Skip to content

build(deps): bump the pip-minor-patch-updates group across 2 directories with 8 updates#108

Merged
fujikosu merged 4 commits intomainfrom
dependabot/pip/pip-minor-patch-updates-a12cd064d7
Dec 14, 2025
Merged

build(deps): bump the pip-minor-patch-updates group across 2 directories with 8 updates#108
fujikosu merged 4 commits intomainfrom
dependabot/pip/pip-minor-patch-updates-a12cd064d7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 12, 2025

Bumps the pip-minor-patch-updates group with 4 updates in the / directory: mypy, pytest, pre-commit and ruff.
Bumps the pip-minor-patch-updates group with 4 updates in the /src/sample_pytorch_gpu_project/.devcontainer directory: torch, torchvision, mlflow and azureml-mlflow.

Updates mypy from 1.18.2 to 1.19.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy no longer supports running with Python 3.9, which has reached end-of-life. When running mypy with Python 3.10+, it is still possible to type check code that needs to support Python 3.9 with the --python-version 3.9 argument. Support for this will be dropped in the first half of 2026!

Contributed by Marc Mueller (PR 20156).

Mypy 1.19

We’ve just uploaded mypy 1.19.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.9 Support Ending Soon

This is the last mypy feature release that supports Python 3.9, which reached end of life in October 2025.

Performance Improvements

  • Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR 20053)
  • Speed up type aliases (Ivan Levkivskyi, PR 19810)

Fixed‑Format Cache Improvements

Mypy uses a cache by default to speed up incremental runs by reusing partial results from earlier runs. Mypy 1.18 added a new binary fixed-format cache representation as an experimental feature. The feature is no longer experimental, and we are planning to enable it by default in a future mypy release (possibly 1.20), since it's faster and uses less space than the original, JSON-based cache format. Use --fixed-format-cache to enable the fixed-format cache.

Mypy now has an extra dependency on the librt PyPI package, as it's needed for cache serialization and deserialization.

Mypy ships with a tool to convert fixed-format cache files to the old JSON format. Example of how to use this:

$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff

... (truncated)

Commits

Updates pytest from 9.0.1 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

  • #13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

    You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

    Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

  • #13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

  • #13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

  • #13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

  • #4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.
Commits
  • 3d10b51 Prepare release version 9.0.2
  • 188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
  • b7d7bef Merge pull request #14014 from bluetech/compat-note
  • bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
  • bc78386 Add CLI options reference documentation (#13930)
  • 5a4e398 Fix docs typo (#14005) (#14008)
  • d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
  • 556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
  • c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
  • 73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
  • Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

Changelog

Sourced from pre-commit's changelog.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

Commits
  • 1af6c8f v4.5.0
  • 3358a3b Merge pull request #3585 from pre-commit/hazmat
  • bdf6879 add pre-commit hazmat
  • e436690 Merge pull request #3584 from pre-commit/exitstack
  • 8d34f95 use ExitStack instead of start + stop
  • 9c7ea88 Merge pull request #3583 from pre-commit/forward-compat-map-manifest
  • 844dacc add forward-compat error message
  • 6a1d543 Merge pull request #3582 from pre-commit/move-gc-back
  • 66278a9 move logic for gc back to commands.gc
  • 1b32c50 Merge pull request #3579 from pre-commit/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates ruff from 0.14.3 to 0.14.9

Release notes

Sourced from ruff's releases.

0.14.9

Release Notes

Released on 2025-12-11.

Preview features

  • [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
  • [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

  • Fix comment placement in lambda parameters (#21868)
  • Skip over trivia tokens after re-lexing (#21895)
  • [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
  • [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

  • [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

  • Use memchr for computing line indexes (#21838)

Documentation

  • Document *.pyw is included by default in preview (#21885)
  • Document range suppressions, reorganize suppression docs (#21884)
  • Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

Install ruff 0.14.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.9

Released on 2025-12-11.

Preview features

  • [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
  • [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

  • Fix comment placement in lambda parameters (#21868)
  • Skip over trivia tokens after re-lexing (#21895)
  • [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
  • [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

  • [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

  • Use memchr for computing line indexes (#21838)

Documentation

  • Document *.pyw is included by default in preview (#21885)
  • Document range suppressions, reorganize suppression docs (#21884)
  • Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

0.14.8

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

... (truncated)

Commits
  • 3f63ea4 Prepare 0.14.9 release (#21927)
  • c8851ec [ty] Defer all parameter and return type annotations (#21906)
  • d442433 [ty] Fix workspace symbols to return members too (#21926)
  • c055d66 Document range suppressions, reorganize suppression docs (#21884)
  • 7a578ce Ignore ruff:isort like ruff:noqa in new suppressions (#21922)
  • 34f7a04 [ty] Handle Definitions in SemanticModel::scope (#21919)
  • c9fe4e2 [ty] Attach salsa db when running ide tests for easier debugging (#21917)
  • fbeeb05 [ty] Don't show hover for expressions with no inferred type (#21924)
  • 4fdb4e8 [ty] avoid unions of generic aliases of the same class in fixpoint (#21909)
  • c548ef2 [ty] Squash false positive logs for failing to find builtins as a real module
  • Additional commits viewable in compare view

Updates torch from 2.9.0 to 2.9.1

Release notes

Sourced from torch's releases.

PyTorch 2.9.1 Release, bug fix release

This release is meant to fix the following issues (regressions / silent correctness):

Tracked Regressions

Significant Memory Regression in F.conv3d with bfloat16 Inputs in PyTorch 2.9.0 (#166643) This release provides work around this issue. If you are impacted please install nvidia-cudnn package version 9.15+ from pypi. (#166480) (#167111)

Torch.compile

Fix Inductor bug when compiling Gemma (#165601) Fix InternalTorchDynamoError in bytecode_transformation (#166036) Fix silent correctness error_on_graph_break bug where non-empty checkpoint results in unwanted graph break resumption (#166586) Improve performance by avoiding recompilation with mark_static_address with cudagraphs (#162208) Improve performance by caching get_free_symbol_uses in torch inductor (#166338) Fix fix registration design for inductor graph partition for vLLM (#166458) (#165815) (#165514) Fix warning spamming in torch.compile (#166993) Fix exception related to uninitialized tracer_output variable (#163169) Fix crash in torch.bmm and torch.compile with PyTorch release 2.9.0 (#166457)

Other

Fix warning spamming on new APIs to control TF32 behavior (#166956) Fix distributed crash with non-contiguous gather inputs (#166181) Fix indexing on large tensor causes invalid configuration argument (#166974) Fix numeric issue in CUDNN_ATTENTION (#166912) (#166570) Fix symmetric memory issue with fused_scaled_matmul_reduce_scatter (#165086) Improve libtorch stable ABI documentation (#163899) Fix image display on pypi project description section (#166404)

Commits

Updates torchvision from 0.24.0 to 0.24.1

Release notes

Sourced from torchvision's releases.

TorchVision 0.24.1 Release

This is a patch release, which is compatible with PyTorch 2.9.1. There are no new features added.

Commits

Updates mlflow from 3.5.1 to 3.7.0

Release notes

Sourced from mlflow's releases.

v3.7.0

MLflow 3.7.0 includes several major features and improvements for GenAI Observability, Evaluation, and Prompt Management.

Major Features

  • 📝 Experiment Prompts UI: New prompts functionality in the experiment UI allows you to manage and search prompts directly within experiments, with support for filter strings and prompt version search in traces. (#19156, #18919, #18906, @​TomeHirata)
  • 💬 Multi-turn Evaluation Support: Enhanced mlflow.genai.evaluate now supports multi-turn conversations, enabling comprehensive assessment of conversational AI applications with DataFrame and list inputs. (#18971, @​AveshCSingh)
  • ⚖️ Trace Comparison: New side-by-side comparison view in the Traces UI allows you to analyze and debug LLM application behavior across different runs, making it easier to identify regressions and improvements. (#17138, @​joelrobin18)
  • 🌐 Gemini TypeScript SDK: Auto-tracing support for Google's Gemini in TypeScript, expanding MLflow's observability capabilities for JavaScript/TypeScript AI applications. (#18207, @​joelrobin18)
  • 🎯 Structured Outputs in Judges: The make_judge API now supports structured outputs, enabling more precise and programmatically consumable evaluation results. (#18529, @​TomeHirata)
  • 🔗 VoltAgent Tracing: Added auto-tracing support for VoltAgent, extending MLflow's observability to this AI agent framework. (#19041, @​joelrobin18)

Breaking Changes

Features

Bug Fixes

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.7.0 (2025-12-05)

MLflow 3.7.0 includes several major features and improvements for GenAI Observability, Evaluation, and Prompt Management.

Major Features

  • 📝 Experiment Prompts UI: New prompts functionality in the experiment UI allows you to manage and search prompts directly within experiments, with support for filter strings and prompt version search in traces. (#19156, #18919, #18906, @​TomeHirata)
  • 💬 Multi-turn Evaluation Support: Enhanced mlflow.genai.evaluate now supports multi-turn conversations, enabling comprehensive assessment of conversational AI applications with DataFrame and list inputs. (#18971, @​AveshCSingh)
  • ⚖️ Trace Comparison: New side-by-side comparison view in the Traces UI allows you to analyze and debug LLM application behavior across different runs, making it easier to identify regressions and improvements. (#17138, @​joelrobin18)
  • 🌐 Gemini TypeScript SDK: Auto-tracing support for Google's Gemini in TypeScript, expanding MLflow's observability capabilities for JavaScript/TypeScript AI applications. (#18207, @​joelrobin18)
  • 🎯 Structured Outputs in Judges: The make_judge API now supports structured outputs, enabling more precise and programmatically consumable evaluation results. (#18529, @​TomeHirata)
  • 🔗 VoltAgent Tracing: Added auto-tracing support for VoltAgent, extending MLflow's observability to this AI agent framework. (#19041, @​joelrobin18)

Breaking Changes

Features

Bug Fixes

... (truncated)

Commits
  • c4d8b3a Run python3 dev/update_mlflow_versions.py pre-release ...
  • fe8a47b Revert "Migrate doc requirements to pyproject.toml dependency group (#19126)"
  • e6857c5 mlflow.genai.evaluate(): handle case where root span is unavailable (#19220)
  • f013aed Add LangGraph optimization guide (#19180)
  • d2db5f3 Add test for return_full_text when saving prompt_template (#19148)
  • 0ec2129 Handle trace with 3p generaic root span (#19217)
  • b6ecc11 Fix start_trace compatibility with old mlflow clients (#19183)
  • 90e6f7f Downgrade signature warning to info (#19153)
  • 36b1454 Create parent directories for SQLite database files (#19205)
  • 2f5138f Followups for multi-turn M1 documentation (#19208)
  • Additional commits viewable in compare view

Updates azureml-mlflow from 1.60.0 to 1.61.0.post1

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
azureml-mlflow [< 1.61, > 1.60.0]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the pip-minor-patch-updates group across 2 director…
84982ed 
…ies with 8 updates

Bumps the pip-minor-patch-updates group with 4 updates in the / directory: [mypy](https://github.com/python/mypy), [pytest](https://github.com/pytest-dev/pytest), [pre-commit](https://github.com/pre-commit/pre-commit) and [ruff](https://github.com/astral-sh/ruff).
Bumps the pip-minor-patch-updates group with 4 updates in the /src/sample_pytorch_gpu_project/.devcontainer directory: [torch](https://github.com/pytorch/pytorch), [torchvision](https://github.com/pytorch/vision), [mlflow](https://github.com/mlflow/mlflow) and [azureml-mlflow](https://github.com/Azure/MachineLearningNotebooks).


Updates `mypy` from 1.18.2 to 1.19.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.18.2...v1.19.0)

Updates `pytest` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.1...9.0.2)

Updates `pre-commit` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.0)

Updates `ruff` from 0.14.3 to 0.14.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.3...0.14.9)

Updates `torch` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.9.0...v2.9.1)

Updates `torchvision` from 0.24.0 to 0.24.1
- [Release notes](https://github.com/pytorch/vision/releases)
- [Commits](pytorch/vision@v0.24.0...v0.24.1)

Updates `mlflow` from 3.5.1 to 3.7.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.5.1...v3.7.0)

Updates `azureml-mlflow` from 1.60.0 to 1.61.0.post1
- [Release notes](https://github.com/Azure/MachineLearningNotebooks/releases)
- [Commits](https://github.com/Azure/MachineLearningNotebooks/commits)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 1.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch-updates
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch-updates
- dependency-name: pre-commit
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch-updates
- dependency-name: ruff
  dependency-version: 0.14.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch-updates
- dependency-name: torch
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch-updates
- dependency-name: torchvision
  dependency-version: 0.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch-updates
- dependency-name: mlflow
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch-updates
- dependency-name: azureml-mlflow
  dependency-version: 1.61.0.post1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 12, 2025
fujikosu
fujikosu reviewed Dec 12, 2025
View reviewed changes
Comment thread src/sample_pytorch_gpu_project/.devcontainer/requirements.txt Outdated
fujikosu
fujikosu reviewed Dec 14, 2025
View reviewed changes
Comment thread src/sample_pytorch_gpu_project/.devcontainer/requirements.txt
fujikosu
fujikosu reviewed Dec 14, 2025
View reviewed changes
Comment thread src/sample_pytorch_gpu_project/.devcontainer/requirements.txt Outdated
fujikosu
fujikosu reviewed Dec 14, 2025
View reviewed changes
Comment thread src/sample_pytorch_gpu_project/.devcontainer/requirements.txt Outdated
@fujikosu fujikosu merged commit 3d3787c into main Dec 14, 2025
2 checks passed
@fujikosu fujikosu deleted the dependabot/pip/pip-minor-patch-updates-a12cd064d7 branch December 14, 2025 05:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@fujikosu fujikosu fujikosu approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@fujikosu