Bump the minor-and-patch group with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates: pytest, ruff and tox.

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates ruff from 0.15.17 to 0.15.19

Release notes

Sourced from ruff's releases.

0.15.19

Release Notes

Released on 2026-06-23.

Preview features

• Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

• Fall back to default settings when editor-only settings are invalid (#26244)
• Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

• [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

• Avoid allocating when parsing single string literals (#26200)
• Avoid reallocating singleton call arguments (#26223)
• Lazily create source files for lint diagnostics (#26226)
• Optimize formatter text width and indentation (#26236)
• Reserve capacity for builtin bindings (#26229)
• Skip repeated-key checks for singleton dictionaries (#26228)
• Use ArrayVec for qualified name segments (#26224)

Documentation

• [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• [pyupgrade] Clarify UP029 as a Python 2 compatibility rule (#26243)

Other changes

• Publish Ruff crates to crates.io (#26271)

Contributors

• @​MakenRosa
• @​MichaReiser
• @​trilamsr
• @​ntBre
• @​sanjibani
• @​charliermarsh

Install ruff 0.15.19

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.19

Released on 2026-06-23.

Preview features

• Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

• Fall back to default settings when editor-only settings are invalid (#26244)
• Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

• [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

• Avoid allocating when parsing single string literals (#26200)
• Avoid reallocating singleton call arguments (#26223)
• Lazily create source files for lint diagnostics (#26226)
• Optimize formatter text width and indentation (#26236)
• Reserve capacity for builtin bindings (#26229)
• Skip repeated-key checks for singleton dictionaries (#26228)
• Use ArrayVec for qualified name segments (#26224)

Documentation

• [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• [pyupgrade] Clarify UP029 as a Python 2 compatibility rule (#26243)

Other changes

• Publish Ruff crates to crates.io (#26271)

Contributors

• @​MakenRosa
• @​MichaReiser
• @​trilamsr
• @​ntBre
• @​sanjibani
• @​charliermarsh

0.15.18

Released on 2026-06-18.

Preview features

... (truncated)

Commits

• 7f04365 Bump version to 0.15.19 (#26291)
• a30ba16 [ty] Infer definite equality comparison results (#26290)
• bcd2028 [ty] Avoid recursion when projecting narrowing constraints (#26276)
• c0e083e [ty] Avoid bypassing lazy constraints for Divergent (#26288)
• fb13596 Record configured crates.io packages (#26281)
• 85da759 [ty] Fix ParamSpec callable signature extraction for callable instances (#26279)
• 4c98a81 [ty] Make multi-arm TypeOf cycle recovery monotonic (#26275)
• 7b84361 [ty] Preserve regular kind for callable instances (#26253)
• 93c8c59 [flake8-pyi] Note that PYI051 is an opinionated stylistic rule (#26179)
• bc9bb05 [ty] Infer types for names bound in match patterns (#25940)
• Additional commits viewable in compare view

Updates tox from 4.55.1 to 4.56.0

Release notes

Sourced from tox's releases.

v4.56.0

What's Changed

• Fix type errors flagged by ty 0.0.43 by @​gaborbernat in tox-dev/tox#3952
• Drop obsolete ty: ignore directives by @​gaborbernat in tox-dev/tox#3957
• docs: Use double backquotes for git command in development.rst by @​mushitoriami in tox-dev/tox#3961
• docs: Fix indent misalignment in reference/config.rst by @​mushitoriami in tox-dev/tox#3962
• docs: replace http://tox.readthedocs.org with https://tox.wiki by @​TejasAmle in tox-dev/tox#3963
• 🐛 fix(config): restore skip_missing_interpreters default to False by @​gaborbernat in tox-dev/tox#3966
• ✨ feat(virtualenv): auto-pin virtualenv for end-of-life Python by @​gaborbernat in tox-dev/tox#3967

New Contributors

• @​TejasAmle made their first contribution in tox-dev/tox#3963

Full Changelog: tox-dev/tox@4.55.1...4.56.0

Changelog

Sourced from tox's changelog.

Features - 4.56.0

• Derive :ref:virtualenv_spec automatically: when an environment targets a Python version the installed :pypi:virtualenv can no longer create (e.g. py38 with virtualenv 21.5+), tox now pins the newest virtualenv that still supports it and bootstraps it for that environment only. The downgrade happens only when every base_python candidate is unsupported, so environments targeting current interpreters are unaffected. This fixes py38 (and other end-of-life interpreters) being silently skipped after a virtualenv upgrade - by :user:gaborbernat. (:issue:3965) (:issue:3965)

Bug fixes - 4.56.0

• The default value of skip_missing_interpreters changed from True to False — missing interpreters now fail the run by default, matching tox 3 behavior. The tox 4 rewrite unintentionally changed this default. To restore the previous (incorrect) behavior, set skip_missing_interpreters = true in your tox configuration or pass --skip-missing-interpreters on the command line. (:issue:3965)

Improved documentation - 4.56.0

• Fix nested list items being rendered with continued numbering instead of as sub-items in development.rst, onboarding.rst and explanation.rst. (:issue:3960)
• Replace stale http://tox.readthedocs.org URL with https://tox.wiki in pyproject.toml (Homepage), .github/CONTRIBUTING.md, and .github/PULL_REQUEST_TEMPLATE.md. (:issue:3963)

---

v4.55.1 (2026-06-03)

---

Commits

• f3a626a release 4.56.0
• 140733c ✨ feat(virtualenv): auto-pin virtualenv for end-of-life Python (#3967)
• bfbc876 🐛 fix(config): restore skip_missing_interpreters default to False (#3966)
• 8ba8075 [pre-commit.ci] pre-commit autoupdate (#3964)
• e9d06b0 docs: replace http://tox.readthedocs.org with https://tox.wiki (#3963)
• 94f5a6b docs: Fix indent misalignment in reference/config.rst (#3962)
• d43df67 docs: Use double backquotes for git command in development.rst (#3961)
• 503be81 [pre-commit.ci] pre-commit autoupdate (#3958)
• 2ec8881 Drop obsolete ty: ignore directives (#3957)
• 06f87ac build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#3954)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cursor]

PR Summary

Low Risk
Dependency-only lockfile bump for dev tools; main watch item is tox 4.56 defaulting to fail on missing interpreters, which affects CI via uv run tox but not runtime library behavior.

Overview
Updates uv.lock only: pytest 9.0.3 → 9.1.1, ruff 0.15.17 → 0.15.19, and tox 4.55.1 → 4.56.0 (pinned hashes and wheel URLs refreshed). No application or config source changes in this diff.

pytest 9.1.x is mostly bug fixes on 9.1.0 (e.g. conftest.py under test*, parametrized fixtures); 9.1.0 also adds deprecations and a --doctest-modules autouse-fixture behavior change that could matter if you rely on those patterns.

ruff is a patch release (lint/format tooling, performance and small rule/doc tweaks).

tox 4.56.0 is worth a quick CI sanity check: it restores skip_missing_interpreters default to False (missing Python envs fail the run instead of being skipped) and can auto-pin virtualenv for end-of-life interpreters. PR CI runs uv run tox, so local/CI tox behavior may differ from 4.55.1 unless you already set skip_missing_interpreters explicitly.

^{Reviewed by Cursor Bugbot for commit 79f5aaa. Configure here.}