Skip to content

Bump the all-dependencies group with 4 updates - #1086

Merged
YoshihitoAso merged 1 commit into
dev-26.9from
dependabot/uv/all-dependencies-19ddbd7ebe
Aug 17, 2026
Merged

Bump the all-dependencies group with 4 updates#1086
YoshihitoAso merged 1 commit into
dev-26.9from
dependabot/uv/all-dependencies-19ddbd7ebe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 4 updates: alembic, memray, typer and pytest-memray.

Updates alembic from 1.18.5 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

    References: #1842

1.19.0

Released: August 4, 2026

changed

  • [changed] [installation] Environmental updates:

    -   Trove classifiers now include Python 3.15 which is now part of CI
        integration
    
    • Python 3.14 is also added to trove classifiers which had been previously omitted

    • Implemented PEP 604 style unions in type annotations

feature

  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

    References: #508

bug

... (truncated)

Commits

Updates memray from 1.19.3 to 1.20.0

Release notes

Sourced from memray's releases.

v1.20.0

What's Changed

Features

  • Add a light/dark theme toggle to the flame graph and table HTML reports, which respects the system color scheme and remembers the user's choice. (#650)
  • Recognize deallocations performed with the free_sized and free_aligned_sized functions introduced in C23. (#725)
  • Improve error reporting after a failure to record a memory capture by logging the reported error string and including it in the exception message. (#747)
  • Add a --buffered-file-io option to memray run (and a buffered=True argument to memray.FileDestination) that writes the capture file using buffered write calls instead of the default memory-mapped file IO. This is useful on filesystems that don't support shared writable mmap, though it's slower and less robust to crashes. (#748)
  • Add per-module allocation statistics to memray stats, showing the top allocating non-stdlib modules by size and by number of allocations. (#765)
  • When memray attach -o is used with --duration, print a message clarifying that tracking continues in the target process after the command exits, and how to stop it early with memray detach. (#831)
  • Add a speedscope output format for memray transform. (#899)
  • Python 3.15 is now supported. (#920)
  • Added a --confidential-files option to memray flamegraph to control whether source code lines are embedded in the generated report. By default, Memray uses heuristics to guess whether each file is likely to contain secrets, and omits source lines from files that might. You can use --confidential-files=all to omit all source lines, or --confidential-files=none to include source lines from every file. See the docs on confidential source lines for more information. (#983)

Deprecations and Removals

  • Memray no longer provides an entry point named memray3.N (where "3.N" is the Python version that Memray was installed for). You can use python3.N -m memray instead. (#673)
  • Drop integration with 0.x versions of the greenlet module (which are from 2020 or earlier). (#908)
  • Drop support for Python 3.7, which reached end-of-life in June 2023. (#946)
  • Drop support for Python 3.8, which reached end-of-life in October 2024. (#946)

Bug Fixes

  • Fix an AttributeError crash on shutdown when tracking a script that calls gevent.monkey.patch_all() (or otherwise replaces threading.Thread while tracking). The Tracker now records the threading.Thread subclass it patched on entry and removes its instrumentation from that same class on exit, instead of looking up threading.Thread again. (#856)
  • Deduplicate rows in the table reporter that had identical displayed fields but different underlying call stacks. Also add a --split-threads option to the table reporter, matching the flamegraph reporter's existing option, and change the table reporter to no longer split allocations by thread by default. (#857)
  • Fix the %%memray_flamegraph Jupyter integration to correctly embed a flame graph for Python 3.12 and higher. Previously it was giving a 404 error due to tempfile.mkdtemp changing to return absolute paths. (#896)
  • Fix integration with the greenlet package when greenlet 3.4.0 is installed and when tracing is started before the greenlet module is imported. (#908)
  • Fix a bug that crashed target processes when memray attach failed to dlopen our library. The underlying permissions issue is now accounted for and a troubleshooting message prints when it arises. (#940)
  • Fix a potential deadlock in the gdb backend for memray attach. (#966)
  • Fix the %%memray_flamegraph Jupyter integration to correctly embed a flame graph when used with IPython 9.16.0 (a regression in that version broke our integration; it was fixed in IPython 9.16.1). (#981)

Miscellaneous

  • Memray is now built using scikit-build-core and CMake instead of setuptools. This should have little to no impact on end users, but redistributors like distro package maintainers will need to ensure that these tools are available when building Memray. (#673)
  • Memray now provides manylinux_2_28 wheels for x86-64 as well as manylinux2014 ones (#967).

New Contributors

... (truncated)

Changelog

Sourced from memray's changelog.

memray 1.20.0 (2026-08-07)

Features


- Add a light/dark theme toggle to the flame graph and table HTML reports, which respects the system color scheme and remembers the user's choice. ([#650](https://github.com/bloomberg/memray/issues/650))
- Recognize deallocations performed with the ``free_sized`` and ``free_aligned_sized`` functions introduced in C23. ([#725](https://github.com/bloomberg/memray/issues/725))
- Improve error reporting after a failure to record a memory capture by logging the reported error string and including it in the exception message. ([#747](https://github.com/bloomberg/memray/issues/747))
- Add a ``--buffered-file-io`` option to ``memray run`` (and a ``buffered=True`` argument to ``memray.FileDestination``) that writes the capture file using buffered ``write`` calls instead of the default memory-mapped file IO. This is useful on filesystems that don't support shared writable ``mmap``, though it's slower and less robust to crashes. ([#748](https://github.com/bloomberg/memray/issues/748))
- Add per-module allocation statistics to ``memray stats``, showing the top allocating non-stdlib modules by size and by number of allocations. ([#765](https://github.com/bloomberg/memray/issues/765))
- When ``memray attach -o`` is used with ``--duration``, print a message clarifying that tracking continues in the target process after the command exits, and how to stop it early with ``memray detach``. ([#831](https://github.com/bloomberg/memray/issues/831))
- Add a ``speedscope`` output format for ``memray transform``. ([#899](https://github.com/bloomberg/memray/issues/899))
- Python 3.15 is now supported. ([#920](https://github.com/bloomberg/memray/issues/920))
- Added a ``--confidential-files`` option to ``memray flamegraph`` to control whether source code lines are embedded in the generated report. By default, Memray uses heuristics to guess whether each file is likely to contain secrets, and omits source lines from files that might. You can use ``--confidential-files=all`` to omit all source lines, or ``--confidential-files=none`` to include source lines from every file. See the docs on :ref:`confidential source lines` for more information. ([#983](https://github.com/bloomberg/memray/issues/983))

Deprecations and Removals

  • Memray no longer provides an entry point named memray3.N (where "3.N" is the Python version that Memray was installed for). You can use python3.N -m memray instead. (#673)
  • Drop integration with 0.x versions of the greenlet module (which are from 2020 or earlier). (#908)
  • Drop support for Python 3.7, which reached end-of-life in June 2023. (#946)
  • Drop support for Python 3.8, which reached end-of-life in October 2024. (#946)

Bug Fixes


- Fix an ``AttributeError`` crash on shutdown when tracking a script that calls ``gevent.monkey.patch_all()`` (or otherwise replaces ``threading.Thread`` while tracking). The ``Tracker`` now records the ``threading.Thread`` subclass it patched on entry and removes its instrumentation from that same class on exit, instead of looking up ``threading.Thread`` again. ([#856](https://github.com/bloomberg/memray/issues/856))
- Deduplicate rows in the table reporter that had identical displayed fields but
  different underlying call stacks. Also add a ``--split-threads`` option to the
  table reporter, matching the flamegraph reporter's existing option, and change
  the table reporter to no longer split allocations by thread by default. ([#857](https://github.com/bloomberg/memray/issues/857))
- Fix the ``%%memray_flamegraph`` :ref:`Jupyter magic <Jupyter integration>` to correctly embed a flame graph for Python 3.12 and higher. Previously it was giving a 404 error due to ``tempfile.mkdtemp`` changing to return absolute paths. ([#896](https://github.com/bloomberg/memray/issues/896))
- Fix integration with the ``greenlet`` package when greenlet 3.4.0 is installed
  and when tracing is started before the greenlet module is imported. ([#908](https://github.com/bloomberg/memray/issues/908))
- Fix a bug that crashed target processes when ``memray attach`` failed to ``dlopen`` our library. The underlying permissions issue is now accounted for and a troubleshooting message prints when it arises. ([#940](https://github.com/bloomberg/memray/issues/940))
- Fix a potential deadlock in the gdb backend for ``memray attach``. ([#966](https://github.com/bloomberg/memray/issues/966))
- Fix the ``%%memray_flamegraph`` :ref:`Jupyter magic <Jupyter integration>` to correctly embed a flame graph when used with IPython 9.16.0 (a regression in that version broke our integration; it was fixed in IPython 9.16.1). ([#981](https://github.com/bloomberg/memray/issues/981))

Miscellaneous

  • Memray is now built using scikit-build-core and CMake instead of setuptools. This should have little to no impact on end users, but redistributors like distro package maintainers will need to ensure that these tools are available when building Memray. (#673)
  • Memray now provides manylinux_2_28 wheels for x86-64 as well as manylinux2014 ones (#967).
Commits
  • f70db81 Prepare for 1.20.0 release
  • 019e1a9 Guide users towards overwriting files
  • d6787da Add support for the new C23 deallocators
  • 7a53953 build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5
  • 43f418d tests: Drop a workaround for 3.15.0b1
  • 7d79986 ci: Publish Python 3.15 wheels
  • 9a9dc98 Allow control over flame graph source inclusion
  • 4a4fb50 build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2
  • d457e41 Record module search paths while tracking
  • 1d160a5 Add per-module allocation statistics to memray stats
  • Additional commits viewable in compare view

Updates typer from 0.27.0 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates pytest-memray from 1.9.0 to 1.10.0

Release notes

Sourced from pytest-memray's releases.

v1.10.0

What's Changed

New Contributors

Full Changelog: bloomberg/pytest-memray@v1.9.0...v1.10.0

Changelog

Sourced from pytest-memray's changelog.

v1.10.0 (2026-08-07)

Features - 1.10.0

- Python 3.15 is now officially supported. (:issue:`187`)

Bug Fixes - 1.10.0

  • Capture file names generated by pytest-memray are now limited to 255 bytes. File names that would be longer are now truncated with a hash appended. (:issue:185)
Commits
  • e772f1e Declare 3.15 support
  • aa8edac Limit generated file names to 255 characters
  • bd0ae65 tests: Loosen an assertion on a mangled name
  • 6b49d39 Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#186)
  • 8d4d095 Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 (#184)
  • 19bf2e7 ci: Use complete version label for tagged actions
  • 3a121c1 ci: Stop installing Prettier
  • 9d356d9 ci: Secure GitHub Actions workflows
  • 1e0a8cd Bump actions/setup-python from 6.3.0 to 7.0.0 (#183)
  • 4d0a5f5 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#182)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 4 updates: [alembic](https://github.com/sqlalchemy/alembic), [memray](https://github.com/bloomberg/memray), [typer](https://github.com/fastapi/typer) and [pytest-memray](https://github.com/bloomberg/pytest-memray).


Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `memray` from 1.19.3 to 1.20.0
- [Release notes](https://github.com/bloomberg/memray/releases)
- [Changelog](https://github.com/bloomberg/memray/blob/main/NEWS.rst)
- [Commits](bloomberg/memray@v1.19.3...v1.20.0)

Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.0...0.27.1)

Updates `pytest-memray` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/bloomberg/pytest-memray/releases)
- [Changelog](https://github.com/bloomberg/pytest-memray/blob/main/docs/news.rst)
- [Commits](bloomberg/pytest-memray@v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: memray
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typer
  dependency-version: 0.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pytest-memray
  dependency-version: 1.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Update a dependency file python:uv Pull requests that update python:uv code labels Aug 17, 2026
@github-actions

Copy link
Copy Markdown

Coverage

Coverage Report •
FileStmtsMissBranchBrPartCoverMissing
TOTAL1030082006555484597% 
report-only-changed-files is enabled. No files were changed during this commit :)

Tests Skipped Failures Errors Time
2565 0 💤 0 ❌ 0 🔥 9m 46s ⏱️

@YoshihitoAso
YoshihitoAso merged commit 55a7d50 into dev-26.9 Aug 17, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/all-dependencies-19ddbd7ebe branch August 17, 2026 04:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant