Skip to content

Bump the python-packages group with 2 updates#137

Merged
justvanrossum merged 1 commit into
mainfrom
dependabot/pip/python-packages-a2a6d61847
Apr 1, 2026
Merged

Bump the python-packages group with 2 updates#137
justvanrossum merged 1 commit into
mainfrom
dependabot/pip/python-packages-a2a6d61847

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 2 updates: glyphslib and mypy.

Updates glyphslib from 6.12.7 to 6.13.0

Release notes

Sourced from glyphslib's releases.

v6.13.0

  • [propagate_anchors] Interpolate component anchors for brace (intermediate) layers when the component's glyph doesn't have a matching brace layer, by interpolating from the component's master sources (PR #1142, fixes #1017).
  • [classes] Zero-pad unicode hex strings in the .glyphs v3 parser, so codepoints below U+1000 match GlyphData.xml's 4-digit keys for correct glyph category lookups (PR #1141).
  • [tokens] Support 'value in property' predicate syntax (e.g. "abc" in tags), and 'between'/'in' comparators with aggregate expressions like {value, ...} (PR #1140).
  • [tokens] Support the 'tags' glyph property in token filters (PR #1129).
  • [classes] Cache glyph name and unicode index lookups in FontGlyphsProxy, making glyph-by-name access significantly faster for large fonts (PR #1139).
  • [constants] Add missing KOR (Korean) and MOL (Moldovan) language mappings, and fix REVERSE_LANGUAGE_MAPPING to actually reverse keys and values (PR #1138, fixes #1112).
  • [propagate_anchors] Fix ligature anchor numbering on synthesized bracket layers by falling back to the associated master's layer when the exact layerId lookup misses (PR #1137, fixes #1136).
  • [smart_components] Fix smart components at default location not being decomposed, because an empty smartComponentValues dict short-circuited the check (PR #1135, fixes #1134).
Commits
  • 044f19e Merge pull request #1138 from black7375/language-mapping
  • 4603860 Fix REVERSE_LANGUAGE_MAPPING to actually reverse keys and values
  • d3c3941 Merge pull request #1142 from googlefonts/interpolate-brace-layer-anchors
  • 07e4241 Interpolate component anchors for brace (intermediate) layers
  • 8ce67bd Add tests for brace layer anchor propagation
  • 2f9cfa3 Merge pull request #1141 from googlefonts/zero-pad-unicode-hex
  • fc6909d Zero-pad unicode hex strings in .glyphs v3 parser
  • 6e13350 Merge pull request #1140 from googlefonts/fix-in-predicate-flipped
  • 8a74e22 [tokens] Support 'between' and 'in' with aggregate expressions
  • ee4639c [tokens] Support 'value in property' predicate syntax
  • Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits
  • 770d3ca Remove +dev from version
  • 4738ffa Changelog updates for 1.20 (#21109)
  • b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
  • 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
  • c482596 --allow-redefinition-new is no longer experimental (#21110)
  • c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
  • b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
  • 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
  • 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
  • bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 2 updates: [glyphslib](https://github.com/googlefonts/glyphsLib) and [mypy](https://github.com/python/mypy).


Updates `glyphslib` from 6.12.7 to 6.13.0
- [Release notes](https://github.com/googlefonts/glyphsLib/releases)
- [Commits](googlefonts/glyphsLib@v6.12.7...v6.13.0)

Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v1.20.0)

---
updated-dependencies:
- dependency-name: glyphslib
  dependency-version: 6.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: mypy
  dependency-version: 1.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2026
@justvanrossum justvanrossum merged commit 3cee75f into main Apr 1, 2026
1 check passed
@justvanrossum justvanrossum deleted the dependabot/pip/python-packages-a2a6d61847 branch April 1, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant