chore(deps): bump the python-dependencies group across 1 directory with 10 updates

[dependabot]

Bumps the python-dependencies group with 9 updates in the / directory:

Package	From	To
numpy	2.4.6	2.5.0
fsspec	2026.4.0	2026.6.0
coverage	7.14.1	7.14.3
pytest	9.0.3	9.1.1
pytest-accept	0.2.3	0.3.0
hypothesis	6.155.2	6.155.7
uv	0.11.20	0.11.24
mkdocstrings-python	2.0.4	2.0.5
ruff	0.15.16	0.15.19

Updates numpy from 2.4.6 to 2.5.0

Release notes

Sourced from numpy's releases.

v2.5.0 (June 21, 2026)

NumPy 2.5.0 Release Notes

Numpy 2.5.0 is a transitional release. It drops support for Python 3.11, marking the end of distutils, and expires a large number of deprecations made in the 2.0.x release. It also improves free threading and brings sorting into compliance with the array-api standard with the addition of descending sorts. There is also a fair amount of preparation for Python 3.15, which will be supported starting with the first rc.

This release supports Python versions 3.12-3.14.

Highlights

• Distutils has been removed,
• Many expired deprecations, see below,
• Many new deprecations, see below,
• Many static typing improvements.
• Improved support for free threading,
• Support for descending sorts,

See New Features below for other additions.

Deprecations

• numpy.char.chararray is deprecated. Use an ndarray with a string or bytes dtype instead.

  (gh-30605)

• numpy.take now correctly checks if the result can be cast to the provided out=out under the same-kind rule. A DeprecationWarning is given now when this check fails. Previously, take incorrectly checked if out could be cast to the result (the wrong direction). This deprecation also affects compress and possibly other functions. (Future versions of NumPy may tighten the casting check further.)

  (gh-30615)

• The numpy.char.[as]array functions are deprecated. Use an numpy.[as]array with a string or bytes dtype instead.

  (gh-30802)

• Setting the dtype attribute is deprecated because mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a view with a new dtype via array.view(dtype=new_dtype).

  (gh-29244)

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

• Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

• 6910b28 Merge pull request #31706 from charris/prepare-2.5.0-release
• e0acd2b REL: Prepare for the NumPy 2.5.0 release.
• 8d928b7 Merge pull request #31704 from charris/backport-31649
• c2055ba MAINT: update openblas to 0.3.33.112.0 (#31649)
• ce17c81 Merge pull request #31703 from charris/backport-31609
• 3de6203 BUG: fix StringDType distinct-allocator bugs and add tests (#31609)
• c723971 Merge pull request #31700 from charris/backport-31694
• 64513b2 MAINT: Bump pypa/cibuildwheel from 3.4.1 to 4.1.0
• 04707f0 Merge pull request #31698 from charris/try-fix-emscripten
• 5cf0686 MAINT: Try to fix emscripten wheel build.
• Additional commits viewable in compare view

Updates fsspec from 2026.4.0 to 2026.6.0

Commits

• a245700 changelog (#2049)
• 652325d Fix async cat ranges on error (#2045)
• 073aac8 Forward kwargs from cat_ranges to cat_file (#2044)
• 2818611 FTP: preserve filenames containing whitespace in _mlsd2 (#2043)
• c879384 Prevent attribute error by checking for 'forced' attribute before flushing ca...
• 71b8a6b Reflect async _walk correctly (#2040)
• 5eec9f9 Fix: Omit threading.get_ident() from cache token for async implementations ...
• 8643878 Small safety improvements (#2039)
• a1c16ab Honour simple_templates everywhere in referenceFS (#2029)
• 85facaa Fix infinite recursion in expand_path when resolving paths with glob magic ch...
• Additional commits viewable in compare view

Updates coverage from 7.14.1 to 7.14.3

Changelog

Sourced from coverage's changelog.

Version 7.14.3 — 2026-06-22

• Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

• Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can't import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: coveragepy/coveragepy#2185 .. _pull 2196: coveragepy/coveragepy#2196 .. _pull 2203: coveragepy/coveragepy#2203

.. _changes_7-14-2:

Version 7.14.2 — 2026-06-20

• Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

• Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

• Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

• Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

Commits

• 22f13ea docs: sample HTML for 7.14.3
• 2ca4e5f docs: prep for 7.14.3
• 01d714e docs: add changelog entry for #2203
• f36248d fix: don't emit 'Couldn't import C tracer' warning for 3.13t (#2203)
• 86d73d1 docs: thanks, Mengjia Shang
• 3d4ae3c docs: add the #2196 pr link to CHANGES
• f4b2b4d fix: exclude ... bodies after multi-line return-type annotations (#2185) (#...
• 1980ed0 chore: bump sigstore/gh-action-sigstore-python (#2201)
• bca3217 build: since we don't ship 3.13t, don't test it
• 77550d8 docs: oops, mismatched pull requests
• Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates pytest-accept from 0.2.3 to 0.3.0

Release notes

Sourced from pytest-accept's releases.

0.3.0

Changed

• Dropped support for Python 3.9, which reached end-of-life in October 2025 (#312). Python 3.10+ is now required.

0.2.4

Fixed

• Include the LICENSE file in sdists and wheels (#310) - @​isuruf

Changelog

Sourced from pytest-accept's changelog.

[0.3.0] - 2026-06-11

Changed

• Dropped support for Python 3.9, which reached end-of-life in October 2025 (#312). Python 3.10+ is now required.

[0.2.4] - 2026-06-11

Fixed

• Include the LICENSE file in sdists and wheels (#310) - @​isuruf

Commits

• 887fbd0 Release 0.3.0 (#313)
• c1a1b19 Drop Python 3.9 support (#312)
• 2570457 Release 0.2.4 (#311)
• 2785476 Add license file to sdist (#310)
• c82647c [pre-commit.ci] pre-commit autoupdate (#309)
• fb775ea [pre-commit.ci] pre-commit autoupdate (#308)
• 963d805 [pre-commit.ci] pre-commit autoupdate (#307)
• 04c3c52 [pre-commit.ci] pre-commit autoupdate (#306)
• e02799f [pre-commit.ci] pre-commit autoupdate (#305)
• ea6f145 [pre-commit.ci] pre-commit autoupdate (#304)
• Additional commits viewable in compare view

Updates hypothesis from 6.155.2 to 6.155.7

Commits

• 929e5fb Bump hypothesis version to 6.155.7 and update changelog
• 93ee3c9 Merge pull request #4772 from Liam-DeVoe/recursive-property-thread-safety
• 0bb0f2f drop more 3.13t
• de6bd79 drop inbetween
• ff583cc drop 313t jobs
• a5474e4 claude: re-trigger CI
• 55d2b97 claude: re-trigger CI (flaky conjecture-coverage + transient scipy/OpenBLAS b...
• 0a2bdae claude: fix recursive_property thread-safety; install Python via fresh uv met...
• 4641d65 Bump hypothesis version to 6.155.6 and update changelog
• 7d90a93 Merge pull request #4770 from Liam-DeVoe/ignore-up037
• Additional commits viewable in compare view

Updates uv from 0.11.20 to 0.11.24

Release notes

Sourced from uv's releases.

0.11.24

Release Notes

Released on 2026-06-23.

Python

• Add CPython 3.15.0b3 (#19964)

Preview features

• Make project environments relocatable under preview (#19965)

Performance

• Use a compact index for lazy version maps (#19959)

Bug fixes

• Allow disabling exclude-newer (#19934)
• Avoid archive id collisions (#19949)
• Reapply "Fix transparent Python upgrades in project environments" (#19928)
• Clean up partial tool entrypoint installs (#19966)
• Fix relocatable activate.fish and broaden Fish version support (#19856)

Install uv 0.11.24

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.24/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.11.24/uv-installer.ps1 | iex"

Download uv 0.11.24

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
uv-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
uv-i686-pc-windows-msvc.zip	x86 Windows	checksum
uv-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
uv-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
uv-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.24

Released on 2026-06-23.

Python

• Add CPython 3.15.0b3 (#19964)

Preview features

• Make project environments relocatable under preview (#19965)

Performance

• Use a compact index for lazy version maps (#19959)

Bug fixes

• Allow disabling exclude-newer (#19934)
• Avoid archive id collisions (#19949)
• Reapply "Fix transparent Python upgrades in project environments" (#19928)
• Clean up partial tool entrypoint installs (#19966)
• Fix relocatable activate.fish and broaden Fish version support (#19856)

0.11.23

Released on 2026-06-19.

Bug fixes

• Revert "Fix transparent Python upgrades in project environments" to mitigate unintended breakage in pre-commit-uv (#19925)
• Restore old behavior where workspace members "hidden" by an intermediate pyproject.toml would be treated as standalone projects (#19926)

0.11.22

Released on 2026-06-18.

Enhancements

• Publish wheels before sdists in uv publish (#19831)
• Add TY and RUFF env vars for providing paths for binaries used by uv format and uv check (#19821)

Preview features

• Allow configuring preview features in uv.toml and pyproject.toml (#18437)
• Update the lockfile during uv check --no-sync (#19909)
• Add --script to uv check and uv metadata (#19860)
• Report workspace-exclusive dependency groups in workspace metadata (#19862)
• Support SARIF as a uv audit output (#19872)

... (truncated)

Commits

• 5e04460 Bump version to 0.11.24 (#19968)
• ff3fbde Make project environments relocatable under preview (#19965)
• 4513bd8 Clean up partial tool entrypoint installs (#19966)
• 1b27b9c Sync latest Python releases (CPython 3.15.0b3) (#19964)
• 4dfdb67 Use a compact index for lazy version maps (#19959)
• 90fbc3a Use Packse in uv check tests (#19913)
• 6ab6d2f Lock scrolls used in credentialed workflows (#19950)
• cd7f87f Add locked subgraph materialization primitives (#19907)
• f76f11c Reapply "Fix transparent Python upgrades in project environments" (#19928)
• 7866b3d Downgrade to Rust 1.95 (#19953)
• Additional commits viewable in compare view

Updates s3fs from 2026.4.0 to 2026.6.0

Commits

• See full diff in compare view

Updates mkdocstrings-python from 2.0.4 to 2.0.5

Release notes

Sourced from mkdocstrings-python's releases.

2.0.5

2.0.5 - 2026-06-19

Compare with 2.0.4

Bug Fixes

• Allow relative cross-references to work in summaries (abe2888 by Timothée Mazzucotelli). Issue-331
• Always display attribute values as they're written in the source (0334131 by Timothée Mazzucotelli). Issue-311

Changelog

Sourced from mkdocstrings-python's changelog.

2.0.5 - 2026-06-19

Compare with 2.0.4

Bug Fixes

• Allow relative cross-references to work in summaries (abe2888 by Timothée Mazzucotelli). Issue-331
• Always display attribute values as they're written in the source (0334131 by Timothée Mazzucotelli). Issue-311

Commits

• 1670ecb chore: Prepare release 2.0.5
• abe2888 fix: Allow relative cross-references to work in summaries
• 0334131 fix: Always display attribute values as they're written in the source
• 39311c7 docs: Lint docs
• 835a406 chore: Never fail type-checking (maintenance mode)
• See full diff in compare view

Updates ruff from 0.15.16 to 0.15.19

Release notes

Sourced from ruff's releases.

0.15.19

Release Notes

Released on 2026-06-23.

Preview features

• Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

• Fall back to default settings when editor-only settings are invalid (#26244)
• Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

• [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

• Avoid allocating when parsing single string literals (#26200)
• Avoid reallocating singleton call arguments (#26223)
• Lazily create source files for lint diagnostics (#26226)
• Optimize formatter text width and indentation (#26236)
• Reserve capacity for builtin bindings (#26229)
• Skip repeated-key checks for singleton dictionaries (#26228)
• Use ArrayVec for qualified name segments (#26224)

Documentation

• [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• [pyupgrade] Clarify UP029 as a Python 2 compatibility rule (#26243)

Other changes

• Publish Ruff crates to crates.io (#26271)

Contributors

• @​MakenRosa
• @​MichaReiser
• @​trilamsr
• @​ntBre
• @​sanjibani
• @​charliermarsh

Install ruff 0.15.19

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.19

Released on 2026-06-23.

Preview features

• Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

• Fall back to default settings when editor-only settings are invalid (#26244)
• Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

• [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

• Avoid allocating when parsing single string literals (#26200)
• Avoid reallocating singleton call arguments (#26223)
• Lazily create source files for lint diagnostics (#26226)
• Optimize formatter text width and indentation (#26236)
• Reserve capacity for builtin bindings (#26229)
• Skip repeated-key checks for singleton dictionaries (#26228)
• Use ArrayVec for qualified name segments (#26224)

Documentation

• [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• [pyupgrade] Clarify UP029 as a Python 2 compatibility rule (#26243)

Other changes

• Publish Ruff crates to crates.io (#26271)

Contributors

• @​MakenRosa
• @​MichaReiser
• @​trilamsr
• @​ntBre
• @​sanjibani
• @​charliermarsh

0.15.18

Released on 2026-06-18.

Preview features

... (truncated)

Commits

• 7f04365 Bump version to 0.15.19 (#26291)
• a30ba16 [ty] Infer definite equality comparison results (#26290)
• bcd2028 [ty] Avoid recursion when projecting narrowing constraints (#26276)
• c0e083e [ty] Avoid bypassing lazy constraints for Divergent (#26288)
• fb13596 Record configured crates.io packages (#26281)
• 85da759 [ty] Fix ParamSpec callable signature extraction for callable instances (#26279)
• 4c98a81 [ty] Make multi-arm TypeOf cycle recovery monotonic (#26275)
• 7b84361 [ty] Preserve regular kind for callable instances (#26253)
• 93c8c59 [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• bc9bb05 [ty] Infer types for names bound in match patterns (#25940)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions