build(deps): Bump the python group with 3 updates

[dependabot]

Bumps the python group with 3 updates: pydantic, beartype and qc-core.

Updates pydantic from 2.14.0 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

• Fix arguments-v3 schema with variadic keywords by @​Viicos in #13954
• Fix TypeError on ForwardRef on Python 3.10.0 by @​Viicos in #13964
• Support closed and extra_items via inheritance in TypedDict by @​Viicos in #13967
• Enforce the max_digits whole-digits limit in the Python Decimal validator by @​Viicos in #13972
• Reject out-of-range int inputs for timedelta by @​Viicos in #13973
• Support named tuples in Sequence validation by @​Viicos in #13978

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

Changelog

Sourced from pydantic's changelog.

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• See full diff in compare view

Updates beartype from 0.22.9 to 0.23.1

Release notes

Sourced from beartype's releases.

Beartype 0.23.1: The Ultimate QA Suplex

@​beartype 0.23.1 is the minor release that wishes it was the ultimate QA suplex. Instead, it just resolves a single regression at the intersection between @​beartype 0.23.1, Python ≤ 3.13, and PEP 557-compliant @dataclasses.dataclass-decorated dataclasses defining one or more methods annotated by one or more PEP 484-compliant forward self-references (i.e., stringified forward references referring to the dataclass currently being defined). Ordinarily, @​leycec would've uselessly sat on this issue resolution for nine months. Fortunately, he's done with ordinary – and so are you. The dog days are QA are over. The @​beartype 0.23.0 release cycle changed the nature of @​leycec. He now releases things so you don't have to:

# Via "pip", the once-great venerable master packager now fallen on hard times:
$ pip install --upgrade beartype      # <-- you go, pipe-smoking pip
Via "uv", the plucky upstart spiky-haired kid wielding a sword larger than its body:
$ uv pip install --upgrade beartype   # <-- when you no longer have the strength to care about lock files
Via "conda", the corporate scientist in casual lab attire who wants to be your buddy, pal:
$ conda config --add channels conda-forge  # <-- where did python packaging go wrong?
$ conda install conda-forge::beartype      # <-- it all seemed so simple, once.

Right: @​beartype 0.23.1. Left: Your codebase. Middle: Your CTO stares dumbfounded.

@​beartype 0.23.1 is helping @​leycec and his beautiful science wife to eat food. Thanks entirely to...

GitHub Sponsors: Befriend the Bear and Get a Bear for Life

This release comes courtesy these proud GitHub Sponsors, without whom everyone in the @​leycec family would currently be eating grasshoppers in the abandoned back lot again:

• @​mirailabs (Mirai Labs) — On-device AI for Apple Silicon, powered by bears. the future: it's powered by bears https://trymirai.com
• @​sesco-llc (SESCO Enterprises) — The Power of Innovation in Trading this inspires me to get out of the house https://sescollc.com
• @​DylanModesitt (Dylan Modesitt) — quantitative strategies energy trading associate ...wikipedia, don't fail me now! https://dylanmodesitt.com
• [Tidelift][], paying out recurring income to security-sensitive open-source projects like @​beartype money hype https://www.sonarsource.com/products/sonarqube/advanced-security

If you represent a security-conscious corporate, government, or non-profit, the best way bar none for you to support @​beartype and secure your own workflow is by subscribing to [Tidelift][] through [SonarQube Advanced Security][]. Security giant [Sonar][] recently acquired [Tidelift][], guaranteeing the economic viability of the Tidelift model for billions of future open-source projects that have yet to be born. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.

Thanks so much, masters of fintech and lifted tides.

The Masters of Fintech and Lifted Tides. That's who.

Lastly but Beastly (but not Leastly)...

...to financially feed @​leycec and his friendly @​beartype through either:

• For @​beartype's security-conscious corporate and government userbase, [Tidelift][] vis-a-vis a [SonarQube Advanced Security][] subscription. Security giant [Sonar][] recently acquired [Tidelift][], which very graciously pays out recurring income to security-sensitive open-source projects like @​beartype, NumPy, and other stuff you care about. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.
• For @​beartype's lovely open-source userbase, our ancient GitHub Sponsors profile that predates the existence of dinosaur-like AI chatbots. Come for the candid insider photos of a sordid and disreputable life in the Canadian interior. Stay for the GitHub badge and warm feelings of conviviality, friendship, and cozy Danish-Norwegian hygge hype. Feed @​beartype that @​beartype may feed you.

Cue hypnagogic rave music that encourages fiscal irresponsibility. 🎵 🎹 🎶

... (truncated)

Commits

• f85b67d Beartype 0.23.1: The Ultimate QA Suplex
• 9fe5727 PEP 557 dataclass annotated by forward self-reference.
• f37deb0 Beartype 0.23.1 started.
• ee36089 Beartype 0.23.0: The Year of the QA Fire Ho(r)se
• 3c6fa37 @​beartype 0.23.0 pre-flight.
• 348a8e0 PEP 484 type variable type-checking plan x 2.
• c81d5ef Zensical header.
• d253988 Issue template configuration file.
• 729cee8 PEP 484 forward reference resolution in unnamed namespaces.
• 109b277 PEP 484 stringified "None" forward references.
• Additional commits viewable in compare view

Updates qc-core from 0.0.4 to 0.0.5

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!