From e9bde462f2d8c6923817eacfde0155b9500c926c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Oct 2026 01:51:29 -0700
Subject: [PATCH 01/17] chore(deps-dev): bump types-requests from
2.33.0.20260712 to 2.33.0.20260906 in /libs/langgraph (#9156)
Bumps [types-requests](https://github.com/python/typeshed) from
2.33.0.20260712 to 2.33.0.20260906.
Sourced from langgraph-sdk's
releases. Changes since sdk==0.4.4 Sourced from pytest-mock's
releases. 2026-09-27 Sourced from pytest-mock's
changelog. 2026-09-27 Sourced from ruff's
releases. Released on 2026-09-24. ... (truncated) Sourced from ruff's
changelog. Released on 2026-09-24. Released on 2026-09-16. ... (truncated) Sourced from ty's
releases. Released on 2026-09-24. This release addresses GHSA-vxvm-j4xq-q7m4,
a use-after-free vulnerability during incremental type checking that can
result in arbitrary code execution when analyzing a specially crafted
Python project. Users who run ty on untrusted code should upgrade to
0.0.84 or newer. ... (truncated) Sourced from ty's
changelog. Released on 2026-09-24. This release addresses GHSA-vxvm-j4xq-q7m4,
a use-after-free vulnerability during incremental type checking that can
result in arbitrary code execution when analyzing a specially crafted
Python project. Users who run ty on untrusted code should upgrade to
0.0.84 or newer. ... (truncated) Sourced from hatch's
releases. Added: Fixed: Consolidate extras and feature resolution into a single code path,
fixing regressions where environment and project extras could be dropped
or resolved inconsistently, and always validate undefined features. Normalize hyphens in the plugin name when building environment option
environment variable names in Sourced from turbo's
releases. ... (truncated) Sourced from @eslint/eslintrc's
releases. Sourced from eslint's
releases. ... (truncated) Sourced from @typescript-eslint/eslint-plugin's
releases. See GitHub
Releases for more information. ... (truncated) Sourced from @typescript-eslint/eslint-plugin's
changelog. See GitHub
Releases for more information. You can read about our versioning
strategy and releases on our
website. ... (truncated) Sourced from @typescript-eslint/parser's
releases. See GitHub
Releases for more information. ... (truncated) Sourced from @typescript-eslint/parser's
changelog. This was a version bump only for parser to align it with other
projects, there were no code changes. See GitHub
Releases for more information. You can read about our versioning
strategy and releases on our
website. This was a version bump only for parser to align it with other
projects, there were no code changes. See GitHub
Releases for more information. You can read about our versioning
strategy and releases on our
website. This was a version bump only for parser to align it with other
projects, there were no code changes. See GitHub
Releases for more information. You can read about our versioning
strategy and releases on our
website. Sourced from prettier's
releases. Sourced from prettier's
changelog. <!-- Prettier 3.9.8 -->
Uses $FOO from <!-- Prettier 3.9.9 -->
Uses $FOO from Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show Release notes
langgraph-sdk==0.4.5
Commits
Updates `pytest-mock` from 3.15.1 to 3.16.0
Release notes
v3.16.0
duplicate_iterators=True for async functions spied
with mocker.spy.mocker.resetall(return_value=True, side_effect=True) now
also applies to non-callable mocks, such as those returned by
mocker.create_autospec(SomeClass, instance=True).
Previously both arguments were silently ignored for them.SpyType for annotating mocker.spy
results.RuntimeError: stop called on unstarted
patcher, which can no longer occur in the supported Python
versions.Changelog
3.16.0
[#604](https://github.com/pytest-dev/pytest-mock/issues/604)
<https://github.com/pytest-dev/pytest-mock/pull/604>_:
Fixed duplicate_iterators=True for async functions spied
with mocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611)
<https://github.com/pytest-dev/pytest-mock/pull/611>_:
Fixed async mock assertion introspection to use awaited arguments
instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606)
<https://github.com/pytest-dev/pytest-mock/pull/606>_:
mocker.resetall(return_value=True, side_effect=True) now
also applies to non-callable mocks, such as those returned by
mocker.create_autospec(SomeClass, instance=True).
Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547)
<https://github.com/pytest-dev/pytest-mock/issues/547>_:
Added SpyType for annotating mocker.spy
results.[#147](https://github.com/pytest-dev/pytest-mock/issues/147)
<https://github.com/pytest-dev/pytest-mock/issues/147>_:
Removed handling of RuntimeError: stop called on unstarted
patcher, which can no longer occur in the supported Python
versions.Commits
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)
Updates `ruff` from 0.16.5 to 0.16.9
Release notes
0.16.9
Release Notes
Preview features
ruff] Avoid false positives for overloaded division
(RUF069) (#28309)Bug fixes
flake8-bugbear] Avoid false positives for calls with
keyword arguments (B009, B010,
B043) (#28776)flake8-tidy-imports] Allow lazy imports to be used in
deferred annotations (TID255) (#28767)Rule changes
flake8-pyi] Mention stubs in the diagnostic message
(PYI002) (#28542)Documentation
flake8-annotations] Clarify that ANN401
checks return types in addition to arguments (#28334)flake8-bugbear] Document type-checker interaction
(B010) (#28509)flake8-comprehensions] Document
map/generator exception behavior (C417) (#27794)ruff] Mention related isort settings
(RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf
https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh
| sh
Changelog
0.16.9
Preview features
ruff] Avoid false positives for overloaded division
(RUF069) (#28309)Bug fixes
flake8-bugbear] Avoid false positives for calls with
keyword arguments (B009, B010,
B043) (#28776)flake8-tidy-imports] Allow lazy imports to be used in
deferred annotations (TID255) (#28767)Rule changes
flake8-pyi] Mention stubs in the diagnostic message
(PYI002) (#28542)Documentation
flake8-annotations] Clarify that ANN401
checks return types in addition to arguments (#28334)flake8-bugbear] Document type-checker interaction
(B010) (#28509)flake8-comprehensions] Document
map/generator exception behavior (C417) (#27794)ruff] Mention related isort settings
(RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Bug fixes
Commits
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)
Updates `ty` from 0.0.75 to 0.0.84
Release notes
0.0.84
Release Notes
Bug fixes
showSyntaxErrors (#28759)LSP server
Performance
Core type checking
TypeIs
materializations (#28817)"foo" in ["foo"] is now inferred as
Literal[True]) (#28676)Configuration
invalid-legacy-positional-parameter by default
(#28834)Other changes
redundant-condition(-strict) due to the condition being
defined relative to sys.version_info,
sys.platform, os.name or
typing.TYPE_CHECKING (#28788)Contributors
Changelog
0.0.84
Bug fixes
showSyntaxErrors (#28759)LSP server
Performance
Core type checking
TypeIs
materializations (#28817)"foo" in ["foo"] is now inferred as
Literal[True]) (#28676)Configuration
invalid-legacy-positional-parameter by default
(#28834)Other changes
redundant-condition(-strict) due to the condition being
defined relative to sys.version_info,
sys.platform, os.name or
typing.TYPE_CHECKING (#28788)Contributors
Commits
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)
Updates `hatch` from 1.18.0 to 1.18.1
Release notes
Hatch v1.18.1
lock-filename
environment option so fields such as {env_name} and
{matrix:...} are resolved when computing the lock file
path.
get_env_var(), so options for
hyphenated plugins resolve to the correct variable.Commits
4b17561
release Hatch v1.18.1 (#2426)b6aaa1a
release Hatchling v1.32.1 (#2425)47f333a
Prepare for hatch and hatchling releases (#2424)d5f7bfe
Fix version metadata to preserve leading zeros in CalVer (#2398)cbfc465
Context formatting support for lock-filename (#2412)929362c
Mark a few more tests that require Internet access (#2400)c9d4e8a
Fix env var formatting in get_env_var() function (#2397)84023e0
Some type fixes (#1138)ed8e30b
Refactor extras so that the logic is in one place (#2382)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show Release notes
Turborepo v2.11.5
What's Changed
Changelog
@github-actions[bot]
in vercel/turborepo#14231@anthonyshew in
vercel/turborepo#14228@anthonyshew in
vercel/turborepo#14230@anthonyshew in
vercel/turborepo#14232@anthonyshew in
vercel/turborepo#14238@anthonyshew in
vercel/turborepo#14240@anthonyshew in
vercel/turborepo#14235@anthonyshew
in vercel/turborepo#14233@anthonyshew in
vercel/turborepo#14239@anthonyshew
in vercel/turborepo#14234@anthonyshew in
vercel/turborepo#14236@anthonyshew
in vercel/turborepo#14237@anthonyshew in
vercel/turborepo#14222@github-actions[bot]
in vercel/turborepo#14245@anthonyshew in
vercel/turborepo#14241@anthonyshew in
vercel/turborepo#14242@anthonyshew in
vercel/turborepo#14243@anthonyshew in
vercel/turborepo#14246@anthonyshew in
vercel/turborepo#14244@anthonyshew in
vercel/turborepo#14247@anthonyshew in
vercel/turborepo#14248turbo npm package by @anthonyshew in
vercel/turborepo#14108@github-actions[bot]
in vercel/turborepo#14249@anthonyshew in
vercel/turborepo#14253@anthonyshew in
vercel/turborepo#14254@anthonyshew in
vercel/turborepo#14255@anthonyshew in
vercel/turborepo#14256@anthonyshew in
vercel/turborepo#14257@anthonyshew in
vercel/turborepo#14259@anthonyshew in
vercel/turborepo#14260@anthonyshew in
vercel/turborepo#14261@anthonyshew in
vercel/turborepo#14258@anthonyshew in
vercel/turborepo#14265derive_setters dependency by @anthonyshew in
vercel/turborepo#14266@anthonyshew in
vercel/turborepo#14267@anthonyshew in
vercel/turborepo#14268@anthonyshew in
vercel/turborepo#14269@anthonyshew in
vercel/turborepo#14270@anthonyshew in
vercel/turborepo#14271@anthonyshew in
vercel/turborepo#14279@anthonyshew in
vercel/turborepo#14281@anthonyshew in
vercel/turborepo#14282@anthonyshew in
vercel/turborepo#14283@anthonyshew in
vercel/turborepo#14284@anthonyshew in
vercel/turborepo#14286Commits
8492b42
publish 2.11.5 to registrya50ee65
chore: Release Turborepo 2.11.5-canary.5 (#14328)c9602f3
fix: Pass repository to release asset commands (#14327)8cb6766
fix: Isolate installer test environment (#14326)5108f6c
feat: Add standalone installers URLs for curl | bash (#14325)a46f82a
chore: Release Turborepo 2.11.5-canary.4 (#14324)8427e6e
fix: Run standalone archive job on manual releases (#14323)7f57aa3
feat: Publish versioned standalone turbo archives (#14322)d6b852c
docs: Update Turborepo schema URL example (#14321)c76ac66
chore: Release Turborepo 2.11.5-canary.3 (#14320)
Updates `@eslint/eslintrc` from 3.3.6 to 3.3.7
Release notes
eslintrc: v3.3.7
3.3.7
(2026-09-01)
Bug Fixes
Commits
7943fa6
chore: release 3.3.7 🚀 (#240)bb0d97a
fix: update js-yaml to 4.3.2 to address security vulnerability (#243)5b4abc9
docs: Update README sponsorsf27e7c9
fix: Bump js-yaml to 4.3.1 (#239)b75e1d2
docs: Update README sponsors302c133
docs: Update README sponsorse62e766
docs: Update README sponsorscf27f9f
docs: Update README sponsorsc7f4cdf
docs: Update README sponsors3319822
docs: Update README sponsors
Updates `eslint` from 10.9.1 to 10.11.0
Release notes
v10.11.0
Features
d136fa4
feat: object-shorthand handle quoted properties for
ignoreConstructors (#21271)
(Pavel)397b3b8
feat: report unsafe labeled continue in
no-unsafe-finally rule (#21316)
(electrohyun)d3dd47f
feat: only exempt new-cap built-ins that reference the
global (#21290)
(sethamus)Bug Fixes
22b09f5
fix: ignore __proto__ properties in
prefer-object-spread (#21311)
(xbinaryx)b684bb1
fix: make TimePass.parse optional in types and docs (#21313)
(ntnyq)26d11bc
fix: don't report __proto__ properties in
object-shorthand (#21310)
(xbinaryx)Documentation
9ecfdc5
docs: note that --cache can serve stale results for cross-file rules (#21312)
(bytedoe)6c789ff
docs: Update README (GitHub Actions Bot)5997825
docs: clarify preserve-caught-error known limitation (#21294)
(Akinyemi Toluwalase)Chores
520dd77
perf: Implement fast paths in critical areas (#21210)
(Nicholas C. Zakas)92086c8
test: update EMFILE error generation for Node.js 26.9.0
compatibility (#21330)
(Francesco Trotta)9ac7eb6
chore: update github/codeql-action action to v4.38.0 (#21331)
(renovate[bot])24310e3
chore: update ecosystem plugins (#21324)
(ESLint Bot)45ad79e
ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
(dependabot[bot])ac74e37
chore: Add AGENTS.md with AI disclosure requirements (#21221)
(Nicholas C. Zakas)c832660
chore: Upgrade Stylelint to the latest version in docs (#21245)
(Jung Hyeon Jun)f9f88fc
chore: update ecosystem plugins (#21308)
(ESLint Bot)fc81076
ci: add more types integration tests (#20395)
(Nitin Kumar)v10.10.0
Features
264b434
feat: add d and v flags to
no-unexpected-multiline (#21305)
(Gihyeon Jeong / 정기현)c6cc6c5
feat: check Object.prototype property names in
new-cap (#21269)
(crimsonjay0)5661fa6
feat: no-extra-bind false negatives with class fields and static blocks
(#21260)
(synthex-byte)Bug Fixes
bb47dc6
fix: update dependency file-entry-cache to v11 (#20801)
(Milos Djermanovic)427ac0a
fix: use format strings in debug calls (#21247)
(Francesco Trotta)9d81532
fix: support __proto__ in /* exported */
comments (#21261)
(sethamus)87e0a08
fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
(김채영)8e2cb14
fix: new-cap false positive for UTC calls with
properties: false (#21275)
(Pixel)9f4a364
fix: Ignore static imports in no-unreachable (#21276)
(Taha Kotil)Documentation
2417cad
docs: Update README (GitHub Actions Bot)9cecb8a
docs: document \c control letter escapes in
no-control-regex (#21286)
(한국)8724829
docs: update compat table links (#21263)
(fnx)5634542
docs: Clarify eqeqeq suggestion behavior (#21256)
(Müslüm Yılmaz)Chores
Commits
3c0b7c6
10.11.0321f0a7
Build: changelog update for 10.11.0520dd77
perf: Implement fast paths in critical areas (#21210)9ecfdc5
docs: note that --cache can serve stale results for cross-file rules (#21312)92086c8
test: update EMFILE error generation for Node.js 26.9.0
compatibility (#21330)9ac7eb6
chore: update github/codeql-action action to v4.38.0 (#21331)22b09f5
fix: ignore __proto__ properties in
prefer-object-spread (#21311)24310e3
chore: update ecosystem plugins (#21324)d136fa4
feat: object-shorthand handle quoted properties for
ignoreConstructors (#21...45ad79e
ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
Updates `@typescript-eslint/eslint-plugin` from 8.68.0 to 8.70.1
Release notes
v8.70.1
8.70.1 (2026-09-21)
🩹 Fixes
await (#12716)<
token opening type arguments (#12821)❤️ Thank You
@amiin-dev@bradzacher@diptomistry@StyleShit@Grit03@hugop95@mnaoumov@baevm@sansynx@stoicism02@nayounsang@cchaeyoungChangelog
8.70.1 (2026-09-21)
🩹 Fixes
await (#12716)❤️ Thank You
@bradzacher@diptomistry@Grit03@hugop95@mnaoumov@baevm@sansynx@cchaeyoung8.70.0 (2026-09-07)
🚀 Features
🩹 Fixes
❤️ Thank You
Commits
23d38ce
chore(release): publish 8.70.19d82e4b
chore: expand eslint-plugin rules test files glob (#12878)f7482f6
fix(eslint-plugin): [no-misused-promises] handle multiple Promise
constituent...2673044
docs(eslint-plugin): [prefer-promise-reject-errors] add option sections
and e...8f141a2
fix(eslint-plugin): [no-useless-default-assignment] convert the fixer to
a su...479cd85
chore: enable assertion option requireData for all rule
tests (#12816)f3c190c
fix(eslint-plugin): [no-unnecessary-condition] handle union-keyed index
acces...b1993df
fix(eslint-plugin): [unbound-method] treat
Intl.Collator.prototype.compare as...da394bc
fix(eslint-plugin): [no-unnecessary-parameter-property-assignment]
account fo...4a742ff
fix(eslint-plugin): [await-thenable] prevent autofix from breaking code
when ...
Updates `@typescript-eslint/parser` from 8.68.0 to 8.70.1
Release notes
v8.70.1
8.70.1 (2026-09-21)
🩹 Fixes
await (#12716)<
token opening type arguments (#12821)❤️ Thank You
@amiin-dev@bradzacher@diptomistry@StyleShit@Grit03@hugop95@mnaoumov@baevm@sansynx@stoicism02@nayounsang@cchaeyoungChangelog
8.70.1 (2026-09-21)
8.70.0 (2026-09-07)
8.69.0 (2026-08-31)
Commits
23d38ce
chore(release): publish 8.70.17ee7608
chore(release): publish 8.70.09a6e546
chore(release): publish 8.69.0
Updates `prettier` from 3.9.6 to 3.9.9
Release notes
3.9.9
3.9.8
3.9.7
Changelog
3.9.9
Markdown: Fix text with
$ been incorrectly parsed as
math syntax (#20140
by @fisker)<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before
anything else runs here.
a.sh and b.sh,
plus $BARfromc.sh, before anything else runs
here.a.sh and b.sh,
plus $BAR from c.sh, before anything else runs
here.
@seiyab)<!-- Input -->
If `module` is not a
[`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module)
object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module
object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module
object instance, a
{{jsxref("TypeError")}} is thrown.
@Austin1serb, @giaBaoJS)<!-- Input -->
- [x] short first line.
</tr></table>
... (truncated)
cdd17f2
Release 3.9.9dc7b896
Disable singleDollarTextMath in
mdast-util-math (#20140)f9be58f
Git blame ignore 3.9.888470cb
Bump Prettier dependency to 3.9.89559cab
Clean changelog_unreleased4fc8ee8
Update dependents count4f2ab67
Release 3.9.83d82af8
Update Regex related dependencies (#20082)5ec8db1
[3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)5b142ed
Release Release @prettier/plugin-hermes@0.2.3,
@prettier/plugin-oxc@0.2.3, an...Sourced from @langchain/core's releases.
@langchain/core@1.2.13Patch Changes
- #11714
a83dfb1Thanks@ccurme! - Abbreviate long tool-call IDs when formatting chat messages as strings, keeping original messages unchanged.
@langchain/core@1.2.12Patch Changes
@langchain/core@1.2.11Patch Changes
#11603
fec9cd8Thanks@thushanth-bengre-langchain! - fix(core): build streamingllmOutput.tokenUsagefrom the fully-accumulated chunk instead of whichever individual chunk'susage_metadataarrived lastAffects both core streaming paths —
.stream()/.streamEvents()(_streamIterator) and.invoke()/.generate()when a streaming-preferring callback is attached (_generateWithCache'shasStreamingHandlerbranch). Previously,llmOutput.tokenUsagewas overwritten by each chunk in turn, so only the last chunk carryingusage_metadatawon — correct for providers that emit one cumulative total on a final chunk, but wrong for providers (e.g.@langchain/google,@langchain/anthropic) that emitusage_metadataas a per-chunk delta across multiple chunks, where the values must be summed.Note for provider authors: this assumes each streamed chunk's
usage_metadatais either a per-chunk delta or appears only on a single final chunk. A provider that instead repeats a cumulative total on every chunk will now see it summed (and inflated) inllmOutput.tokenUsage, matching the existing behavior of the correctly-workingmessage.usage_metadatafield.Also fixes
@langchain/google'sinvoke({streaming: true})path (no streaming-preferring callback attached), wherellmOutputwas never populated at all.#11590
ffebdc2Thanks@thushanth-bengre-langchain! - Fix OpenAI Responses API replay under Zero Data Retention when a response contains more than one reasoning item, for both v0 and v1. In v0, the default replay path now reusesresponse_metadata.outputdirectly, preserving every reasoning item'sid/encrypted_contentin original order. In v1,AIMessage.contentBlocks(outputVersion: "v1") is fixed the same way.additional_kwargs.reasoningis unchanged.
@langchain/core@1.2.10Patch Changes
- #10047
ff1248fThanks@afirstenberg! - fix(core): BaseMessage.text use contentBlocks
c8d1278
chore: version packages (#11729)5d509ad
fix(openai): send in-memory prompt cache retention as in_memory (#11735)663b9a2
feat(openai): support explicit prompt caching (#11232)7735b21
chore(infra): drop held mcp-adapters 2.0 changeset to unblock main
releases (...34edee1
fix(langchain): return failed returnDirect tool calls to the model (#11712)0fcb98b
fix(textsplitters): use char length for loc.lines with custom
lengthFunction ...e4a3d1b
chore: version packages (#11683)Sourced from langchain-core's releases.
langchain-core==1.6.5
Changes since langchain-core==1.6.4
release(core): 1.6.5 (#40816) fix(core): abbreviate long tool IDs in XML buffer strings (#40792)
langchain-core==1.6.4
Changes since langchain-core==1.6.3
release(core): 1.6.4 (#40718) chore(core): deprecate chat message history (#40711) chore(deps): bump anyio from 4.12.0 to 4.14.2 in /libs/core (#40634) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/core (#40574)
langchain-core==1.6.3
Changes since langchain-core==1.6.2
release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated
.text()access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)langchain-core==1.6.2
Changes since langchain-core==1.6.1
release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)
c5ab14d
release(core): 1.6.5 (#40816)5704d9d
chore(model-profiles): refresh model profile data (#40804)7622d3d
release(openai): 1.6.6 (#40800)2dd956b
docs(infra): fix AGENTS.md root setup guidance and package doc accuracy
(#40794)49f4b40
fix(openai): raise on error events in stream path (#40791)19cadaa
fix(core): abbreviate long tool IDs in XML buffer strings (#40792)798441e
chore(anthropic): fix integration test cassette (#40790)a476942
release(openai): 1.6.5 (#40787)46c6bdf
release(anthropic): 1.7.4 (#40786)290daba
fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from psycopg's changelog.
.. currentmodule:: psycopg
.. index:: single: Release notes single: News
psycopgrelease notesFuture releases
Psycopg 3.3.7 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^
- Fix segfault fetching arrays of strings or timestamps after closing the connection (:ticket:
[#1428](https://github.com/psycopg/psycopg/issues/1428)).Current release
Psycopg 3.3.6 ^^^^^^^^^^^^^
- Add support for Python 3.15 (:ticket:
[#1245](https://github.com/psycopg/psycopg/issues/1245)).- Improve performance of async queries by reducing the overhead of the
!wait_async()function (:ticket:[#1331](https://github.com/psycopg/psycopg/issues/1331)).- Don't wait forever for a query to terminate after interrupting it, for instance if the server is unresponsive. The fix requires libpq 17 or newer (:ticket:
[#1371](https://github.com/psycopg/psycopg/issues/1371)).- Cancel a running query upon receiving
!SystemExit(:ticket:[#1384](https://github.com/psycopg/psycopg/issues/1384)).- Report
!Noneinstead of65535as theColumn.precisionof an :sql:intervalcolumn declared with a fields restriction and no explicit precision, such as e.g. :sql:interval day to second(:ticket:[#1397](https://github.com/psycopg/psycopg/issues/1397)).- Fix dumping of nested subclasses of lists as arrays (:ticket:
[#1398](https://github.com/psycopg/psycopg/issues/1398)).- Discard prepared statements upon :sql:
DEALLOCATE ALL(:ticket:[#1408](https://github.com/psycopg/psycopg/issues/1408)).- Better guards dumping large Python
!intto binary numeric (:ticket:[#1414](https://github.com/psycopg/psycopg/issues/1414)).Psycopg 3.3.5 ^^^^^^^^^^^^^
- Discard prepared statements upon :sql:
ALTER *orDISCARD *(:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).- Fix
!ProgrammingErrorwhen dumping non-!Nonevalues with no!NoneTypedumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).- Fix
!wait_selectorwait function to not raise!KeyError(:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).- Fix
!DataErrormessages leaking the literal{...}placeholder instead
... (truncated)
a67654d
chore: bump psycopg package version to 3.3.6443814b
Merge pull request #1416
from dvarrazzo/wait-async-perf42966e9
test: add helpful comments to some tests5e8797f
test: add reasonable connect_timeout to most testsc81ba62
perf: reduce the overhead of wait_async()d2bbfe4
refactor: use get_running_loop() in the async wait functions2b1484a
test: add a script to measure the async wait functions573cf4a
test: fix incorrect wait timing test2b68990
refactor: drop leftovers of waiting with inf interval in
wait_conn_async60765dd
Merge pull request #1414
from dvarrazzo/fix-decimal-overflowSourced from psycopg-pool's changelog.
.. currentmodule:: psycopg
.. index:: single: Release notes single: News
psycopgrelease notesFuture releases
Psycopg 3.3.7 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^
- Fix segfault fetching arrays of strings or timestamps after closing the connection (:ticket:
[#1428](https://github.com/psycopg/psycopg/issues/1428)).Current release
Psycopg 3.3.6 ^^^^^^^^^^^^^
- Add support for Python 3.15 (:ticket:
[#1245](https://github.com/psycopg/psycopg/issues/1245)).- Improve performance of async queries by reducing the overhead of the
!wait_async()function (:ticket:[#1331](https://github.com/psycopg/psycopg/issues/1331)).- Don't wait forever for a query to terminate after interrupting it, for instance if the server is unresponsive. The fix requires libpq 17 or newer (:ticket:
[#1371](https://github.com/psycopg/psycopg/issues/1371)).- Cancel a running query upon receiving
!SystemExit(:ticket:[#1384](https://github.com/psycopg/psycopg/issues/1384)).- Report
!Noneinstead of65535as theColumn.precisionof an :sql:intervalcolumn declared with a fields restriction and no explicit precision, such as e.g. :sql:interval day to second(:ticket:[#1397](https://github.com/psycopg/psycopg/issues/1397)).- Fix dumping of nested subclasses of lists as arrays (:ticket:
[#1398](https://github.com/psycopg/psycopg/issues/1398)).- Discard prepared statements upon :sql:
DEALLOCATE ALL(:ticket:[#1408](https://github.com/psycopg/psycopg/issues/1408)).- Better guards dumping large Python
!intto binary numeric (:ticket:[#1414](https://github.com/psycopg/psycopg/issues/1414)).Psycopg 3.3.5 ^^^^^^^^^^^^^
- Discard prepared statements upon :sql:
ALTER *orDISCARD *(:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).- Fix
!ProgrammingErrorwhen dumping non-!Nonevalues with no!NoneTypedumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).- Fix
!wait_selectorwait function to not raise!KeyError(:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).- Fix
!DataErrormessages leaking the literal{...}placeholder instead
... (truncated)
1a8f65a
chore: bump psycopg package version to 3.3.3db3c435
Merge pull request #1260
from ggevay/sync-error-fix0237586
Fix ValueError when server sends ErrorResponse during Sync after
Parsecb97ef7
docs: fix typos09c8918
Merge pull request #1256
from veeceey/fix/tstrings-error-msg-and-docs-improve...9e74d96
fix: fix error message incorrectly generated by Claude AI0db9d8b
fix: correct typo in tstrings error message and fix sql.rst docs86a0e1b
chore(deps): bump pypa/cibuildwheel in the actions groupf5d90fa
Merge pull request #1233
from lysnikolaou/pgconn-critical-sectiond7dc6c7
Merge critical section and nogil blocks into one context managerSourced from anyio's releases.
4.15.1
- Implemented a compatibility fix for supporting direct access of
anyio.*submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)4.15.0
Added support for the newer keyword-only arguments on
anyio.Pathmethods to match the standard librarypathlib.Path:
follow_symlinksonexists()(Python 3.12+)follow_symlinksonis_dir()(Python 3.13+)follow_symlinksonis_file()(Python 3.13+)follow_symlinksonowner()(Python 3.13+)follow_symlinksongroup()(Python 3.13+)newlineonread_text()(Python 3.13+)(#1286, #1293; PR by
@jaideeppyne)Added
amap,gather, andas_completedutility functions to simplify common patterns (#1173; PR by@Graeme22)Added
--anyio-modecommand-line option as an alternative to theanyio_modeini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g:pytest_asyncio). (#1242; PR by@EmmanuelNiyonshuti)Added the
anyio.Futuresynchronization primitive which behaves similar toasyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by@Vizonex)Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by
@nightcityblade)Added
StapledObjectStream.send_nowait()that delegates to the underlyingObjectSendStream, if it implements it (#1241; PR by@davidbrochart)Added the
move_on_at()andfail_at()functions to complementmove_on_after()andfail_after()Changed the default name for a task spawned with
TaskGroup.create_task(func())to match the default task name for the analogous task spawned withTaskGroup.start_soon(func)orTaskGroup.start(func)in more situations. Previously, the default name of aTaskGroup.create_tasktask never included the module name. (The default name for a task spawned withTaskGroup.start_soonorTaskGroup.starttypically includes the module name.) (#1234; PR by@gschaffner)Changed the
anyioandanyio.abcmodules to lazily (much like810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from theif TYPE_CHECKING:block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to
start_blocking_portal()andanyio.to_thread.run_sync()(#1224; PR by@EmmanuelNiyonshuti)Fixed
SpooledTemporaryFile.readinto()andreadinto1()reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by@c-tonneslan)Added a
reasonparameter tofail_after(and the newfail_at) allowing for added exception context when raisingTimeoutError(#1227; PR by@Graeme22)Fixed the default
TaskHandle.namemissing part of the task name for tasks started withTaskGroup.starton Trio (#1231; PR by@gschaffner)Fixed
anyio.runleaking, or at least, delaying collection of loop and root_task due to the root task being cached in aRunVar. (#1203; PR by@tapetersen)Fixed
anyio.Path.with_stem()silently producing a wrong path (e.g.Path(".txt")) instead of raisingValueErrorwhen given an empty stem on a path with a non-empty suffix, unlikepathlib.PurePath.with_stem(#1200; PR by@Sanjays2402)Fixed
UNIXSocketStream.aclose()raisingasyncio.InvalidStateErrorwhen a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by@alloutflo)Fixed the pytest plugin importing the deprecated
_pytest.python.CallSpec2alias, which triggersPytestRemovedIn10Warningonpytest>=9.2and crashes pytest at startup whenfilterwarnings = erroris configured (#1271; PR by@matthewfeickert)Fixed an asyncio worker thread race that could raise
RuntimeErrorwhen the event loop closed between checking its state and scheduling the worker result (#1265; PR by@hansu650)Fixed
CapacityLimiteron the asyncio backend over-granting tokens whentotal_tokenswas raised while the limiter was over-subscribed (#1223; PR by@zelinewang)
... (truncated)
ffcd154
Bumped up the version0ecf5ed
Added a workaround for third party code accessing unimported submodules
(#1309)9283662
Bumped up the versiond137692
Improved the instructions for AI agents033fc52
Shield TemporaryDirectory cleanup from cancellation (#1304)942e9a6
[pre-commit.ci] pre-commit autoupdate (#1305)b825c3b
Fixed pyproject.toml changes not triggering the test suite9727dc5
Fixed start inconsistencies between trio and asyncio (#1198)b05fe6d
Fixed wrong type in move_on_after (#1297)44d0c93
Fixed asyncio task group coroutine cleanup (#1275)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from actions/deploy-pages's releases.
v5.0.1
Changelog
- Add backoff and jitter to deployment polling
@yoannchaudet(#444)- Improve deployment request test coverage
@adwitiyagoyal(#440)
See details of all code changes since previous release.
:warning: For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.
368f825
Merge pull request #444
from actions/yoannchaudet-deployment-polling-backoff7e97763
Validate deployment polling intervals0143e11
Add backoff and jitter to deployment polling5e98f10
Merge pull request #440
from actions/user/adwitiya8b0625a
Improve deployment request test coverageSourced from virtualenv's releases.
21.7.12
What's Changed
- 🔧 chore(changelog): drop dead CVE-2026-24049 fragment by
@gaborbernatin pypa/virtualenv#3249- 🐛 fix(activation): escape batch quote() against injection by
@gaborbernatin pypa/virtualenv#3250- 🐛 fix(seed): verify downloaded wheel digests by
@gaborbernatin pypa/virtualenv#3251Full Changelog: https://github.com/pypa/virtualenv/compare/21.7.11...21.7.12
21.7.11
What's Changed
- Add OpenSSF Scorecard workflow by
@gaborbernatin pypa/virtualenv#3238- Document AI-assisted contributions and licensing policy by
@gaborbernatin pypa/virtualenv#3239- 👷 ci(release): attest and sign release provenance by
@gaborbernatin pypa/virtualenv#3242- 👷 ci: harden Scorecard-scored checks in CI by
@gaborbernatin pypa/virtualenv#3241- 🐛 fix(ci): parallelize graalpy tests, recover crashed workers by
@gaborbernatin pypa/virtualenv#3240- 🐛 fix(ci): mark real-shell activation tests as slow by
@gaborbernatin pypa/virtualenv#3243- 👷 ci: run macOS jobs on macos-26 by
@gaborbernatin pypa/virtualenv#3244- 🐛 fix(activation): undo a live activation before activate.bat saves values by
@darrenhuaiin pypa/virtualenv#3245- 🐛 fix(create): keep pyvenv.cfg values on a single line by
@gaborbernatin pypa/virtualenv#3247- 🔧 chore(test): add opt-in Atheris fuzz harness by
@gaborbernatin pypa/virtualenv#3246- 📝 docs(readme): add OpenSSF Best Practices badge by
@gaborbernatin pypa/virtualenv#3248Full Changelog: https://github.com/pypa/virtualenv/compare/21.7.10...21.7.11
21.7.10
What's Changed
- 🔧 chore: check spelling with typos in pre-commit by
@even-evenin pypa/virtualenv#3235- 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by
@darrenhuaiin pypa/virtualenv#3234- 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by
@r3wretrhyin pypa/virtualenv#3232- 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by
@darrenhuaiin pypa/virtualenv#3233New Contributors
@r3wretrhymade their first contribution in pypa/virtualenv#3232Full Changelog: https://github.com/pypa/virtualenv/compare/21.7.9...21.7.10
21.7.9
What's Changed
- fix(test): EncodingWarning: 'encoding' argument not specified by
@even-evenin pypa/virtualenv#3228- 🐛 fix(config): ignore a config file that fails to parse instead of crashing by
@darrenhuaiin pypa/virtualenv#3230
... (truncated)
Sourced from virtualenv's changelog.
Bugfixes - 21.7.12
- Fix
activate.batrunning arbitrary commands from a crafted--prompt,VIRTUALENV_PROMPT, or config file value. (:issue:3250)- Verify a downloaded seed wheel's sha256 against PyPI before seeding it into a virtual environment, skipped when a custom pip index is configured. (:issue:
3251)
v21.7.11 (2026-09-17)
Bugfixes - 21.7.11
- Running
activate.batagain beforedeactivateno longer makesdeactivateleave the environment'sPKG_CONFIG_PATH,TCL_LIBRARYandTK_LIBRARYbehind, or lose values the user had set before the first activation - by :user:darrenhuai. (:issue:3245)- Write
pyvenv.cfgvalues on a single line, so a prompt carrying a line boundary can no longer inject configuration.--prompt, theVIRTUALENV_PROMPTenvironment variable and the config file all set the prompt, andpyvenv.cfghas no escape syntax, so a newline, a carriage return, or any other boundarystr.splitlinesrecognizes, such asU+2028, started a new configuration line. Reading the file back picked up those lines as keys, and since the last value for a key wins, they replaced anything written earlier, includinghome. (:issue:3247)Improved Documentation - 21.7.11
- Document the policy for AI-assisted contributions and the licensing rules for dependencies. (:issue:
3239)Misc - 21.7.11
- :issue:
3238, :issue:3240, :issue:3241, :issue:3242, :issue:3243, :issue:3244, :issue:3246
v21.7.10 (2026-09-15)
Bugfixes - 21.7.10
- Skip blank lines,
#comments and lines without=inpyvenv.cfginstead of raisingValueError- by :user:r3wretrhy. (:issue:3232)deactivatein bash, fish and PowerShell unsetsPKG_CONFIG_PATHwhen activation found it unset, instead of keeping the environment'slib/pkgconfig. csh activation no longer drops aPKG_CONFIG_PATHthe user had set. Activation in batch, fish, nushell and PowerShell no longer adds a trailing separator whenPKG_CONFIG_PATHis unset, and PowerShell and nushell build the value with the host's path separators - by :user:darrenhuai. (:issue:3233)- Activation in bash, csh, fish and PowerShell keeps the user's
TCL_LIBRARYandTK_LIBRARY, anddeactivaterestores them. csh and PowerShell removed both variables on every activation, fish did so when the interpreter has
... (truncated)
9666b42
release 21.7.12a01ed3e
🐛 fix(seed): verify downloaded wheel digests (#3251)d721ff1
🐛 fix(activation): escape batch quote() against injection (#3250)087a2ef
🔧 chore(changelog): drop dead CVE-2026-24049 fragment (#3249)73e352a
release 21.7.1168ee5a3
📝 docs(readme): add OpenSSF Best Practices badge (#3248)787d1c9
🔧 chore(test): add opt-in Atheris fuzz harness (#3246)a30f995
🐛 fix(create): keep pyvenv.cfg values on a single line (#3247)469dd28
🐛 fix(activation): undo a live activation before activate.bat saves
values (#...a045a14
👷 ci: run macOS jobs on macos-26 (#3244)Sourced from tornado's changelog.
Release notes
.. toctree:: :maxdepth: 2
releases/v6.6.0 releases/v6.5.10 releases/v6.5.9 releases/v6.5.8 releases/v6.5.7 releases/v6.5.6 releases/v6.5.5 releases/v6.5.4 releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2
... (truncated)
75ef8b1
Merge pull request #3719
from bdarnell/fixes-6593590cb4
test: Hardcode SimpleAsyncHTTPClient in HTTP1xxLimitTestCase9fc5d6d
test: Make tracemalloc optional in httpclient_test555a2ee
iostream: Treat connection resets as a clean close in
read_until_close3ba622f
Release notes and version bump for 6.5.941eea68
test: Fix some test issues only found by our custom tox configab1a778
Merge remote-tracking branch
'bdarnell/claude/asynchttpclient-streaming-memor...437ab5f
web: Do not follow symlinks out of the static directory0394513
httputil: Apply the argument count limit to query stringsb798f83
http1connection: Return after reading the response that follows a
1xxSourced from langchain-core's releases.
langchain-core==1.6.5
Changes since langchain-core==1.6.4
release(core): 1.6.5 (#40816) fix(core): abbreviate long tool IDs in XML buffer strings (#40792)
langchain-core==1.6.4
Changes since langchain-core==1.6.3
release(core): 1.6.4 (#40718) chore(core): deprecate chat message history (#40711) chore(deps): bump anyio from 4.12.0 to 4.14.2 in /libs/core (#40634) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/core (#40574)
langchain-core==1.6.3
Changes since langchain-core==1.6.2
release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated
.text()access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)langchain-core==1.6.2
Changes since langchain-core==1.6.1
release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)
c5ab14d
release(core): 1.6.5 (#40816)5704d9d
chore(model-profiles): refresh model profile data (#40804)7622d3d
release(openai): 1.6.6 (#40800)2dd956b
docs(infra): fix AGENTS.md root setup guidance and package doc accuracy
(#40794)49f4b40
fix(openai): raise on error events in stream path (#40791)19cadaa
fix(core): abbreviate long tool IDs in XML buffer strings (#40792)798441e
chore(anthropic): fix integration test cassette (#40790)a476942
release(openai): 1.6.5 (#40787)46c6bdf
release(anthropic): 1.7.4 (#40786)290daba
fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from starlette's releases.
Version 1.7.0
This release adds experimental OpenTelemetry tracing, HTTP
QUERYsupport, and response trailers inTestClient. Starlette now requires AnyIO 4.[!WARNING]
OpenTelemetryMiddlewareis experimental. Its API and emitted telemetry may change in minor releases without a deprecation period.Added
- Add experimental
OpenTelemetryMiddlewarefor HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.- Expose the matched route through
scope["route"]#3438.- Support the
QUERYHTTP method inHTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.- Capture HTTP response trailers in
TestClientand expose them throughresponse.extensions["http.response.trailers"]#3563.- Support partitioned cookies in
SessionMiddleware#3510.- Add
partitionedtoResponse.delete_cookie()on Python 3.14 and later #3376.- Support IPv6 hosts in
TrustedHostMiddlewareandTestClient#3471.- Support Python 3.15 #3508.
Changed
- Require
anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.- Raise
WebSocketDisconnected, aRuntimeErrorsubclass, for disconnected WebSocket operations #2767.- Accept
Collection[str]inCORSMiddlewareconfiguration annotations, including sets and frozensets #3518.Fixed
- Run background tasks only after the response is sent when using
BaseHTTPMiddleware#3476.- Return
400for invalid multipart parser input #3492.- Include
Vary: Originon all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.- Handle malformed
Hostheaders and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.- Ignore
Rangeheaders whenFileResponsehas a status other than200, preserving its status and full body #3568.- Handle standalone
If-None-Match: *inStaticFiles#3201.- Reject WebSocket requests to
StaticFileswithout raising an assertion error #3532.- Persist session mutations made with
popitem()and|=#3436.- Handle empty and absent payloads in
WebSocketEndpoint.decode()#3372.- Implement
identityonSimpleUserandUnauthenticatedUser#3271.- Allow
HTTPExceptionto use non-standard status codes without an explicitdetail#3545.- Avoid deprecated AnyIO imports in
TestClientand add explicit imports inWSGIMiddlewarefor AnyIO 4.15 compatibility #3498 and #3501.- Offload debug traceback rendering to a worker thread in
ServerErrorMiddleware#2858.Full changelog: 1.6.0...1.7.0
Sourced from starlette's changelog.
1.7.0 (September 23, 2026)
This release adds experimental OpenTelemetry tracing and requires AnyIO 4.
!!! warning "OpenTelemetryMiddleware is experimental" Its API and emitted telemetry may change in minor releases without a deprecation period #3574.
Added
- Add experimental
OpenTelemetryMiddlewarefor HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.- Expose the matched route through
scope["route"]#3438.- Support the
QUERYHTTP method inHTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.- Capture HTTP response trailers in
TestClientand expose them throughresponse.extensions["http.response.trailers"]#3563.- Support partitioned cookies in
SessionMiddleware#3510.- Add
partitionedtoResponse.delete_cookie()on Python 3.14 and later #3376.- Support IPv6 hosts in
TrustedHostMiddlewareandTestClient#3471.- Support Python 3.15 #3508.
Changed
- Require
anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.- Raise
WebSocketDisconnected, aRuntimeErrorsubclass, for disconnected WebSocket operations #2767.- Accept
Collection[str]inCORSMiddlewareconfiguration annotations, including sets and frozensets #3518.Fixed
- Run background tasks only after the response is sent when using
BaseHTTPMiddleware#3476.- Return
400for invalid multipart parser input #3492.- Include
Vary: Originon all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.- Handle malformed
Hostheaders and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.- Ignore
Rangeheaders whenFileResponsehas a status other than200, preserving its status and full body #3568.- Handle standalone
If-None-Match: *inStaticFiles#3201.- Reject WebSocket requests to
StaticFileswithout raising an assertion error #3532.- Persist session mutations made with
popitem()and|=#3436.- Handle empty and absent payloads in
WebSocketEndpoint.decode()#3372.- Implement
identityonSimpleUserandUnauthenticatedUser#3271.- Allow
HTTPExceptionto use non-standard status codes without an explicitdetail#3545.- Avoid deprecated AnyIO imports in
TestClientand add explicit imports inWSGIMiddlewarefor AnyIO 4.15 compatibility #3498 and #3501.- Offload debug traceback rendering to a worker thread in
ServerErrorMiddleware#2858.
2269e9a
Version 1.7.0 (#3575)4fe55eb
Preserve FileResponse status for range requests (#3568)1f08daf
Mark OpenTelemetryMiddleware as experimental (#3574)57de5fa
Support HTTP response trailers in TestClient (#3563)03f12b7
Allow HTTPException to use non-standard status codes (#3545)76fd00f
Reject WebSocket requests to StaticFiles (#3532)f03f65c
docs: fix 'its not available' and 'This ensure' wording (#3526)485aca4
docs: the test client is built on httpx2, not httpx (#3525)fd662b1
Implement identity on SimpleUser and
UnauthenticatedUser (#3271)41db6a7
Stabilize CodSpeed upload buffer allocations (#3524)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from langchain-core's releases.
langchain-core==1.6.5
Changes since langchain-core==1.6.4
release(core): 1.6.5 (#40816) fix(core): abbreviate long tool IDs in XML buffer strings (#40792)
langchain-core==1.6.4
Changes since langchain-core==1.6.3
release(core): 1.6.4 (#40718) chore(core): deprecate chat message history (#40711) chore(deps): bump anyio from 4.12.0 to 4.14.2 in /libs/core (#40634) chore(deps): bump soupsieve from 2.8.4 to 2.9 in /libs/core (#40574)
langchain-core==1.6.3
Changes since langchain-core==1.6.2
release(core): 1.6.3 (#40407) feat(core): Allow model name and provider tracing metadata override based on gateway response (#40406) test(core): cover the deprecated
.text()access path (#40243) docs(core): remove stale Args/Raises entries from FileCallbackHandler._write and ChatGeneration.set_text (#40211)langchain-core==1.6.2
Changes since langchain-core==1.6.1
release(core): 1.6.2 (#40209) feat(openai): support async tools (#40208) chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150) chore(deps): bump tornado from 6.5.7 to 6.5.8 in /libs/core (#40113) fix(core): avoid mutation in google-genai standard content (#40023) fix(core): avoid mutation in bedrock converse standard content (#40022)
c5ab14d
release(core): 1.6.5 (#40816)5704d9d
chore(model-profiles): refresh model profile data (#40804)7622d3d
release(openai): 1.6.6 (#40800)2dd956b
docs(infra): fix AGENTS.md root setup guidance and package doc accuracy
(#40794)49f4b40
fix(openai): raise on error events in stream path (#40791)19cadaa
fix(core): abbreviate long tool IDs in XML buffer strings (#40792)798441e
chore(anthropic): fix integration test cassette (#40790)a476942
release(openai): 1.6.5 (#40787)46c6bdf
release(anthropic): 1.7.4 (#40786)290daba
fix(anthropic): add Opus 5.5 and GPT-6 profile augmentations (#40785)Sourced from pytest-mock's releases.
v3.16.0
2026-09-27
- #604: Fixed
duplicate_iterators=Truefor async functions spied withmocker.spy.- #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
- #606:
mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.- #547: Added
SpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
- #147: Removed handling of
RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
Sourced from pytest-mock's changelog.
3.16.0
2026-09-27
[#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixedduplicate_iterators=Truefor async functions spied withmocker.spy.[#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.[#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_:mocker.resetall(return_value=True, side_effect=True)now also applies to non-callable mocks, such as those returned bymocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.[#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: AddedSpyTypefor annotatingmocker.spyresults.- Dropped support for EOL Python 3.9.
[#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling ofRuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.- Added support for Python 3.15.
f3b531f
Release 3.16.071ed673
Fix duplicate_iterators for async spies (#604)0797e3d
Fix async assertion argument introspection (#611)e24c334
docs: import os in the opening usage example (#612)9e7eb7b
[pre-commit.ci] pre-commit autoupdate (#613)445fd4d
[pre-commit.ci] pre-commit autoupdate (#610)a8bd0b1
Honour resetall() arguments for non-callable mocks (#606)6559fdf
[pre-commit.ci] pre-commit autoupdate (#608)466d026
[pre-commit.ci] pre-commit autoupdate (#605)164defe
[pre-commit.ci] pre-commit autoupdate (#603)Sourced from syrupy's releases.
v6.1.1
Note: 6.1.0 was skipped due to a CI issue. Use 6.1.1.
Experimental
--snapshot-file-lockfor pytest-xdist
--snapshot-updateunder pytest-xdist can race when multiple workers rewrite the same multi-entry amber (.ambr) file, silently dropping snapshots (#1237).This release adds an experimental opt-in:
--snapshot-file-lock— exclusive file lock + atomic replace around amber writes--snapshot-file-lock-timeout— max wait for the lock (default 60s)Same-machine workers only; not reliable across remote workers / NFS. See #1239.
Callout for pytest-xdist users: please try
--snapshot-file-lockwith--snapshot-updateand open an issue if you hit problems. Locking is expected to become the default in a future minor release.New Contributors
@shipbyaeronmade their first contribution in syrupy-project/syrupy#1236Full Changelog: https://github.com/syrupy-project/syrupy/compare/v6.0.0...v6.1.1
Sourced from syrupy's changelog.
v6.1.1 (2026-09-13)
What's Changed
- chore(deps): update dependency ruff to v0.16.4 by
@renovate[bot] in syrupy-project/syrupy#1225- chore(deps): update dependency pytest-benchmark to v5.3.0 by
@renovate[bot] in syrupy-project/syrupy#1226- chore(deps): update dependency ruff to v0.16.5 by
@renovate[bot] in syrupy-project/syrupy#1227- chore(deps): update dependency pydantic to v2.13.5 by
@renovate[bot] in syrupy-project/syrupy#1228- chore(deps): update dependency coverage to v7.16.0 by
@renovate[bot] in syrupy-project/syrupy#1229- chore(deps): update dependency hypothesis to v6.166.0 by
@renovate[bot] in syrupy-project/syrupy#1230- chore(deps): update dependency hypothesis to v6.167.0 by
@renovate[bot] in syrupy-project/syrupy#1231- chore(deps): update dependency hypothesis to v6.167.1 by
@renovate[bot] in syrupy-project/syrupy#1232- chore(deps): update actions/deploy-pages action to v5.0.1 by
@renovate[bot] in syrupy-project/syrupy#1234- chore(deps): update dependency ruff to v0.16.6 by
@renovate[bot] in syrupy-project/syrupy#1235- test: add coverage for read_snapshot_data_from_location returning None by
@shipbyaeronin syrupy-project/syrupy#1236- chore(deps): update dependency hypothesis to v6.168.0 by
@renovate[bot] in syrupy-project/syrupy#1238- fix: opt-in file lock for concurrent amber writes under xdist by
@noahnuin syrupy-project/syrupy#1239New Contributors
@shipbyaeronmade their first contribution in syrupy-project/syrupy#1236Full Changelog: https://github.com/syrupy-project/syrupy/compare/v6.0.0...v6.1.1
v6.1.0 (2026-09-13)
What's Changed
- chore(deps): update dependency ruff to v0.16.4 by
@renovate[bot] in syrupy-project/syrupy#1225- chore(deps): update dependency pytest-benchmark to v5.3.0 by
@renovate[bot] in syrupy-project/syrupy#1226- chore(deps): update dependency ruff to v0.16.5 by
@renovate[bot] in syrupy-project/syrupy#1227- chore(deps): update dependency pydantic to v2.13.5 by
@renovate[bot] in syrupy-project/syrupy#1228- chore(deps): update dependency coverage to v7.16.0 by
@renovate[bot] in syrupy-project/syrupy#1229- chore(deps): update dependency hypothesis to v6.166.0 by
@renovate[bot] in syrupy-project/syrupy#1230- chore(deps): update dependency hypothesis to v6.167.0 by
@renovate[bot] in syrupy-project/syrupy#1231- chore(deps): update dependency hypothesis to v6.167.1 by
@renovate[bot] in syrupy-project/syrupy#1232- chore(deps): update actions/deploy-pages action to v5.0.1 by
@renovate[bot] in syrupy-project/syrupy#1234- chore(deps): update dependency ruff to v0.16.6 by
@renovate[bot] in syrupy-project/syrupy#1235- test: add coverage for read_snapshot_data_from_location returning None by
@shipbyaeronin syrupy-project/syrupy#1236- chore(deps): update dependency hypothesis to v6.168.0 by
@renovate[bot] in syrupy-project/syrupy#1238- fix: opt-in file lock for concurrent amber writes under xdist by
@noahnuin syrupy-project/syrupy#1239New Contributors
@shipbyaeronmade their first contribution in syrupy-project/syrupy#1236Full Changelog: https://github.com/syrupy-project/syrupy/compare/v6.0.0...v6.1.0
2d251e7
chore(release): 6.1.1 [skip ci]9b64ec0
chore(release): 6.1.0 [skip ci]5b4256e
fix: opt-in file lock for concurrent amber writes under xdist (#1239)d4cb151
chore(deps): update dependency hypothesis to v6.168.0 (#1238)16c4cb5
test: add coverage for read_snapshot_data_from_location returning None
(#1236)2e1d3ba
chore(deps): update dependency ruff to v0.16.6 (#1235)fcc929d
chore(deps): update actions/deploy-pages action to v5.0.1 (#1234)4f1bad7
chore(deps): update dependency hypothesis to v6.167.1 (#1232)24eda28
chore(deps): update dependency hypothesis to v6.167.0 (#1231)0d7e46f
chore(deps): update dependency hypothesis to v6.166.0 (#1230)Sourced from ruff's releases.
0.16.9
Release Notes
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixirInstall ruff 0.16.9
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh
... (truncated)
Sourced from ruff's changelog.
0.16.9
Released on 2026-09-24.
Preview features
- [
ruff] Avoid false positives for overloaded division (RUF069) (#28309)Bug fixes
- [
flake8-bugbear] Avoid false positives for calls with keyword arguments (B009,B010,B043) (#28776)- [
flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)Rule changes
- Update LibCST-based fixes for Python 3.15 (#28616)
- [
flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)Documentation
- Fix horizontal overflow on the rules documentation page (#28699)
- Update rules table with category information (#28651)
- [
flake8-annotations] Clarify thatANN401checks return types in addition to arguments (#28334)- [
flake8-bugbear] Document type-checker interaction (B010) (#28509)- [
flake8-comprehensions] Documentmap/generator exception behavior (C417) (#27794)- [
ruff] Mention related isort settings (RUF022) (#28719)Contributors
@qinpei-dev@sanjayrohith@ntBre@webdevsamran@zaniebot@ewdurbin@MichaReiser@spaceone@IbrahimKhan12@devtechedge@GruffElixir0.16.8
Released on 2026-09-16.
Bug fixes
... (truncated)
0be08a2
Bump version to 0.16.9 (#28882)b4920b7
Rename ruff_cli to ruff_command_line (#28881)47c751b
Update dependency astral-sh/uv to v0.12.18 (#28880)8c244e5
[flake8-comprehensions] Document map/generator
exception behavior (C417...5edf5a1
Use target form in rooster.version_files (#28876)915bb2b
[ty] Prefer existing @ paths over response files in Ruff and ty (#28877)4710e1a
ci(github): update version number in placeholder of issue template (#28871)eedfc62
[ty] Propagate outer type context through cast calls (#28855)ceaa6a0
[ty] Contain rendered code within Markdown fences (#28869)dba0f30
authorize ruff-pre-commit dispatch via OIDC (#28867)Sourced from ty's releases.
0.0.84
Release Notes
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
Sourced from ty's changelog.
0.0.84
Released on 2026-09-24.
This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.
Bug fixes
- Fix stale diagnostics from the LSP server after toggling
showSyntaxErrors(#28759)LSP server
- Complete string keys from dictionary initializers (#28820)
- Support LSP requests against closed documents (#28595)
- Select projects for external files using import search paths (#28594)
- Use workspace editor settings for external files (#28639)
Performance
- Avoid repeated subtyping checks for materialized recursive protocols (#28774)
- Skip reading notebooks when discovering scripts (#28781)
Core type checking
- Avoid incorrect simplification of
TypeIsmaterializations (#28817)- Fix disjointness of generic class types (#28787)
- Fix staticmethod shadowing through generic receivers and unions (#28766)
- Infer callable signatures from bounded type variables (#28599)
- Infer constant membership in inline list and set literals (e.g.
"foo" in ["foo"]is now inferred asLiteral[True]) (#28676)- Infer through optional generic containers in the legacy solver (#28791)
- Preserve call narrowing during cyclic inference (#28708)
- Preserve intersections of type guard return types (#28796)
- Use subtyping for constraint-set implication (#28657)
Configuration
- Disable
invalid-legacy-positional-parameterby default (#28834)Other changes
- Only consider reachable definitions when determining whether a condition should be exempted from
redundant-condition(-strict)due to the condition being defined relative tosys.version_info,sys.platform,os.nameortyping.TYPE_CHECKING(#28788)Contributors
... (truncated)
8dd9a7f
Bump version to 0.0.84 (#4585)d4e4bf9
publish to astral-sh/versions via OIDC (#4581)94ce733
use oidc issued token for docs publication (#4579)901eeaa
Update prek dependencies (#4576)09bf0b1
Update docker/setup-buildx-action action to v4.3.0 (#4575)89d6ffe
Update astral-sh/setup-uv action to v10.2.0 (#4574)9c21479
Bump version to 0.0.83 (#4569)04c6911
Sync the ty security mirror (#4549)3fa57a2
Grant the versions workflow repository read access (#4550)a15b353
use scoped token for release workflow (#4506)Sourced from virtualenv's releases.
21.7.13
What's Changed
- 👷 ci: correct a stale checkout pin comment by
@gaborbernatin pypa/virtualenv#3254- 🔧 chore: drop misc as a changelog fragment type by
@gaborbernatin pypa/virtualenv#3255- 👷 ci: scope the nushell apt key to its own repo by
@gaborbernatin pypa/virtualenv#3253- 🐛 fix(activation): stop path command injection in bash and fish by
@gaborbernatin pypa/virtualenv#3252Full Changelog: https://github.com/pypa/virtualenv/compare/21.7.12...21.7.13
Sourced from virtualenv's changelog.
Bugfixes - 21.7.13
- Fix
activateandactivate.fishrunning commands embedded in the virtual environment path or in the interpreter's Tcl/Tk library paths. (:issue:3252)
v21.7.12 (2026-09-18)
0c295ff
release 21.7.134d5a105
🐛 fix(activation): stop path command injection in bash and fish (#3252)0525dce
👷 ci: scope the nushell apt key to its own repo (#3253)aa8323a
🔧 chore: drop misc as a changelog fragment type (#3255)a435477
👷 ci: correct a stale checkout pin comment (#3254)Sourced from notebook's releases.
v7.5.7
7.5.7
Maintenance and upkeep improvements
Contributors to this release
The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.
Sourced from notebook's changelog.
7.5.7
Maintenance and upkeep improvements
Contributors to this release
The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.