Bump the python-packages group across 1 directory with 6 updates by dependabot[bot] · Pull Request #92 · fontra/fontra-compile

dependabot · 2025-12-02T08:55:34Z

Bumps the python-packages group with 6 updates in the / directory:

Package	From	To
fontmake	`3.11.0`	`3.11.1`
fontc	`0.3.2`	`0.6.0`
mypy	`1.18.2`	`1.19.0`
pre-commit	`4.3.0`	`4.5.0`
pytest	`8.4.2`	`9.0.1`
pytest-asyncio	`1.2.0`	`1.3.0`

Updates fontmake from 3.11.0 to 3.11.1

Release notes

Sourced from fontmake's releases.

v3.11.1

compatibility checker: allow empty glyphs in non-default sources, treated as "sparse" (non-contributing to gvar deltas) by fontTools.varLib (#1163).

Commits

e0b8b43 ci: tell twine upload to --skip-existing
6bbbec0 setup.cfg: .tar.gz is now mandatory, no more .zip for sdist
35e9e5d Merge pull request #1163 from googlefonts/allow-empty-non-default-glyphs
365cea9 fix flake8 B042 error
04df2cb compatibility checker: allow non-default empty glyphs (treat as sparse)
5760038 add more test glyphs to IncompatibleSans
f1a76fa remove test_instantior.py, already tested in ufo2ft
See full diff in compare view

Updates fontc from 0.3.2 to 0.6.0

Release notes

Sourced from fontc's releases.

fontc 0.6.0

What's Changed

Add paintcompiler to requirements.in by @anthrotype in googlefonts/fontc#1777

[kern] Port another test from ufo2ft by @cmyr in googlefonts/fontc#1779

[kern] Fix logic bug getting unicode script from cp by @cmyr in googlefonts/fontc#1780

Corner components by @cmyr in googlefonts/fontc#1721

Update norad by @cmyr in googlefonts/fontc#1786

Add support for "Link Metrics..." custom parameters by @anthrotype in googlefonts/fontc#1778

[kern] Ensure unknown kern pairs don't overwrite DFLT by @cmyr in googlefonts/fontc#1785

set up webhook to trigger Glyphs.app export plugin update upon fontc releases by @anthrotype in googlefonts/fontc#1776

bump minor versions for glyphs-reader, glyphs2fontir, fontbe and fontc by @anthrotype in googlefonts/fontc#1787

Full Changelog: googlefonts/fontc@fontc-v0.5.0...fontc-v0.6.0

fontc 0.5.0

What's Changed

Build directly declared (typically for COLRv0) palettes by @rsheeter in googlefonts/fontc#1754

[colr] Scale relative gradient coordinates and quantize clip boxes by @anthrotype in googlefonts/fontc#1755

test colr gradients' scaled geometry and actual clip boxes in integration tests by @anthrotype in googlefonts/fontc#1756

update glyphsLib and unicodedata2 in requirements.txt by @anthrotype in googlefonts/fontc#1758

[fea-rs] Add a couple feaLib tests by @cmyr in googlefonts/fontc#1761

Rough in static COLRv0 by @rsheeter in googlefonts/fontc#1757

But what if a master had a palette?! by @rsheeter in googlefonts/fontc#1760

Fix panic with empty color glyphs by @anthrotype in googlefonts/fontc#1765

[chore] Update a few more deps by @cmyr in googlefonts/fontc#1726

Fix bug in COLRv1 glyph splitting, layers start_idx=0, and ot-rounding by @anthrotype in googlefonts/fontc#1768

Compile MinMax BASE table statements in fea by @cmyr in googlefonts/fontc#1763

[fea-rs] Simplify GlyphMap construction by @cmyr in googlefonts/fontc#1770

[ttx_diff] make --help and --version work in absl-py by @anthrotype in googlefonts/fontc#1771

[kern] Port more tests from ufo2ft by @cmyr in googlefonts/fontc#1772

bump minor versions of fontc and related crates by @anthrotype in googlefonts/fontc#1773

also need to bump fontdrasil as it exposes SmolStr in public API by @anthrotype in googlefonts/fontc#1774

Full Changelog: googlefonts/fontc@fontc-v0.4.0...fontc-v0.5.0

fontc 0.4.0

What's Changed

Remove unused deps by @valadaptive in googlefonts/fontc#1622

Make Anchor public in glyphs-reader by @valadaptive in googlefonts/fontc#1623

update ufo2ft in requirements.txt by @anthrotype in googlefonts/fontc#1624

Respect lib when compiling from UFO by @cmyr in googlefonts/fontc#1626

[ufo] Merge libs from designspace and default master by @cmyr in googlefonts/fontc#1628

Move open corner erasure to fontir by @cmyr in googlefonts/fontc#1629

[fea] Allow singleton class in inline liga sub rule by @cmyr in googlefonts/fontc#1630

[fea] Allow '.null' as glyph name by @cmyr in googlefonts/fontc#1631

[fea-rs] Suggest 'NULL' glyph name instead of 'null' by @cmyr in googlefonts/fontc#1632

[fea] Track context when parsing include files by @cmyr in googlefonts/fontc#1634

[fontir] Fix crash when component is missing by @cmyr in googlefonts/fontc#1636

... (truncated)

Commits

6cd35ae Merge pull request #1787 from googlefonts/bump-versions
2327e30 bump minor versions for glyphs-reader, glyphs2fontir, fontbe and fontc
40ba7f6 Merge pull request #1776 from googlefonts/notify-plugin
54f9513 Merge pull request #1785 from googlefonts/my-fun-kern-bug
3e82ffc Merge pull request #1778 from googlefonts/link-metrics
b49c9fa test getting linked metrics source by name for old .glyphs v2
209b58c [glyphs-reader] resolve metrics_source_id at Font construction time
1485564 Merge pull request #1786 from googlefonts/update-norad
3a65e83 Update norad
8fbe85b [kern] Ensure unknown kern pairs don't overwrite DFLT
Additional commits viewable in compare view

Updates mypy from 1.18.2 to 1.19.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy no longer supports running with Python 3.9, which has reached end-of-life. When running mypy with Python 3.10+, it is still possible to type check code that needs to support Python 3.9 with the --python-version 3.9 argument. Support for this will be dropped in the first half of 2026!

Contributed by Marc Mueller (PR 20156).

Mypy 1.19

We’ve just uploaded mypy 1.19.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Python 3.9 Support Ending Soon

This is the last mypy feature release that supports Python 3.9, which reached end of life in October 2025.

Performance Improvements

Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR 20053)

Speed up type aliases (Ivan Levkivskyi, PR 19810)

Fixed‑Format Cache Improvements

Mypy uses a cache by default to speed up incremental runs by reusing partial results from earlier runs. Mypy 1.18 added a new binary fixed-format cache representation as an experimental feature. The feature is no longer experimental, and we are planning to enable it by default in a future mypy release (possibly 1.20), since it's faster and uses less space than the original, JSON-based cache format. Use --fixed-format-cache to enable the fixed-format cache.

Mypy now has an extra dependency on the librt PyPI package, as it's needed for cache serialization and deserialization.

Mypy ships with a tool to convert fixed-format cache files to the old JSON format. Example of how to use this:
$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff

... (truncated)

Commits

0f068c9 Remove +dev
6d5cf52 Various updates to 1.19 changelog (#20304)
3c81308 Add draft version of 1.19 release notes (#20296)
1999a20 [mypyc] librt base64: use existing SIMD CPU dispatch by customizing build fla...
1b94fbb [mypyc] Fix vtable pointer with inherited dunder new (#20302)
13369cb [mypyc] Fix crash on super in generator (#20291)
a087a58 Update import map when new modules added (#20271)
35e843c [mypyc] Add efficient librt.base64.b64decode (#20263)
094f66d [mypyc] Add repr to AssignmentTarget subclasses (#20258)
0738db3 Do not push partial types to the binder (#20202)
Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.0

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

pre-commit v4.4.0

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.5.0 - 2025-11-22

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

Commits

1af6c8f v4.5.0
3358a3b Merge pull request #3585 from pre-commit/hazmat
bdf6879 add pre-commit hazmat
e436690 Merge pull request #3584 from pre-commit/exitstack
8d34f95 use ExitStack instead of start + stop
9c7ea88 Merge pull request #3583 from pre-commit/forward-compat-map-manifest
844dacc add forward-compat error message
6a1d543 Merge pull request #3582 from pre-commit/move-gc-back
66278a9 move logic for gc back to commands.gc
1b32c50 Merge pull request #3579 from pre-commit/pre-commit-ci-update-config
Additional commits viewable in compare view

Updates pytest from 8.4.2 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

9.0.0

pytest 9.0.0 (2025-11-05)

New features
#1367: Support for subtests has been added.

subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

Example:
def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)

... (truncated)

Commits

d1b64aa Prepare release version 9.0.1
0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
Additional commits viewable in compare view

Updates pytest-asyncio from 1.2.0 to 1.3.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 1.3.0

1.3.0 - 2025-11-10

Removed

Support for Python 3.9 (#1278)

Added

Support for pytest 9 (#1279)

Notes for Downstream Packagers

Tested Python versions include free threaded Python 3.14t (#1274)

Tests are run in the same pytest process, instead of spawning a subprocess with pytest.Pytester.runpytest_subprocess. This prevents the test suite from accidentally using a system installation of pytest-asyncio, which could result in test errors. (#1275)

Commits

2e9695f docs: Compile changelog for v1.3.0
dd0e9ba docs: Reference correct issue in news fragment.
4c31abe Build(deps): Bump nh3 from 0.3.1 to 0.3.2
13e9477 Link to migration guides from changelog
4d2cf3c tests: handle Python 3.14 DefaultEventLoopPolicy deprecation warnings
ee3549b test: Remove obsolete test for the event_loop fixture.
7a67c82 tests: Fix failing test by preventing warning conversion to error.
a17b689 test: add pytest config to isolated test directories
18afc9d fix(tests): replace runpytest_subprocess with runpytest
cdc6bd1 Add support for pytest 9 and drop Python 3.9 support
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fontmake](https://github.com/googlei18n/fontmake) | `3.11.0` | `3.11.1` | | [fontc](https://github.com/googlefonts/fontc) | `0.3.2` | `0.6.0` | | [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.1` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.2.0` | `1.3.0` | Updates `fontmake` from 3.11.0 to 3.11.1 - [Release notes](https://github.com/googlei18n/fontmake/releases) - [Commits](googlefonts/fontmake@v3.11.0...v3.11.1) Updates `fontc` from 0.3.2 to 0.6.0 - [Release notes](https://github.com/googlefonts/fontc/releases) - [Commits](googlefonts/fontc@fontc-v0.3.2...fontc-v0.6.0) Updates `mypy` from 1.18.2 to 1.19.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.18.2...v1.19.0) Updates `pre-commit` from 4.3.0 to 4.5.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.3.0...v4.5.0) Updates `pytest` from 8.4.2 to 9.0.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.1) Updates `pytest-asyncio` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.2.0...v1.3.0) --- updated-dependencies: - dependency-name: fontmake dependency-version: 3.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: fontc dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: mypy dependency-version: 1.19.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pre-commit dependency-version: 4.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest dependency-version: 9.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: pytest-asyncio dependency-version: 1.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 2, 2025

justvanrossum merged commit 7177006 into main Dec 2, 2025
2 checks passed

dependabot Bot deleted the dependabot/pip/python-packages-74eb417c06 branch December 2, 2025 09:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the python-packages group across 1 directory with 6 updates#92

Bump the python-packages group across 1 directory with 6 updates#92
justvanrossum merged 1 commit into
mainfrom
dependabot/pip/python-packages-74eb417c06

dependabot Bot commented on behalf of github Dec 2, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Dec 2, 2025

v3.11.1

fontc 0.6.0

What's Changed

fontc 0.5.0

What's Changed

fontc 0.4.0

What's Changed

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy 1.19

Python 3.9 Support Ending Soon

Performance Improvements

Fixed‑Format Cache Improvements

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

9.0.0

pytest 9.0.0 (2025-11-05)

New features

pytest-asyncio 1.3.0

1.3.0 - 2025-11-10

Removed

Added

Notes for Downstream Packagers

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant