[dependabot]

Bumps the python-deps group with 2 updates: ruff and xlsxwriter.

Updates ruff from 0.17.2 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

Commits

• ba65abf Bump version to 0.17.3 (#29745)
• fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
• d181287 [ty] Index nominal union alternatives (#29196)
• 07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
• 95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
• 3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
• 3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
• 2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
• 60f104a [ty] Honor @​override on overload implementations in stubs (#29470)
• 207ec3a [ty] Add diagnostic baseline support (#27636)
• Additional commits viewable in compare view

Updates xlsxwriter from 3.3.0 to 3.3.1

Changelog

Sourced from xlsxwriter's changelog.

Release 3.3.1 - October 28 2026

• Fixed performance issue where positioning objects such as images and comments on a worksheet with a custom default row height.

  :issue:1210.

• Fixed a (different) performance issue where positioning a large number of objects such as comments on a worksheet with custom row heights or column widths.

  :issue:1217.

• Fixed off by one error in the worksheet :func:set_first_sheet() method.

  :issue:1187.

• Fixed issue where :func:autofit() hid a column that had a user defined width narrower than the autofit width.

  :issue:1219.

• Fixed issue where :func:add_table() didn't detect a duplicate header name when a user defined header matched a default ColumnN header.

  :issue:1215.

• Fixed issue where the strings_to_formulas Workbook option didn't prevent :func:write() from converting strings like {=SUM(A1:B1*A2:B2)} to array formulas.

  :issue:1212.

• Fixed :func:set_column() rounding a half-pixel width to the nearest even pixel, which made some widths one pixel narrower than in 3.2.9.

  :issue:1221.

• Fixed unescaped double quotes, and incorrect string lengths for characters such as emojis, in text type conditional formats.

  :issue:1206.

• Fixed issue where "future" functions such as ISFORMULA() weren't prefixed with _xlfn. in :func:conditional_format() and :func:data_validation() formulas. See :ref:formula_future.

  :issue:1171.

... (truncated)

Commits

• af5927c Prep for release 3.3.1
• 5167156 utility: use UTF-16 lengths for Excel string limit checks
• d4f5125 worksheet: handle future functions in conditional format and validation formulas
• 1742949 cond format: fix quotes and lengths in text rules
• f8087a5 worksheet: fix set_column half-pixel rounding
• 27f7a97 worksheet: apply strings_to_formulas option to array formula strings
• 3210175 worksheet: check table headers for duplicates with default names
• be0d80f worksheet: fix autofit() hiding columns with user defined properties
• e5ad575 worksheet: fix perf issue with large number of objects and custom width/height
• a880ecc url: validate hyperlink tooltip length when it is set
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.