Bump the uv-dependency-updates group across 1 directory with 6 updates

[dependabot]

Bumps the uv-dependency-updates group with 6 updates in the /dev/breeze directory:

Package	From	To
flit	4.0.2	4.1.0
flit-core	4.0.2	4.1.0
hatch	1.18.0	1.18.1
prek	0.5.2	0.5.3
boto3	1.43.93	1.43.97
semver	3.0.4	3.1.0

Updates flit from 4.0.2 to 4.1.0

Changelog

Sourced from flit's changelog.

Release history

Version 4.1

• License expressions with named exceptions, the WITH syntax, are accepted (:ghpull:809).
• flit init allows dotted module names, for a component of a namespace package (:ghissue:822).
• Fix line endings in .cmd script wrappers on Windows (:ghpull:824).

Version 4.0.3

• Fix built wheels being created with overly restrictive 0600 permissions instead of the normal, world-readable 0644 (:ghpull:806).

Commits

• 75b1c90 Merge pull request #826 from pypa/prepare-4.1
• b5ad0d7 Add release note about PR #824
• 9fb48c1 Bump version: 4.0.2 → 4.1.0
• a4ea331 Prepare release notes for 4.1
• 337c499 Merge pull request #824 from r3wretrhy/fix-win-cmd-crlf
• 04cfa08 Merge pull request #825 from hxperl/docs-dynamic-fields
• 33be607 doc: list all four fields accepted in project.dynamic
• d538cb4 install: keep explicit CRLF in Windows .cmd wrappers
• 3c92604 Merge pull request #809 from yangfan-yf-yf/fix/spdx-with-exceptions
• 33a7a39 Clarify SPDX WITH version requirement and error message
• Additional commits viewable in compare view

Updates flit-core from 4.0.2 to 4.1.0

Changelog

Sourced from flit-core's changelog.

Release history

Version 4.1

• License expressions with named exceptions, the WITH syntax, are accepted (:ghpull:809).
• flit init allows dotted module names, for a component of a namespace package (:ghissue:822).
• Fix line endings in .cmd script wrappers on Windows (:ghpull:824).

Version 4.0.3

• Fix built wheels being created with overly restrictive 0600 permissions instead of the normal, world-readable 0644 (:ghpull:806).

Commits

• 75b1c90 Merge pull request #826 from pypa/prepare-4.1
• b5ad0d7 Add release note about PR #824
• 9fb48c1 Bump version: 4.0.2 → 4.1.0
• a4ea331 Prepare release notes for 4.1
• 337c499 Merge pull request #824 from r3wretrhy/fix-win-cmd-crlf
• 04cfa08 Merge pull request #825 from hxperl/docs-dynamic-fields
• 33be607 doc: list all four fields accepted in project.dynamic
• d538cb4 install: keep explicit CRLF in Windows .cmd wrappers
• 3c92604 Merge pull request #809 from yangfan-yf-yf/fix/spdx-with-exceptions
• 33a7a39 Clarify SPDX WITH version requirement and error message
• Additional commits viewable in compare view

Updates hatch from 1.18.0 to 1.18.1

Release notes

Sourced from hatch's releases.

Hatch v1.18.1

Added:

• Apply context formatting to the lock-filename environment option so fields such as {env_name} and {matrix:...} are resolved when computing the lock file path.

Fixed:

• Consolidate extras and feature resolution into a single code path, fixing regressions where environment and project extras could be dropped or resolved inconsistently, and always validate undefined features.

• Normalize hyphens in the plugin name when building environment option environment variable names in get_env_var(), so options for hyphenated plugins resolve to the correct variable.

Commits

• 4b17561 release Hatch v1.18.1 (#2426)
• b6aaa1a release Hatchling v1.32.1 (#2425)
• 47f333a Prepare for hatch and hatchling releases (#2424)
• d5f7bfe Fix version metadata to preserve leading zeros in CalVer (#2398)
• cbfc465 Context formatting support for lock-filename (#2412)
• 929362c Mark a few more tests that require Internet access (#2400)
• c9d4e8a Fix env var formatting in get_env_var() function (#2397)
• 84023e0 Some type fixes (#1138)
• ed8e30b Refactor extras so that the logic is in one place (#2382)
• See full diff in compare view

Updates prek from 0.5.2 to 0.5.3

Release notes

Sourced from prek's releases.

0.5.3

Release Notes

Released on 2026-09-13.

Enhancements

• Add PEP 740 attestations for PyPI releases (#2705)
• Add a check-jsonc builtin hook (#2682)
• Allow disabling automatic uv installation (#2702)

Bug fixes

• Fix Julia additional dependency specifiers (#2703)
• Update granit-parser to fix YAML flow indentation (#2707)

Contributors

• @​clbarnes
• @​j178
• @​tisonkun

Install prek 0.5.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.5.3

File	Platform	Checksum
prek-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
prek-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
prek-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
prek-x86_64-pc-windows-msvc.zip	x64 Windows	checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.3

Released on 2026-09-13.

Enhancements

• Add PEP 740 attestations for PyPI releases (#2705)
• Add a check-jsonc builtin hook (#2682)
• Allow disabling automatic uv installation (#2702)

Bug fixes

• Fix Julia additional dependency specifiers (#2703)
• Update granit-parser to fix YAML flow indentation (#2707)

Contributors

• @​clbarnes
• @​j178
• @​tisonkun

Commits

• b7eb602 Bump version to 0.5.3 (#2708)
• 4644f81 Update granit-parser to fix YAML flow indentation (#2707)
• 87f2ea4 Use self-repository syntax in CI workflows
• f39abae Add PEP 740 attestations for PyPI releases (#2705)
• f4924dc Allow disabling automatic uv installation (#2702)
• 156c0ce Fix Julia additional dependency specifiers (#2703)
• c3ede77 Add a check-jsonc builtin hook (#2682)
• c0b9749 Verify checksums for PyPI/mirror wheel installs (#2688)
• fbe5c66 Update prek hooks (#2690)
• 4687a2c Fix check-hooks-apply for builtin Windows filename checks
• Additional commits viewable in compare view

Updates boto3 from 1.43.93 to 1.43.97

Commits

• ed7de96 Merge branch 'release-1.43.97'
• 275709c Bumping version to 1.43.97
• a5c0088 Add changelog entries from botocore
• 2be9967 Merge branch 'release-1.43.96'
• bc62489 Merge branch 'release-1.43.96' into develop
• 6e1774a Bumping version to 1.43.96
• ef6f957 Add changelog entries from botocore
• 238d6ec Update PyPI package summary to add Boto3 (#4846)
• 2d18ca8 Add root workspace folder to gitignore (#4847)
• 3061d22 Merge branch 'release-1.43.95'
• Additional commits viewable in compare view

Updates semver from 3.0.4 to 3.1.0

Release notes

Sourced from semver's releases.

3.1.0

What's Changed

• Fix #463: Remove duplicate code Version.bump_build by @​tomschr in python-semver/python-semver#464
• Fix #460 Improve bump_prerelease to alway get a newer version by @​Learloj in python-semver/python-semver#462
• 441 update pydantic section of docs by @​jbkroner in python-semver/python-semver#442
• Fix #448: Remove Python 3.7-3.9 (EOL) by @​tomschr in python-semver/python-semver#470
• fix: replace semver.parse() with semver.Version.parse() in docstrings by @​koteshyelamati in python-semver/python-semver#471
• fix: next_version should bump version for build-only versions by @​binggao1230 in python-semver/python-semver#469
• fix(next_version): reset prerelease when token changes (#339) by @​Mukller in python-semver/python-semver#472
• Bump cryptography from 49.0.0 to 50.0.0 by @​dependabot[bot] in python-semver/python-semver#473
• Declare support for Python 3.15 by @​edgarrmondragon in python-semver/python-semver#475
• Add optional native parser backend (minimal adapter) by @​lowmiaq-gmail in python-semver/python-semver#476
• Reject non-ASCII digits and trailing newlines in version parsing by @​Str0k in python-semver/python-semver#478
• Fix bump_build() silently returning an unchanged version for digitless build metadata by @​Str0k in python-semver/python-semver#480
• Handle malformed collection operands in Version comparisons by @​Str0k in python-semver/python-semver#479
• Change version to 3.1.0 by @​tomschr in python-semver/python-semver#481

New Contributors

• @​Learloj made their first contribution in python-semver/python-semver#462
• @​jbkroner made their first contribution in python-semver/python-semver#442
• @​koteshyelamati made their first contribution in python-semver/python-semver#471
• @​binggao1230 made their first contribution in python-semver/python-semver#469
• @​Mukller made their first contribution in python-semver/python-semver#472
• @​dependabot[bot] made their first contribution in python-semver/python-semver#473
• @​edgarrmondragon made their first contribution in python-semver/python-semver#475
• @​lowmiaq-gmail made their first contribution in python-semver/python-semver#476
• @​Str0k made their first contribution in python-semver/python-semver#478

Full Changelog: python-semver/python-semver@3.0.4...3.1.0 Documentation: https://python-semver.readthedocs.io/en/latest/

Changelog

Sourced from semver's changelog.

Version 3.1.0

:Released: 2026-09-12 :Maintainer: Tom Schraitle

Bug Fixes

• :pr:478: Version.parse() and Version.is_valid() now reject non-ASCII digits and trailing newlines, in accordance with the SemVer grammar. Optional minor and patch parsing applies the same character restrictions.

• :pr:479: Comparing a :class:~semver.Version with a dict, tuple, or list that cannot construct a valid version (for example, an empty collection, wrong number of parts, non-numeric parts, or unknown keys) no longer raises internal errors from Version.__init__. The comparison operators now return :py:const:NotImplemented for such operands, following the general rule for invalid comparison operand types: equality evaluates to False and ordering raises Python's standard :py:exc:TypeError (for example, '>' not supported between instances of 'Version' and 'dict').

• :pr:480: (:meth:~semver.version.Version.bump_build) will now add .0 to an existing build when the last segment of the current build metadata, split by dots (.), is not numeric. This is to ensure the bumped version contains a raised build instead of silently returning an unchanged version. For example, 1.2.3+alpha is bumped to 1.2.3+alpha.0. This mirrors the corresponding fix for the prerelease part (:gh:460). Related to :gh:466.

• :gh:460: :meth:~semver.version.Version.bump_prerelease will now add .0 to an existing prerelease when the last segment of the current prerelease, split by dots (.), is not numeric. This is to ensure the new prerelease is considered higher than the previous one.

  :meth:~semver.version.Version.bump_prerelease now also support an argument bump_when_empty which will bump the patch version if there is no existing prerelease, to ensure the resulting version is considered a higher version than the previous one.

Features

• :pr:476: Added optional [native] extra to accelerate parsing on CPython via the fast-semver-rs-backend package. The pure-Python parser remains the default; the native backend is opt-in and only available on CPython.

Internal Changes

: Update GitHub Actions for astral-sh/setup-uv (version 0.10.1), github/codeql-action (version 4)

Trivial Changes

• :gh:463: Remove double code in :meth:Version.bump_build

... (truncated)

Commits

• 642d1bc Change version to 3.1.0 (#481)
• 2a2cf63 Suppress deprecation warnings in test suite
• a62477b Improve comparisons and fix test coverage.
• 0aa17a3 Handle malformed collection operands in Version comparisons (#479)
• 1b7350c Improve test coverage to 100% (Rust backend)
• ea2524a Fix bump_build() silently returning an unchanged version for digitless build ...
• 1e87579 Reject non-ASCII digits and trailing newlines in version parsing (#478)
• 0f18aa0 Add optional native parser backend (minimal adapter) (#476)
• 873a675 Declare support for Python 3.15 (#475)
• 99d2032 Bump cryptography from 49.0.0 to 50.0.0 (#473)
• Additional commits viewable in compare view

[potiuk]

@dependabot rebase

[github-actions]

Backport failed to create: v3-3-test. View the failure log Run details

Note: As of Merging PRs targeted for Airflow 3.X
the committer who merges the PR is responsible for backporting the PRs that are bug fixes (generally speaking) to the maintenance branches.

In matter of doubt please ask in #release-management Slack channel.

Status	Branch	Result
❌	v3-3-test

You can attempt to backport this manually by running:

cherry_picker 6b1436e v3-3-test

This should apply the commit to the v3-3-test branch and leave the commit in conflict state marking
the files that need manual conflict resolution.

After you have resolved the conflicts, you can continue the backport process by running:

cherry_picker --continue

If you don't have cherry-picker installed, see the installation guide.