[dependabot]

Bumps the uv-minor-and-patch group with 3 updates: deepagents, playwright and ruff.

Updates deepagents from 0.7.32 to 0.7.35

Release notes

Sourced from deepagents's releases.

deepagents==0.7.35

Bug Fixes

• Keep forked subagents on their parent's prompt-cache prefix (#7628).
• Preserve symlink names in virtual filesystem results (#7618).
• Correctly mark read_file media and Nemotron nudges as harness notifications (#7589).

Full changelog

---

Special thanks to everyone who reported the issues addressed in this release: @​phn-code (#7593)

Internal maintainers: @​ccurme, @​mdrxy, @​sera-wi

Released by: @​mdrxy

This commit history includes changes to this package. The most recent commit is at the top; older commits follow below.

• 18930b5 release(deepagents): 0.7.35 (#7590)
• e3cb6bb fix(sdk): keep forked subagents on the parent's prompt-cache prefix (#7628)
• 2a4c5fa fix(sdk): preserve symlink names in virtual filesystem results (#7618)
• d848f21 chore(deps): raise dependency minimums (#7595)
• eb81f68 fix(sdk): mark read_file media and Nemotron nudges as harness notifications (#7589)
• 8827787 chore(deps): raise dependency minimums (#7577)
• eeb4721 test(sdk): pre-create blobs dir in multi-blob resume test (#7575)

deepagents==0.7.34

Bug Fixes

• Fixed summarization cutoff handling by anchoring it to the message ID (#7567).

Full changelog

---

Internal maintainers: @​sera-wi

Released by: @​mdrxy

This commit history includes changes to this package. The most recent commit is at the top; older commits follow below.

... (truncated)

Commits

• 18930b5 release(deepagents): 0.7.35 (#7590)
• 3035b49 ci(infra): run text hygiene as its own job with inline annotations (#7633)
• a54d5e3 fix(infra): write plain quotes in curated release notes (#7632)
• e3cb6bb fix(sdk): keep forked subagents on the parent's prompt-cache prefix (#7628)
• 91b17f4 feat(code): tag offload traces with what triggered them (#7630)
• a21f53a fix(talon): avoid stale WhatsApp Web cache on startup (#7631)
• 3c66946 fix(infra): retry trailer lint commit scan when branch changes mid-run (#7629)
• 0a00a66 chore(deps): raise dependency minimums (#7627)
• 316aee2 feat(code): make idle compaction settings filterable in traces (#7624)
• dbb8ab1 fix(talon): avoid duplicate subagent result delivery (#7619)
• Additional commits viewable in compare view

Updates playwright from 1.64.1 to 1.65.0

Release notes

Sourced from playwright's releases.

v1.65.0

🧾 Locator code in Python

A locator from locator.normalize() now converts to a string as Python code. Use it with page.get_by_ref() to turn an element that an agent picks from a page.aria_snapshot() in the "ai" mode into code for your test:

normalized = page.get_by_ref("e2").normalize()
print(str(normalized))
# get_by_role("button", name="Submit")

New APIs

• New option timeout in cdp_session.send().

Notable Fixes ⚠️

• Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.select_option() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert.

• Cookie matching now follows RFC 6265. With a URL, browser_context.cookies() and api_request_context.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name.

• Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use http_credentials.

• Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.get_by_role() with a name, locator.aria_snapshot() and expect(locator).to_match_aria_snapshot().

• String values of the params option in APIRequestContext requests are now appended to the query that the URL already has, instead of replacing it.

Announcements

• 🐍 The Python client is now a line-by-line port of the Node.js client, so it behaves the same way. The API did not change. If you see a change in behavior, file an issue.
• 📦 Playwright now publishes a source distribution next to the wheels. It does not include Node.js, so installs that do not accept wheels now work, such as pip install --no-binary :all: and Poetry with installer.no-binary. An install from the source distribution uses a pre-installed Node.js that you set with PLAYWRIGHT_NODEJS_PATH.
• 🧩 pyee is not a dependency anymore, so it no longer conflicts with packages that need a different version of it.

Browser Versions

• Chromium 158.0.8127.18
• Mozilla Firefox 159.0
• WebKit 27.2

This version was also tested against the following stable channels:

• Google Chrome 157
• Microsoft Edge 156

Commits

• 18175f8 chore: roll Playwright to 1.65.0 (a1f35e1955) (#3327)
• 6bd6aaa devops: wait 7 days before Dependabot proposes pip updates (#3325)
• 1e2746c devops(bots): pin the shared actions to a commit SHA (#3319)
• 015115d fix(deps): remove unused pyee runtime dependency (#3316)
• df2bf0b chore: roll Playwright to 1.66.0-next (0ea3691032) (#3318)
• 989329c devops(roll): open the pull request with publish-calls (#3317)
• 188e1e2 fix(sync): deactivate resume callbacks when waits end (#3311)
• 8ff9ba6 devops: update pipelines checkout step (#3313)
• e67101f devops(docker): add .dockerignore for the Docker build context (#3314)
• 0fcb2ee devops(bots): publish the agent's GitHub writes as typed calls (#3310)
• Additional commits viewable in compare view

Updates ruff from 0.14.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

• [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
• [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

• Accept a bare raise before a semicolon (#29761)
• Allow match identifiers after a semicolon (#29760)
• Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
• [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

• Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

• Coalesce source slices when formatting attributes (#29841)
• Collect return statements with a statement-only visitor (#29911)
• [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
• Format node fields directly when comment handling is unnecessary (#29853)
• Reduce formatter source-slice overhead (#29855)
• Reuse a callee's qualified name across lint rules (#29916)
• Skip invalid string character checks when the source contains none (#29883)
• Use a Bloom filter for formatter comment lookups (#29852)
• Use a concrete buffer for ordinary writes (#29819)

CLI

• Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
• Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

• Correct the documented version and src defaults for ruff-action (#29880)
• [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
• [flake8-no-pep420] Document preview behavior (INP001) (#29764)
• [isort] Expand I001 documentation (#29843)

Other changes

• [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

• [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
• [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

• Accept a bare raise before a semicolon (#29761)
• Allow match identifiers after a semicolon (#29760)
• Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
• [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

• Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

• Coalesce source slices when formatting attributes (#29841)
• Collect return statements with a statement-only visitor (#29911)
• [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
• Format node fields directly when comment handling is unnecessary (#29853)
• Reduce formatter source-slice overhead (#29855)
• Reuse a callee's qualified name across lint rules (#29916)
• Skip invalid string character checks when the source contains none (#29883)
• Use a Bloom filter for formatter comment lookups (#29852)
• Use a concrete buffer for ordinary writes (#29819)

CLI

• Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
• Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

• Correct the documented version and src defaults for ruff-action (#29880)
• [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
• [flake8-no-pep420] Document preview behavior (INP001) (#29764)
• [isort] Expand I001 documentation (#29843)

Other changes

• [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits

• 05cdc36 Bump version to 0.17.4 (#30073)
• c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
• 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
• 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
• 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
• 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
• c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
• c9150f0 Add project walltime benchmarks for Ruff (#30061)
• 64989ec [ty] Report invalid module globs once per override pattern (#30031)
• 367a563 [ty] Fix conditional type and tuple annotations (#29987)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions