chore: bump the dev-deps group across 1 directory with 3 updates

[dependabot]

Bumps the dev-deps group with 3 updates in the / directory: ops, ruff and mypy.

Updates ops from 3.8.0 to 3.8.1

Release notes

Sourced from ops's releases.

3.8.1: assorted fixes to align with Juju more closely

This is a fixes-and-polish release, with most of the work in the state transition testing framework and the documentation.

In state transition testing, entity names are now validated the way Juju itself validates them, and simulated dispatch matches how real Juju invokes hooks, so a test can no longer pass against a charm that Juju would refuse to deploy. Note that tests using names that Juju would reject will now fail. Secret grant and revoke no longer try to mutate immutable state.

In ops itself, Relation.load() now only decodes the fields that your data class declares, so loading a unit databag into a dataclass or Pydantic model no longer trips over the values that Juju sets automatically, such as egress-subnets and private-address. The access field of IdentityDict accepts the IdentityAccess enum as well as the string literals.

On the documentation side, there is a new how-to guide for debugging Kubernetes charms, a new how-to for configuring Jubilant logs, expanded guidance on naming charms, and a series of improvements to the Kubernetes tutorial, including setting and testing the workload version and moving the demo server to a rock.

What's Changed

Fixes

• Align Juju naming rules with testing class rules in canonical/operator#2570
• Drop unsupported cooldown.semver-major-days from github-actions block in canonical/operator#2617
• Do not attempt to mutate secret data in grant/revoke during tests in canonical/operator#2614
• Allow IdentityDict to be assigned IdentityAccess in canonical/operator#2628
• Only decode fields used by the data class in Relation.load() in canonical/operator#2636
• Use juju.wait for workload version tests in k8s tutorial in canonical/operator#2650

Documentation

• Wait longer for Loki data in K8s tutorial integration tests in canonical/operator#2611
• Add more guidance about charm naming in canonical/operator#2610
• Fix tempo test_deploy url in canonical/operator#2631
• Add how-to guide for debugging Kubernetes charms in canonical/operator#2498
• Revert to installed charmcraft for initing charms in canonical/operator#2635
• Grab workload version in k8s tutorial in canonical/operator#2559
• Separate test_workload_version_is_set in k8s tutorial chapter 3 in canonical/operator#2638
• Add howto configure jubilant logs in canonical/operator#2619
• Use autofunction for layer_from_rockcraft in canonical/operator#2648
• Remove log_cli and log_file ini options; keep them as cli arguments for integration tests in canonical/operator#2654
• Fix typo in explanation of mock_version fixture usage in canonical/operator#2647
• Switch K8s tutorial charms to rock version of demo server in canonical/operator#2649

Tests

• Type-check testing/src/scenario and fix uncovered errors in canonical/operator#2615

CI

• Add dependency-review-action on PRs in canonical/operator#2587
• Re-enable the tracing integration tests in canonical/operator#2586
• Adopt new dependabot conventions in canonical/operator#2609
• Open an issue if a scheduled workflow fails in canonical/operator#2627
• Hash-pin actions and drop zizmor config in canonical/operator#2612
• Use uv-venv-lock-runner in tracing tox, align deps in canonical/operator#2651

Full Changelog: canonical/operator@3.8.0...3.8.1

Changelog

Sourced from ops's changelog.

3.8.1 - 30 July 2026

Fixes

• Align Juju naming rules with testing class rules (#2570)
• Do not attempt to mutate secret data in grant/revoke during tests (#2614)
• Allow IdentityDict to be assigned IdentityAccess (#2628)
• Only decode fields used by the data class in Relation.load() (#2636)
• Use juju.wait for workload version tests in Kubernetes tutorial (#2650)

Documentation

• Wait longer for Loki data in Kubernetes tutorial integration tests (#2611)
• Add more guidance about charm naming (#2610)
• Fix tempo test_deploy URL (#2631)
• Add how-to guide for debugging Kubernetes charms (#2498)
• Revert to installed charmcraft for initing charms (#2635)
• Grab workload version in Kubernetes tutorial (#2559)
• Separate test_workload_version_is_set in Kubernetes tutorial chapter 3 (#2638)
• Add how-to guide to configure jubilant logs (#2619)
• Use autofunction for layer_from_rockcraft (#2648)
• Remove log_cli and log_file ini options; keep them as CLI arguments for integration tests (#2654)
• Fix typo in explanation of mock_version fixture usage (#2647)
• Switch Kubernetes tutorial charms to rock version of demo server (#2649)

Tests

• Type-check testing/src/scenario and fix uncovered errors (#2615)

CI

• Add dependency-review-action on PRs (#2587)
• Re-enable the tracing integration tests (#2586)
• Adopt new dependabot conventions (#2609)
• Drop unsupported cooldown.semver-major-days from github-actions block (#2617)
• Open an issue if a scheduled workflow fails (#2627)
• Hash-pin actions and drop zizmor config (#2612)
• Use uv-venv-lock-runner in tracing tox, align deps (#2651)

Commits

• 1fdae24 chore: update changelog and versions for 3.8.1 release (#2669)
• 7989557 docs: switch K8s tutorial charms to rock version of demo server (#2649)
• 92b7bd5 docs: fix typo in explanation of mock_version fixture usage (#2647)
• f49f4c1 docs: remove log_cli and log_file ini options; keep them as cli arguments for...
• 64f68f5 fix: use juju.wait for workload version tests in k8s tutorial (#2650)
• e1e16a4 ci: use uv-venv-lock-runner in tracing tox, align deps (#2651)
• 6e06342 fix: only decode fields used by the data class in Relation.load() (#2636)
• 48e2dee docs: use autofunction for layer_from_rockcraft (#2648)
• 1f3a0ce chore: bump the runtime group across 1 directory with 3 updates (#2629)
• bf9e22f docs: add howto configure jubilant logs (#2619)
• Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc

... (truncated)

Commits

• b0e4702 Bump 0.16.3 (#27723)
• ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
• 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
• 59196ba [ty] Unify polarity-aware relation construction (#27707)
• b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
• 2b0d210 [ty] Centralize matched argument relations (#27705)
• a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
• c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
• 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
• 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
• Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions