Skip to content

build(deps): bump the python-deps group across 2 directories with 8 updates - #776

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dot-claude/skills/bakery/evals/python-deps-c142745ac8
Open

build(deps): bump the python-deps group across 2 directories with 8 updates#776
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dot-claude/skills/bakery/evals/python-deps-c142745ac8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group with 2 updates in the /.claude/skills/bakery/evals directory: inspect-ai and anthropic.
Bumps the python-deps group with 6 updates in the /posit-bakery directory:

Package From To
typer 0.27.0 0.27.1
gitpython 3.1.58 3.1.59
packaging 26.2 26.3
pygithub 2.9.1 2.10.0
ruff 0.16.1 0.16.4
mypy 2.3.0 2.3.1

Updates inspect-ai from 0.3.251 to 0.3.260

Changelog

Sourced from inspect-ai's changelog.

0.3.260 (21 August 2026)

  • Metrics: Add ci() metric reporting a confidence interval for the mean (as {"lower", "upper"}). Defaults to mean ± t · stderr with a Student-t critical value (n - 1 degrees of freedom; clusters - 1 when cluster= is set) so small samples get honest widths; method="bootstrap" gives a percentile (cluster) bootstrap interval. (#4160)
  • Anthropic: Compatibility with anthropic SDK 1.0.0, which is now the minimum supported version (temperature/top_p/top_k continue to work on models that support them; browser state tool results and file-based image/document sources no longer fail type checking).
  • OpenAI: Responses API usage now records cache_write_tokens as ModelUsage.input_tokens_cache_write and excludes it from full-rate input_tokens (generate and compaction responses); compaction usage also now excludes cache reads and records reasoning tokens. (#4855)
  • Sandbox: Editable installs now avoid spurious -dev sandbox-tools binaries when local main refs are missing, stale, or unavailable.
  • Eval Log: Log directory manifests now strip Windows-style directory prefixes before normalizing paths, avoiding parent directories in bundled listings.
  • Bugfix: Eval-level limits and retry/error options no longer persist on reused Task objects, preventing later evals from inheriting prior overrides.
  • Sandboxes: The HTTP proxy example now disables container network egress, preventing agents from bypassing mitmproxy by ignoring proxy environment variables.
  • Sandboxes: The evals-in-eval example now uses rootless Docker-in-Docker and warns that its privileged sidecar is unsuitable for adversarial agents.
  • Sandbox: Recognized Docker failures to run a command (stopped container; missing or unlaunchable timeout wrapper) now surface as tool errors of type sandbox_unavailable rather than as command output; non-tool callers (e.g. scorers) get a SandboxUnavailableError or PermissionError raise. (#4709)
  • Sandbox: When a Docker sandbox container is found not running, container state, exit detail (including OOM-killed), and recent logs are now captured in a log warning; containers that die mid-command are now detected as sandbox failures.
  • Scoring: Treat numeric string metric return values as scalar values rather than sequences in eval results. (#4903)
  • Multiple Choice: A single-choice answer carrying a stray trailing comma (e.g. ANSWER: A,) is now scored instead of rejected as no answer.
  • Model-graded scorers now warn once when an explicit model bypasses a required model role.
  • Dataset: Choices fields read from CSV or JSON no longer produce an empty-string choice from trailing or doubled commas.
  • Control Channel: inspect ctl sample requeue can now sweep every currently-errored sample in one command (--errored) or requeue several SAMPLE_ID EPOCH pairs, reporting each sample's result individually.
  • Breaking: Removed the deprecated hidden flat inspect ctl spellings (e.g. ctl tasks, ctl limits); use the noun-group commands (ctl task list, ctl config, ...) instead.
  • Control Channel: inspect ctl config can now retune a running task's per-sample time/token/message limits mid-flight (--time-limit / --token-limit / --message-limit), reaching in-flight samples as well as ones not yet started.
  • Eval Set: Protocol for capturing eval set inputs rather than executing the eval set.
  • Eval Log: Flushing buffered samples to an .eval log now yields between samples, so a large flush no longer stalls in-flight samples and control-channel requests for the whole batch.
  • ACP: Emit an inspect/turn_state extension notification (started / ended / cancelled) from the agent turn boundary so ACP clients have an exact "agent working" signal.
  • Inspect CTL: Terminal escape sequences and control characters in agent-generated text are now sanitized in inspect ctl human-readable output, preventing spoofing of the operator's terminal.
  • DeepSeek: structured output (response_schema) no longer fails with a 400 — it now uses DeepSeek's JSON mode, warning that the schema must be described in the prompt.
  • Control Channel: New --now flag on inspect ctl task|model|process pause additionally holds in-flight samples at their next model call until resume, with held-sample counts reported in inspect ctl task list.
  • Control Channel: inspect ctl config no longer version-gates individual knobs — current eval processes reject unsupported knobs atomically server-side, and only processes predating strict config validation are refused as a whole.
  • Fixed sandbox tools (text_editor, bash_session) failing to install in non-root sandboxes (e.g. Kubernetes pods with runAsNonRoot).
  • Bugfix: Model outputs stopped by a provider content filter are no longer cached, so retry_refusals gets a fresh model attempt instead of a replayed cached refusal.
  • Docker Sandbox: Prerequisite checks now validate the daemon version rather than the CLI version and explain when daemon metadata is unavailable.
  • Bugfix: web_search("exa") no longer fails with a validation error, and Exa citations now include page text by default.
  • Bugfix: Tool calls whose arguments arrive with stray trailing quotes, which some models emit for a tool with an empty or all-optional schema, now parse instead of failing back to the model as a parse error. (#4822)
  • Breaking: Runtime media paths and URLs now require materialize_media() before model use; fixed selected-dataset media remains automatic, while sandbox bridges require inline data URIs.
  • Fixed sandbox agent bridge forwarding file inputs that are not inline data: URIs (e.g. host paths or URLs); such requests are now rejected.
  • Mistral: Provider-generated images remain available when replayed in subsequent conversation turns.
  • Eval Log: A retry attempt killed before it finishes reusing the prior log's completed samples no longer causes the next retry to re-run (and eventually lose) those samples.
  • Docs: Clarify that the sandbox exec() output limit is enforced by front-truncating the output streams rather than by raising OutputLimitExceededError (which remains the behaviour for read_file()). (#4778)
  • Agent Bridge: A bridged client that sends the eval model's concrete id instead of inspect (claude_code sends e.g. claude-fable-5) now resolves to the eval's own Model instance rather than a second one built by get_model(), whose memoization key includes the config. Previously such a client got a distinct instance, and since the eval's GenerateConfig is only applied to the active model, eval-level options such as fallback_models were silently dropped before the provider request. Aliases, model roles, and any other model the client names are unaffected.

0.3.259 (16 August 2026)

  • Inspect View: The Messages tab now paginates chunked evals, loading further pages as you scroll instead of the entire sample up front, so huge samples open quickly (non-chunked evals still load in full). (#498)
  • Inspect View: Image-heavy info events now show their "more…" toggle — previously the clipped content was unexpandable. (#529)
  • Inspect View: A sample's restored scroll position no longer drifts when rows finish measuring after the restore. (#523)
  • Inspect View: Human baseline Terminal Session thumbnails now open only their own lightbox instead of stacking a player in every Store Updated panel. (#520)
  • Inspect View: Re-activating the same log directory no longer trips the live-update engine's supersede fence, and a store write during render was eliminated. (#508)
  • Inspect View: Single-file sessions (e.g. VS Code) start without spurious "No database initialized" console errors. (#521)
  • Inspect View: Tool calls whose arguments are too long for the header line now show them in an expandable input zone instead of a single truncated line. (#531)
  • Scoring: New precomputed_scores() scorer applies scores computed outside of Inspect (e.g. human ratings) from a JSON or JSON Lines file, matched to samples by id and epoch.
  • Bugfix: file_dataset() now recognizes JSON and CSV URLs with query parameters while preserving the complete URL passed to the selected dataset reader.

... (truncated)

Commits
  • 3f294e6 update changelog for release
  • 6fb3265 Fix Anthropic evals failing with anthropic SDK 1.0 (temperature TypeError, ra...
  • c28498d docs: fix dataframe guide typos (#4967)
  • 0d4e053 Add ci() confidence-interval metric to scorer metrics (#4161)
  • 0774499 docs: fix vLLM model role base URL example (#4958)
  • 331e2b0 eval set capture (#4973)
  • 83b5386 Fix checkpoint e2e tests force-removing other tests' live sandbox containers ...
  • 4529aec Fix static-analysis failures (4 mypy errors) caused by anthropic 0.124.0 wide...
  • 96ea1c0 [codex] Preserve OpenAI cache write usage (#4855)
  • c81a88b fix: avoid leaking eval overrides into reused tasks (#4956)
  • Additional commits viewable in compare view

Updates anthropic from 0.120.2 to 1.0.0

Release notes

Sourced from anthropic's releases.

v1.0.0

1.0.0 (2026-08-20)

Full Changelog: v0.125.0...v1.0.0

⚠ BREAKING CHANGES

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details

Features

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details (33e2967)

Bug Fixes

  • beta: stop warning about output_format= on the parse/stream/tool_runner helpers (59bf261)

Chores

  • streaming: restore the original event imports in lib/streaming/_types.py (87e9e01)

Documentation

  • examples: use adaptive thinking in thinking examples (b5870af)

v0.125.0

0.125.0 (2026-08-19)

Full Changelog: v0.124.0...v0.125.0

Features

  • api: managed agents web search config and self hosted sandbox memory (b75afd6)

v0.124.0

0.124.0 (2026-08-19)

Full Changelog: v0.123.0...v0.124.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (9a09e84)

v0.123.0

0.123.0 (2026-08-18)

Full Changelog: v0.122.0...v0.123.0

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.0.0 (2026-08-20)

Full Changelog: v0.125.0...v1.0.0

⚠ BREAKING CHANGES

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details

Features

  • client: upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details (33e2967)

Bug Fixes

  • beta: stop warning about output_format= on the parse/stream/tool_runner helpers (59bf261)

Chores

  • streaming: restore the original event imports in lib/streaming/_types.py (87e9e01)

Documentation

  • examples: use adaptive thinking in thinking examples (b5870af)

0.125.0 (2026-08-19)

Full Changelog: v0.124.0...v0.125.0

Features

  • api: managed agents web search config and self hosted sandbox memory (b75afd6)

0.124.0 (2026-08-19)

Full Changelog: v0.123.0...v0.124.0

Features

  • api: Files and Skills APIs are now GA; add computer use and browser use toolsets (9a09e84)

0.123.0 (2026-08-18)

Full Changelog: v0.122.0...v0.123.0

Features

  • api: additions to files and memory stores (09ce187)

... (truncated)

Commits
  • 23cf458 release: 1.0.0
  • f0e51d6 codegen metadata
  • bc70186 fix(beta): stop warning about output_format= on the parse/stream/tool_runne...
  • 482220c chore(streaming): restore the original event imports in lib/streaming/_types.py
  • 9782e88 feat(client)!: upgrade to httpx2 and some minor breaking changes. See MIGRATI...
  • 5df83ba docs(examples): use adaptive thinking in thinking examples
  • d8d8ee6 release: 0.125.0
  • 04a5b5d feat(api): managed agents web search config and self hosted sandbox memory
  • 781ce5e release: 0.124.0
  • f51102c feat(api): Files and Skills APIs are now GA; add computer use and browser use...
  • Additional commits viewable in compare view

Updates typer from 0.27.0 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates gitpython from 3.1.58 to 3.1.59

Release notes

Sourced from gitpython's releases.

3.1.59 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Commits
  • 66340d7 prepare changelog prior to release
  • a5e047d Merge pull request #2211 from gitpython-developers/config-sanitize-more
  • ef7568e fix: ignore includes in submodule configuration
  • 4b4e47f fix: preserve multiline config values when writing
  • b473abb Merge pull request #2210 from gitpython-developers/fix-clone-unsafe-option
  • 5ff52cc Merge pull request #2209 from caroescm/fix-index-add-chmod
  • b68afff Block separate git directories during clone
  • 93677a0 fix: index.add() now supports filters (#2021)
  • 9729ed3 Merge pull request #2208 from gitpython-developers/security-fixes
  • ce9d8e8 prepare next release
  • Additional commits viewable in compare view

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

  • Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
  • PEP 808: accept Metadata-Version: 2.6. (#1194)
  • Add a limit argument to parse_tag() for compressed tag sets. (#1220)
  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
  • Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
  • Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
  • Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

  • Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
  • Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
  • Fix an AttributeError when hashing internally trimmed versions. (#1242)
  • Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

  • Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
  • Normalize requested extra names before comparing or hashing requirements. (#644)
  • Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
  • Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
  • Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
  • Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
  • Keep the parentheses of a nested group when serializing markers. (#1316)
  • Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
  • Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
  • Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
  • Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
  • Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

  • Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
  • Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
  • Reject malformed Description-Content-Type values. (#1329)
  • Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
  • Route multipart email payloads to unparsed instead of asserting. (#1247)
  • Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
  • Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

    

  • Add a public :class:~packaging.ranges.VersionRange API and
    
:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,
    
representing the versions a specifier set accepts as an interval set that
    
supports intersection, union, difference, complement, set relations,
    
membership tests, and filtering.
    
:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back
    
to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.
    
(:pull:1267, :pull:1270, :pull:1298)
    • 

  • PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
    • 

  • Add a limit argument to parse_tag() for compressed tag sets.
    
(:issue:1220)
    • 

  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer
    
source distributions over wheels for selected packages. (:pull:1334)
    • 

  • Add :func:~packaging.tags.pure_python_tags to generate the pure-Python
    
tags for a Python version without touching the running platform.
    
(:pull:1346)
    • 

  • Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,
    
and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the
    
versions two specifier sets accept. (:pull:1313)
    • 



Behavior adaptations:


    

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later.
    
(:pull:1157)
    • 

  • Prefer native linux_* platform tags over manylinux and musllinux
    
tags on Linux. (:issue:160)
    • 



Fixes for versions and specifiers:


    

  • Raise InvalidVersion instead of TypeError when Version is given a
    
non-string. (:pull:1319)
    • 

  • Raise InvalidVersion for non-string pre-release letters passed to
    
Version.from_parts. (:pull:1241)
    • 

  • Fix an AttributeError when hashing internally trimmed versions.
    
(:pull:1242)
    • 

  • Fix SpecifierSet.is_unsatisfiable for post-release boundary
    
intersections. (:pull:1257)
    • 



Fixes for requirements and markers:


    

  • Make Requirement.__hash__ consistent with __eq__ for
    
trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and
    
foo==1.0.0.0), so equal requirements hash equal and deduplicate in
    
sets and dicts. (:pull:1232)
    
</tr></table>

... (truncated)

Commits
  • 929fd4b Bump for release
  • f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
  • f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
  • b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
  • 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
  • 413d006 docs: changelog for 26.3 (#1343)
  • 4eb0753 docs(metadata): explain selective field validation (#1342)
  • 77e9ed4 feat(tags): add pure Python tag generator (#1346)
  • 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
  • 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
  • Additional commits viewable in compare view

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

Improvements

Bug Fixes

Maintenance

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

  • Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)
  • Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

  • Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)
  • Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)
  • Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)
  • Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)
  • Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)
  • Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

  • Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)
  • Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)
  • Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)
  • Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)
  • Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)
  • Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)
  • Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)
  • Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)
  • Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)
  • Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)
  • Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)
  • Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

  • Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)
  • Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)
  • Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)
  • Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)
  • Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)
  • Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)
  • Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)
  • Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)
  • Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits
  • 5cdf6ab Release 2.10.0 (#3560)
  • 33071b3 Fix lazy retrieval of latest tag name (#3487)
  • 4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
  • c63d09e docs: add example for uploading multiple files in a single commit (#3545)
  • 4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
  • 134f38a Allow creating custom property with values_editable_by param (#3548)
  • 5f707d6 Fix WorkflowRun schema suggestion (#3559)
  • 8280929 docs: add exception handling example (#3543)
  • c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
  • 162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.4

Release notes

Sourced from

@dependabot
build(deps): bump the python-deps group across 2 directories with 8 u…
b832711 
…pdates

Bumps the python-deps group with 2 updates in the /.claude/skills/bakery/evals directory: [inspect-ai](https://github.com/UKGovernmentBEIS/inspect_ai) and [anthropic](https://github.com/anthropics/anthropic-sdk-python).
Bumps the python-deps group with 6 updates in the /posit-bakery directory:

| Package | From | To |
| --- | --- | --- |
| [typer](https://github.com/fastapi/typer) | `0.27.0` | `0.27.1` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.58` | `3.1.59` |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [pygithub](https://github.com/pygithub/pygithub) | `2.9.1` | `2.10.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.4` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |



Updates `inspect-ai` from 0.3.251 to 0.3.260
- [Changelog](https://github.com/UKGovernmentBEIS/inspect_ai/blob/main/CHANGELOG.md)
- [Commits](UKGovernmentBEIS/inspect_ai@0.3.251...0.3.260)

Updates `anthropic` from 0.120.2 to 1.0.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.120.2...v1.0.0)

Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.0...0.27.1)

Updates `gitpython` from 3.1.58 to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.58...3.1.59)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `pygithub` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.9.1...v2.10.0)

Updates `ruff` from 0.16.1 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.4)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: inspect-ai
  dependency-version: 0.3.260
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: anthropic
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: typer
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pygithub
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Updates to dependency files python:uv Pull requests that update python:uv code labels Sep 1, 2026
@dependabot dependabot Bot added dependencies Updates to dependency files python:uv Pull requests that update python:uv code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Updates to dependency files python:uv Pull requests that update python:uv code

0 participants