Skip to content

Build(deps): bump pyrefly from 1.3.2 to 1.4.0 in /python - #9840

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/pyrefly-1.4.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/pyrefly-1.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pyrefly from 1.3.2 to 1.4.0.

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.4.0

Release date: October 14, 2026

Pyrefly v1.4.0 bundles 1191 commits from 66 contributors.


Release Highlights

Language Server

  • The VS Code extension now runs the Pyrefly from your environment. By default, the extension launches the Pyrefly installed in your active Python environment (for example, your project's .venv), so your editor and your command line use the same version. If the environment has no Pyrefly, the extension falls back to its bundled binary. Set pyrefly.pyreflyExecutable to bundled to keep the old behavior. See Pyrefly binary selection.

Configuration & CLI

  • uv workspace members are now type checked. In a uv workspace, the interpreter puts each member's source directory on sys.path as an editable install. Pyrefly treated those directories as installed packages and skipped them, so errors in workspace members went unreported. Pyrefly now checks editable sources inside your project, while regular site-packages stay excluded.

Type Checking

  • Easier migration from BasedPyright. Pyrefly reads basedpyright sections in pyproject.toml and applies the matching type checking mode preset.
  • New opt-in checks for untyped code. New error kinds such as unknown-member-type, unknown-return-type, untyped-function-decorator, and uninitialized-instance-variable help you find where Any enters your code.

Tensor Shapes

  • JAX shape stubs on PyPI. This is the first stable release that ships JAX shape stubs as the jax-pyrefly-stubs package.

⚠️ Behavior Changes

These may change your editor setup or surface new errors in code that checked cleanly under v1.3.0.

  • The VS Code extension now uses the Pyrefly in your active environment by default instead of its bundled binary. If your environment pins an older Pyrefly, the editor now runs that version. The Pyrefly language server output channel shows which binary was chosen and why.
  • Pyrefly now checks the source of uv workspace members (editable installs inside your project). Errors in those packages that were hidden before can now appear.
  • --typeshed-path now replaces the bundled typeshed entirely instead of overlaying it.
  • The incompatible-overload-residual error kind is renamed to incompatible-overload-argument. The old name still works as a deprecated alias.
  • site-package-path is renamed to site-packages-path. The old name still works.

✨ New & Improved

Type Checking

  • Pyrefly now recognizes basedpyright configuration sections in pyproject.toml and applies appropriate type checking mode presets, making it easier to migrate from BasedPyright.
  • TypedDict handling has been significantly improved: generic extra_items are now instantiated correctly, extra items can supply missing arguments, and definitely_seen calculation in callable checking has been fixed.
  • TypeVar restriction checking is now enforced even when the expected type is gradual, preventing silent violations of TypeVar bounds and constraints when Any appears in the expected type.
  • Improved handling of overloaded function arguments in generic function calls through a new overload table mechanism, replacing the previous residual-based approach. The incompatible-overload-residual error kind has been renamed to incompatible-overload-argument (the old name remains as a deprecated alias).
  • Variance inference has been improved with fixes for nested variance reliability bugs and explicit stored variance evidence.
  • Property decorator validation now reports invalid signatures with extra required parameters.

... (truncated)

Commits
  • feeee25 cut 1.4.0 (pick onto fbcode/releases/pyrefly/v1.4)
  • e6294fc Ignore return-only vars when an overload decides whether it wins (#5241)
  • 1c1516f Test an overloaded protocol method whose return var is invariant
  • 5327270 Accept bare arrays with symbolic shapes
  • 4e9f88b Reject python-version below 3.5 instead of crashing
  • d142f67 Document bare shaped array incompatibility
  • 96f8820 Extend the test for constructors with several matching overloads
  • ea8421d Reject an overload that violates a restriction under a gradual expected type ...
  • 03e1ade Cover restriction violations under a gradual expected type in overloaded cons...
  • 2adc991 Respect custom new inherited from an intermediate NamedTuple subclass (#5...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Usage: [Issues, PRs], Target: dependencies in the project python Usage: [Issues, PRs], Target: Python labels Oct 29, 2026
Copilot AI balanced review requested due to automatic review settings October 29, 2026 14:44
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 14:44 Inactive
@github-actions github-actions Bot changed the title Build(deps): bump pyrefly from 1.3.2 to 1.4.0 in /python Python: Build(deps): bump pyrefly from 1.3.2 to 1.4.0 in /python Oct 29, 2026
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 14:45 Inactive

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The Pyrefly version update has no active review issues.

No open issues 🎉

What changed in this PR

Updates Pyrefly in the Python typing-tool requirements from 1.3.2 to 1.4.0, adopting the newer type checker without changing application code.

Changes:

  • Bumps the pinned Pyrefly version; all other typing-tool pins remain unchanged.
File Description
python/​tooling/​requirements-typing.txt Updates pyrefly to version 1.4.0.

Review effort: Balanced

@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 15:12 Inactive
@dependabot dependabot Bot changed the title Python: Build(deps): bump pyrefly from 1.3.2 to 1.4.0 in /python Build(deps): bump pyrefly from 1.3.2 to 1.4.0 in /python Oct 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python/pyrefly-1.4.0 branch from 1f47288 to de23eb7 Compare October 29, 2026 15:14
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 15:14 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 15:14 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 18:00 Inactive
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 1.3.2 to 1.4.0.
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](meta/pyrefly@1.3.2...1.4.0)

---
updated-dependencies:
- dependency-name: pyrefly
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 18:02 Inactive
@dependabot
dependabot Bot force-pushed the dependabot/uv/python/pyrefly-1.4.0 branch from de23eb7 to 3dd4edb Compare October 29, 2026 18:02
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 18:02 Inactive
@dependabot
dependabot Bot temporarily deployed to github-app-auth October 29, 2026 18:02 Inactive
@eavanvalkenburg

Copy link
Copy Markdown
Member

Dependabot (@dependabot)[bot], thanks for the update. This PR has the same complete pyrefly 1.3.2 → 1.4.0 diff as the older #9838, so I’m closing this duplicate and keeping the earlier PR as the single update.

@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/uv/python/pyrefly-1.4.0 branch October 30, 2026 08:07

This branch was previously deployed

1 inactive deployment
github-app-auth — 3dd4edb9 Deployed Oct 29, 2026 by dependabot[bot] via add_label #26577
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Usage: [Issues, PRs], Target: dependencies in the project python Usage: [Issues, PRs], Target: Python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants