Skip to content

Bump boto3, rich, av, typer, hatch and ruff to latest#60

Merged
cjackett merged 1 commit into
mainfrom
chore/dependabot-batch-2026-06
Jun 7, 2026
Merged

Bump boto3, rich, av, typer, hatch and ruff to latest#60
cjackett merged 1 commit into
mainfrom
chore/dependabot-batch-2026-06

Conversation

@cjackett

@cjackett cjackett commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

Batches the five open Dependabot updates (#55#59) into a single branch, since they all touch uv.lock (and the rich bump also touches pyproject.toml), making sequential merges conflict-prone.

Bumps

PR Package From → To
#59 boto3 / botocore 1.43.18 → 1.43.24
#58 rich 14.3.4 → 15.0.0 (pyproject ceiling <15<16)
#57 av 17.0.1 → 17.1.0
#56 typer 0.16.1 → 0.26.7
#55 hatch / ruff 1.16.5→1.17.0 / 0.15.15→0.15.16

Required follow-on fixes

  • typer 0.26 changed CliRunner.invoke to return typer.testing.Result (no longer a click.testing.Result subclass), which broke 44 mypy checks in the e2e tests. The test helpers now import Result from typer.testing.
  • ruff 0.15.16 flags RUF043 on two pytest.raises(match=...) patterns containing regex metacharacters (now raw strings) and auto-simplifies two conditional expressions to or-expressions.

Verification

  • Full suite + coverage: 1071 passed, 1 xfailed, 1 xpassed, 81.55% (≥75%)
  • All quality gates: ruff, black, deptry, vulture, mypy, bandit, pytest
  • Slow e2e regression suite: 4 passed

Supersedes and closes #55, #56, #57, #58, #59.

Updates the dependency set in one pass: boto3/botocore 1.43.18 to 1.43.24,
rich 14.3.4 to 15.0.0 (raising the pyproject ceiling from <15 to <16), av
17.0.1 to 17.1.0, typer 0.16.1 to 0.26.7, hatch 1.16.5 to 1.17.0 and ruff
0.15.15 to 0.15.16. Typer 0.26 now returns its own typer.testing.Result from
CliRunner.invoke rather than a click.testing.Result subclass, so the test
helpers import Result from typer.testing. Ruff 0.15.16 flags RUF043 on two
pytest.raises match patterns that contain regex metacharacters, now marked as
raw strings, and auto-simplifies two conditional expressions to or-expressions.
@cjackett cjackett requested a review from kevinsbarnard as a code owner June 7, 2026 23:27
@cjackett cjackett merged commit 4ee895a into main Jun 7, 2026
6 checks passed
@cjackett cjackett deleted the chore/dependabot-batch-2026-06 branch June 7, 2026 23:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant