build(deps): bump the python group across 1 directory with 5 updates by dependabot[bot] · Pull Request #428 · pytest-dev/execnet

dependabot · 2026-08-19T05:45:56Z

Bumps the python group with 5 updates in the / directory:

Package	From	To
pre-commit	`4.6.1`	`4.6.2`
tox	`4.58.0`	`4.60.0`
hatch	`1.17.1`	`1.18.0`
uv	`0.11.31`	`0.12.5`
gevent	`26.5.0`	`26.8.0`

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Commits

9767b6c v4.6.2
42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
3056619 fix language: node for hooks with build scripts and npm 11.x
See full diff in compare view

Updates tox from 4.58.0 to 4.60.0

Release notes

Sourced from tox's releases.

v4.60.0

What's Changed

📄 docs: publish llms.txt from the docs build by @gaborbernat in tox-dev/tox#4023

Provision before loading env_list by @CAOShurong in tox-dev/tox#4022

docs: repoint nine dead source links in the onboarding guide by @Yusuf-Gadelrab in tox-dev/tox#4025

Add {home} and {tox_root_name} substitutions by @WhyNotHugo in tox-dev/tox#4020

New Contributors

@CAOShurong made their first contribution in tox-dev/tox#4022

@Yusuf-Gadelrab made their first contribution in tox-dev/tox#4025

@WhyNotHugo made their first contribution in tox-dev/tox#4020

Full Changelog: tox-dev/tox@4.59.0...4.60.0

v4.59.0

What's Changed

🐛 fix(type): cast set value in _render_options by @gaborbernat in tox-dev/tox#4003

docs: fix typo 'set the the' -> 'set then the' in config reference by @LaRoyBot in tox-dev/tox#4002

👷 ci: pin coverage to the ctrace core by @gaborbernat in tox-dev/tox#4009

🔥 chore: remove the misc changelog category by @gaborbernat in tox-dev/tox#4012

✅ test: seed the virtualenv wheel image up front by @gaborbernat in tox-dev/tox#4011

✨ feat(plugin): type the plugin and internal API surfaces by @gaborbernat in tox-dev/tox#4014

✅ test: raise timeout for missing-interpreter discovery tests by @gaborbernat in tox-dev/tox#4018

📝 docs: mark the INI configuration format as deprecated by @gaborbernat in tox-dev/tox#4017

New Contributors

@LaRoyBot made their first contribution in tox-dev/tox#4002

Full Changelog: tox-dev/tox@4.58.0...4.59.0

Changelog

Sourced from tox's changelog.

Features - 4.60.0

Add {home} and {tox_root_name} substitutions; set :ref:work_dir to e.g. "{home}/.local/state/tox/{tox_root_name}" to keep environments outside of the project tree - by :user:WhyNotHugo. (:issue:4020)

Bug fixes - 4.60.0

Provision the requested tox version before reading env_list, allowing configuration syntax introduced by that version - by :user:CAOShurong (:issue:4021)

Improved documentation - 4.60.0

Fix nine source-code links in the onboarding guide that pointed at paths which no longer exist, and correct the class names of the TOML configuration sources and loaders they refer to - by :user:Yusuf-Gadelrab. (:issue:4024)

v4.59.0 (2026-08-10)

Features - 4.59.0

The plugin and internal APIs now declare their types, and the code base passes mypy --strict and pyrefly next to ty - by :user:gaborjbernat.

:meth:ConfigSet.get <tox.config.sets.ConfigSet.get> returns a configuration value after checking it against its declared type, so plugins can drop cast around conf["key"] reads.

The :func:tox_on_install <tox.plugin.spec.tox_on_install> hook and :class:Installer <tox.tox_env.installer.Installer> type their arguments as :data:InstallArguments <tox.tox_env.installer.InstallArguments>; installer subclasses may narrow it through the new second type parameter.

:class:Parsed <tox.config.cli.parser.Parsed> declares the CLI option surface, so options.<name> reads type-check.

:meth:ConfigSet.add_config <tox.config.sets.ConfigSet.add_config> accepts default=None for optional values and infers the value type from callable defaults.

The journal, the environment cache, and execute metadata hold JsonValue content; structured set_env entries match the SetEnvEntry shape. (:issue:4014)

Improved documentation - 4.59.0

Mark the INI configuration format as deprecated throughout the documentation - by :user:gaborbernat.

The tutorial, the configuration reference, and the migration how-to state that INI keeps working for existing projects but is frozen and receives no new features.

Every INI example tab, the configuration discovery diagram, and the man page carry a deprecation marker.

The tutorial no longer suggests generating a tox.ini via tox quickstart. (:issue:4017)

... (truncated)

Commits

02977de release 4.60.0
ec44803 Add {home} and {tox_root_name} substitutions (#4020)
4636193 docs: repoint nine dead source links in the onboarding guide (#4025)
c3f8d22 Provision before loading env_list (#4022)
a313922 📄 docs: publish llms.txt from the docs build (#4023)
cb7eeca release 4.59.0
da75cad 📝 docs: mark the INI configuration format as deprecated (#4017)
ef7dc3a ✅ test: raise timeout for missing-interpreter discovery tests (#4018)
c76344d [pre-commit.ci] pre-commit autoupdate (#4016)
7be33b8 ✨ feat(plugin): type the plugin and internal API surfaces (#4014)
Additional commits viewable in compare view

Updates hatch from 1.17.1 to 1.18.0

Release notes

Sourced from hatch's releases.

Hatchling v1.18.0

Changed:

Drop support for Python 3.7

Added:

Update the list of directories that are always excluded for builds

Hatch v1.18.0

Changed:

Upgrade default CPython distributions to 20260807

Added:

Add the sources environment option, which redirects dependencies to a local path, Git repository, URL, alternate index, or workspace member at install time without altering published metadata. The top-level [tool.hatch.sources] table is an alias for the default environment, environments inherit sources entry by entry, the HATCH_NO_SOURCES environment variable disables them, and hatch dep show sources reports what each source redirects

Add the --all/-a flag to the build command to build the workspace root and every workspace member defined by the selected environment, consolidating artifacts in the workspace root's dist directory by default. A root that does not define a project table is skipped so that a top-level pyproject.toml may only contain workspace configuration

Add the tool.hatch.requires-hatch field, a version specifier set that commands reading the project's metadata enforce against the running version of Hatch

Add first-class support for free-threaded distribution names such as 3.13t and 3.14t to the python commands and environment python option, rather than requiring the HATCH_PYTHON_VARIANT_GIL environment variable

The version command can now bump versions that are statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Support managing Python 3.15 distributions, currently 3.15.0rc1

Fixed:

Erase stale coverage data before running hatch test --cover.

Fix environment creation crashing when a metadata hook exists that doesn’t happen to be installed in the hatch CLI’s environment.

Fix commands run by hatch run no longer being interruptible with Ctrl-C, which happened because the ignored SIGINT of the parent process was inherited by the child process.

Fix the generated Pyrefly config being invalid on Windows, since backslashes in the absolute paths were interpreted as TOML escape sequences.

Fix the hardcoded reliance on pip when installing dependencies internally by using uv instead.

Fix environment creation silently installing a GIL-enabled Python distribution when Hatch itself runs on a free-threaded build. The distribution matching the running interpreter, such as 3.14t, is now selected.

Fix free-threaded selectors such as 3.14t being rejected by an environment's python option, even though hatch python install 3.14t already accepted them.

Never automatically select a prerelease Python distribution, such as 3.15.0rc1, when falling back to the latest compatible version. A prerelease is still installed when requested explicitly.

Commits

558061c Fix ci (#2377)
bc6d1bc release Hatch v1.18.0 (#2376)
8429e5d release Hatchling v1.32.0 (#2375)
413b3a8 Prepare for release (#2374)
4ccc9ea Bug Fix - fix CTRL-C behavior to correctly handle signals (#2369)
a885803 Add sources to enable other types of local dependencies (#2313)
ab3e000 Add --all flag to hatch build for building all workspace members (#2352)
bb90277 fix: Allow the ; private annotation in import-names/import-namespaces p...
3a9d853 fix: prevent backward relative paths in readme (#2354)
c4dc4f8 test: Fix test expectations for metadata generated by flit-core (#2365)
Additional commits viewable in compare view

Updates uv from 0.11.31 to 0.12.5

Release notes

Sourced from uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)

Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)

Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)

Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"
Download uv 0.12.5

File Platform Checksum

uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

uv-x86_64-apple-darwin.tar.gz Intel macOS checksum

uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

uv-i686-pc-windows-msvc.zip x86 Windows checksum

uv-x86_64-pc-windows-msvc.zip x64 Windows checksum

uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.5

Released on 2026-08-14.

Python

Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)

Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)

Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)

Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)

Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)

Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)

Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)

Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)

Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)

Allow uv lock to proceed when .venv is an unusable project environment (#21068)

Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)

Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits

210d1f6 Bump version to 0.12.5 (#21140)
802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
a6904bb Order equal-priority Python installations by key (#21134)
728a70d Improve automated fixes for related bug manifestations (#21102)
b82b038 Include hashes in cyclonedx exports (#21131)
8011778 Simplify editable requirement errors and hints (#21130)
dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
298dda4 Fix relative indexes in PEP 723 scripts (#21097)
Additional commits viewable in compare view

Updates gevent from 26.5.0 to 26.8.0

Commits

4f68410 Preparing release 26.8.0
10489c5 Merge pull request #2199 from florentinl/florentin.labelle/fix/hubless-thread...
d4f5f09 Document the args[0] cross-thread wakeup mechanism
9b04991 Run test_cross_thread_callback_can_run_before_scheduling_returns on all backends
ce7996d Address review comments: document cross-thread race, drop unneeded cpdef
5288a6e Add missing @ignores_leakcheck to new cross-thread test
c72eda0 Fix cross-thread notifier scheduling race
908b937 Merge pull request #2195 from ddorian/fix-popen-exit-reentrant-close
b58795f Merge pull request #2191 from ddorian/fix-1865-global-shutdown-lock
ede2e71 Always use 'versionchanged:: NEXT' to let the release machinery fill in the c...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [tox](https://github.com/tox-dev/tox) | `4.58.0` | `4.60.0` | | [hatch](https://github.com/pypa/hatch) | `1.17.1` | `1.18.0` | | [uv](https://github.com/astral-sh/uv) | `0.11.31` | `0.12.5` | | [gevent](https://github.com/gevent/gevent) | `26.5.0` | `26.8.0` | Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `tox` from 4.58.0 to 4.60.0 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.58.0...4.60.0) Updates `hatch` from 1.17.1 to 1.18.0 - [Release notes](https://github.com/pypa/hatch/releases) - [Commits](pypa/hatch@hatch-v1.17.1...hatch-v1.18.0) Updates `uv` from 0.11.31 to 0.12.5 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.11.31...0.12.5) Updates `gevent` from 26.5.0 to 26.8.0 - [Release notes](https://github.com/gevent/gevent/releases) - [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst) - [Commits](gevent/gevent@26.5.0...26.8.0) --- updated-dependencies: - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: tox dependency-version: 4.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: hatch dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: uv dependency-version: 0.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: gevent dependency-version: 26.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026

Navigation Menu

Uh oh!

build(deps): bump the python group across 1 directory with 5 updates - #428

build(deps): bump the python group across 1 directory with 5 updates#428
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-413efe936a

dependabot Bot commented on behalf of github Aug 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 19, 2026

pre-commit v4.6.2

Fixes

4.6.2 - 2026-08-10

Fixes

v4.60.0

What's Changed

New Contributors

v4.59.0

What's Changed

New Contributors

Features - 4.60.0

Bug fixes - 4.60.0

Improved documentation - 4.60.0

Features - 4.59.0

Improved documentation - 4.59.0

Hatchling v1.18.0

Hatch v1.18.0

0.12.5

Release Notes

Python

Enhancements

Preview features

Bug fixes

Install uv 0.12.5

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download uv 0.12.5

0.12.5

Python

Enhancements

Preview features

Bug fixes

0.12.4

Enhancements

Preview features

Performance

Bug fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants