Bump the uv group across 1 directory with 2 updates

[dependabot]

Bumps the uv group with 2 updates in the / directory: hydra-optuna-sweeper and mako.

Updates hydra-optuna-sweeper from 1.2.0 to 1.3.0

Release notes

Sourced from hydra-optuna-sweeper's releases.

Hydra 1.3.0

1.3.0 (2022-12-08)

Features:

• Implement _convert_="object" option for instantiate, enabling conversion of non-_target_ structured configs to instances of the backing dataclass / attr class. (#1719)
• Enable layering of the @hydra.main decorator on top of other decorators produced using functools.wraps. (#2303)
• Allow for non-leading dashes in override keys (#2363)
• support specifying an absolute path with --config-path (#2368)
• Support python3.11 (#2443)

Bug Fixes:

• Fix an issue where Hydra's exception-handling logic could raise an AssertionError (#2342)

Links:

• Hydra on pypi
• Hydra 1.3 docs

Changelog

Sourced from hydra-optuna-sweeper's changelog.

1.3.0 (2022-12-08)

Features

• Implement _convert_="object" option for instantiate, enabling conversion of non-_target_ structured configs to instances of the backing dataclass / attr class. (#1719)
• Enable layering of the @hydra.main decorator on top of other decorators produced using functools.wraps. (#2303)
• Allow for non-leading dashes in override keys (#2363)
• support specifying an absolute path with --config-path (#2368)
• Support python3.11 (#2443)

Bug Fixes

• Fix an issue where Hydra's exception-handling logic could raise an AssertionError (#2342)

Commits

• 273ce9c release Hydra v1.3.0 (#2490)
• c48ef19 python3.11 support for plugins (#2489)
• afde761 support Python3.11 (#2418)
• b94f039 Add CodeQL workflow for GitHub code scanning (#2467)
• fe5dd10 Bump version -> 1.3.0.dev2 (#2484)
• b879f18 Add Hydra Ecosystem section to README (#2487)
• 0068ecd disable lints for python <= 3.6
• 8ca2f89 mypy: lint plugins with installed py version
• 842d8df noxfile: extract function _mypy_cmd
• 77a1e36 mypy: pass python-version in noxfile, not in .mypy.ini
• Additional commits viewable in compare view

Updates mako from 1.4.1 to 1.4.2

Release notes

Sourced from mako's releases.

1.4.2

Released: Tue Sep 22 2026

bug

• [bug] [tests] Adjusted the test suite to accommodate for a change in Pygments 2.21.0 where the HtmlFormatter now renders " and ' characters literally rather than as HTML entities, which caused failures in tests that assert against the rendered output of html_error_template().

  References: #440

• [bug] [template] Fixed issue in TemplateLookup where a URI beginning with a drive designator (e.g. C:/../../secret.txt) could bypass the directory traversal check on Windows, allowing reads of arbitrary files outside of the template directory. The check in Template normalized the URI using os.path, which on Windows is ntpath; as ntpath splits the drive designator off and treats the remainder as rooted, the .. segments were absorbed before the check could inspect them. Normalization is now performed with posixpath, which is the same module used by TemplateLookup.get_template() to resolve the URI to a file.

  References: #441

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[amrit110]

Automated fix applied and PR merged

The agentic fix loop successfully fixed this PR and merged it.

✓ Successfully fixed merge_only failures - Modified 0 files - Executed 241 agent actions - (167 info, 32 tool_call, 8 error, 23 tool_result, 11 reasoning)

View PR history on dashboard

AI Engineering Maintenance Bot