security(deps-dev): bump the python-dependencies group with 5 updates by dependabot[bot] · Pull Request #403 · microsoft/physical-ai-toolchain

dependabot · 2026-04-07T17:38:08Z

Bumps the python-dependencies group with 5 updates:

Package	From	To
hypothesis	`6.151.9`	`6.151.11`
numpy	`2.4.3`	`2.4.4`
ruff	`0.15.4`	`0.15.9`
pytest	`9.0.2`	`9.0.3`
pytest-cov	`7.0.0`	`7.1.0`

Updates hypothesis from 6.151.9 to 6.151.11

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.151.11

This patch improves printing of primitive values generated from complex strategies, particularly for "from_regex()". Previously, these would often be printed as function calls desctribing how to construct them. Now they will always be printed as a literal value.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.151.10

When shrinking takes more than five minutes, Hypothesis now prints the "@seed" decorator alongside the slow-shrinking warning so you can reproduce the failure.

Thanks to Ian Hunt-Isaak for this contribution!

The canonical version of these notes (with links) is on readthedocs.

Commits

86de995 Bump hypothesis-python version to 6.151.11 and update changelog
c6e779c Merge pull request #4692 from HypothesisWorks/DRMacIver/odd-re-printing
460491f Add tests for .map() printing primitives as repr
1909e8a Fix isinstance with None and lint violation
684e150 Force primitive values to always be printed as repr
dd619a8 Bump hypothesis-python version to 6.151.10 and update changelog
47bf92e Merge pull request #4685 from HypothesisWorks/create-pull-request/patch
e87b8ba Update pinned dependencies
d2a9a59 Merge pull request #4677 from ianhi/slow-shrink-seed
1d6046a format
Additional commits viewable in compare view

Updates numpy from 2.4.3 to 2.4.4

Release notes

Sourced from numpy's releases.

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

The NumPy 2.4.4 is a patch release that fixes bugs discovered after the 2.4.3 release. It should finally close issue #30816, the OpenBLAS threading problem on ARM.

This release supports Python versions 3.11-3.14

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Charles Harris

Daniel Haag +

Denis Prokopenko +

Harshith J +

Koki Watanabe

Marten van Kerkwijk

Matti Picus

Nathan Goldbaum

Pull requests merged

A total of 7 pull requests were merged for this release.

#30978: MAINT: Prepare 2.4.x for further development

#31049: BUG: Add test to reproduce problem described in #30816 (#30818)

#31052: BUG: fix FNV-1a 64-bit selection by using NPY_SIZEOF_UINTP (#31035)

#31053: BUG: avoid warning on ufunc with where=True and no output

#31058: DOC: document caveats of ndarray.resize on 3.14 and newer

#31079: TST: fix POWER VSX feature mapping (#30801)

#31084: MAINT: numpy.i: Replace deprecated sprintf with snprintf...

Commits

be93fe2 Merge pull request #31090 from charris/prepare-2.4.4
f5245dc REL: Prepare for the NumPy 2.4.4 release
02e838b Merge pull request #31084 from charris/backport-31056
fa74b2d MAINT: numpy.i: Replace deprecated sprintf with snprintf (#31056)
533a6db Merge pull request #31079 from charris/backport-20801
9e496cb TST: fix POWER VSX feature mapping (#30801)
8052c4b Merge pull request #31058 from charris/backport-31021
7f13b5a MAINT: Skip test on PyPy.
4c5fdd6 MAINT: Remove unused import of tracemalloc.
a3ca5ed Update numpy/_core/src/multiarray/shape.c
Additional commits viewable in compare view

Updates ruff from 0.15.4 to 0.15.9

Release notes

Sourced from ruff's releases.

0.15.9

Release Notes

Released on 2026-04-02.

Preview features

[pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)

[ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

[flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)

[flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)

[pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)

[pyupgrade] Fix UP008 nested class matching (#24273)

[pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)

[ruff] RUF072: skip formfeeds on dedent (#24308)

[ruff] Avoid re-using symbol in RUF024 fix (#24316)

[ruff] Parenthesize expression in RUF050 fix (#24234)

Disallow starred expressions as values of starred expressions (#24280)

Rule changes

[flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)

[pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)

[pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)

[pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)

[ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

Add nested-string-quote-style formatting option (#24312)

Documentation

[flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)

[flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

@charliermarsh

@MichaReiser

@tranhoangtu-it

@dylwil3

@zsol

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.9

Released on 2026-04-02.

Preview features

[pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)

[ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

[flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)

[flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)

[pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)

[pyupgrade] Fix UP008 nested class matching (#24273)

[pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)

[ruff] RUF072: skip formfeeds on dedent (#24308)

[ruff] Avoid re-using symbol in RUF024 fix (#24316)

[ruff] Parenthesize expression in RUF050 fix (#24234)

Disallow starred expressions as values of starred expressions (#24280)

Rule changes

[flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)

[pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)

[pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)

[pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)

[ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

Add nested-string-quote-style formatting option (#24312)

Documentation

[flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)

[flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

@charliermarsh

@MichaReiser

@tranhoangtu-it

@dylwil3

@zsol

@renovate

... (truncated)

Commits

724ccc1 Bump 0.15.9 (#24369)
96d9e09 [ty] Move the deferred submodule inside infer/builder (#24368)
130da28 [ty] Infer the extra_items keyword argument to class-based TypedDicts as an...
a617c54 [ty] Validate type qualifiers in functional TypedDict fields and the `extra_i...
d851708 [ty] Improve robustness of various type-qualifier-related checks (#24251)
aecb587 Only run the release-gate on workflow dispatch (#24366)
b889571 [ty] Use infer_type_expression for parsing parameter annotations and return...
3286a62 Add a "release-gate" step to the release workflow (#24365)
5f88756 Disallow starred expressions as values of starred expressions (#24280)
5c59f8a [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
Additional commits viewable in compare view

Updates pytest from 9.0.2 to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

#12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

#13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

Previously this resulted in an internal assertion failure during plugin loading.

Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

#13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

#14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

#14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

#13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.

#13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.

#14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.

#14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

#12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

-- by aleguy02

Commits

a7d58d7 Prepare release version 9.0.3
089d981 Merge pull request #14366 from bluetech/revert-14193-backport
8127eaf Revert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)"
99a7e60 Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd...
ddee02a Merge pull request #14343 from bluetech/cve-2025-71176-simple
74eac69 doc: Update training info (#14298) (#14301)
f92dee7 Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62...
7ee58ac Merge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d...
37da870 Merge pull request #14259 from mitre88/patch-4 (#14268)
c34bfa3 Add explanation for string context diffs (#14257) (#14266)
Additional commits viewable in compare view

Updates pytest-cov from 7.0.0 to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

Improve handling of ResourceWarning from sqlite3.

The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

With this fix one can suppress ResourceWarning from sqlite3 from command line::

pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

Commits

66c8a52 Bump version: 7.0.0 → 7.1.0
f707662 Make the examples use pypy 3.11.
6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
8ebf20b Update changelog.
861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
78c9c4e Only run the 3.9 on older deps.
4849a92 Punctuation.
197c35e Update changelog and hopefully I don't forget to publish release again :))
14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.151.9` | `6.151.11` | | [numpy](https://github.com/numpy/numpy) | `2.4.3` | `2.4.4` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.9` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | Updates `hypothesis` from 6.151.9 to 6.151.11 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.9...hypothesis-python-6.151.11) Updates `numpy` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.4.3...v2.4.4) Updates `ruff` from 0.15.4 to 0.15.9 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.4...0.15.9) Updates `pytest` from 9.0.2 to 9.0.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.0.3) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.151.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: numpy dependency-version: 2.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.15.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-07T17:38:36Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 4 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA daec20d.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

uv.lock

Package	Version	License	Issue Type
hypothesis	6.151.11	Null	Unknown License
numpy	2.4.4	Null	Unknown License
pytest	9.0.3	Null	Unknown License
ruff	0.15.9	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
pip/hypothesis	6.151.11	Unknown	Unknown
pip/numpy	2.4.4	Unknown	Unknown
pip/pytest	9.0.3	Unknown	Unknown
pip/pytest-cov	7.1.0	Unknown	Unknown
pip/ruff	0.15.9	Unknown	Unknown

Scanned Files

uv.lock

codecov-commenter · 2026-04-07T17:39:35Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.48%. Comparing base (c88d253) to head (daec20d).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #403   +/-   ##
=======================================
  Coverage   50.48%   50.48%           
=======================================
  Files         267      267           
  Lines       18188    18188           
  Branches     1855     1855           
=======================================
  Hits         9182     9182           
  Misses       8716     8716           
  Partials      290      290

Flag	Coverage Δ	*Carryforward flag
pester	`81.21% <ø> (ø)`
pytest	`6.89% <ø> (ø)`	Carriedforward from 048063b
pytest-dataviewer	`61.97% <ø> (ø)`
vitest	`50.72% <ø> (ø)`

*This pull request uses carry forward flags. Click here to find out more.

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot bot added dependencies Dependency version updates python Pull requests that update python code labels Apr 7, 2026

github-actions bot changed the title ~~chore(deps-dev): bump the python-dependencies group with 5 updates~~ security(deps-dev): bump the python-dependencies group with 5 updates Apr 7, 2026

Merge branch 'main' into dependabot/uv/python-dependencies-beba35fb48

daec20d

WilliamBerryiii approved these changes Apr 7, 2026

View reviewed changes

WilliamBerryiii merged commit bb85560 into main Apr 7, 2026
29 checks passed

WilliamBerryiii deleted the dependabot/uv/python-dependencies-beba35fb48 branch April 7, 2026 21:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

security(deps-dev): bump the python-dependencies group with 5 updates#403

security(deps-dev): bump the python-dependencies group with 5 updates#403
WilliamBerryiii merged 2 commits intomainfrom
dependabot/uv/python-dependencies-beba35fb48

dependabot bot commented on behalf of github Apr 7, 2026

Uh oh!

github-actions bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Apr 7, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Apr 7, 2026

Hypothesis for Python - version 6.151.11

Hypothesis for Python - version 6.151.10

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

Contributors

Pull requests merged

0.15.9

Release Notes

Preview features

Bug fixes

Rule changes

Formatter

Documentation

Other changes

Contributors

0.15.9

Preview features

Bug fixes

Rule changes

Formatter

Documentation

Other changes

Contributors

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

Improved documentation

Contributor-facing changes

7.1.0 (2026-03-21)

Uh oh!

github-actions bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

License Issues

uv.lock

OpenSSF Scorecard

Scanned Files

Uh oh!

codecov-commenter commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Apr 7, 2026 •

edited

Loading

codecov-commenter commented Apr 7, 2026 •

edited

Loading