[dependabot]

Updates the requirements on pandas, python-socks, litellm, certifi, akshare, msgpack, reportlab, tigeropen, pytest and ruff to permit the latest version.
Updates pandas to 3.1.0

Release notes

Sourced from pandas's releases.

pandas 3.1.0

We are pleased to announce the release of pandas 3.1.0. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

Highlights include:

• New DataFrame.select() and updated DataFrame.filter() method
• Faster pd.read_csv(), with parallel reads of large files

See the detailed release notes for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade pandas

Or from conda-forge

conda install -c conda-forge pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• c6f4676 RLS: 3.1.0
• dd69475 Backport PR #71468 on branch 3.1.x (DOC: 3.1 whatsnew: add some structure to ...
• 4ccc19a Backport PR #71465 on branch 3.1.x (DOC: update announce (contributor listing...
• 24dae63 [backport 3.1.x] DOC: cleanup 3.1.0 whatsnew (#71408) (#71466)
• 8519ca6 [backport 3.1.x] CI: temporary pin dateutil to <3 (#71461) (#71464)
• 2126193 Backport PR #71387 on branch 3.1.x (BUG: fix string regex operations with $ e...
• 4700f5d Backport PR #71442 on branch 3.1.x (BUG: parallel read_csv raising released m...
• 08efb14 Backport PR #71456 on branch 3.1.x (TST: Fix test_reduce_array until reduct...
• ee8dcb7 Backport PR #71429 on branch 3.1.x (DOC: add dedicated 3.1 whatsnew section f...
• d93e32c Backport PR #71383 on branch 3.1.x (BUG: fix string regex operations with Pyt...
• Additional commits viewable in compare view

Updates python-socks to 3.2.0

Release notes

Sourced from python-socks's releases.

v3.2.0

Send HTTP proxy authentication for empty passwords by @​omrzk (#50)

Commits

• 1427381 Bump version
• 377d3b9 Merge pull request #50 from omrzk/fix/http-empty-password
• 9e2778d Send HTTP proxy authentication for empty passwords
• See full diff in compare view

Updates litellm to 1.106.5

Release notes

Sourced from litellm's releases.

v1.106.5

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.5

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.5

1 PR. 1 changed. No action needed to upgrade

Changes

• Logging and observability: Changed failure logs for rejected requests to keep only core request fields, tags and guardrail details (#48599) Also in 1.103.10, 1.104.8, 1.105.6
• Logging and observability: Changed the GCS logger to use the bucket and credentials configured on the proxy (#48599) Also in 1.103.10, 1.104.8, 1.105.6

---

Backport #48605 · Full changelog

Commits

• 2569eb8 Merge pull request #48605 from BerriAI/litellm_backport_48599_stable_1_106_x
• 5197c97 bump: version 1.106.5
• fb0506d fix(proxy): merge only dict client metadata into pass-through logging
• 6566067 fix(proxy): always strip client guardrail info and mirror failure attribution...
• 116dd05 fix(proxy): keep allowlisted metadata in proxy-only failure logs
• 97474e4 fix(proxy): drop caller metadata from proxy-only failure logs
• dd8d12d fix(proxy): build proxy-only failure logs from an allowlist and ignore reques...
• ea7ca16 Merge pull request #48300 from BerriAI/lens-runtime-1.106
• 8c3bd28 build(deps): bump webpki-roots and webpki-root-certs to 1.0.11
• 020f635 build(docker): move the lens image to the newer wolfi-base
• Additional commits viewable in compare view

Updates certifi to 2026.10.23

Commits

• b60466c 2026.10.23 (#445)
• See full diff in compare view

Updates akshare to 1.20.1

Changelog

Sourced from akshare's changelog.

1.20.18 fix: remove pandas and Python deprecated usages

1. get_receipt 中 2014 年以前上期所与 2010 年以前郑商所仓单的处理代码使用了 pandas 3 已移除的 fillna(method=...)，改用 ffill()；这两段历史数据所依赖的上游页面目前本身也无法访问
2. 将 pro 客户端与一个未导出的辅助函数中的 DataFrame.append（pandas 2 已移除）改为 pd.concat
3. stock_zh_a_daily 不再发出 Pandas4Warning: Indexing a DatetimeIndex with a sequence of datetime.date objects is deprecated，该写法在 pandas 4 中将报错；返回结果不变
4. 删除 stock_us_daily、stock_zh_kcb_daily、stock_financial_report_sina 等接口中兼容 pandas 2.1 以前版本的回退代码，pandas 下限已是 2.2.2
5. 内置数据文件的路径改用 importlib.resources.files()，不再发出 Python 3.11 起的 DeprecationWarning: path is deprecated
6. 测试中由 akshare 代码触发的 DeprecationWarning 与 FutureWarning 改为报错，在最低与最新版本依赖下均无此类警告

(v1-20-17)=

1.20.17 fix: fix option_comm_info and futures_inventory_99, remove article_oman_rv

1. 修复 option_comm_info、option_comm_symbol 接口：九期网拒绝不带浏览器请求头的请求并返回 403，接口报 'NoneType' object has no attribute 'find_all'；现在带上请求头。同时修正“手续费更新时间”一列：上游文字改为“期权手续费更新时间”后，原先的写法会残留前缀文字；品种名称不存在时抛出 InvalidParameterError
2. 修复 futures_inventory_99 接口：代码中写死的 _pcc 令牌已过期，数据接口返回 HTTP 412，接口报 JSONDecodeError；现在每次调用时向 fx168 重新获取令牌
3. 移除 article_oman_rv、article_oman_rv_short 接口：Oxford-Man Institute 已停止提供 Realized Library，数据站点 realized.oxford-man.ox.ac.uk 已下线，官方说明没有替代计划。同一模块的 article_rlab_rv 不受影响

(v1-20-16)=

1.20.16 fix: enable TLS certificate verification for all requests

1. 恢复全部请求的证书校验：原先 51 处请求关闭了证书校验（verify=False），可能被中间人篡改数据。逐站实测，其中 38 处所在站点的证书完全正常，直接恢复校验；涉及中国证券投资基金业协会（amac_*）、北京碳排放权交易平台、义乌指数、九期网、福布斯中国、国泰君安期货等
2. 申万宏源研究（index_hist_sw、index_realtime_sw、index_analysis_daily_sw 等 8 个接口）的服务器缺少中间证书，浏览器会自动补全而程序不会，这是原先关闭校验的原因；现在随包附带该中间证书（由 DigiCert Global Root G2 签发，有效期至 2032 年），恢复校验
3. 删除 9 处 urllib3.disable_warnings 调用：它对整个进程生效，导入这些模块后，用户自己程序中的证书警告也会被屏蔽
4. 修复 forbes_rank 接口报 FileNotFoundError：新版 pandas 不再把 read_html 收到的文本当作网页内容

(v1-20-15)=

1.20.15 fix: make result order deterministic and fix futures_gfex_warehouse_receipt

1. 修复 get_shfe_rank_table、get_rank_sum 等接口每次运行返回顺序不同的问题：原先遍历 set 去重，Python 对字符串的哈希每个进程随机，同一份上游数据每次得到的行序或字典键序都不一样；现在按上游数据中首次出现的顺序。涉及 get_shfe_rank_table、get_cffex_rank_table、get_rank_sum、get_roll_yield_bar、futures_shfe_warehouse_receipt、futures_gfex_warehouse_receipt，返回内容不变
2. 修复 futures_gfex_warehouse_receipt 接口报 KeyError: "['whType'] not in index"：广州期货交易所不再返回 whType 字段，原先据此过滤“小计”“总计”行；现在按仓库名为空过滤，结果与文档示例一致

(v1-20-14)=

1.20.14 fix: honor ak.set_timeout everywhere and fix stock_zh_a_daily for delisted stocks

1. 删除接口代码中写死的请求超时：29 个模块中 45 处 timeout=15、30 等写死的值，以及约 60 个东方财富翻页接口共用的 fetch_paginated_data 的默认超时，使这些接口不受 ak.set_timeout 控制；现在全部使用全局超时，默认连接 10 秒、读取 60 秒。下载数十 MB 历史压缩包的 fred_md、fred_qd 保留更长的超时
2. 修复 stock_zh_a_daily 查询已退市股票（如 sh600001）报 JSONDecodeError 的问题：新浪仍提供其历史行情，但没有股本数据；现在照常返回行情，outstanding_share 与 turnover 为空并给出警告
3. stock_zh_a_daily 查询不存在的代码时，由 KeyError: 'date' 改为抛出 InvalidParameterError 并提示检查股票代码

(v1-20-13)=

1.20.13 fix!: remove timeout parameter and accept text values for numeric parameters

不兼容的改动：删除 13 个接口的 timeout 参数，超时统一由 ak.set_timeout 设置。 涉及 stock_zh_a_hist、stock_zh_a_hist_tx、stock_individual_info_em、stock_individual_spot_xq、stock_individual_basic_info_xq、stock_individual_basic_info_us_xq、stock_individual_basic_info_hk_xq，以及 fund_individual_basic_info_xq、fund_individual_achievement_xq、fund_individual_analysis_xq、fund_individual_profit_probability_xq、fund_individual_detail_info_xq、fund_individual_detail_hold_xq。原先传 timeout 的调用会报 TypeError，请删去该参数，改为在程序开头调用 ak.set_timeout(秒数)。

1. 删除上述接口的 timeout 参数：全部 1000 余个接口中只有这 13 个单独提供该参数；其默认值 None 原先等于不设超时，ak.set_timeout 对它们不起作用；以文本传入时（如经 AKTools 的 stock_zh_a_hist?timeout=5）还会报 Timeout value … must be an int, float or None。现在这些接口与其他接口一样使用全局超时，默认连接 10 秒、读取 60 秒
2. 要求整数或布尔值的参数同时接受文本，便于经 HTTP、MCP 或配置文件调用：fund_fh_em、fund_cf_em 的 page，bank_fjcf_table_detail 的 page 与 begin，search 的 limit 与 documented_only。原先 page="-1" 被当作第 -1 页，documented_only="false" 被当作真；无法转换时抛出 InvalidParameterError

(v1-20-12)=

1.20.12 perf: reduce requests of sina macro interfaces

1. 新浪财经宏观数据接口由每页 31 条改为每页 1000 条：macro_china_insurance 一次调用的请求数由 307 次降到 10 次，耗时由约 83 秒降到约 4 秒；macro_china_retail_price_index、macro_china_supply_of_money、macro_china_society_electricity 等共 8 个接口同样受益，返回结果不变
2. macro_china_society_traffic_volume、macro_china_postal_telecommunicational 保持每页 31 条：其上游按“非累计”“累计”两组返回数据，按页切分的结果随页长变化，1000 条一页会漏掉 2021 年 1 月等月份

... (truncated)

Commits

• 58d358f build: 发布 1.20.1
• 5905744 ci: PyPI 发布改用 Trusted Publishing
• 6adbb23 build!: 移除 Docker 镜像与相关文档
• 4b26c3b ci: 发布 tag 改为通行的 vX.Y.Z 格式
• 13154a2 build(docker): 更新 AKTools 与 Jupyter 镜像的 Dockerfile
• dbc2d91 build: 删除多余的 setup.py
• ca6c56b docs: 全站顶部增加 AKQuant 推荐公告横幅
• ad7a49f docs: 全站顶部增加 AKQuant 推荐公告横幅，删除不再使用的公众号宣传图
• 4924a7d docs: 首页推荐区增加期魔方，公众号区块改为紧凑横幅
• a9f28d7 docs(trade): 实盘交易页增加期魔方工具推荐卡片
• Additional commits viewable in compare view

Updates msgpack to 1.2.4

Release notes

Sourced from msgpack's releases.

v1.2.4

What's Changed

• fallback: pass object_pairs_hook a list of pairs by @​youdie006 in msgpack/msgpack-python#744
• fallback: leave the object unread when a header type does not match by @​Shaisolaris in msgpack/msgpack-python#748
• Bump the all-dependencies group with 3 updates by @​dependabot[bot] in msgpack/msgpack-python#749
• fallback: return bytes from Unpacker.read_bytes by @​Cherith1222 in msgpack/msgpack-python#747
• Run tracemalloc tests sequentially by @​methane in msgpack/msgpack-python#758
• ci: bump the all-dependencies group with 3 updates by @​dependabot[bot] in msgpack/msgpack-python#757
• Prepare v1.2.4 release by @​methane in msgpack/msgpack-python#756

New Contributors

• @​youdie006 made their first contribution in msgpack/msgpack-python#744
• @​Shaisolaris made their first contribution in msgpack/msgpack-python#748
• @​Cherith1222 made their first contribution in msgpack/msgpack-python#747

Full Changelog: msgpack/msgpack-python@v1.2.3...v1.2.4

Changelog

Sourced from msgpack's changelog.

1.2.4

Release Date: 2026-10-27

• Limit container preallocation to 10000 items to prevent excessive memory allocation from deeply nested, large array or map headers. Larger containers grow as their contents are decoded; max_array_len and max_map_len still limit their total size. See GHSA-j8c6-9vc5-hj6x.
• Pass a list of pairs to object_pairs_hook in the pure Python unpacker, ensuring that the entire map is consumed even if the hook does not iterate over its argument. #744
• Leave the next object unread when read_array_header() or read_map_header() raises ValueError for a mismatched type in the pure Python unpacker. #748
• Return bytes from Unpacker.read_bytes() in the pure Python implementation, matching the C extension. #747
• Update GitHub Actions dependencies, including cibuildwheel to 4.3.1. #749

1.2.3

Release Date: 2026-09-29

• Fix memory leaks in the C extension when map key validation or container hooks fail. See GHSA-j586-36cw-2gc2.
• Fix use-after-free errors when cleaning up an incomplete or failed Unpacker.skip() after previously unpacking a nested object in the C extension.
• Raise ValueError in the C extension when switching between unpacking, skipping, header readers, or read_bytes() while an object is incomplete. Resume with the same method after feeding more data; unpack() and iteration remain interchangeable.
• Prevent reentrant unpacking, header reads, read_bytes(), and reinitialization of the same C Unpacker while unpacking is in progress.
• Reject negative sizes in Packer.pack_array_header() and Packer.pack_map_header(). #742
• Support packing Python 3.15 frozendict objects. #738
• Update Cython from 3.2.5 to 3.3.0. #738
• Build wheels for Pyodide using Emscripten. #732
• Update cibuildwheel to 4.2.1 and the QEMU setup action to 4.4.0. #741

1.2.2

Release Date: 2026-08-27

• Fix the read_size documentation. #700
• Fix silent truncation when unpacking an out-of-range timestamp with timestamp=3. #701
• Prevent reentrant calls to Unpacker.feed() while unpacking. #704
• Improve error handling and reporting in unpacking functions. #707
• Fix Timestamp.from_datetime() precision for far-future datetimes. #710
• Fix typos in the documentation. #712
• Validate the nanoseconds range when unpacking timestamps in the C extension. #716

... (truncated)

Commits

• a284599 Prepare v1.2.4 release (#756)
• 4d189e7 ci: bump the all-dependencies group with 3 updates (#757)
• 4ad53ce Run tracemalloc tests sequentially (#758)
• d2876cd Merge commit from fork
• 3650629 Update SECURITY.md
• 874b828 fallback: return bytes from Unpacker.read_bytes (#747)
• 587c2a3 ci: update actions (#749)
• cfba337 fallback: leave the object unread when a header type does not match (#748)
• 51428c4 fallback: pass object_pairs_hook a list of pairs (#744)
• See full diff in compare view

Updates reportlab to 5.1.0

Updates tigeropen from 3.7.2 to 3.8.0

Changelog

Sourced from tigeropen's changelog.

3.8.0 (2026-09-17)

New

• 新增 OAuth2 授权方式，可替代 tigerId + 私钥签名：OAuth2SessionManager 完成授权并管理令牌，config.authentication = OAuth2Authentication(sessions) 接入客户端。令牌保存在 ~/.tiger/openapi/，过期自动续期，代码与配置中都不再需要私钥
• 推送支持 OAuth2，令牌临近过期时在连接上直接续期，不断开重连
• CLI 新增 tigeropen auth 命令组（login / logout / status / token）；config init 可选择 OAuth2；新增全局选项 --account

兼容性

• 已有的 tigerId + 私钥签名方式不受影响；不设置 authentication 即沿用签名方式

Commits

• 605e792 Merge branch 'feat_oauth2' into 'master'
• 1a44b48 release: bump version to 3.8.0
• 9b3598d Merge branch 'master' into feat_oauth2
• 78a15f9 fix(cli): actually remove the CLI's OAuth2 credentials on uninstall
• 86cfbc9 fix(cli): actually remove the CLI's OAuth2 credentials on uninstall
• a7e9930 fix(cli): register under the CLI's own application name
• 45a6c1a fix(cli): resolve settings once, and pick defaults a command line can actuall...
• a11c38f fix(cli): resolve settings once, and pick defaults a command line can actuall...
• c16e4ab docs(oauth2): state why the licence is left unresolved
• 90399e1 Merge branch 'feat_oauth2_cli' into 'feat_oauth2'
• Additional commits viewable in compare view

Updates pytest to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

• #14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

• #8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

  Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

• #993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

  • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
  • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

  pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

• #14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

• #14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

• #14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

  They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

• #14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

• #7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

• #14743: Full diff: now contains a legend explaining the + & - symbols in diff output.
• #2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.
• #6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

• #10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits

• ae1d0ff Prepare release version 9.2.0
• 143ce31 pre-commit: exclude codespell on generated release announcements
• 532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
• a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
• 679d09c [pre-commit.ci] pre-commit autoupdate (#15266)
• 41d12cd docs: clarify typing for yield fixtures
• b9022ba Merge pull request #15182 from 1871698/docs/improve-getting-started-description
• 16f87a7 docs: improve getting-started.rst test execution description
• 082ed70 Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6
• ae37a01 Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4
• Additional commits viewable in compare view

Updates ruff to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

0.17.2

Released on 2026-10-22.

Preview features

• [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

• Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
• [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
• [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
• [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
• [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

• Avoid intermediate names in lint name resolution (#29506)
• Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
• Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

• ba65abf Bump version to 0.17.3 (#29745)
• fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
• d181287 [ty] Index nominal union alternatives (#29196)
• 07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
• 95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
• 3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
• 3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
• 2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
• 60f104a [ty] Honor @​override on overload implementations in stubs (#29470)
• 207ec3a [ty] Add diagnostic baseline support (#27636)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!