[Tech] Bump the non-major-dev-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the non-major-dev-dependencies group with 5 updates in the /pipeline directory:

Package	From	To
mypy	1.19.1	1.20.0
black	26.1.0	26.3.1
pylint	4.0.4	4.0.5
ipython	9.10.0	9.12.0
autoflake	2.3.1	2.3.3

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits

• 770d3ca Remove +dev from version
• 4738ffa Changelog updates for 1.20 (#21109)
• b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
• 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
• c482596 --allow-redefinition-new is no longer experimental (#21110)
• c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
• b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
• 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
• 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
• bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
• Additional commits viewable in compare view

Updates black from 26.1.0 to 26.3.1

Release notes

Sourced from black's releases.

26.3.1

Stable style

• Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

• Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

• Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)

26.3.0

Stable style

• Don't double-decode input, causing non-UTF-8 files to be corrupted (#4964)
• Fix crash on standalone comment in lambda default arguments (#4993)
• Preserve parentheses when # type: ignore comments would be merged with other comments on the same line, preventing AST equivalence failures (#4888)

Preview style

• Fix bug where if guards in case blocks were incorrectly split when the pattern had a trailing comma (#4884)
• Fix string_processing crashing on unassigned long string literals with trailing commas (one-item tuples) (#4929)
• Simplify implementation of the power operator "hugging" logic (#4918)

Packaging

• Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in frozen environments (#4930)

Performance

• Introduce winloop for windows as an alternative to uvloop (#4996)
• Remove deprecated function uvloop.install() in favor of uvloop.new_event_loop() (#4996)
• Rename maybe_install_uvloop function to maybe_use_uvloop to simplify loop installation and creation of either a uvloop/winloop evenloop or default eventloop (#4996)

Output

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.3.1

Stable style

• Prevent Jupyter notebook magic masking collisions from corrupting cells by using exact-length placeholders for short magics and aborting if a placeholder can no longer be unmasked safely (#5038)

Configuration

• Always hash cache filename components derived from --python-cell-magics so custom magic names cannot affect cache paths (#5038)

Blackd

• Disable browser-originated requests by default, add configurable origin allowlisting and request body limits, and bound executor submissions to improve backpressure (#5039)

Version 26.3.0

Stable style

• Don't double-decode input, causing non-UTF-8 files to be corrupted (#4964)
• Fix crash on standalone comment in lambda default arguments (#4993)
• Preserve parentheses when # type: ignore comments would be merged with other comments on the same line, preventing AST equivalence failures (#4888)

Preview style

• Fix bug where if guards in case blocks were incorrectly split when the pattern had a trailing comma (#4884)
• Fix string_processing crashing on unassigned long string literals with trailing commas (one-item tuples) (#4929)
• Simplify implementation of the power operator "hugging" logic (#4918)

Packaging

• Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in frozen environments (#4930)

Performance

• Introduce winloop for windows as an alternative to uvloop (#4996)
• Remove deprecated function uvloop.install() in favor of uvloop.new_event_loop() (#4996)
• Rename maybe_install_uvloop function to maybe_use_uvloop to simplify loop installation and creation of either a uvloop/winloop eventloop or default eventloop (#4996)

... (truncated)

Commits

• c6755bb Prepare release 26.3.1 (#5046)
• 69973fd Harden blackd browser-facing request handling (#5039)
• 4937fe6 Fix some shenanigans with the cache file and IPython (#5038)
• 2e641d1 docs: remove outdated Black Playground references (#5044)
• c014b22 Remove unused internal code (#5041)
• 0dae20b Add new changelog (#5036)
• c5c1cbd Minor release patches (#5035)
• 7e5a828 docs: clarify relationship between Black style and PEP 8 (#5025)
• 69705de docs: add clearer pyproject configuration guidance (#5026)
• 35ea679 Prepare release 26.3.0 (#5032)
• Additional commits viewable in compare view

Updates pylint from 4.0.4 to 4.0.5

Commits

• 88e1ab7 Bump pylint to 4.0.5, update changelog (#10860)
• d96d489 [Backport maintenance/4.0.x] Relax isort version constraint to allow isort 8 ...
• 0b08ccb Fix dynamic color mapping for "fail-on" messages when using multiple reporter...
• 154dba4 [Backport maintenance/4.0.x] Fix FP for invalid-name with typing.Final on...
• 7b73bfd Disable unspecified-encoding for py-version above Python 3.15 (#10800)
• 4cc98be [Backport maintenance/4.0.x] Fix setting options for import order checker (#1...
• f0d30a2 Sync astroid version with requirements file again
• 38bdf02 [Backport maintenance/4.0.x] Fix logging-unsupported-format when logging ...
• f08c33a [Backport maintenance/4.0.x] Properly detect self.fail() as a terminating...
• See full diff in compare view

Updates ipython from 9.10.0 to 9.12.0

Commits

• d9c6e31 release 9.12.0
• 4c560d2 security note
• bf954e4 Add release notes for 9.12
• bfbdaaf Merge remote-tracking branch 'ghsa/windows-programdata'
• 8aae9a3 strip ansi for comparison
• e1aadc2 fix test
• f48986a fix-test
• d9b5285 try to group tb frames
• 323552e Interleave fast and slow traceback path
• 22cd332 Fix missing space in pdb chained exceptions warning message
• Additional commits viewable in compare view

Updates autoflake from 2.3.1 to 2.3.3

Release notes

Sourced from autoflake's releases.

v2.3.3

What's Changed

• pyproject: fix packaging by @​fsouza in PyCQA/autoflake#342

Full Changelog: PyCQA/autoflake@v2.3.2...v2.3.3

v2.3.2

What's Changed

• Update README.md by @​arkadybag in PyCQA/autoflake#310
• Drop Python 3.8 by @​fsouza in PyCQA/autoflake#312
• pre-commit-config: --py39-plus by @​fsouza in PyCQA/autoflake#313
• github/workflows: add Python 3.13 to the test matrix by @​fsouza in PyCQA/autoflake#316
• Fix TypeError in is_literal_or_name on unhashable set literals by @​Fridayai700 in PyCQA/autoflake#339
• Fix IndexError in extract_package_name on malformed import lines by @​Fridayai700 in PyCQA/autoflake#338
• pre-commit: update hooks and formatting by @​fsouza in PyCQA/autoflake#340
• github/workflows/upload-to-pypi: oidc by @​fsouza in PyCQA/autoflake#341

New Contributors

• @​arkadybag made their first contribution in PyCQA/autoflake#310
• @​Fridayai700 made their first contribution in PyCQA/autoflake#339

Full Changelog: PyCQA/autoflake@v2.3.1...v2.3.2

Commits

• 988e469 Release v2.3.3
• d29bec8 pyproject: fix packaging
• d7aa8bf github/release: fix syntax for dependabot[bot]
• 3203ede Release v2.3.2
• 893d78d Bump actions/setup-python from 6.1.0 to 6.2.0 (#336)
• a273819 Bump actions/checkout from 6.0.1 to 6.0.2 (#337)
• 369354e github/workflows/main: set skip-existing
• 69b8dfe github/workflows/upload-to-pypi: oidc
• 8d9a952 Fix code formatting following move to ruff
• de73419 pre-commit-config: move to ruff
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[tristanrobert]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud