chore(deps): bump the python group across 1 directory with 9 updates by dependabot[bot] · Pull Request #1544 · nipy/nibabel

dependabot · 2026-09-01T04:22:32Z

Bumps the python group with 9 updates in the / directory:

Package	From	To
packaging	`26.2`	`26.3`
pillow	`12.2.0`	`12.3.0`
pytest	`9.1.0`	`9.1.1`
pytest-run-parallel	`0.9.1`	`0.10.0`
pre-commit	`4.6.0`	`4.6.2`
pre-commit-uv	`4.2.1`	`4.3.0`
tox	`4.55.1`	`4.61.4`
tox-uv	`1.35.2`	`1.36.0`
mypy	`2.1.0`	`2.3.1`

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)

PEP 808: accept Metadata-Version: 2.6. (#1194)

Add a limit argument to parse_tag() for compressed tag sets. (#1220)

Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)

Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)

Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)

Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)

Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)

Fix an AttributeError when hashing internally trimmed versions. (#1242)

Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)

Normalize requested extra names before comparing or hashing requirements. (#644)

Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)

Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)

Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)

Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)

Keep the parentheses of a nested group when serializing markers. (#1316)

Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)

Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)

Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)

Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)

Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)

Accept the UTF-8 charset case-insensitively in email payloads. (#1330)

Reject malformed Description-Content-Type values. (#1329)

Don't rewrite user values that contain {field} placeholders in error messages. (#1327)

Route multipart email payloads to unparsed instead of asserting. (#1247)

Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)

Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() &lt;packaging.specifiers.SpecifierSet.to_range&gt;,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() &lt;packaging.specifiers.SpecifierSet.is_subset&gt;, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

929fd4b Bump for release
f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
413d006 docs: changelog for 26.3 (#1343)
4eb0753 docs(metadata): explain selective field validation (#1342)
77e9ed4 feat(tags): add pure Python tag generator (#1346)
7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
Additional commits viewable in compare view

Updates pillow from 12.2.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

... (truncated)

Commits

bb1d8e8 12.3.0 version bump
e63fc48 Add release notes for SBOM and performance improvements (#9747)
13b701b Add release notes for #9679
5564ca7 List methods
a0920fd Speed up ImageChops operations (#9738)
07e9a6c Speed up Image.filter() (#9736)
a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
af03747 Speed up Image.resample() (#9739)
5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
Additional commits viewable in compare view

Updates pytest from 9.1.0 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest-run-parallel from 0.9.1 to 0.10.0

Release notes

Sourced from pytest-run-parallel's releases.

v0.10.0

What's Changed

Use = as separator for the test run report by @agriyakhetarpal in Quansight-Labs/pytest-run-parallel#185

Respect verbosity/quietness settings when deciding to print the parallel report summary by @agriyakhetarpal in Quansight-Labs/pytest-run-parallel#186

Configure per-test report to be displayed at higher verbosity modes by @agriyakhetarpal in Quansight-Labs/pytest-run-parallel#187

Create a separate tmpdir/tmp_path subdirectory for each iteration, so these fixtures can work with --iterations by @itamarst in Quansight-Labs/pytest-run-parallel#193

New Contributors

@agriyakhetarpal made their first contribution in Quansight-Labs/pytest-run-parallel#185

@itamarst made their first contribution in Quansight-Labs/pytest-run-parallel#193

Full Changelog: Quansight-Labs/pytest-run-parallel@v0.9.1...v0.10.0

Commits

1998034 Merge pull request #194 from Quansight-Labs/release-0.10
9c59f49 Release 0.10
5f0e706 Merge pull request #193 from Quansight-Labs/respect-iterations-in-tmp-directo...
e4412bb Don't create nested directories across iterations.
3be402d Update src/pytest_run_parallel/plugin.py
9bd2474 Update README.md
570c8e6 Unnecessary
8a293d5 Reduce cost
eff0eec Create a separate subdirectory for each directory, so tmpdir/tmp_path can wor...
dfe9a3f Merge pull request #187 from Quansight-Labs/display-tests-in-report-on-verbos...
Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

Commits

9767b6c v4.6.2
42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
3056619 fix language: node for hooks with build scripts and npm 11.x
242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
1d811d9 Return an error for invalid --repo
Additional commits viewable in compare view

Updates pre-commit-uv from 4.2.1 to 4.3.0

Release notes

Sourced from pre-commit-uv's releases.

4.2.2

What's Changed

🔧 chore(tox): migrate tox.ini to tox.toml by @gaborbernat in tox-dev/pre-commit-uv#116

Migrate type checking from mypy to ty by @gaborbernat in tox-dev/pre-commit-uv#117

Move from extras to dependency-groups by @gaborbernat in tox-dev/pre-commit-uv#118

Align dependency versions across projects by @gaborbernat in tox-dev/pre-commit-uv#120

Add permissions to workflows by @gaborbernat in tox-dev/pre-commit-uv#121

Move SECURITY.md to .github/SECURITY.md by @gaborbernat in tox-dev/pre-commit-uv#122

Add missing .github config files by @gaborbernat in tox-dev/pre-commit-uv#123

Standardize .github files to .yaml suffix by @gaborbernat in tox-dev/pre-commit-uv#126

🔒 ci(workflows): add zizmor security auditing by @gaborbernat in tox-dev/pre-commit-uv#131

Drop redundant int cast in _new_main by @gaborbernat in tox-dev/pre-commit-uv#148

Tolerate uv truncated pyvenv.cfg version_info by @gaborbernat in tox-dev/pre-commit-uv#153

Full Changelog: tox-dev/pre-commit-uv@4.2.1...4.2.2

Commits

2ba3410 👷 ci(python): test against Python 3.15 (#164)
6c303b1 Bump actions/checkout from 7.0.0 to 7.0.1 (#163)
26455ad Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#162)
e634393 [pre-commit.ci] pre-commit autoupdate (#161)
2f76ceb [pre-commit.ci] pre-commit autoupdate (#160)
76c56fd Bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#159)
904cc2f Bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#158)
f25f08d [pre-commit.ci] pre-commit autoupdate (#157)
d62b37a Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#156)
b46eaf9 💰 Surface GitHub Sponsors + thanks.dev
Additional commits viewable in compare view

Updates tox from 4.55.1 to 4.61.4

Release notes

Sourced from tox's releases.

v4.61.4

What's Changed

🐛 fix(execute): keep spaces in quoted shebang interpreter paths by @r3wretrhy in tox-dev/tox#4064

New Contributors

@r3wretrhy made their first contribution in tox-dev/tox#4064

Full Changelog: tox-dev/tox@4.61.3...4.61.4

v4.61.3

What's Changed

📝 docs: name the actor across the factor and override prose by @gaborbernat in tox-dev/tox#4058

🐛 fix(config): read a set_env file as UTF-8 by @MohammedAlkindi in tox-dev/tox#4059

fix(config): register bare env_list factor labels by @dylanpulver in tox-dev/tox#4062

fix(config): preserve Windows UNC paths by @MohammedAlkindi in tox-dev/tox#4060

fix(tox_env): normalize dependency extra names by @MohammedAlkindi in tox-dev/tox#4061

Full Changelog: tox-dev/tox@4.61.2...4.61.3

v4.61.2

What's Changed

chore: add license-files, remove licence classifier (PEP 639) by @mwtoews in tox-dev/tox#4052

🐛 fix(config): stop splitting factor names that look like ranges by @MohammedAlkindi in tox-dev/tox#4053

📝 docs(config): cover the keys that had no reference entry by @gaborbernat in tox-dev/tox#4056

📝 docs(config): document how factors work by @gaborbernat in tox-dev/tox#4055

📝 docs: name the actor in the factor and schema prose by @gaborbernat in tox-dev/tox#4057

New Contributors

@mwtoews made their first contribution in tox-dev/tox#4052

Full Changelog: tox-dev/tox@4.61.1...4.61.2

v4.61.1

What's Changed

🐛 fix(schema): declare prefix in the labeled factor group's not clause by @gaborbernat in tox-dev/tox#4051

Full Changelog: tox-dev/tox@4.61.0...4.61.1

v4.61.0

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.61.4

Shebang parsing now uses shlex, so a quoted interpreter path that contains spaces is kept as one argument when TOX_LIMITED_SHEBANG rewrites the invocation - by :user:r3wretrhy. (:issue:4064)

v4.61.3 (2026-09-08)

Bug fixes - 4.61.3

A set_env environment file (file|.env) is now read as UTF-8 instead of the platform's locale encoding, so non-ASCII values no longer arrive mangled on Windows - by :user:MohammedAlkindi. (:issue:4059)

Preserve UNC and extended-length paths in Windows commands, including quoted paths - by :user:MohammedAlkindi. (:issue:4060)

Normalize project and extra names in dependency-group self-references - by :user:MohammedAlkindi. (:issue:4061)

Register factor labels and defaults for bare labeled dicts in env_list - by :user:dylanpulver. (:issue:4062)

v4.61.2 (2026-08-31)

Bug fixes - 4.61.2

tox now expands a generative digit range only where a factor starts, so an environment such as py313-django4-2 keeps its name rather than becoming py313-django4, 3 and 2 - by :user:MohammedAlkindi. (:issue:4053)

Improved documentation - 4.61.2

Document how factors work in one place, covering what a factor is, the characters tox accepts in one, the platform and architecture factors that apply to conditions without appearing in a name, and how selecting by factor differs from selecting by name - by :user:gaborbernat. (:issue:4055)

Give a reference entry to the configuration keys that had none. interrupt_post_commands runs commands_post after an interrupt, and config_file_path, host_python, home and tox_root_name are constants a configuration can substitute - by :user:gaborbernat. (:issue:4056)

Contributor-facing changes - 4.61.2

Declare license metadata per PEP 639, adding license-files and dropping the license classifier in pyproject.toml - by :user:mwtoews. (:issue:4052)

v4.61.1 (2026-08-28)

... (truncated)

Commits

2a06036 release 4.61.4
eea1cb7 🐛 fix(execute): keep spaces in quoted shebang interpreter paths (#4064)
cff659a release 4.61.3
bea9537 fix(tox_env): normalize dependency extra names (#4061)
dc318dd fix(config): preserve Windows UNC paths (#4060)
bfdabb6 fix(config): register bare env_list factor labels (#4062)
b1c34e1 [pre-commit.ci] pre-commit autoupdate (#4063)
6485a01 🐛 fix(config): read a set_env file as UTF-8 (#4059)
a61fcfb 📝 docs: name the actor across the factor and override prose (#4058)
44fc6ac release 4.61.2
Additional commits viewable in compare view

Updates tox-uv from 1.35.2 to 1.36.0

Release notes

Sourced from tox-uv's releases.

1.36.0

What's Changed

Fix flaky na-interpreter test for skip_missing_interpreters default by @gaborbernat in tox-dev/tox-uv#349

Replace prettier with mdformat and yamlfmt by @gaborbernat in tox-dev/tox-uv#356

👷 ci: add Python 3.15 to the test matrix by @gaborbernat in tox-dev/tox-uv#358

Full Changelog: tox-dev/tox-uv@1.35.2...1.36.0

Commits

6268ef9 👷 ci: add Python 3.15 to the test matrix (#358)
12edb70 [pre-commit.ci] pre-commit autoupdate (#357)
a6d24f8 Replace prettier with mdformat and yamlfmt (#356)
8bab275 build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#355)
75c7409 build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#354)
a4ef4f2 [pre-commit.ci] pre-commit autoupdate (#353)
16203a1 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#352)
af040e7 [pre-commit.ci] pre-commit autoupdate (#351)
1a09434 💰 Surface GitHub Sponsors + thanks.dev
9781bb7 [pre-commit.ci] pre-commit autoupdate (#350)
Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)

Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)

Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)

Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

Agriya Khetarpal

Ethan Sarp

Ivan Levkivskyi

Jingchen Ye

Jukka Lehtosalo

Piotr Sawicki

Shantanu

Tom Bannink

Viktor Szépe

ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:
HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

d642c44 Bump version to 2.3.1
a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
6dfa06d Fix crash when unpacking return value from overload (#21830)
a385746 Bump version to 2.3.1+dev
8aabf84 Drop +dev from version
4d8ad2a Update changelog for 2.3 release (#21728)
2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
Additional commits viewable in compare view

codecov · 2026-09-01T04:24:52Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.48%. Comparing base (a5b68f4) to head (a54daef).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1544   +/-   ##
=======================================
  Coverage   95.48%   95.48%           
=======================================
  Files         209      209           
  Lines       30045    30045           
  Branches     4492     4492           
=======================================
  Hits        28689    28689           
  Misses        925      925           
  Partials      431      431

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Bumps the python group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` | | [pillow](https://github.com/python-pillow/Pillow) | `12.2.0` | `12.3.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.0` | `9.1.1` | | [pytest-run-parallel](https://github.com/Quansight-Labs/pytest-run-parallel) | `0.9.1` | `0.10.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.2` | | [pre-commit-uv](https://github.com/tox-dev/pre-commit-uv) | `4.2.1` | `4.3.0` | | [tox](https://github.com/tox-dev/tox) | `4.55.1` | `4.61.4` | | [tox-uv](https://github.com/tox-dev/tox-uv) | `1.35.2` | `1.36.0` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.1` | Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `pillow` from 12.2.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.2.0...12.3.0) Updates `pytest` from 9.1.0 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.0...9.1.1) Updates `pytest-run-parallel` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/Quansight-Labs/pytest-run-parallel/releases) - [Changelog](https://github.com/Quansight-Labs/pytest-run-parallel/blob/main/RELEASE.md) - [Commits](Quansight-Labs/pytest-run-parallel@v0.9.1...v0.10.0) Updates `pre-commit` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.2) Updates `pre-commit-uv` from 4.2.1 to 4.3.0 - [Release notes](https://github.com/tox-dev/pre-commit-uv/releases) - [Commits](tox-dev/pre-commit-uv@4.2.1...4.3.0) Updates `tox` from 4.55.1 to 4.61.4 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.55.1...4.61.4) Updates `tox-uv` from 1.35.2 to 1.36.0 - [Release notes](https://github.com/tox-dev/tox-uv/releases) - [Commits](tox-dev/tox-uv@1.35.2...1.36.0) Updates `mypy` from 2.1.0 to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.3.1) --- updated-dependencies: - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: pre-commit-uv dependency-version: 4.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: pytest-run-parallel dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: tox dependency-version: 4.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: tox-uv dependency-version: 1.36.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

read-the-docs-community · 2026-09-29T15:36:57Z

Documentation build overview

📚 nibabel-draft | 🛠️ Build #34832061 | 📁 Comparing a54daef against latest (014fc4a)

🔍 Preview build

47 files changed · ± 47 modified

± Modified

dependabot · 2026-10-01T04:19:43Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026

dependabot Bot force-pushed the dependabot/uv/python-1f98f149eb branch from 44fb14f to a54daef Compare September 29, 2026 15:34

dependabot Bot closed this Oct 1, 2026

dependabot Bot deleted the dependabot/uv/python-1f98f149eb branch October 1, 2026 04:19

Navigation Menu

chore(deps): bump the python group across 1 directory with 9 updates - #1544

chore(deps): bump the python group across 1 directory with 9 updates#1544
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-1f98f149eb

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

read-the-docs-community Bot commented Sep 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.3

What's Changed

Features

Behavior adaptations

Fixes for versions and specifiers

Fixes for requirements and markers

Fixes for metadata and licenses

12.3.0

Removals

Documentation

Dependencies

Testing

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

v0.10.0

What's Changed

New Contributors

pre-commit v4.6.2

Fixes

pre-commit v4.6.1

Fixes

4.6.2 - 2026-08-10

Fixes

4.6.1 - 2026-07-21

Fixes

4.2.2

What's Changed

v4.61.4

What's Changed

New Contributors

v4.61.3

What's Changed

v4.61.2

What's Changed

New Contributors

v4.61.1

What's Changed

v4.61.0

Bug fixes - 4.61.4

Bug fixes - 4.61.3

Bug fixes - 4.61.2

Improved documentation - 4.61.2

Contributor-facing changes - 4.61.2

1.36.0

What's Changed

Mypy 2.3.1

Acknowledgements

Mypy 2.2

Support for Closed TypedDicts (PEP 728)

Uh oh!

codecov Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

read-the-docs-community Bot commented Sep 29, 2026

Documentation build overview

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

codecov Bot commented Sep 1, 2026 •

edited

Loading