Skip to content

chore(deps): Bump pyproject-fmt from 2.28.1 to 2.29.0 - #3520

Merged
adamtheturtle merged 2 commits into
mainfrom
dependabot/uv/pyproject-fmt-2.28.2
Sep 3, 2026
Merged

chore(deps): Bump pyproject-fmt from 2.28.1 to 2.29.0#3520
adamtheturtle merged 2 commits into
mainfrom
dependabot/uv/pyproject-fmt-2.28.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps pyproject-fmt from 2.28.1 to 2.29.0.

Release notes

Sourced from pyproject-fmt's releases.

pyproject-fmt/2.29.0

Changed

  • A string measures from the start of its key. A long key can be what pushes a value past column_width; measuring the value alone left lines running past the column the setting asks for. (#448)
  • Deep input comes back as an error rather than a crash. Reading a value, writing it and dropping it each walk it by calling themselves, so the model caps nesting at 256 levels. A 12,000-deep value used to end the process. (#448)

Fixed

  • A requirement written with a space after its operator reads as a requirement. requires-python = ">= 3.12" did not parse as a version bound, so the generated classifiers fell back to the configured floor and ceiling. pypa/build carried a 3.9 classifier it does not support. (#448)
  • The classifier window works at patch precision. requires-python = "<3.10.1" lost the whole 3.10 series, and claimed Programming Language :: Python :: 3 :: Only for a bound that admits Python 2. (#448)
  • A literal string sorts with the values around it. 'zz' and 'aa' held their order while the same values in double quotes sorted. (#448)
  • A comment written before a member's comma stays on that member's line. The comma is what says which member a comment belongs to: one written before it closes that member's line, one written after it leads the next member. Both used to end up on a line of their own, leaving the comma stranded below. (#448)
  • classifiers written as a string stays as written. Asking for generated classifiers replaced the string with an array, losing what the file said. (#448)
  • Folding sub-tables into their parent no longer depends on the order the file wrote them in. (#448)
  • The key order covers pyrefly's documented option names. It spells them with hyphens, the order listed only the underscore forms, and a file using the documented spelling fell through to alphabetical order. (#448)
  • A dependency group keeps its include-group entries where the file wrote them. An include-group pulls its group in at the point it sits, so moving it changes what the group resolves to. (#448)
  • Free-form license text stays as written. license = "MIT or later" came back rewritten as though it were an SPDX expression; the formatter now rewrites the value only once it parses as one over registered identifiers. (#448)
  • The * catch-all in a setuptools data table matches the way the file spells it. * is not a name TOML reads bare, so a file writes it quoted; the catch-all led the table only because a quote happens to sort before a letter. (#448)

Performance

  • The quadratic walks the old parse tree forced are gone. 32,000 interleaved root keys under two tables took 618 seconds and now take 4.8; scaling is close to linear. (#448)

Known issue

  • This release's source distribution names a dependency on toml-fmt-common without carrying it, and the newest release of that package on PyPI dates from May. A build from the sdist therefore runs an older settings reader against this formatter. 2.29.2 carries the sources. The wheels hold their vendored copy and install as before. (#450)

pyproject-fmt/2.28.2

Fixed

  • A file keeps the line endings it was written with. A CRLF file came back LF, turning every line of a Windows checkout into a diff. (#447)
Commits
  • d338af8 Release pyproject-fmt 2.29.0 [skip ci]
  • 74c8657 🔧 chore: drop the per-package changelog files (#449)
  • 6dc54b1 ✨ feat: replace tombi with an in-repo TOML model (#448)
  • 5659261 Release pyproject-fmt 2.28.2 [skip ci]
  • 01e2afb ✨ feat(common): keep the file's own line endings (#447)
  • c9383e1 build(deps): bump taiki-e/install-action from 2.86.1 to 2.86.3 in the github-...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
@adamtheturtle

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@adamtheturtle

Copy link
Copy Markdown
Member

@dependabot recreate

dependabot Bot and others added 2 commits September 3, 2026 11:42
Bumps [pyproject-fmt](https://github.com/tox-dev/toml-fmt) from 2.28.1 to 2.29.0.
- [Release notes](https://github.com/tox-dev/toml-fmt/releases)
- [Commits](tox-dev/toml-fmt@pyproject-fmt/2.28.1...pyproject-fmt/2.29.0)

---
updated-dependencies:
- dependency-name: pyproject-fmt
  dependency-version: 2.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant