Skip to content

build(deps-dev): bump the minor-and-patch group across 1 directory with 3 updates - #152

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sdk/python/minor-and-patch-60b4ee39ff
Closed

build(deps-dev): bump the minor-and-patch group across 1 directory with 3 updates#152
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sdk/python/minor-and-patch-60b4ee39ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 3 updates in the /sdk/python directory: hypothesis, pytest and mutmut.

Updates hypothesis from 6.141.1 to 6.168.4

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.9

This release substantially improves our internal distribution for generating integers. This release has the most visible effect on "integers()", but may incidentally improve other strategies which draw integers internally.

Our integers distribution had two problems. First, it had jagged discontinuities at certain values where we switched sampling approaches. Second, it used a different distribution for bounded and unbounded ranges, which resulted in "st.integers()" and "st.integers(-264, 264)" producing very different distributions despite being semantically similar.

We now use a smooth distribution for both "st.integers()" and "st.integers(a, b)", which fixes both of these issues. This should substantially improve our testing power in certain cases.

The only way this release should be user-visible is that it finds more bugs! If this release is user-visible in other ways - for example, because it is slower, or produces a worse distribution in some cases - please open an issue.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.7

This patch improves our type hints for ".filter()" to work with "typing.TypeGuard". For example:

from typing import TypeGuard

from hypothesis import strategies as st

def is_str(x: object) -> TypeGuard[str]: return isinstance(x, str)

s = st.from_type(object).filter(is_str)

previously: SearchStrategy[object]

now: SearchStrategy[str]

reveal_type(s)

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.6

This patch adds a shrinking pass that tries natural text

... (truncated)

Commits
  • d862501 Bump hypothesis version to 6.168.4 and update changelog
  • de4ec1c Merge pull request #4887 from HypothesisWorks/create-pull-request/patch
  • 8a80889 add pypy312 support
  • 9ee265d Update pinned dependencies
  • 44b82b2 Bump hypothesis version to 6.168.3 and update changelog
  • aeaafb5 Merge pull request #4888 from gpacix/fix-quadratic-statistics
  • f3f4a29 wording, remove hardcoded test
  • 7fabb94 Add RELEASE.rst and AUTHORS.rst changes
  • 0ab4e38 Summarize statistics events in linear time
  • 32ebeb2 Bump hypothesis version to 6.168.2 and update changelog
  • Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates mutmut from 3.6.0 to 3.8.0

Release notes

Sourced from mutmut's releases.

3.8.0

What's Changed

New Contributors

Full Changelog: boxed/mutmut@3.7.0...3.8.0

Changelog

Sourced from mutmut's changelog.

3.8.0


* Fix obsolete test names never being removed from ``mutants/mutmut-stats.json`` (`[#564](https://github.com/boxed/mutmut/issues/564)`)

    

  • 

    Fix # pragma: no mutate block being silently ignored when placed on an else, except, except* or finally header, and on the try line of a try/except* ([#559](https://github.com/boxed/mutmut/issues/559))
    

    • 

  • 

    Fix # pragma: no mutate being silently ignored on match and case headers ([#554](https://github.com/boxed/mutmut/issues/554))
    

    • 

  • 

    Fix mutants being reported as survived when a test uses patch.dict(os.environ, ..., clear=True) ([#511](https://github.com/boxed/mutmut/issues/511), [#552](https://github.com/boxed/mutmut/issues/552))
    

    • 

  • 

    Fix mutate_only_covered_lines mutating code that coverage.py excludes from measurement (# pragma: no cover, exclude_lines, exclude_also) ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix mutations that delete ignored code. Dropping a case from a match, or an argument from a call, is a mutation of the enclosing node, so it used to be made even when the removed lines were themselves ignored ([#547](https://github.com/boxed/mutmut/issues/547))
    

    • 

  • 

    Fix methods of decorated classes (for example @dataclass) not being mutated ([#480](https://github.com/boxed/mutmut/issues/480), [#539](https://github.com/boxed/mutmut/issues/539))
    

    • 

  • 

    Fix time measurement including test setup/teardown instead of only the main test run ([#544](https://github.com/boxed/mutmut/issues/544))
    

    • 

  • 

    Fix mutants stopped by the CPU-time limit being reported as killed instead of timed out ([#565](https://github.com/boxed/mutmut/issues/565))
    

    • 

  • 

    Fix mutate_only_covered_lines breaking when the test suite imports a dependency that cannot be initialized twice in one process, which raised for numpy and libyaml, produced misleading type errors for cryptography, and segfaulted for asyncpg. Coverage is now gathered in a separate process, so the modules the coverage run imports are no longer unloaded and re-imported in the main process ([#528](https://github.com/boxed/mutmut/issues/528), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Mutate the condition of ternary expressions ([#196](https://github.com/boxed/mutmut/issues/196), [#546](https://github.com/boxed/mutmut/issues/546))
    

    • 

  • 

    Add a process_isolation config for choosing which process mutant workers are forked from. The new forkserver strategy keeps mutmut's main process free of pytest and your conftest.py, routing every fork through a dedicated fork server process, for test setups that are not fork-safe (gevent, grpc, torch). Tune what it preloads with forkserver_warmup ([#578](https://github.com/boxed/mutmut/issues/578), [#566](https://github.com/boxed/mutmut/issues/566))
    

    • 

  • 

    Add a badge command that writes a shields.io endpoint file, for publishing the mutation score ([#549](https://github.com/boxed/mutmut/issues/549))
    

    • 

  • 

    Support python3.15 ([#551](https://github.com/boxed/mutmut/issues/551))
    

    • 



3.7.0



* Fix the trampoline dropping a generator's return value, so ``yield from`` on a mutated generator no longer yields ``None`` instead of its result

    

  • 

    Fix async generators, so that aclose()/athrow() are handled by the except/finally blocks of the mutated function instead of being swallowed by the trampoline
    

    • 

  • 

    Fix max_stack_depth when a test changes the working directory (for example via a tmpdir fixture)
    

    • 

  • 

    Fix type_check_command reporting type errors in copied files that have no mutants
    

    • 

  • 

    Per-function source hashing for incremental cache invalidation — only re-test mutants in functions that changed
    

    • 

  • 

    Cross-call dependency tracking — invalidate mutants in callers when a called function changes
    

    • 

  • 

    Use git to detect non-Python dependency file changes; falls back to a curated file list when git is unavailable
    

    • 

  • 

    Add cache_invalidation_exclude config to suppress noisy files from change detection
    

    • 



&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/boxed/mutmut/commit/14a7230049a5c8abd90c2bb0f7438e30da6471f5&quot;&gt;&lt;code&gt;14a7230&lt;/code&gt;&lt;/a> Release 3.8.0 (<a href="https://redirect.github.com/boxed/mutmut/issues/581&quot;&gt;#581&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/4ff5d9e9c23c5f75404cc3696ad6fb7c1e4888e8&quot;&gt;&lt;code&gt;4ff5d9e&lt;/code&gt;&lt;/a> Fix obsolete test names never being removed from the stats file (<a href="https://redirect.github.com/boxed/mutmut/issues/569&quot;&gt;#569&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/c3a8f4b402b01873cc788774c0ce15d2a1cebb86&quot;&gt;&lt;code&gt;c3a8f4b&lt;/code&gt;&lt;/a> feat: process isolation and fork-safe test runners (<a href="https://redirect.github.com/boxed/mutmut/issues/566&quot;&gt;#566&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/7f8ba005185ac98216cbeedfcacffeb4229366fa&quot;&gt;&lt;code&gt;7f8ba00&lt;/code&gt;&lt;/a> misc: update history (<a href="https://redirect.github.com/boxed/mutmut/issues/576&quot;&gt;#576&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/301df52797ae34a1fadac176cd2afa50186050ea&quot;&gt;&lt;code&gt;301df52&lt;/code&gt;&lt;/a> Fix pragma: no mutate on match/case headers being silently ignored</li>

<li><a href="https://github.com/boxed/mutmut/commit/630e84662635eb57d35fe935365af0152d58094a&quot;&gt;&lt;code&gt;630e846&lt;/code&gt;&lt;/a> fix: delete twice &quot;-24&quot; param and up ruff for tests it</li>

<li><a href="https://github.com/boxed/mutmut/commit/b1d127060ad4f79d2e81f8317842263435586851&quot;&gt;&lt;code&gt;b1d1270&lt;/code&gt;&lt;/a> ci: pre-commit workflow (<a href="https://redirect.github.com/boxed/mutmut/issues/567&quot;&gt;#567&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/748bfc06bddbeb09855dda592c2156cb9ef42310&quot;&gt;&lt;code&gt;748bfc0&lt;/code&gt;&lt;/a> refac: main decomposition (<a href="https://redirect.github.com/boxed/mutmut/issues/561&quot;&gt;#561&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/2f39c84dcbf3b9fdabafe395200d090d4f47de65&quot;&gt;&lt;code&gt;2f39c84&lt;/code&gt;&lt;/a> Honour 'pragma: no mutate block' on else/except/finally arms (<a href="https://redirect.github.com/boxed/mutmut/issues/559&quot;&gt;#559&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/boxed/mutmut/commit/e450cfcf52ce5bbd89941cef9c2e988cb798231b&quot;&gt;&lt;code&gt;e450cfc&lt;/code&gt;&lt;/a> chore: up mypy to 2.3.1</li>

<li>Additional commits viewable in <a href="https://github.com/boxed/mutmut/compare/3.6.0...3.8.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 8, 2026
@vercel

vercel Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Oct 8, 2026 3:05pm UTC

@dependabot
dependabot Bot requested a review from egeominotti as a code owner October 8, 2026 14:39
@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 00109288-6b7f-4a89-9c11-0c4a577fd295

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
build(deps-dev): bump the minor-and-patch group across 1 directory wi…
bccdf84 
…th 3 updates

Bumps the minor-and-patch group with 3 updates in the /sdk/python directory: [hypothesis](https://github.com/HypothesisWorks/hypothesis), [pytest](https://github.com/pytest-dev/pytest) and [mutmut](https://github.com/boxed/mutmut).


Updates `hypothesis` from 6.141.1 to 6.168.4
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.141.1...v6.168.4)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `mutmut` from 3.6.0 to 3.8.0
- [Release notes](https://github.com/boxed/mutmut/releases)
- [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst)
- [Commits](boxed/mutmut@3.6.0...3.8.0)

---
updated-dependencies:
- dependency-name: hypothesis
  dependency-version: 6.168.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mutmut
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump the minor-and-patch group in /sdk/python with 3 updates build(deps-dev): bump the minor-and-patch group across 1 directory with 3 updates Oct 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/sdk/python/minor-and-patch-60b4ee39ff branch from 7dd6f9e to bccdf84 Compare October 8, 2026 15:02
@egeominotti egeominotti closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@egeominotti
egeominotti deleted the dependabot/pip/sdk/python/minor-and-patch-60b4ee39ff branch October 8, 2026 15:35

This branch was successfully deployed

1 active deployment
Preview — bccdf845 Deployed Oct 8, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@egeominotti egeominotti Awaiting requested review from egeominotti

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@egeominotti