Bump black from 26.3.1 to 26.5.0

[dependabot]

Bumps black from 26.3.1 to 26.5.0.

Release notes

Sourced from black's releases.

26.5.0

Highlights

• Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
• Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

• Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
• Add syntactic support for Python 3.15 (#5048)
• Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
• Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

• Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
• Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
• Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

• Run CI on 3.15 (#5127)

Output

• Improve parse error readability by showing multi-line output with an error pointer. (#5068)
• Add SourceASTParseError to distinguish source parse failures from internal safety errors, improving error reporting when Black's lenient parser accepts input that ast.parse() rejects (#5080)

Blackd

• Return HTTP 400 (Bad Request) for source parse failures instead of HTTP 500, keeping HTTP 500 only for genuine internal safety errors (#5080)

Integrations

• Added documentation for doctest formatting tools and updated the integrations index to match (#4916)

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.0

Highlights

• Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
• Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

• Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
• Add syntactic support for Python 3.15 (#5048)
• Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
• Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

• Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
• Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
• Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

• Run CI on 3.15 (#5127)

Output

• Improve parse error readability by showing multi-line output with an error pointer. (#5068)
• Add SourceASTParseError to distinguish source parse failures from internal safety errors, improving error reporting when Black's lenient parser accepts input that ast.parse() rejects (#5080)

Blackd

• Return HTTP 400 (Bad Request) for source parse failures instead of HTTP 500, keeping HTTP 500 only for genuine internal safety errors (#5080)

Integrations

• Added documentation for doctest formatting tools and updated the integrations index to match (#4916)

... (truncated)

Commits

• d2490e2 Prepare release 26.5.0 (#5131)
• 2b13ea7 Preserve multiline headers with fmt skip (#5117)
• aef52e0 Improve fmt:skip handling in nested expressions with checks (#4903)
• 9e87495 Add CI coverage for Python 3.15 (#5127)
• 9fd9ea2 Fix blackd error handling: split SourceASTParseError from ASTSafetyError (#5080)
• 866c350 Bump docutils, sphinx, myst-parser (#4960)
• 05b4d1e docs: update deprecated PEP URLs to peps.python.org (#5115)
• 1c25a47 [pre-commit.ci] pre-commit autoupdate (#5111)
• b0fa37f Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#5109)
• 530d5ab Bump actions/cache from 5.0.4 to 5.0.5 (#5108)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps black from 26.3.1 to 26.5.0 for Python > 3.11 in pyproject.toml.

---

Code Quality

• ✅ Style guide: Single-line version bump in pyproject.toml — no style concerns.
• ✅ No commented-out code: N/A
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic errors; version constraint syntax is correct and consistent with the existing pattern (line 72 of pyproject.toml).
• ✅ CLAUDE.md: No issues — project config is appropriately general.

Testing

• ✅ Unit/integration tests: Not required for a dependency version bump.
• ✅ Coverage: N/A — no functional code changed.

Documentation

• ❌ CHANGELOG.md: Not updated. Dependency bumps should typically be recorded in the changelog. Verify whether this project tracks dependency updates there.
• ✅ README / API docs: No changes needed.
• ✅ Markdown formatting: N/A

Security

• ✅ No hardcoded credentials: N/A
• ✅ No license files (.lic) or AQAAAD strings: None present.
• ✅ Input validation / error handling / sensitive data: N/A — lint tooling only.

---

Overall Assessment

This is a straightforward, low-risk dependency bump. The only actionable finding is:

• pyproject.toml:72 — Consider adding a CHANGELOG.md entry for the black version bump if the project convention tracks dependency updates.

No blocking issues. Safe to merge pending the changelog question.

Automated code review analyzing defects and coding standards

[dependabot]

Superseded by #106.