Bump the development-dependencies group with 3 updates

[dependabot]

Bumps the development-dependencies group with 3 updates: hypothesis, jupyterlab and ruff.

Updates hypothesis from 6.127.9 to 6.129.2

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.129.2

Improve how the shrinker checks for unnecessary work, leading to 10% less time spent shrinking on average, with no reduction in quality.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.129.1

"randoms()" no longer produces "1.0", matching the exclusive upper bound of "random.Random.random" (issue #4297).

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.129.0

This release adds a ""hypothesis-urandom"" backend, which draws randomness from "/dev/urandom" instead of Python's PRNG. This is useful for users of Antithesis who also have Hypothesis tests, allowing Antithesis mutation of "/dev/urandom" to drive Hypothesis generation. We expect it to be strictly slower than the default backend for everyone else.

It can be enabled with "@​settings(backend="hypothesis-urandom")".

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.128.3

For strategies which draw make recursive draws, including "recursive()" and "deferred()", we now generate examples with duplicated subtrees more often. This tends to uncover interesting behavior in tests.

For instance, we might now generate a tree like this more often (though the details depend on the strategy):

              ┌─────┐
       ┌──────┤  a  ├──────┐
       │      └─────┘      │
    ┌──┴──┐             ┌──┴──┐
    │  b  │             │  a  │
    └──┬──┘             └──┬──┘
  ┌────┴────┐         ┌────┴────┐

┌──┴──┐ ┌──┴──┐ ┌──┴──┐ ┌──┴──┐ │ c │ │ d │ │ b │ │ ... │ └─────┘ └─────┘ └──┬──┘ └─────┘ ┌────┴────┐ ┌──┴──┐ ┌──┴──┐ │ c │ │ d │ └─────┘ └─────┘

The canonical version of these notes (with links) is on readthedocs.

... (truncated)

Commits

• d01737e Bump hypothesis-python version to 6.129.2 and update changelog
• d107e19 Merge pull request #4299 from tybug/shrink-more-sortkey
• c9c9464 improve one_of shrinking coverage case
• 282edb1 add covering case for newly missing coverage
• 9307192 use shrink key to avoid work in more places
• f62ec1e Bump hypothesis-python version to 6.129.1 and update changelog
• 21c9489 Merge pull request #4298 from Zac-HD/random-bounds
• 75ae68a fix bounds of ArtificialRandom
• cefe077 tweak some old changelog entries
• a6b58c1 Bump hypothesis-python version to 6.129.0 and update changelog
• Additional commits viewable in compare view

Updates jupyterlab from 4.3.5 to 4.3.6

Release notes

Sourced from jupyterlab's releases.

v4.3.6

4.3.6

(Full Changelog)

Enhancements made

• Remove spurious regex to slightly improve performance of streaming large outputs #17262 (@​krassowski)

Bugs fixed

• Fix cell output stream if previous chunk did not end in new line #17369 (@​davidbrochart)
• Updated enabling logic for run-all-below button on Notebook Panel #17298 (@​rsaditya01)
• Fix for issue preventing cell metadata removal #17194 (@​itsmevichu)
• Ensure search highlight is applied to Python builtin keywords #17160 (@​hxrshxz)
• Add missing aria labels in application shell #17192 (@​Rishab87)
• Fixing dialog closing unexpectedly when typing in the textarea #17142 (@​Rishab87)

Maintenance and upkeep improvements

• [4.3.x] Update reference snapshots #17383 (@​jtpio)
• Bump semver and tough-cookie to non-vulnerable versions #17319 (@​dlqqq)
• Bump vega from 5.24.0 to 5.26.0 #17295 (@​dependabot[bot])
• Fix missing checks for author comment association for docs #17289 (@​krassowski)

Documentation improvements

• Clarify documentation on bot privileges for updating snapshots #17336 (@​Princekumarofficial)

Contributors to this release

(GitHub contributors page for this release)

@​afshin | @​andrii-i | @​bollwyvl | @​Carreau | @​Darshan808 | @​dlqqq | @​echarles | @​fcollonval | @​fleming79 | @​github-actions | @​hxrshxz | @​ianthomas23 | @​JasonWeill | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​martinRenou | @​meeseeksmachine | @​rpwagner | @​RRosio | @​trungleduc | @​Zsailer

Changelog

Sourced from jupyterlab's changelog.

4.3.6

(Full Changelog)

Enhancements made

• Remove spurious regex to slightly improve performance of streaming large outputs #17262 (@​krassowski)

Bugs fixed

• Fix cell output stream if previous chunk did not end in new line #17369 (@​davidbrochart)
• Updated enabling logic for run-all-below button on Notebook Panel #17298 (@​rsaditya01)
• Fix for issue preventing cell metadata removal #17194 (@​itsmevichu)
• Ensure search highlight is applied to Python builtin keywords #17160 (@​hxrshxz)
• Add missing aria labels in application shell #17192 (@​Rishab87)
• Fixing dialog closing unexpectedly when typing in the textarea #17142 (@​Rishab87)

Maintenance and upkeep improvements

• [4.3.x] Update reference snapshots #17383 (@​jtpio)
• Bump semver and tough-cookie to non-vulnerable versions #17319 (@​dlqqq)
• Bump vega from 5.24.0 to 5.26.0 #17295 (@​dependabot[bot])
• Fix missing checks for author comment association for docs #17289 (@​krassowski)

Documentation improvements

• Clarify documentation on bot privileges for updating snapshots #17336 (@​Princekumarofficial)

Contributors to this release

(GitHub contributors page for this release)

@​afshin | @​andrii-i | @​bollwyvl | @​Carreau | @​Darshan808 | @​dlqqq | @​echarles | @​fcollonval | @​fleming79 | @​github-actions | @​hxrshxz | @​ianthomas23 | @​JasonWeill | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​martinRenou | @​meeseeksmachine | @​rpwagner | @​RRosio | @​trungleduc | @​Zsailer

Commits

• f943f7b [ci skip] Publish 4.3.6
• ef6df9b Backport PR #17369: Fix cell output stream if previous chunk did not end in n...
• b68b936 Backport PR #17298: Updated enabling logic for run-all-below button on Notebo...
• 40d1143 Update reference snapshots (#17383)
• 5e55107 Backport PR #17336: Clarify documentation on bot privileges for updating snap...
• 9721aed Backport PR #17319 on branch 4.3.x (Bump semver and tough-cookie to non-vulne...
• 9066b75 Backport PR #17194: Fix for issue preventing cell metadata removal (#17330)
• cc7c3df Backport PR #17295 on branch 4.3.x (Bump vega from 5.24.0 to 5.26.0) (#17314)
• 61fff14 Backport PR #17160: Ensure search highlight is applied to Python builtin keyw...
• 1476f30 Backport PR #17289: Fix missing checks for author comment association for doc...
• Additional commits viewable in compare view

Updates ruff from 0.9.10 to 0.11.0

Release notes

Sourced from ruff's releases.

0.11.0

Release Notes

This is a follow-up to release 0.10.0. The requires-python inference changes were unintentionally omitted from 0.10.0, and have been included here. This release also includes stabilization of the preview behavior for PGH004.

Breaking changes

• Changes to how the Python version is inferred when a target-version is not specified (#16319)

  In previous versions of Ruff, you could specify your Python version with:

  • The target-version option in a ruff.toml file or the [tool.ruff] section of a pyproject.toml file.
  • The project.requires-python field in a pyproject.toml file with a [tool.ruff] section.

  These options worked well in most cases, and are still recommended for fine control of the Python version. However, because of the way Ruff discovers config files, pyproject.toml files without a [tool.ruff] section would be ignored, including the requires-python setting. Ruff would then use the default Python version (3.9 as of this writing) instead, which is surprising when you've attempted to request another version.

  In v0.10, config discovery has been updated to address this issue:

  • If Ruff finds a ruff.toml file without a target-version, it will check for a pyproject.toml file in the same directory and respect its requires-python version, even if it does not contain a [tool.ruff] section.
  • If Ruff finds a user-level configuration, the requires-python field of the closest pyproject.toml in a parent directory will take precedence.
  • If there is no config file (ruff.tomlor pyproject.toml with a [tool.ruff] section) in the directory of the file being checked, Ruff will search for the closest pyproject.toml in the parent directories and use its requires-python setting.

Stabilization

The following behaviors have been stabilized:

• blanket-noqa (PGH004): Also detect blanked file-level noqa comments (and not just line level comments).

Preview features

• [syntax-errors] Tuple unpacking in for statement iterator clause before Python 3.9 (#16558)

Install ruff 0.11.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.11.0/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.11.0/ruff-installer.ps1 | iex"
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.0

This is a follow-up to release 0.10.0. Because of a mistake in the release process, the requires-python inference changes were not included in that release. Ruff 0.11.0 now includes this change as well as the stabilization of the preview behavior for PGH004.

Breaking changes

• Changes to how the Python version is inferred when a target-version is not specified (#16319)

  In previous versions of Ruff, you could specify your Python version with:

  • The target-version option in a ruff.toml file or the [tool.ruff] section of a pyproject.toml file.
  • The project.requires-python field in a pyproject.toml file with a [tool.ruff] section.

  These options worked well in most cases, and are still recommended for fine control of the Python version. However, because of the way Ruff discovers config files, pyproject.toml files without a [tool.ruff] section would be ignored, including the requires-python setting. Ruff would then use the default Python version (3.9 as of this writing) instead, which is surprising when you've attempted to request another version.

  In v0.10, config discovery has been updated to address this issue:

  • If Ruff finds a ruff.toml file without a target-version, it will check for a pyproject.toml file in the same directory and respect its requires-python version, even if it does not contain a [tool.ruff] section.
  • If Ruff finds a user-level configuration, the requires-python field of the closest pyproject.toml in a parent directory will take precedence.
  • If there is no config file (ruff.tomlor pyproject.toml with a [tool.ruff] section) in the directory of the file being checked, Ruff will search for the closest pyproject.toml in the parent directories and use its requires-python setting.

Stabilization

The following behaviors have been stabilized:

• blanket-noqa (PGH004): Also detect blanked file-level noqa comments (and not just line level comments).

Preview features

• [syntax-errors] Tuple unpacking in for statement iterator clause before Python 3.9 (#16558)

0.10.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Changes to how the Python version is inferred when a target-version is not specified (#16319)

  Because of a mistake in the release process, the requires-python inference changes are not included in this release and instead shipped as part of 0.11.0. You can find a description of this change in the 0.11.0 section.

... (truncated)

Commits

• 2cd25ef Ruff 0.11.0 (#16723)
• a22d206 [red-knot] Preliminary tests for typing.Final (#15917)
• 270318c [red-knot] fix: improve type inference for binary ops on tuples (#16725)
• d03b12e [red-knot] Assignments to attributes (#16705)
• 14c5ed5 [pygrep-hooks]: Detect file-level suppressions comments without rul… (#16720)
• 5955650 Fallback to requires-python in certain cases when target-version is not found...
• 2382fe1 [syntax-errors] Tuple unpacking in for statement iterator clause before Pyt...
• 27e9d1f Ruff v0.10 Release (#16708)
• acf35c5 Add new noqa specification to the docs (#16703)
• b9b2562 describe requires-python fallback in docs (#16704)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions