed2)

Bug Fixes

api: add fast tier to helper methods (6064126)

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

... (truncated)

Commits

ca693fb release: 2.52.0
2ad8c98 feat(api): content provenance checks
7a3d5e4 docs: add API-key mTLS HTTP client recipes (#3552)
7fa7946 fix(client): honor Retry-After delays up to two minutes (#3555)
3844843 release: 2.51.0 (#3553)
4f40426 release: 2.50.0
92594f1 fix(audio): restore transcription keyword overload
59ed1dc feat(api): transcription model updates
6ba31bc release: 2.49.0 (#3539)
90483ad test: support a hermetic local API reference (#3542)
Additional commits viewable in compare view

Updates tinytag from 2.2.1 to 2.3.0

Release notes

Sourced from tinytag's releases.

2.3.0

Add 'mime_type' attribute for audio MIME type/codec

Add 'is_lossless' attribute to indicate lossless audio

Add 'size' attribute to images for size in bytes

Add option to disable magic byte detection

Make XMP metadata available under 'other.xmp' field

Make bit depth available for lossy files providing it

Add .asf, .ogv and .wmv to list of supported file extensions

Mark deprecated 'extra' dictionary as obsolete

Fix incorrect key when adding common images to 'other' dictionary

Fix disc/track numbers not being returned as lists in 'as_dict()'

Only set audio properties with a positive value

Always read tags and audio properties in a single pass

ID3: Parse multi-value text frames correctly

ID3: Parse COMM and USLT frames correctly

ID3: Fix some errors in parsed size calculations

ID3: Exclude a few frames with custom structures

MPEG: Read VBRI and Xing Info headers for duration/bitrate

MPEG: Fix parsing of layer I and MPEG-2 layer III audio properties

MPEG: Fix slightly incorrect duration estimation

MPEG/MP4: Raise ParseError if header is invalid

MP4: Add 'image/bmp' and 'image/gif' MIME types

MP4: Fix infinite loop if size of certain sub-atoms is zero

MP4: Fix incorrect parsing of descriptor size

MP4: Don't read image data when image reading is disabled

OGG: Parse multi-stream files correctly

Speex: Don't read vendor string as comment

FLAC: Provide actual audio bitrate instead of overall bitrate

FLAC: Parse VORBIS_COMMENT and PICTURE blocks with invalid size

FLAC: Ignore subsequent STREAMINFO blocks

WAV: Include unknown fields in 'other' dictionary

WAV: Calculate bitrate/duration correctly

AIFF/WAV: Read whole ID3 chunk before parsing

ASF: Support parsing additional metadata objects

ASF: Stop parsing if object size is smaller than header

ASF: Make magic header detection more strict

Various performance improvements

Various code refactors

Commits

912d27f Rename header detection option to magic byte detection (#351)
8a93392 Release 2.3.0 (#350)
3bde1f9 README.md: Update outdated MIME type
3dd954d Update changelog
9ecb523 Rename WMA parser to ASF (#349)
74684cc Fix recent tests
7b115fe WMA: Support parsing additional metadata objects (#348)
97c1f86 README.md: Use correct format tag for WMA v2
1faf619 WAV/WMA: Show format tag (codec) in hex format
0ddc9a4 Update changelog
Additional commits viewable in compare view

Updates tqdm from 4.69.0 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

contrib.concurrent: major improvements

support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)

fix total based on shortest iterable length (#1473)

use default max_workers (#1543 <- #1530, #1518)

support timeout, buffersize (#1576)

improve ETA (#1708 <- #1161)

update as_completed (#1709 <- #1565)

add tqdm.concurrent.intepreter_map (#1777)

asyncio: support iterables with only __aiter__ (#1714 <- #1686)

support reset(float("inf")) (#1783 <- #1781, #651)

framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

contrib.logging: preserve filters (#1775 <- #1581)

rich: misc fixes (#1773)

support generators (without len) (#1391)

fix potential AttributeError on exit (#1674)

fix total=float('inf') (#1781 <- #651)

fix potential AttributeError on exit (#1778 <- #1668, #1537, #261)

fix minor docs typos (#1780, #1746)

Commits

96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
c27393e misc tidy
061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
9fc160b Update how we check for interpreter_map support in the tests
b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
16d5486 Add support for nested progress bars
9f5890f Add initial implementation for interpreter_map
321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
4664b57 minor tidy
426a098 Treat inf total as unknown in reset() too
Additional commits viewable in compare view

Updates playwright from 1.61.0 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format. Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:
page.screenshot(path="homepage.webp", quality=50)
New APIs

New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scrolling into view.

New locator.wait_for_function() waits until a function called with the matching element returns a truthy value.

New apiResponse.timing() returns resource timing information for an API response.

Announcements

📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.

⚠️ Debian 11 is not supported anymore.

Browser Versions

Chromium 151.0.7922.34

Mozilla Firefox 153.0

WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 151

Microsoft Edge 151

Commits

3b7c24c chore: roll Playwright to 1.62.0 (#3161)
1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
8335307 build(deps): bump greenlet from 3.5.3 to 3.5.4 (#3163)
5c71b2b build(deps): bump mypy from 2.1.0 to 2.3.0 (#3150)
d0c8d03 build(deps-dev): bump setuptools-scm from 9.2.2 to 10.2.1 (#3151)
ca0319c build(deps): bump build from 1.4.4 to 1.5.0 (#3152)
53802fe build(deps): bump requests from 2.33.0 to 2.34.2 (#3153)
9bc998f build(deps): bump actions/setup-python from 6 to 7 in the actions group (#3154)
9a10128 perf: speed up Python stack capture (#3147)
c3eff76 fix: show not_ prefix in call log when negative assertions fail (#3033)
Additional commits viewable in compare view

Updates azure-cognitiveservices-speech from 1.51.0 to 1.51.1

Updates litellm from 1.91.4 to 1.95.0

Release notes

Sourced from litellm's releases.

v1.95.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.95.0
Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.95.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.95.0
Expected output:
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key
What's Changed

feat(spend): track prompt compression saved tokens in daily spend aggregates by @tin-berri in BerriAI/litellm#33810

test(e2e): assert the long budget window keeps blocking after the short window resets by @ryan-crabbe-berri in BerriAI/litellm#33832

feat(messages): route native Anthropic /messages through Rust behind LITELLM_RUST env var by @devin-ai-integration[bot] in BerriAI/litellm#33848

test(e2e): cover credential-backed /v1/messages request by @devin-ai-integration[bot] in BerriAI/litellm#33863

feat(rust): expose Anthropic Messages route (POST /v1/messages) on the axum gateway by @devin-ai-integration[bot] in BerriAI/litellm#33880

feat(rust): 1:1 port of OpenAI Responses API WebSockets to litellm-rust by @devin-ai-integration[bot] in BerriAI/litellm#33849

fix(proxy): treat malformed cost-map token limits as absent on /v1/models by @yuneng-berri in BerriAI/litellm#33903

feat(rust): port BaseAWSLLM auth (credential resolution + SigV4) to litellm-core as a base provider by @devin-ai-integration[bot] in BerriAI/litellm#33888

feat(complexity-router): add return_raw_model_name toggle for response model field by @devin-ai-integration[bot] in BerriAI/litellm#33875

feat(mcp): always-on aggregate gateway DCR discovery front door by @tin-berri in BerriAI/litellm#33174

fix(langfuse): send v4 ingestion header for otel callback by @yucheng-berri in BerriAI/litellm#33907

feat(ui): add configuration tabs to the Cost Optimization page by @devin-ai-integration[bot] in BerriAI/litellm#33899

test(e2e): guard destructive spend-log truncate behind an explicit opt-in by @yassin-berriai in BerriAI/litellm#33751

chore(rust): migrate the litellm-rust workspace (core, ai-gateway, python-bridge) from Rust edition 2021 to edition 2024 by @vineetpuranik in BerriAI/litellm#33940

fix(fireworks_ai): restore Content-Type application/json header (fixes 415) by @devin-ai-integration[bot] in BerriAI/litellm#33929

... (truncated)

Commits

72a4a55 Merge pull request #35552 from BerriAI/litellm_/backport-35523-rc-1-95-0-f65d9e
7d0963a chore: update Next.js build artifacts (2026-08-02 00:27 UTC, node v20.20.2)
69f5fe3 Merge pull request #35523 from BerriAI/litellm_ui_login_no_mcp_landing
6753639 Merge pull request #35414 from BerriAI/litellm_sync_rc_1_95_0
27c6a4c chore(release): sync rc/1.95.0 with the v1.95.0-rc.1 main SHA
9439174 Merge pull request #35299 from BerriAI/litellm_backport_35271_rc_1_95_0
8b92b36 revert(proxy)!: stop enforcing user budget on team keys (#35271)
cad32fd Merge pull request #35049 from BerriAI/litellm_hotfix_35047_mcp_e2e_poll
82fa669 test(e2e): poll MCP tools across multi-worker lag (#35047)
2cd62cf Merge pull request #35020 from BerriAI/litellm_hotfix_e2e_model_servable_timeout
Additional commits viewable in compare view

Updates ty from 0.0.62 to 0.0.65

Release notes

Sourced from ty's releases.

0.0.65

Release Notes

Released on 2026-07-29.

LSP server

Support comprehension walruses in IDE features (#26476)

Library support

Pydantic: Allow mutation of private attributes on frozen models (#27257)

Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

Correct ParamSpec forwarded-argument diagnostic locations (#27263)

Recover forwarded callable object and constructor sources (#27264)

Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

Fix gradual class assignability with generic receivers (#27223)

Lazily materialize protocol attributes (#27267)

Narrow tagged unions through all type kinds (#27226)

Prefer static constrained TypeVar solutions (#27057)

Preserve frozen-dataclass setter delegation (#27217)

Preserve inference when filtering constructor overloads (#27254)

Reject frozen-dataclass field deletion through subclasses (#27001)

Stabilize recursive type-constraint ordering (#27176)

Support materialized class type expressions (#27258)

Performance

Avoid quadratic inference for large literal unions (#27178)

Cache protocol receiver binding (#27301)

Contributors

@thejchap

@benedikt-bartscher

@carljm

@charliermarsh

Install ty 0.0.65

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.65/ty-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.65

Released on 2026-07-29.

LSP server

Support comprehension walruses in IDE features (#26476)

Library support

Pydantic: Allow mutation of private attributes on frozen models (#27257)

Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

Correct ParamSpec forwarded-argument diagnostic locations (#27263)

Recover forwarded callable object and constructor sources (#27264)

Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

Fix gradual class assignability with generic receivers (#27223)

Lazily materialize protocol attributes (#27267)

Narrow tagged unions through all type kinds (#27226)

Prefer static constrained TypeVar solutions (#27057)

Preserve frozen-dataclass setter delegation (#27217)

Preserve inference when filtering constructor overloads (#27254)

Reject frozen-dataclass field deletion through subclasses (#27001)

Stabilize recursive type-constraint ordering (#27176)

Support materialized class type expressions (#27258)

Performance

Avoid quadratic inference for large literal unions (#27178)

Cache protocol receiver binding (#27301)

Contributors

@thejchap

@benedikt-bartscher

@carljm

@charliermarsh

0.0.64

Released on 2026-07-27.

Bug fixes

Fix identity narrowing for NewTypes (#26439)

... (truncated)

Commits

87de836 Bump version to 0.0.65 (#4113)
d784bad README: Add link to Stable milestone (#4112)
b4c1978 Update actions/setup-python action to v7 (#4110)
8d216a3 Update actions/checkout action to v7.0.1 (#4107)
06f44e9 Update dependency prek to v0.4.10 (#4108)
b3665fd Update prek dependencies (#4109)
5e64a13 Bump version to 0.0.64 (#4097)
46f4915 Bump version to 0.0.63 (#4071)
See full diff in compare view

Updates diff-cover from 10.4.0 to 10.4.1

Release notes

Sourced from diff-cover's releases.

Version 10.4.1

What's Changed

Handle low confidence chardet detection for undeclared encodings by @Bachmann1234 in Bachmann1234/diff_cover#611

Dependencies

Bump setuptools from 80.9.0 to 83.0.0 by @dependabot[bot] in Bachmann1234/diff_cover#609

Full Changelog: Bachmann1234/diff_cover@v10.4.0...v10.4.1

Changelog

Sourced from diff-cover's changelog.

7/23/2026 v10.4.1

Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 (PR 611)[https://redirect.github.com/Handle low confidence chardet detection for undeclared encodings Bachmann1234/diff_cover#611] (bachmann1234)

7/21/2026 v10.4.0

Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @mofr

05/30/2026 v10.3.0

Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @duxiaocheng

Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

Fix --help hiding most CLI options in diff-cover/diff-quality PR 599 Thanks @duxiaocheng

01/08/2026 v10.2.0

Fixes issue where diff quality could not be run from subfolders PR 574 Issue 573 Thanks @eacherkan-via

12/30/2025 v10.1.0

Add support for floating-point total percentage in reports PR 565 thanks @tilaven

12/09/2025 v10.0.0

Remove python 3.9 support

Add python 3.14 support

Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

Fix file path issue on windows. Thanks @amos-chen PR 553

09/25/2025 v9.7.1

Revert the change to attempt to support ruff >=0.12.9 (@YeeaahMan caught the error)

09/23/2025 v9.7.0

Adds the work @kingbuzzman did to support windows!

Fixes a bug where deleted files were not benig handled properly (thanks @CliveCorbishleyTAL )

Adds a mypy driver for diff_quality (thanks @YeeaaahMan)

Fixes ruff >=0.12.9 support (thanks again @YeeaaahMan)

Some internal items

... (truncated)

Commits

8111a37 Version 10.4.1
291ee94 Handle low confidence chardet detection for undeclared encodings (#611)
147b410 Bump setuptools from 80.9.0 to 83.0.0 (#609)
See full diff in compare view

Updates ruff from 0.15.22 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by de...
Description has been truncated

Bumps the minor-and-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [datasets](https://github.com/huggingface/datasets) | `5.0.0` | `5.0.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.2` | `0.141.1` | | [openai](https://github.com/openai/openai-python) | `2.46.0` | `2.52.0` | | [tinytag](https://github.com/tinytag/tinytag) | `2.2.1` | `2.3.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.69.0` | `4.70.0` | | [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` | | azure-cognitiveservices-speech | `1.51.0` | `1.51.1` | | [litellm](https://github.com/BerriAI/litellm) | `1.91.4` | `1.94.1` | | [ty](https://github.com/astral-sh/ty) | `0.0.62` | `0.0.65` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.0` | `10.4.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.1` | Updates `datasets` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.0...5.0.1) Updates `fastapi` from 0.139.2 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.2...0.141.1) Updates `openai` from 2.46.0 to 2.52.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.46.0...v2.52.0) Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `tqdm` from 4.69.0 to 4.70.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.69.0...v4.70.0) Updates `playwright` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.61.0...v1.62.0) Updates `azure-cognitiveservices-speech` from 1.51.0 to 1.51.1 Updates `litellm` from 1.91.4 to 1.94.1 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.91.4...v1.94.1) Updates `ty` from 0.0.62 to 0.0.65 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.62...0.0.65) Updates `diff-cover` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v10.4.0...v10.4.1) Updates `ruff` from 0.15.22 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.1) --- updated-dependencies: - dependency-name: azure-cognitiveservices-speech dependency-version: 1.51.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: datasets dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: diff-cover dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: litellm dependency-version: 1.94.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openai dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ty dependency-version: 0.0.65 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the minor-and-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [datasets](https://github.com/huggingface/datasets) | `5.0.0` | `5.0.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.2` | `0.141.1` | | [openai](https://github.com/openai/openai-python) | `2.46.0` | `2.52.0` | | [tinytag](https://github.com/tinytag/tinytag) | `2.2.1` | `2.3.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.69.0` | `4.70.0` | | [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` | | azure-cognitiveservices-speech | `1.51.0` | `1.51.1` | | [litellm](https://github.com/BerriAI/litellm) | `1.91.4` | `1.95.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.62` | `0.0.65` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.0` | `10.4.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.1` | Updates `datasets` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.0...5.0.1) Updates `fastapi` from 0.139.2 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.2...0.141.1) Updates `openai` from 2.46.0 to 2.52.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.46.0...v2.52.0) Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `tqdm` from 4.69.0 to 4.70.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.69.0...v4.70.0) Updates `playwright` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.61.0...v1.62.0) Updates `azure-cognitiveservices-speech` from 1.51.0 to 1.51.1 Updates `litellm` from 1.91.4 to 1.95.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.91.4...v1.95.0) Updates `ty` from 0.0.62 to 0.0.65 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.62...0.0.65) Updates `diff-cover` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v10.4.0...v10.4.1) Updates `ruff` from 0.15.22 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.1) --- updated-dependencies: - dependency-name: azure-cognitiveservices-speech dependency-version: 1.51.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: datasets dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: diff-cover dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: litellm dependency-version: 1.94.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openai dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ty dependency-version: 0.0.65 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Dependabot raised the litellm cap to <1.95.0, but 1.92.0+ still ships no macOS, musllinux, glibc<2.28, or Windows ARM64 wheels, so those platforms fall back to building the Rust (PyO3) extension from sdist. Environment markers cannot express libc flavor or glibc version, so affected platforms cannot be pinned back selectively. Revert to <1.92.0 and correct the stale comment, which claimed the gap was "Linux-only wheels (no win/mac/py3.14)" when win_amd64 and cp314 are in fact covered. ty 0.0.65 anchors invalid-assignment at the value expression rather than the assignment target, so the existing suppression no longer matched. Collapse the assignment to a single line so the comment cannot drift with the diagnostic anchor. The other 10 dependency updates in this group are retained. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a14e9aad-db5a-46bc-9da4-4018369a8eab

…nd-patch-8631245714

Dependabot force-pushed a rebase that raises the litellm cap to <1.96.0. litellm 1.95.0 still publishes only manylinux_2_28 and win_amd64 wheels, so macOS, musl/Alpine, glibc<2.28 and Windows ARM64 would build the Rust extension from sdist. Keep the <1.92.0 cap; all other package versions in the two locks were already identical. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a14e9aad-db5a-46bc-9da4-4018369a8eab

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 4, 2026

dependabot Bot force-pushed the dependabot/uv/minor-and-patch-8631245714 branch 2 times, most recently from 2c145e0 to 8fbc72c Compare August 5, 2026 04:30

dependabot Bot force-pushed the dependabot/uv/minor-and-patch-8631245714 branch from 8fbc72c to 896deb8 Compare August 5, 2026 12:58

Copilot AI added 3 commits August 5, 2026 19:56

Merge remote-tracking branch 'origin/main' into dependabot/uv/minor-a…

4b6c4e8

…nd-patch-8631245714

Roman Lutz (romanlutz) approved these changes Aug 6, 2026

View reviewed changes

Navigation Menu

Uh oh!

MAINT: Bump the minor-and-patch group across 1 directory with 11 updates - #2326

MAINT: Bump the minor-and-patch group across 1 directory with 11 updates#2326
dependabot[bot] wants to merge 5 commits into
mainfrom
dependabot/uv/minor-and-patch-8631245714

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.0.1

Bug fixes

Docs

New Contributors

0.141.1

Fixes

Docs

0.141.0

Features

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

0.140.10

Fixes

Internal

0.140.9

Fixes

v2.52.0

2.52.0 (2026-07-31)

Features

Bug Fixes

Documentation

v2.51.0

2.51.0 (2026-07-30)

Features

Bug Fixes

v2.50.0

2.50.0 (2026-07-28)

Features

Bug Fixes

v2.49.0

2.49.0 (2026-07-27)

2.52.0 (2026-07-31)

Features

Bug Fixes

Documentation

2.51.0 (2026-07-30)

Features

Bug Fixes

2.50.0 (2026-07-28)

Features

Bug Fixes

2.49.0 (2026-07-27)

Features

2.3.0

tqdm v4.70.0 stable

tqdm v4.69.1 stable

v1.62.0

🖼️ WebP screenshots

New APIs

Announcements

Browser Versions

v1.95.0

Verify Docker Image Signature

What's Changed

0.0.65

Release Notes

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

Install ty 0.0.65

Install prebuilt binaries via shell script

0.0.65

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading