chore(deps): bump the python-dependencies group across 1 directory with 12 updates

[dependabot]

Updates the requirements on google-cloud-bigquery, google-cloud-bigquery-storage, pyarrow, google-auth, py-radix, tqdm, maxminddb, python-dotenv, scipy, ruff, mypy and pre-commit to permit the latest version.
Updates google-cloud-bigquery to 3.45.0

Changelog

Sourced from google-cloud-bigquery's changelog.

Changelog

PyPI History

3.40.1 (2026-02-12)

Documentation

• clarify that only jobs.query and jobs.getQueryResults are affec… (#2349) (73228432a3c821db05d898ea4a4788adf15b033d)

Bug Fixes

• updates timeout/retry code to respect hanging server (#2408) (24d45d0d5bf89762f253ba6bd6fdbee9d5993422)
• add timeout parameter to to_dataframe and to_arrow met… (#2354) (4f67ba20b49159e81f645ed98e401b9bb1359c1a)

3.40.0 (2026-01-08)

Features

• support load_table and list_rows with picosecond timestamp (#2351) (46764a59ca7a21ed14ad2c91eb7f98c302736c22)
• support timestamp_precision in table schema (#2333) (8d5785aea50b9f9e5b13bd4c91e8a08d6dac7778)

3.39.0 (2025-12-12)

Documentation

• remove experimental annotations from GA features (#2303) (1f1f9d41e8a2c9016198d848ad3f1cbb88cf77b0)

Features

• adds support for Python runtime 3.14 (#2322) (6065e14c448cb430189982dd70025fa0575777ca)
• Add ExternalRuntimeOptions to BigQuery routine (#2311) (fa76e310a16ea6cba0071ff1d767ca1c71514da7)

Bug Fixes

• include io.Base in the PathType (#2323) (b11e09cb6ee32e451b37eda66bece2220b9ceaba)
• honor custom retry in job.result() (#2302) (e118b029bbc89a5adbab83f39858c356c23665bf)
• remove ambiguous error codes from query retries (#2308) (8bbd3d01026c493dfa5903b397d2b01c0e9bf43b)

3.38.0 (2025-09-15)

... (truncated)

Commits

• See full diff in compare view

Updates google-cloud-bigquery-storage to 2.41.0

Release notes

Sourced from google-cloud-bigquery-storage's releases.

google-cloud-bigquery-storage: v2.41.0

2.41.0 (2026-08-21)

Features

• add pandas-gbq to optional extras (#18020) (fe91d93)
• bigquery-storage: add deprecation warning for to_dataframe (#18022) (57e7822)
• update sources and regenerate (#18164) (5ff8274)

Bug Fixes

• storage: support updated GapicCallable metadata in tests (#18031) (24fe2e3)

Documentation

• handwritten: centralize CONTRIBUTING.rst pointers (#17642) (23b9499)

Changelog

Sourced from google-cloud-bigquery-storage's changelog.

Changelog

PyPI History

3.15.0 (2026-06-02)

Features

• regenerate google-cloud-d packages (#17092) (d49a2b9412b4ee9105125db36104a3e18344e0ad)

3.14.0 (2026-04-02)

Features

• Update comments for proto fields (c36aa6169035fdb14bf84b0e56e4f81291600b5a)
• Added a fields for image and table annotation output (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

3.13.0 (2026-03-26)

Features

• Allow Protobuf 7.x (1eb7c268482e55971966e284dac2cbeb903adcbb)

Bug Fixes

• Require Python 3.9 (1eb7c268482e55971966e284dac2cbeb903adcbb)
• Require google-api-core >= 2.11.0 (1eb7c268482e55971966e284dac2cbeb903adcbb)
• Improve type checking (1eb7c268482e55971966e284dac2cbeb903adcbb)

3.12.0 (2026-03-23)

Features

• Add a field for upgrading previous processor version when fine tuning (ee7dd7dc168ecf943440cef38efff348e8eff095)

3.11.0 (2026-03-05)

Features

• Added a field for enabling image and table annotation for layout parser processor (6120fb0db084f5e8d1502fb1bb37594ac9976f6e)

3.10.0 (2026-02-12)

... (truncated)

Commits

• 3e29682 chore: release main (#18013)
• b4d9717 feat: check python and dependency versions in spanner packages (#18177)
• 66794a0 chore(bigtable): Rerouted legacy client row filters to data client row filter...
• b42122e Revert "fix(auth): parse hostname for mTLS and PSC endpoint certifica… (#18189)
• e20796a fix(google-auth-oauthlib): prevent port re-use on windows (#18166)
• b642373 fix(auth): parse hostname for mTLS and PSC endpoint certificate rotat… (#18153)
• 5bc3899 feat(spanner): add DataBoost and auto_partition_mode support to DBAPI driver ...
• 2b056ab docs(django-spanner, common-protos): centralize CONTRIBUTING.rst pointers (#1...
• 91d5e2a chore(bigtable): added warning to MutationsBatcher (#18176)
• 23b9499 docs(handwritten): centralize CONTRIBUTING.rst pointers (#17642)
• Additional commits viewable in compare view

Updates pyarrow to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Commits

• beccec0 MINOR: [Release] Update versions for 25.0.1
• 7bdf01a MINOR: [Release] Update .deb/.rpm changelogs for 25.0.1
• 91dbae1 MINOR: [Release] Update CHANGELOG.md for 25.0.1
• 849d463 GH-50808: [Python] Narrow Feather deprecation to V1 format (#50685)
• e70ebf5 GH-50600: [Release] Pin Python version in Conda verification
• f5037be GH-50578: [C++][FlightRPC][ODBC] Always return SQL_NO_DATA from GetMoreResult...
• 1491589 GH-50503: [Parquet] Remove SVE128 unpack (#50611)
• d1eaaed GH-50326: [Python] Convert arrays to Python objects without per-element Scala...
• fe14135 GH-50428: [C++] Better mimalloc configuration on macOS (#50549)
• 8fb632a GH-50383: [Release] Remove deprecated -f flag on conda create environment (#5...
• See full diff in compare view

Updates google-auth to 2.58.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.58.0

2.58.0 (2026-09-09)

Features

• [aiohttp] Add mTLS reconfiguration logic when certificate mismatch (906ace7)
• auth: [aiohttp] Add mTLS reconfiguration logic when certificate mismatch for existing credentials & Agent Identity workloads (#18224) (906ace7)

Changelog

Sourced from google-auth's changelog.

Changelog

PyPI History

3.15.0 (2026-06-02)

Features

• regenerate google-cloud-d packages (#17092) (d49a2b9412b4ee9105125db36104a3e18344e0ad)

3.14.0 (2026-04-02)

Features

• Update comments for proto fields (c36aa6169035fdb14bf84b0e56e4f81291600b5a)
• Added a fields for image and table annotation output (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

3.13.0 (2026-03-26)

Features

• Allow Protobuf 7.x (1eb7c268482e55971966e284dac2cbeb903adcbb)

Bug Fixes

• Require Python 3.9 (1eb7c268482e55971966e284dac2cbeb903adcbb)
• Require google-api-core >= 2.11.0 (1eb7c268482e55971966e284dac2cbeb903adcbb)
• Improve type checking (1eb7c268482e55971966e284dac2cbeb903adcbb)

3.12.0 (2026-03-23)

Features

• Add a field for upgrading previous processor version when fine tuning (ee7dd7dc168ecf943440cef38efff348e8eff095)

3.11.0 (2026-03-05)

Features

• Added a field for enabling image and table annotation for layout parser processor (6120fb0db084f5e8d1502fb1bb37594ac9976f6e)

3.10.0 (2026-02-12)

... (truncated)

Commits

• e0147b1 chore(main): release google-auth 2.58.0 (#18325)
• 0766fb6 feat: update API sources and regenerate (#18324)
• 906ace7 feat(auth): [aiohttp] Add mTLS reconfiguration logic when certificate mismatc...
• f55462d fix: bump pytest from 8.4.2 to 9.0.3 in /packages/google-cloud-bigquery/sampl...
• 4cc95cb fix: bump requests from 2.32.5 to 2.33.0 in /packages/google-cloud-bigquery/s...
• 1d79696 fix: bump pyasn1 from 0.6.2 to 0.6.4 in /packages/google-cloud-bigquery/sampl...
• b6fe689 fix: bump idna from 3.10 to 3.15 in /packages/google-cloud-bigquery/samples/g...
• f18eb1e fix: bump urllib3 from 2.6.3 to 2.7.0 in /packages/google-cloud-bigquery/samp...
• d0045d4 fix: bump pytest from 8.4.2 to 9.0.3 in /packages/google-cloud-bigquery/sampl...
• 282ab70 fix: bump pyarrow from 21.0.0 to 23.0.1 in /packages/google-cloud-bigquery/sa...
• Additional commits viewable in compare view

Updates py-radix to 1.1.0

Release notes

Sourced from py-radix's releases.

v1.1.0

What's Changed

• Add support for the free-threaded build of Python 3.14 by @​ngoldbaum in mjschultz/py-radix#83

Full Changelog: mjschultz/py-radix@v1.0.5...v1.1.0

Commits

• b5e4e93 Merge pull request #83 from ngoldbaum/ft-support
• 39ea5a2 bump version
• 66986cc fix invalid pointer assignment error
• fad0c69 Take ownership of nodes before exiting critical sections
• 3ffa7a9 Add multithreaded test
• 78246ee lock gen_id mutation
• a63918e fix windows build
• dce1571 add 3.14t CI
• 0ca6fc8 apply critical sections and declare free-threaded support
• 568f177 Merge pull request #82 from mjschultz/limits
• Additional commits viewable in compare view

Updates tqdm to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

• contrib.concurrent: fix no-len iterables (#1830 <- #1828)
• tests: major overhaul (#1819)
• update AI policy in PR template
• misc lint & tidy
• CI: bump workflow actions & pre-commit hooks

Commits

• 9cf5a12 Merge pull request #1830 from eaubin/master
• 24b9e1e misc tidy
• 2a9e4e8 contrib.concurrent: fix no-len iterables
• 8d6ff8d Merge pull request #1819 from tqdm/devel
• bed3796 tests: major overhaul
• 4d3d319 AI policy
• 5dcb022 minor syntax update
• 309effe tests: pre-commit coverage
• 604193a tests: slight tidy
• 17f1cac CI: bump workflow actions
• See full diff in compare view

Updates maxminddb to 3.2.0

Release notes

Sourced from maxminddb's releases.

3.2.0

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

Changelog

Sourced from maxminddb's changelog.

3.2.0 (2026-09-10) ++++++++++++++++++

• Added limits to pure Python record and metadata decoding to prevent denial of service from crafted databases: 65,536 values, 512 nesting levels, and 2 MiB of string and bytes payload. Exceeding a limit raises InvalidDatabaseError. CPython may reach its recursion limit earlier, which raises the same error.
• Rejected unsigned integers longer than 16 bytes and signed integers longer than 4 bytes before reading their payload.
• Updated the vendored libmaxminddb to 1.14.0, which adds the same resource limits to the C extension.
• Truncated reads that previously raised IndexError or struct.error now raise InvalidDatabaseError.
• The pure Python reader now rejects invalid search tree sizes when opening a database.
• Improved pure Python lookup performance.

3.1.1 (2026-03-05) ++++++++++++++++++

• The vendored libmaxminddb has been updated to 1.13.3. This includes a fix for the validation of empty maps and arrays at the end of the metadata section. Previously, the extension would incorrectly reject databases where a 0-element map or array was the last field in metadata. Reported in vimt/MaxMind-DB-Writer-python#16.

3.1.0 (2026-02-24) ++++++++++++++++++

• The vendored libmaxminddb has been updated to 1.13.1. This includes several security hardening improvements when reading corrupt or malicious database files, including fixes for integer overflows, bounds checking, and use-after-free prevention.

3.0.0 (2025-10-15) ++++++++++++++++++

• IMPORTANT: Python 3.10 or greater is required. If you are using an older version, please use an earlier release.
• Databases can now be loaded from buffers. This can be done by passing in a buffer as the database and using mode MODE_FD. Pull request by Emanuel Seemann. GitHub #234.
• The C extension now supports Python 3.13+ free-threading mode and is thread-safe for concurrent reads on platforms with pthread support (such as Linux and macOS) and Windows. On other platforms, the extension will use GIL-based protection.
• The C extension now uses PEP 489 multi-phase initialization, enabling proper subinterpreter support and module isolation for Python 3.12+. This modernizes the extension to use heap types instead of static types and

... (truncated)

Commits

• b6885a0 Update for v3.2.0
• ecaa6a4 Set release date
• 19e0e48 Merge pull request #448 from maxmind/greg/stf-1328-ruff-is-upgraded-in-github...
• 9e92b88 Ignore CPY001 (missing-copyright-notice)
• 1aefe0f Bump ruff to 0.16.5
• 4be1670 Merge pull request #439 from maxmind/greg/stf-1488
• 976b641 Use a dataclass for decoder budgets
• 2983246 Bound malformed metadata cleanup tests
• 53622e7 Clarify decoder limits and early tree validation
• 20853e9 Test high nibbles in 28-bit search tree records
• Additional commits viewable in compare view

Updates python-dotenv to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

[1.2.2] - 2026-03-01

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

• Move more config to pyproject.toml, removed setup.cfg
• Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

... (truncated)

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Updates scipy to 1.18.1

Release notes

Sourced from scipy's releases.

SciPy 1.18.1 Release Notes

SciPy 1.18.1 is a bug-fix release with no new features compared to 1.18.0. This release includes binaries on PyPI for Python 3.15, and the minimum required version of the GCC toolchain has been increased to 10.3.0.

Authors

• Name (commits)
• Wasim Akram (2) +
• Jake Bowhay (1)
• Michael Bratsch (1)
• Dietrich Brunn (1)
• Evgeni Burovski (1)
• Aadya Chinubhai (1)
• Lucas Colley (3)
• Tekin Ertekin (1) +
• Fuyugithub (2) +
• Ralf Gommers (11)
• Joren Hammudoglu (1)
• Ijtihed Kilani (1) +
• Andrew Nelson (2)
• Ilhan Polat (1)
• Tyler Reddy (39)
• romao05 (1) +
• Michael Simacek (1) +
• Jacob Vanderplas (2)

A total of 18 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Note that the source and binary assets associated with this release were published to PyPI using trusted publishing, and so the trusted assets and their hashes are made available more securely at https://pypi.org/project/scipy/1.18.1/ rather than providing them here in a less secure manner.

A complete list of issues and pull requests associated with this release is available in the associated README.txt.

Commits

• e4e854e REL: SciPy 1.18.1 rel commit
• 3c8e5f8 BLD, MAINT: pythran bounds for 1.18.1 (#25978)
• 54c0f95 BLD, MAINT: pythran bounds for 1.18.1
• 45a355d Merge pull request #25884 from tylerjereddy/treddy_backports_1.18.1
• a717e28 DOC: PR 25884 revisions
• bb489c0 DOC: PR 25884 revisions
• 09bca24 BLD: package: pin meson on win-64 to avoid clang-cl bug (#25913)
• 095fe56 DOC, BLD: PR 25884 revisions
• e66ea64 DOC: update minimum GCC version in toolchain roadmap
• c021653 TST: tolerance bumps and skips on 32-bit platforms
• Additional commits viewable in compare view

Updates ruff to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

• [ruff] Add rule for default values on method receivers (RUF077) (#26700)
• [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

• Alternate nested quotes inside format spec interpolations (#28259)
• [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
• [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
• [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

• Correct D211 and D203 rule conflict diagnostic (#28444)
• Recognize slice and frozendict generics (#28477)
• Stop defining __cached__ for Python 3.15 (#28476)
• [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

• Reuse parser name lookups when interning (#28399)
• Speed up inherited configuration resolution (#28299)

Documentation

• Fix line-length path in --config example (#28392)
• Remove the "Who’s Using Ruff?" list (#28455)

Other changes

• Embed archive checksums in the shell installer (#28281)

Contributors

• @​The-Compiler
• @​mdiniz97
• @​zsol
• @​gorewilliams
• @​RafaelJohn9
• @​qatcod
• @​zanieb
• @​MichaReiser
• @​ntBre
• @​charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

• [ruff] Add rule for default values on method receivers (RUF077) (#26700)
• [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

• Alternate nested quotes inside format spec interpolations (#28259)
• [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
• [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
• [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

• Correct D211 and D203 rule conflict diagnostic (#28444)
• Recognize slice and frozendict generics (#28477)
• Stop defining __cached__ for Python 3.15 (#28476)
• [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

• Reuse parser name lookups when interning (#28399)
• Speed up inherited configuration resolution (#28299)

Documentation

• Fix line-length path in --config example (#28392)
• Remove the "Who’s Using Ruff?" list (#28455)

Other changes

• Embed archive checksums in the shell installer (#28281)

Contributors

• @​The-Compiler
• @​mdiniz97
• @​zsol
• @​gorewilliams
• @​RafaelJohn9
• @​qatcod
• @​zanieb
• @​MichaReiser
• @​ntBre
• @​charliermarsh
• @​nightt5879

... (truncated)

Commits

• b5dba86 Bump version to 0.16.7 (#28496)
• 5992d05 Install rustfmt before linting releases (#28495)
• 1713a1f ensure prepare release changes pass prek (#28488)
• 18cdbb4 use scoped token for release workflow (#28484)
• c3813a5 add a workflow for preparing releases (#28486)
• 00948c0 Remove the "Who’s Using Ruff?" list (#28455)
• 86a2eba [pyupgrade] Stop recommending removed typing.no_type_check_decorator (`UP...
• 609e184 Stop defining __cached__ for Python 3.15 (#28476)
• 859ff2f [ty] Track symlinked directory status in listings (#28482)
• 77f6538 Use paid GitHub-hosted runners for Linux (#28478)
• Additional commits viewable in compare view

Updates mypy to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Updates pre-commit to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

4.6.1 - 2026-07-21

Fixes

• Install language: node hooks via git.
  • Fixes npm 12.x compatibility
  • #3719 PR by @​asottile.
  • #3517 issue by @​ojob.
• Set JULIA_DEPOT_PATH for language: julia.
  • #3711 PR by @​damonbayer.
  • pre-commit-ci/runner-image#335 issue by @​damonbayer.
• Produce error on mistyped --repo for pre-commit autoupdate.
  • #3701 PR by @​mxr.
  • #3695 issue by @​mxr.
• Improve performance of commit existence check in pre-push.
  <...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.