Skip to content

Bump the "all" group with 3 updates across multiple ecosystems - #129

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/all-b84871ffa6
Open

Bump the "all" group with 3 updates across multiple ecosystems#129
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/all-b84871ffa6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group in /.github/workflows with 3 updates: astral-sh/setup-uv, codecov/codecov-action and docker/build-push-action.

Updates astral-sh/setup-uv from 9.0.0 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits
  • c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 459b674 [dependabot skip] chore: update generated content
  • 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
  • 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
  • 9877975 chore: update generated content
  • 7ed0556 use the shared Buildx error summary helper
  • 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 80dbc86 [dependabot skip] chore: update generated content
  • 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
  • 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
  • Additional commits viewable in compare view

Bumps the all group with 6 updates:

Package From To
uvicorn 0.52.4 0.53.0
regex 2026.9.3 2026.9.10
httpx2 2.12.0 2.13.0
ruff 0.16.6 0.16.8
schemathesis 4.26.0 4.27.5
ty 0.0.78 0.0.82

Updates uvicorn from 0.52.4 to 0.53.0

Release notes

Sourced from uvicorn's releases.

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.

uv add uvicorn==0.53.0
  • Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.
  • HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

  • Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

  • Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.
  • Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.
  • Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Changelog

Sourced from uvicorn's changelog.

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

  • Add experimental HTTP/2 support through zttp (#2982, #3101)
  • Add support for zuvloop (#3104)

Fixed

  • Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
  • Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
  • Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)
Commits
  • 421708f Version 0.53.0 (#3136)
  • f1a1bff Unset the keep-alive timer when upgrading to WebSocket (#3107)
  • 63971ed Document HTTP/2 support (#3130)
  • 7d1a005 Remove race from multiprocess health check test (#3128)
  • 5ac6265 Add ::1 to FORWARDED_ALLOW_IPS (#3119)
  • 098b206 Remove timing race from SIGHUP supervisor test (#3127)
  • 968f15e chore(deps): bump the github-actions group with 4 updates (#3113)
  • 7d4c08c chore(deps): bump the python-packages group across 1 directory with 11 update...
  • fe528a4 Require explicit opt-in for zttp HTTP/2 (#3101)
  • fa324a4 chore(deps-dev): bump httpx2 from 2.10.0 to 2.12.0 (#3121)
  • Additional commits viewable in compare view

Updates regex from 2026.9.3 to 2026.9.10

Changelog

Sourced from regex's changelog.

Version: 2026.9.29

Updated to Unicode 18.0.0.

Switched to using stdbool.h and stdint.h.

Version: 2026.9.19

Git issue 619: `Match.expand()` segfaults after `detach_string()` when the template references a group

Version: 2026.9.10

Fixed version.

Version: 2026.9.9

PR [#615](https://github.com/mrabarnett/mrab-regex/issues/615): Fix Python API error propagation in match helpers

PR #616: Preserve Python Exceptions in Input Decoding and String Detachment


PR #617: Prevent Invalid Pointer Use and Exception State Corruption in Byte String Joining


PR #618: Propagate Allocation and Internal Errors During Pattern Compilation and Scanner Execution

Version: 2026.9.3

New version of cibuildwheel no longer supports building for free-threaded Python 3.13.

Version: 2026.9.2

New version of cibuildwheel no longer needs nor supports cpython-freethreading option.

Version: 2026.9.1

Updated cibuildwheel.
Support Python 3.15.

Version: 2026.8.31

Fixed version.

Version: 2026.8.30

Git issue 611: Heap out-of-bounds write at compile time
Git issue 612: count_one() size underflow through the stale required-string cache
Git issue 613: (*SKIP) inside an atomic group, plus an equality-only scan stop
Git issue 614: build_GROUP() does not propagate the match direction

Version: 2026.8.12

... (truncated)

Commits
  • 7dd71c1 Fixed version.
  • 59124d6 PR #615: Fix Python API error propagation in match helpers
  • 25e1521 Merge pull request #618 from dynapx/fix-compiler-error-propagation
  • 3ad78cf Merge pull request #616 from dynapx/fix-detach-string-error-propagation
  • f54253c Merge pull request #615 from dynapx/fix-python-api-error-propagation
  • c442244 Propagate scanner internal errors
  • 68837e7 Propagate node stack allocation failures
  • f1df538 Propagate check stack allocation failures
  • d8873b1 Preserve Python exceptions in input decoding
  • 910784f Propagate detach_string slicing errors
  • Additional commits viewable in compare view

Updates httpx2 from 2.12.0 to 2.13.0

Release notes

Sourced from httpx2's releases.

v2.13.0

Highlights

🔐 Reliable TLS verification controls

The CLI --no-verify flag now disables TLS certificate verification as intended, and --verify provides an explicit counterpart (pydantic/httpx2#1140, pydantic/httpx2#1186).

🧹 Safer async stream cleanup

Stopping a streamed response early no longer risks a nested async generator finalization error (pydantic/httpx2#1204).

httpx2

Changed

  • Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations in pydantic/httpx2#1179

Fixed

httpcore2

Changed

Fixed

  • Avoid nested async generator finalization errors when streamed responses are abandoned early in pydantic/httpx2#1204

Full Changelog: pydantic/httpx2@v2.12.0...v2.13.0

Changelog

Sourced from httpx2's changelog.

2.13.0 (September 14th, 2026)

Changed

  • Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations. (#1179)

Fixed

  • Make the --no-verify CLI flag disable TLS certificate verification and add an explicit --verify counterpart. (#1140, #1186)
  • Avoid nested async generator finalization errors when streamed responses are abandoned early. (#1204)
Commits

Updates ruff from 0.16.6 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates schemathesis from 4.26.0 to 4.27.5

Release notes

Sourced from schemathesis's releases.

Release 4.27.5

🐛 Fixed

  • Crash on schemas where properties is not an object.
  • Drop parameter examples built from nested ones that violate the parameter's own schema.
  • Skip parameter schema examples values that violate that schema in the examples phase.
  • Coverage phase probing methods of operations disabled via [[operations]].
  • Crash in the examples phase for allOf members with wrongly typed examples or required.
  • Server-Sent Events: False positives for event payloads containing U+2028 or other control characters.
  • Validate SSE events against both itemSchema and a sibling schema.
  • Report a schema error instead of a generic check failure for boolean allOf/anyOf branches.

Release 4.27.4

🔧 Changed

  • Examples phase fills missing values with schema default values; required parameter defaults count as examples.

🐛 Fixed

  • Truncated --report ndjson output containing only the Initialize event. #4807
  • Show an error when a report writer fails instead of truncating its output silently.
  • Use example/examples declared on array items in the examples phase.
  • Use property examples under allOf, oneOf, and anyOf at any depth in the examples phase.
  • Drop self-referencing optional properties from examples instead of losing the whole body.
  • Crash in the examples phase for boolean property subschemas inside recursive schemas.
  • ignored_auth crash on generated cookie values the stdlib parser rejects. #4804
  • Use anyOf branches for examples when a schema declares both oneOf and anyOf.
  • Emit example and x-example values in a stable order across runs.
  • Use x-example and x-examples in OpenAPI 3 parameters in the examples phase.
  • Skip discriminator pins the branch's own enum rejects, which made those branches ungeneratable.

Release 4.27.3

🚀 Added

  • Refine generation from Luracast Restler 4xx errors.

🏎️ Performance

  • st starts about 2.5x faster.

🐛 Fixed

  • Substitute only ${VAR} in config values; $${ escapes it, any other $ stays literal. #4785
  • Accept QUERY in phases.coverage.unexpected-methods. #4787
  • Keep numeric bounds learned from 4xx errors on properties without a declared type.
  • False positive missing_required_header for 404 responses on generated path parameters.
  • Schema Error aborting operations whose 4xx responses carry a malformed Content-Type.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.27.5 - 2026-09-20

🐛 Fixed

  • Crash on schemas where properties is not an object.
  • Drop parameter examples built from nested ones that violate the parameter's own schema.
  • Skip parameter schema examples values that violate that schema in the examples phase.
  • Coverage phase probing methods of operations disabled via [[operations]].
  • Crash in the examples phase for allOf members with wrongly typed examples or required.
  • Server-Sent Events: False positives for event payloads containing U+2028 or other control characters.
  • Validate SSE events against both itemSchema and a sibling schema.
  • Report a schema error instead of a generic check failure for boolean allOf/anyOf branches.

4.27.4 - 2026-09-19

🔧 Changed

  • Examples phase fills missing values with schema default values; required parameter defaults count as examples.

🐛 Fixed

  • Truncated --report ndjson output containing only the Initialize event. #4807
  • Show an error when a report writer fails instead of truncating its output silently.
  • Use example/examples declared on array items in the examples phase.
  • Use property examples under allOf, oneOf, and anyOf at any depth in the examples phase.
  • Drop self-referencing optional properties from examples instead of losing the whole body.
  • Crash in the examples phase for boolean property subschemas inside recursive schemas.
  • ignored_auth crash on generated cookie values the stdlib parser rejects. #4804
  • Use anyOf branches for examples when a schema declares both oneOf and anyOf.
  • Emit example and x-example values in a stable order across runs.
  • Use x-example and x-examples in OpenAPI 3 parameters in the examples phase.
  • Skip discriminator pins the branch's own enum rejects, which made those branches ungeneratable.

4.27.3 - 2026-09-17

🚀 Added

  • Refine generation from Luracast Restler 4xx errors.

🏎️ Performance

  • st starts about 2.5x faster.

🐛 Fixed

  • Substitute only ${VAR} in config values; $${ escapes it, any other $ stays literal. #4785
  • Accept QUERY in phases.coverage.unexpected-methods. #4787
  • Keep numeric bounds learned from 4xx errors on properties without a declared type.
  • False positive missing_required_header for 404 responses on generated path parameters.
  • Schema Error aborting operations whose 4xx responses carry a malformed Content-Type.

... (truncated)

Commits
  • f7793b1 chore: Release 4.27.5
  • 7177e62 docs: Update docs
  • e39a78a fix: Crash on schemas where properties is not an object
  • b2d0d27 fix: Validate SSE events against both itemSchema and a sibling schema
  • d5ad369 fix: Drop parameter examples built from nested ones that violate the paramete...
  • 95462d9 fix: Server-Sent Events: False positives for event payloads containing U+2028...
  • b7e6291 fix: Skip parameter schema examples values that violate that schema in the ...
  • a204cea fix: Crash in the examples phase for allOf members with wrongly typed `exam...
  • 2408ece fix: Coverage phase probing methods of operations disabled via [[operations]]
  • 06b6890 chore: Release 4.27.4
  • Additional commits viewable in compare view

Updates ty from 0.0.78 to 0.0.82

Release notes

Sourced from ty's releases.

0.0.82

Release Notes

Released on 2026-09-17.

Preview features

  • Ignore Python version from uv metadata (#28646)
  • Watch script dependencies in CLI watch mode (#28125)

CLI

  • Only skip uv workspace metadata for a single script (#28581)
  • Support dependency lints with --config-file (#28573)

LSP server

  • Filter string literal completions by typed text (#28612)
  • Find member references across files (#28669)
  • Find parameter references across files (#28670)
  • Preserve valid LSP settings when configuration resolution fails (#28653)
  • Reuse identifier matcher in LSP operations (#28663)
  • Watch script dependencies in the language server (#28522)

Diagnostic improvements

  • Add an autofix for unused awaitables (#28668)
  • Add annotations for unreachable code caused by boolean operands (#28521)
  • Add subdiagnostics to redundant-condition rules warning about reachability implications (#28263)
  • Clarify diagnostics for unimplemented abstract members (#28538)
  • Extend unreachable-code annotations to while, assert, and match statements (#28290)

Core type checking

  • Allow experimental intersection syntax in PEP 695 aliases (#28513)
  • Bound aliased intersection expansion during inference (#28546)
  • Check declared variance against final method bindings (#28155)
  • Fix recursive protocol checks for decorated methods (#28293)
  • Freshen constructor-owned Self with class type variables (#28592)
  • Improve disjointness of functools.partial types (#28660)
  • Include constraint-set assignability in more checks (#28642)
  • Infer conditional literals from peers in unspecialized contexts (#28633)
  • Infer generic elements from gradual tuples (#28637)
  • Introduce Recursive types and fully support recursive implicit type aliases (#28425)
  • Narrow type context during tuple inference (#28658)
  • Preserve field metadata after overload resolution (#28635)
  • Preserve gradual class assignability in constraint-set checks (#28638)
  • Preserve gradual tuple lengths during callable inference (#28588)
  • Preserve tuple shapes during concatenation (#28617)
  • Reject abstract class instantiation (#28167)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.82

Released on 2026-09-17.

Preview features

  • Ignore Python version from uv metadata (#28646)
  • Watch script dependencies in CLI watch mode (#28125)

CLI

  • Only skip uv workspace metadata for a single script (#28581)
  • Support dependency lints with --config-file (#28573)

LSP server

  • Filter string literal completions by typed text (#28612)
  • Find member references across files (#28669)
  • Find parameter references across files (#28670)
  • Preserve valid LSP settings when configuration resolution fails (#28653)
  • Reuse identifier matcher in LSP operations (#28663)
  • Watch script dependencies in the language server (#28522)

Diagnostic improvements

  • Add an autofix for unused awaitables (#28668)
  • Add annotations for unreachable code caused by boolean operands (#28521)
  • Add subdiagnostics to redundant-condition rules warning about reachability implications (#28263)
  • Clarify diagnostics for unimplemented abstract members (#28538)
  • Extend unreachable-code annotations to while, assert, and match statements (#28290)

Core type checking

  • Allow experimental intersection syntax in PEP 695 aliases (#28513)
  • Bound aliased intersection expansion during inference (#28546)
  • Check declared variance against final method bindings (#28155)
  • Fix recursive protocol checks for decorated methods (#28293)
  • Freshen constructor-owned Self with class type variables (#28592)
  • Improve disjointness of functools.partial types (#28660)
  • Include constraint-set assignability in more checks (#28642)
  • Infer conditional literals from peers in unspecialized contexts (#28633)
  • Infer generic elements from gradual tuples (#28637)
  • Introduce Recursive types and fully support recursive implicit type aliases (#28425)
  • Narrow type context during tuple inference (#28658)
  • Preserve field metadata after overload resolution (#28635)
  • Preserve gradual class assignability in constraint-set checks (#28638)
  • Preserve gradual tuple lengths during callable inference (#28588)
  • Preserve tuple shapes during concatenation (#28617)
  • Reject abstract class instantiation (#28167)
  • Respect frozen=False overrides on Pydantic subclasses (#28515)

... (truncated)

Commits

Bumps the all group with 2 updates: vue and cypress.

Updates vue from 3.5.41 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.42

For stable releases, please refer to CHANGELOG.md for details....

Description has been truncated

@dependabot
chore(deps): bump the all group in /.github/workflows with 3 updates
0e3e52d 
Bumps the all group in /.github/workflows with 3 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [codecov/codecov-action](https://github.com/codecov/codecov-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `astral-sh/setup-uv` from 9.0.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v9.0.0...c18668a)

Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@fb8b358...303a32d)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@53b7df9...c3c9e26)
chore(deps): bump the all group with 6 updates

Bumps the all group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.4` | `0.53.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.9.3` | `2026.9.10` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.12.0` | `2.13.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.6` | `0.16.8` |
| [schemathesis](https://github.com/schemathesis/schemathesis) | `4.26.0` | `4.27.5` |
| [ty](https://github.com/astral-sh/ty) | `0.0.78` | `0.0.82` |


Updates `uvicorn` from 0.52.4 to 0.53.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.4...0.53.0)

Updates `regex` from 2026.9.3 to 2026.9.10
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.9.3...2026.9.10)

Updates `httpx2` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.12.0...v2.13.0)

Updates `ruff` from 0.16.6 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.8)

Updates `schemathesis` from 4.26.0 to 4.27.5
- [Release notes](https://github.com/schemathesis/schemathesis/releases)
- [Changelog](https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md)
- [Commits](schemathesis/schemathesis@v4.26.0...v4.27.5)

Updates `ty` from 0.0.78 to 0.0.82
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.78...0.0.82)
chore(deps): bump the all group with 2 updates

Bumps the all group with 2 updates: [vue](https://github.com/vuejs/core) and [cypress](https://github.com/cypress-io/cypress).


Updates `vue` from 3.5.41 to 3.5.43
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.41...v3.5.43)

Updates `cypress` from 15.21.0 to 16.1.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.21.0...v16.1.0)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: uvicorn
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: regex
  dependency-version: 2026.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: httpx2
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: schemathesis
  dependency-version: 4.27.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: ty
  dependency-version: 0.0.82
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: vue
  dependency-version: 3.5.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: cypress
  dependency-version: 16.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants