build(deps): bump the uv group across 1 directory with 9 updates by dependabot[bot] · Pull Request #288 · xability/py-maidr

dependabot · 2026-07-27T20:27:55Z

Bumps the uv group with 7 updates in the / directory:

Package	From	To
bleach	`6.2.0`	`6.4.0`
gitpython	`3.1.49`	`3.1.58`
idna	`3.13`	`3.15`
mistune	`3.2.1`	`3.3.0`
setuptools	`82.0.1`	`83.0.0`
soupsieve	`2.8.3`	`2.8.4`
tornado	`6.5.5`	`6.5.7`

Updates bleach from 6.2.0 to 6.4.0

Changelog

Sourced from bleach's changelog.

Version 6.4.0 (June 5th, 2026)

NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: <https://github.com/mozilla/bleach/issues/698>__

Backwards incompatible changes

Dropped support for pypy 3.10. (#764)

Security fixes

Fix bug 2023812 / GHSA-8rfp-98v4-mmr6.

Fix XSS issue with sanitize_uri_value where disallowed schemes with Unicode invisible characters wouldn't be rejected.

For example::

import bleach payload1 = 'Click' result1 = bleach.clean(payload1) print(repr(result1))

outputs::

'Click'

See the advisory for details.

Fix GHSA-gj48-438w-jh9v.

Fix issue where URI sanitization wasn't happening in formaction attributes.

See the advisory for details.

Bug fixes

Add support for pypy 3.11. (#764)

Drop version max in tinycss2 pin. (#772)

This removes one of the things we had to keep checking and updating. Users now own the responsibility for correctness with the version of tinycss2 they're using.

Version 6.3.0 (October 27th, 2025)

... (truncated)

Commits

f0355a7 fix: fix last release date in CHANGES
ae4e8a2 chore: bleach 6.4.0 and final release
970df58 fix: uri-sanitization in formaction attributes
7c4867c fix: xss bypass in allowed protocol test using unicode invisible characters
913ab75 fix: reduce redundancy in workflow jobs
218c15a fix: rework pip caching
4f0b097 fix: fix tox platform restrictions
e95a79d chore: update pytest
91539d4 Bump actions/cache from 5.0.3 to 5.0.4
cd47b4c fix: handle left-angle-bracket that's not a tag (#733)
Additional commits viewable in compare view

Updates gitpython from 3.1.49 to 3.1.58

Release notes

Sourced from gitpython's releases.

3.1.58 - Security and Fixes

What's Changed

test: allow Python startup before timeout by @Byron in gitpython-developers/GitPython#2195

Resolve Windows hook Bash through PATH by @Byron in gitpython-developers/GitPython#2199

Revert "Resolve Windows hook Bash through PATH" by @Byron in gitpython-developers/GitPython#2200

test: focus pytest summary on unexpected failures by @raisulchowdhury in gitpython-developers/GitPython#2203

Validate submodule names before filesystem operations by @Byron in gitpython-developers/GitPython#2202

Handle invalid submodule names during recursive updates by @Byron in gitpython-developers/GitPython#2205

Fix Windows path handling on Python 3.13+ by @Byron in gitpython-developers/GitPython#2196

fixup 2202 by @Byron in gitpython-developers/GitPython#2206

Correct Windows hook Bash precedence by @Byron in gitpython-developers/GitPython#2201

Harden config and Git option validation by @Byron in gitpython-developers/GitPython#2204

Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in gitpython-developers/GitPython#2197

New Contributors

@raisulchowdhury made their first contribution in gitpython-developers/GitPython#2203

@Cyrus580529 made their first contribution in gitpython-developers/GitPython#2197

Full Changelog: gitpython-developers/GitPython@3.1.57...3.1.58

3.1.57 - Security and Fixes

What's Changed

Merge gitdb and smmap into the GitPython repository by @Byron in gitpython-developers/GitPython#2179

build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in gitpython-developers/GitPython#2185

build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in gitpython-developers/GitPython#2186

Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in gitpython-developers/GitPython#2124

Render protected Traversable methods in the reference by @pick7 in gitpython-developers/GitPython#2192

Use standard prefixes for parsed patch diffs by @pick7 in gitpython-developers/GitPython#2191

Honor kill_after_timeout with output streams by @pick7 in gitpython-developers/GitPython#2189

Redact Authorization extra headers from command errors by @pick7 in gitpython-developers/GitPython#2188

Improve RemoteProgress parse return typing by @pick7 in gitpython-developers/GitPython#2187

Adopt basedpyright with a legacy baseline by @Byron in gitpython-developers/GitPython#2194

Block unsafe Git file and URL options by @Byron in gitpython-developers/GitPython#2193

New Contributors

@pick7 made their first contribution in gitpython-developers/GitPython#2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

3.1.56 - SECURITY

What's Changed

Add support for Python 3.15 by @hugovk in gitpython-developers/GitPython#2183

fix: reject unsafe output options in Commit.count by @Byron in gitpython-developers/GitPython#2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

3.1.55 - Security

What's Changed

fix: prevent environment expansion in remote URLs by @Byron in gitpython-developers/GitPython#2181

... (truncated)

Commits

30be45d prepare changelog for upcoming release
fc2f02c Merge pull request #2197 from Cyrus580529/shared-symlink-guard
b10e250 test: use the shared guard instead of local copies
e3e5da8 test: skip tests that need symlink privileges
30d05e3 test: add a shared symlink capability guard
9a8f6fe Merge pull request #2204 from gitpython-developers/security-fixes
f2550b6 Guard pathspec file inputs in high-level commands
d9ddb55 Guard unsafe git init options
9b5dcaf Guard read-tree index output paths
96a888f Check joined short-option values before Git execution
Additional commits viewable in compare view

Updates idna from 3.13 to 3.15

Changelog

Sourced from idna's changelog.

3.15 (2026-05-12)

Enforce DNS-length cap on individual labels early in check_label, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage.

Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared _unicode_dots_re from idna.core in the codec module.

Use raise ... from err for proper exception chaining and switch internal string formatting to f-strings.

Allow flit_core 4.x in the build backend.

Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14.

Add Dependabot configuration for GitHub Actions.

Convert README and HISTORY from reStructuredText to Markdown.

Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release.

3.14 (2026-05-10)

Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

Commits

af30a09 Release 3.15
30314d4 Pre-release 3.15rc0
05d4b21 Merge pull request #237 from kjd/convert-docs-to-markdown
2987fdb Convert README and HISTORY from reStructuredText to Markdown
59fa800 Merge pull request #236 from kjd/dependabot/github_actions/actions-f3e34333ea
def6983 Merge branch 'master' into dependabot/github_actions/actions-f3e34333ea
bbd8004 Merge pull request #234 from StanFromIreland/patch-1
edd07c0 Bump github/codeql-action from 3.35.2 to 4.35.2 in the actions group
5557db0 Merge branch 'master' into patch-1
f11746c Merge pull request #235 from StanFromIreland/patch-2
Additional commits viewable in compare view

Updates jupyter-server from 2.18.0 to 1.15.6

Changelog

Sourced from jupyter-server's changelog.

2.18.0

(Full Changelog)

API and Breaking Changes

Add query param to sanitize HTML in GET /nbconvert/html #1618 (@Yann-P, @Carreau)

Enhancements made

Update handlers.py to fix ioloop blockers(sync file operations) #1617 (@zolyfarkas-fb, @Carreau)

Avoid redundant call to _get_os_path in _dir_model #1547 (@joeyutong, @vidartf)

Allow specifying extra params to scrub from logs #1538 (@jtpio, @Zsailer, @vidartf)

Add a logger to the ExtensionPoint API #1523 (@Zsailer, @vidartf)

Allow user to update identity values #1518 (@brichet, @minrk)

If ServerApp.ip is ipv6 use [::1] as local_url #1495 (@manics, @afshin)

Better error message when starting kernel for session. #1478 (@Carreau, @davidbrochart, @krassowski, @minrk)

Add a traitlet to disable recording HTTP request metrics #1472 (@yuvipanda, @Zsailer)

prometheus: Expose 3 activity metrics #1471 (@yuvipanda, @Zsailer)

Add prometheus info metrics listing server extensions + versions #1470 (@yuvipanda, @Zsailer)

Add prometheus metric with version information #1467 (@yuvipanda, @Zsailer)

Don't hide .so,.dylib files by default #1457 (@nokados, @krassowski, @minrk, @vidartf)

Better hash format error message #1442 (@fcollonval, @Zsailer)

Removing excessive logging from reading local files #1420 (@lresende, @kevin-bates)

Add async start hook to ExtensionApp API #1417 (@Zsailer, @Darshan808, @bollwyvl, @fcollonval, @krassowski)

Do not include token in dashboard link, when available #1406 (@minrk, @blink1073)

Add an option to have authentication enabled for all endpoints by default #1392 (@krassowski, @Wh1isper, @blink1073, @bollwyvl, @minrk, @yuvipanda)

websockets: add configurations for ping interval and timeout #1391 (@oliver-sanders, @blink1073)

log extension import time at debug level unless it's actually slow #1375 (@minrk, @Zsailer, @yuvipanda)

Add support for async Authorizers (part 2) #1374 (@Zsailer, @blink1073)

Support async Authorizers #1373 (@Zsailer, @blink1073)

Support get file(notebook) md5 #1363 (@Wh1isper, @blink1073, @bollwyvl, @krassowski)

Update kernel env to reflect changes in session #1354 (@blink1073, @Carreau, @krassowski)

Add resolvePath API for resolving kernel-relative paths #1331 (@krassowski, @Carreau, @blink1073)

Bugs fixed

Move check origin into a util function and add it to websocket #1630 (@Carreau, @Yann-P)

Fix flaky test_restart_kernel by unsticking nudge() after port-changing restart #1628 (@Carreau, @claude, @krassowski)

Try to fix flaky test "test_restart_kernel" #1625 (@Carreau)

Fix potential unraisable pytest error #1624 (@Carreau)

fix: use %s placeholders in HTTPError to prevent Tornado from doubling % in gateway URLs #1620 (@terminalchai, @krassowski, @ptch314)

Fix three file descriptor leaks in kernel connection lifecycle (#1506) #1619 (@tonyx93, @Carreau)

Use web.HTTPError for kernel restart failures #1616 (@YDawn, @Carreau)

Handle EADDRINUSE and EACCES in _bind_http_server_tcp #1613 (@YDawn, @Zsailer, @minrk)

Use st_birthtime for file created timestamp on macOS/BSD #1594 (@ktaletsk, @krassowski, @minrk)

Fix double write when refusing hidden files in contents handler #1585 (@Krish-876, @minrk)

Close all sockets in _find_http_port explicitly #1584 (@MaryushSoroka, @minrk)

Fix writing on remote file systems with attribute cache #1574 (@krassowski, @Zsailer)

Add IdentityProvider.cookie_secret_hook #1569 (@emin63, @minrk)

... (truncated)

Commits

6036a91 Publish 1.15.6
20ee410 Automated Changelog Entry for 1.15.6 on main (#745)
7fbaa76 More CI Cleanup (#742)
6c58a0e Missing warning when no authorizer in found ZMQ handlers (#744)
7f2863f Clean up downstream tests (#741)
d8826a9 Bump to 1.16.0.dev0
a66251c Publish 1.15.5
2571c25 Automated Changelog Entry for 1.15.5 on main (#740)
67f6140 Relax type checking on ExtensionApp.serverapp (#739)
a97edaa raise no-authorization warning once and allow disabled authorization (#738)
Additional commits viewable in compare view

Updates jupyterlab from 4.5.7 to 3.3.4

Changelog

Sourced from jupyterlab's changelog.

3.3.4

(Full Changelog)

Enhancements made

Type-only and lazy imports of settings widgets #12372 (@fcollonval)

Bugs fixed

Position collapse heading button next to corresponding h tag (jupyter…) #12412 (@fcollonval)

Toolbar items may not act on the proper target #12368 (@fcollonval)

Add parent header to input reply kernel message #12376 (@davidbrochart)

fix run cells breaking on non-header markdown cells #12027 (@andrewfulton9)

Fix debugger extension error when notebooks is closed quickly #12396 (@fcollonval)

Changes Vega class name to match source code #12378 (@jweill-aws)

Remove circular setting of source #12338 (@hbcarlos)

Protect against undefined delegated label #10972 (@fcollonval)

Maintenance and upkeep improvements

Use pre-commit #12404 (@fcollonval)

Update Playwright snapshots from PR comments #12403 (@fcollonval)

Bump moment from 2.29.1 to 2.29.2 #12389 (@fcollonval)

Documentation improvements

Fix GitHub link #12410 (@fcollonval)

Contributors to this release

(GitHub contributors page for this release)

@aiqc | @blink1073 | @echarles | @fcollonval | @github-actions | @jasongrout | @jtpio | @jupyterlab-probot | @jweill-aws | @krassowski | @meeseeksdev | @meeseeksmachine | @welcome

3.3.3

(Full Changelog)

Enhancements made

Add a preferred-dir icon to the file browser crumbs #12354 (@echarles)

Adds preferKernel option to JupyterLab code #12260 (@jweill-aws)

Add aria progressbar role and data-status for testing in extensions #12238 (@krassowski)

Bugs fixed

Fix Markdown cell generates duplicate toc content (#12312) #12314 (@yangql176)

... (truncated)

Commits

1d94281 [ci skip] New version
99ef90e Automated Changelog Entry for 3.3.4 on 3.3.x (#12414)
a8a438b Backport PR #11925 on branch 3.3.x (position collapse heading button next to ...
640708a Backport PR #12407: Fix GitHub link (#12410)
298e86b Backport PR #12376 on branch 3.3.x (Add parent header to input reply kernel m...
1856413 Backport PR #12368 on branch 3.3.x (Toolbar items may not act on the proper t...
161614c Backport PR #12027: fix run cells breaking on non-header markdown cells (#12405)
da92d1c Backport PR #12279 on branch 3.3.x (Use pre-commit) (#12404)
fc78ad3 Backport PR #12040: Update Playwright snapshots from PR comments (#12403)
c1caba5 Backport PR #12393: Fix debugger extension error when notebooks is closed qui...
Additional commits viewable in compare view

Updates mistune from 3.2.1 to 3.3.0

Release notes

Sourced from mistune's releases.

v3.3.0

   🐞 Bug Fixes

Resolve O(n^2) DoS in parse_link_text (CWE-400) - by bhanugoudm041 (b6b49)

Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type handling/testing done - by bhanugoudm041 (b3af8)

block: Avoid quadratic ref link scans - by @lepture (2b04d)

cli: Add entrypoint and utf-8 output - by @lepture (2f244)

directives: Constrain include targets - by @lepture (1bef3)

formatting: Avoid quadratic marker scans - by @lepture (96d0f)

image: Validate figure width option - by @lepture (e3e51)

inline: Avoid bracket parsing DoS - by @lepture (25f25)

math: Reject currency patterns and cross-line matches in inline math - by @geopanther (566e1)

math: Support display and backtick math - by @lepture (1141e)

renderer: Render plugin list and table nodes - by @lepture (614b0)

renderer: Block encoded unsafe URL schemes - by @lepture (c7101)

toc: Avoid generated id collisions - by @lepture (c4093)

   🏎 Performance

Improve performance - by @lepture (bf95c)

    View changes on GitHub

Changelog

Sourced from mistune's changelog.

Version 3.3.0

Released on Jun 21, 2026

Improve CommonMark compatibility and parser performance.

Add command line entrypoint with UTF-8 output.

Support display and backtick math.

Render plugin list and table nodes in Markdown renderer.

Escape leading block markers in Markdown renderer.

Fix RST renderer for block quotes nested in lists.

Avoid generated heading ID collisions in TOC.

Harden URL, image, figure, and include directive handling.

Fix quadratic scans in inline links, reference links, and formatting markers.

Fix math escaping, currency pattern matching, and cross-line matching.

Commits

15c3b79 chore: release 3.3.0
bdc01ad tests: increase run time on pypy
7cf1814 tests: increase run time for pypy
6dfdc3d tests: add more tests
17c50f6 chore: fix mypy issues
63abe4b chore: use ruff check and format
e6c1b18 chore: resolve mypy issues
dcf8902 test(math): cover escaped math output
c4093c4 fix(toc): avoid generated id collisions
e3e51de fix(image): validate figure width option
Additional commits viewable in compare view

Updates setuptools from 82.0.1 to 83.0.0

Changelog

Sourced from setuptools's changelog.

v83.0.0

Features

Require Python 3.10 or later.

Bugfixes

MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. A pattern authored in one form (e.g. NFC, as typically saved by editors) now matches a file whose name is stored on disk in another (e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude, global-exclude, recursive-exclude, or prune rule could silently fail to drop a non-ASCII-named file from the source distribution, publishing it despite the exclusion -- see GHSA-h35f-9h28-mq5c.

Deprecations and Removals

pypa/distutils#334

Commits

6519f72 Bump version: 82.0.1 → 83.0.0
d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
a2df31e Capture removal of dry_run parameter in changelog.
00144dc Moved newsfragment to the release where it occurred.
a4a5a2b Add news fragment.
77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
a2bc3ac Fix broken intersphinx reference to build's installation docs
2d6a739 Use stacked parametrize decorators instead of itertools.product
Additional commits viewable in compare view

Updates soupsieve from 2.8.3 to 2.8.4

Release notes

Sourced from soupsieve's releases.

2.8.4

FIX: Fix another inefficient attribute pattern (@mauriceng98).

FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@mauriceng98).

Commits

28108ab Limit excessive selectors
ef18872 Fix test for Windows
eb43976 Merge commit from fork
3a661b2 Fix typo in pseudo-classes.md (#294)
0cb533d Update hatchling version requirement in pyproject.toml (#290)
See full diff in compare view

Updates tornado from 6.5.5 to 6.5.7

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.5.8 releases/v6.5.7 releases/v6.5.6 releases/v6.5.5 releases/v6.5.4 releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2

... (truncated)

Commits

48fc2d4 Merge pull request #3633 from bdarnell/curl-reset-65
4ae1ddd Release notes and version bump for 6.5.7
3154caa curl_httpclient: Reset the curl object before putting it on the freelist
7d869c0 Merge pull request #3631 from bdarnell/cve-links
288241f docs: Use the correct link syntax
8da981c docs: Add CVE links to 6.5.6 release notes
aba2569 Merge pull request #3626 from bdarnell/fixes-656
a24b260 httpclient_test: Accept an additional error message variant
a74240a Release notes and version bump for 6.5.6.
e8fc7ed simple_httpclient: Strip auth headers on cross-origin redirects
Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the uv group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bleach](https://github.com/mozilla/bleach) | `6.2.0` | `6.4.0` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.49` | `3.1.58` | | [idna](https://github.com/kjd/idna) | `3.13` | `3.15` | | [mistune](https://github.com/lepture/mistune) | `3.2.1` | `3.3.0` | | [setuptools](https://github.com/pypa/setuptools) | `82.0.1` | `83.0.0` | | [soupsieve](https://github.com/facelessuser/soupsieve) | `2.8.3` | `2.8.4` | | [tornado](https://github.com/tornadoweb/tornado) | `6.5.5` | `6.5.7` | Updates `bleach` from 6.2.0 to 6.4.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v6.2.0...v6.4.0) Updates `gitpython` from 3.1.49 to 3.1.58 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.49...3.1.58) Updates `idna` from 3.13 to 3.15 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](kjd/idna@v3.13...v3.15) Updates `jupyter-server` from 2.18.0 to 1.15.6 - [Release notes](https://github.com/jupyter-server/jupyter_server/releases) - [Changelog](https://github.com/jupyter-server/jupyter_server/blob/main/CHANGELOG.md) - [Commits](jupyter-server/jupyter_server@v2.18.0...v1.15.6) Updates `jupyterlab` from 4.5.7 to 3.3.4 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/@jupyterlab/vdom@3.3.4/CHANGELOG.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.5.7...@jupyterlab/vdom@3.3.4) Updates `mistune` from 3.2.1 to 3.3.0 - [Release notes](https://github.com/lepture/mistune/releases) - [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst) - [Commits](lepture/mistune@v3.2.1...v3.3.0) Updates `setuptools` from 82.0.1 to 83.0.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v82.0.1...v83.0.0) Updates `soupsieve` from 2.8.3 to 2.8.4 - [Release notes](https://github.com/facelessuser/soupsieve/releases) - [Commits](facelessuser/soupsieve@2.8.3...2.8.4) Updates `tornado` from 6.5.5 to 6.5.7 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.5...v6.5.7) --- updated-dependencies: - dependency-name: bleach dependency-version: 6.4.0 dependency-type: indirect - dependency-name: gitpython dependency-version: 3.1.54 dependency-type: indirect - dependency-name: idna dependency-version: '3.15' dependency-type: indirect - dependency-name: jupyter-server dependency-version: 1.15.6 dependency-type: indirect - dependency-name: jupyterlab dependency-version: 3.3.4 dependency-type: indirect - dependency-name: mistune dependency-version: 3.3.0 dependency-type: indirect - dependency-name: setuptools dependency-version: 83.0.0 dependency-type: indirect - dependency-name: soupsieve dependency-version: 2.8.4 dependency-type: indirect - dependency-name: tornado dependency-version: 6.5.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 27, 2026

jooyoungseo mentioned this pull request Jul 27, 2026

feat: require Python >= 3.10 and re-resolve the lockfile #289

Open

6 tasks

dependabot Bot force-pushed the dependabot/uv/uv-a74796fa6c branch 4 times, most recently from 48c406e to 9500790 Compare August 17, 2026 18:16

dependabot Bot force-pushed the dependabot/uv/uv-a74796fa6c branch from 9500790 to b47c0fb Compare August 23, 2026 19:28

dependabot Bot changed the title ~~chore(deps): bump the uv group across 1 directory with 9 updates~~ build(deps): bump the uv group across 1 directory with 9 updates Aug 24, 2026

dependabot Bot force-pushed the dependabot/uv/uv-a74796fa6c branch from b47c0fb to e078ad2 Compare August 24, 2026 16:30

Navigation Menu

Uh oh!

build(deps): bump the uv group across 1 directory with 9 updates - #288

build(deps): bump the uv group across 1 directory with 9 updates#288
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-a74796fa6c

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 6.4.0 (June 5th, 2026)

Version 6.3.0 (October 27th, 2025)

3.1.58 - Security and Fixes

What's Changed

New Contributors

3.1.57 - Security and Fixes

What's Changed

New Contributors

3.1.56 - SECURITY

What's Changed

3.1.55 - Security

What's Changed

3.15 (2026-05-12)

3.14 (2026-05-10)

2.18.0

API and Breaking Changes

Enhancements made

Bugs fixed

3.3.4

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

3.3.3

Enhancements made

Bugs fixed

v3.3.0

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

Version 3.3.0

v83.0.0

Features

Bugfixes

Deprecations and Removals

2.8.4

Release notes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading