build(deps): bump the uv-dependencies group with 4 updates

[dependabot]

Bumps the uv-dependencies group with 4 updates: click, pre-commit, pyinstaller and ruff.

Updates click from 8.3.2 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

• Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775
• Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299
• Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238
• Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240
• Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235
• Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151
• Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177
• Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328
• Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239
• Mark make_default_short_help as private API. #3189 #3250
• CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865
• Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248

Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

• Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775
• Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299
• Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238
• Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240
• Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235
• Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151
• Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177
• Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328
• Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239
• Mark make_default_short_help as private API. :issue:3189 :pr:3250
• CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865
• Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248

Commits

• c06d2d0 Release 8.3.3
• f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
• bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
• 4a35225 Reduce blast-radius of UNSET in default_map (#3240)
• c07bb93 Merge branch 'stable' into unset-in-default-map
• c7e1ba8 Reorder ParameterSource (#3248)
• 76552ff Show default string in prompt (#3328)
• ac5cec5 Reorder ParameterSource from most to least explicit
• 8c452e0 Merge branch 'stable' into show-default-string-in-prompt
• 8c95c73 Reconcile default value passing and default activation (#3239)
• Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

• pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
  • #3662 PR by @​asottile.

Fixes

• pre-commit hook-impl: --hook-type is required.
  • #3661 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

• pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
  • #3662 PR by @​asottile.

Fixes

• pre-commit hook-impl: --hook-type is required.
  • #3661 PR by @​asottile.

Commits

• f35134b v4.6.0
• 2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
• d7dee32 make --hook-dir optional for hook-impl
• 965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
• 2eacc06 --hook-type is required for hook-impl
• f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
• 054cc5b [pre-commit.ci] pre-commit autoupdate
• 5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
• a5d9114 [pre-commit.ci] pre-commit autoupdate
• 129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
• Additional commits viewable in compare view

Updates pyinstaller from 6.19.0 to 6.20.0

Release notes

Sourced from pyinstaller's releases.

v6.20.0

Please see the v6.20.0 section of the changelog for a list of the changes since v6.19.0.

Changelog

Sourced from pyinstaller's changelog.

6.20.0 (2026-04-22)

Bugfix

* (Linux) Fix binary dependency analysis in Termux environment; previously,
  no binary dependencies would be reported due to mismatched ``ldd`` output
  pattern. (:issue:`9402`)
* (Linux) Fix compatibility issues with Termux python 3.13, caused by
  platform being now reported as "android" instead of "linux" (PEP 738).
  (:issue:`9398`)
* (macOS) Fix built-time error when trying to create an .app bundle with
  data collected from a directory that contains symlinked elements.
  (:issue:`9375`)
* Fix the ``forkserver`` spawn mode of ``multiprocessing`` under python
  3.13.13, 3.14.4, and the upcoming 3.15. (:issue:`9423`)
* Remove warning about non-existing ``tclX`` module directory; in some Tcl
  distributions (e.g., Debian-packaged Tcl), this directory is located
  under the main library/data directory, and therefore the stand-alone
  directory neither exists nor needs to be explicitly collected.
  (:issue:`9401`)
Hooks

* Prevent the run-time hook for ``gi.repository.GLib`` from overriding
  the implicit default value of the ``XDG_DATA_DIRS`` environment
  variable (i.e., ``/usr/local/share/:/usr/share/``) when adding the
  frozen application's top-level directory to the list of data directories.
  (:issue:`9422`)
* Update ``gi.repository.Gio`` hook to collect corresponding platform-specific
  typelib (``GioWin32`` or ``GioUnix``), and add hooks for these modules.
  This aims to prevent potential run-time errors, either because the typelib
  is missing, or because it was opportunistically loaded from the run-time
  system and happens to be of incompatible version. (:issue:`9410`)
* Update ``gi.repository.GLib`` hook to collect corresponding platform-specific
  typelib (``GLibWin32`` or ``GLibUnix``), and add hooks for these modules.
  This aims to prevent potential run-time errors, either because the typelib
  is missing, or because it was opportunistically loaded from the run-time
  system and happens to be of incompatible version. (:issue:`9410`)
Bootloader

</code></pre>

<ul>

<li>(Windows) Add new option to the <code>waf</code> build script, <code>--no-cfg</code>,

that allows bootloader to be built without Control Flow Guard (CFG)

enabled. Applicable only when building with MSVC toolchain. (:issue:<code>9352</code>)</li>

</ul>

<!-- raw HTML omitted -->

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/8a6172796b56aa428980c3628663ba08e77ad81e&quot;&gt;&lt;code&gt;8a61727&lt;/code&gt;&lt;/a> Release v6.20.0. [skip ci]</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/151ff76940748960452b3186b6885758d94841dc&quot;&gt;&lt;code&gt;151ff76&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 16 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9431&quot;&gt;#9431&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/4d28a528f8ab8632f7cfa7662fc6fcc45881e741&quot;&gt;&lt;code&gt;4d28a52&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 15 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9429&quot;&gt;#9429&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/881ee26d446a574c9bed14d4e8fd40628c7c1a93&quot;&gt;&lt;code&gt;881ee26&lt;/code&gt;&lt;/a> tests: test_path_encodings: ensure that custom tmp dir exists</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/b42c9421158d9a6069274f1af848549cc527afb7&quot;&gt;&lt;code&gt;b42c942&lt;/code&gt;&lt;/a> tests: test_bundled_shell_script: fix for Termux without /usr symlink</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/afc1b27baac552e985bd3f365eac401db1ca8189&quot;&gt;&lt;code&gt;afc1b27&lt;/code&gt;&lt;/a> ci: termux: use primary mirror and perform initial package upgrade</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/1c29fab7926c3ee4d185587f29ea015b41b955b5&quot;&gt;&lt;code&gt;1c29fab&lt;/code&gt;&lt;/a> Fix multiprocessing with forkserver in python 3.13.13 and 3.14.4</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/3eab93a1c006c9fd2e45174d9f54b8a981cc319d&quot;&gt;&lt;code&gt;3eab93a&lt;/code&gt;&lt;/a> ci: have setup-python check for latest version of python</li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/929b186d3f451317deac6eae7663ba2e8726f75f&quot;&gt;&lt;code&gt;929b186&lt;/code&gt;&lt;/a> rthook: do not overwrite XDG_DATA_DIRS fallback value (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9422&quot;&gt;#9422&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/pyinstaller/pyinstaller/commit/722dbd189a7e8e572af6133848e6057aa44e945f&quot;&gt;&lt;code&gt;722dbd1&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 14 (<a href="https://redirect.github.com/pyinstaller/pyinstaller/issues/9419&quot;&gt;#9419&lt;/a&gt;)&lt;/li>

<li>Additional commits viewable in <a href="https://github.com/pyinstaller/pyinstaller/compare/v6.19.0...v6.20.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates ruff from 0.15.11 to 0.15.12

Release notes
Sourced from ruff's releases.

0.15.12
Release Notes
Released on 2026-04-24.
Preview features

Implement #ruff:file-ignore file-level suppressions (#23599)
Implement #ruff:ignore logical-line suppressions (#23404)
Revert preview changes to displayed diagnostic severity in LSP (#24789)
[airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
[flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
[pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

[pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

Respect default Unix permissions for cache files (#24794)

Documentation

[pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
[pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
Improve rules table accessibility (#24711)

Contributors

@​dylwil3
@​AlexWaygood
@​woodruffw
@​avasis-ai
@​Dev-iL
@​denyszhak
@​ShipItAndPray
@​anishgirianish
@​augustelalande
@​amyreese
@​majiayu000

Install ruff 0.15.12
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh



... (truncated)


Changelog
Sourced from ruff's changelog.

0.15.12
Released on 2026-04-24.
Preview features

Implement #ruff:file-ignore file-level suppressions (#23599)
Implement #ruff:ignore logical-line suppressions (#23404)
Revert preview changes to displayed diagnostic severity in LSP (#24789)
[airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
[flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
[pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

[pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

Respect default Unix permissions for cache files (#24794)

Documentation

[pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
[pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
Improve rules table accessibility (#24711)

Contributors

@​dylwil3
@​AlexWaygood
@​woodruffw
@​avasis-ai
@​Dev-iL
@​denyszhak
@​ShipItAndPray
@​anishgirianish
@​augustelalande
@​amyreese
@​majiayu000




Commits

66f93cf Bump 0.15.12 (#24815)
476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
80feb29 [ty] report only dead annotation-only locals as unused (#24811)
0fbf2bc Drop deprecated license classifier (#24808)
43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
4f449ae [ty] Add error context for intersection types (#24772)
5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
e7cc762 [ty] Add error context for TypedDict assignments (#24790)
Additional commits viewable in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions