Skip to content

Update six compatible dependencies and align verified source manifests - #17

Merged
SNatangelo merged 4 commits into
mainfrom
dependabot/pip/compatible-patches-0c49ada89a
Nov 3, 2026
Merged

SNatangelo merged 4 commits into
mainfrom
dependabot/pip/compatible-patches-0c49ada89a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Updates certifi to 2026.10.23, PyMuPDF to 1.28.2, delvewheel to 1.13.2, iniconfig to 2.3.1, the native bootstrap environment's NumPy to 2.5.4, and tomlkit to 0.15.2.

Aligns the PyMuPDF/MuPDF source archive URLs and SHA-256 digests with version 1.28.2, using verified official upstream metadata. Updates the active certifi constraint regression expectation.

Retains BM25s 0.3.10, cryptography 50.0.1, and CMake 4.4.3 to preserve the existing deterministic retrieval contract and qualified native source/tool inputs. The application's NumPy constraint remains 2.5.3, distinct from the bootstrap environment.

Validation: the five previously failing tests pass; bootstrap/desktop packaging modules have 125 passed and 1 skipped; PyMuPDF runtime checks have 85 passed and 2 skipped. The final patch and its integration with the CLA prerequisite were independently reviewed. Fresh Windows/Ubuntu CI and the CLA gate must pass for the final head before merge.

This maintenance updates source only. Application packages, release tags, and existing native caches remain unchanged.

Bumps the compatible-patches group with 4 updates in the / directory: [certifi](https://github.com/certifi/python-certifi), [pymupdf](https://github.com/pymupdf/pymupdf), [bm25s](https://github.com/xhluca/bm25s) and [cryptography](https://github.com/pyca/cryptography).
Bumps the compatible-patches group with 4 updates in the /packaging directory: [certifi](https://github.com/certifi/python-certifi), [pymupdf](https://github.com/pymupdf/pymupdf), [bm25s](https://github.com/xhluca/bm25s) and [cryptography](https://github.com/pyca/cryptography).
Bumps the compatible-patches group with 7 updates in the /packaging/store/native-recipes directory:

| Package | From | To |
| --- | --- | --- |
| [certifi](https://github.com/certifi/python-certifi) | `2026.10.19` | `2026.10.23` |
| [bm25s](https://github.com/xhluca/bm25s) | `0.3.10` | `0.3.16` |
| [cmake](https://github.com/scikit-build/cmake-python-distributions) | `4.4.3` | `4.4.4` |
| [delvewheel](https://github.com/adang1345/delvewheel) | `1.13.1` | `1.13.2` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` |
| [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.15.1` | `0.15.2` |



Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.19...2026.10.23)

Updates `pymupdf` from 1.28.0 to 1.28.2
- [Release notes](https://github.com/pymupdf/pymupdf/releases)
- [Changelog](https://github.com/pymupdf/PyMuPDF/blob/main/changes.txt)
- [Commits](pymupdf/PyMuPDF@1.28.0...1.28.2)

Updates `bm25s` from 0.3.10 to 0.3.16
- [Release notes](https://github.com/xhluca/bm25s/releases)
- [Commits](xhluca/bm25s@0.3.10...0.3.16)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.19...2026.10.23)

Updates `pymupdf` from 1.28.0 to 1.28.2
- [Release notes](https://github.com/pymupdf/pymupdf/releases)
- [Changelog](https://github.com/pymupdf/PyMuPDF/blob/main/changes.txt)
- [Commits](pymupdf/PyMuPDF@1.28.0...1.28.2)

Updates `bm25s` from 0.3.10 to 0.3.16
- [Release notes](https://github.com/xhluca/bm25s/releases)
- [Commits](xhluca/bm25s@0.3.10...0.3.16)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.19...2026.10.23)

Updates `bm25s` from 0.3.10 to 0.3.16
- [Release notes](https://github.com/xhluca/bm25s/releases)
- [Commits](xhluca/bm25s@0.3.10...0.3.16)

Updates `cmake` from 4.4.3 to 4.4.4
- [Release notes](https://github.com/scikit-build/cmake-python-distributions/releases)
- [Changelog](https://github.com/scikit-build/cmake-python-distributions/blob/main/HISTORY.rst)
- [Commits](scikit-build/cmake-python-distributions@4.4.3...4.4.4)

Updates `delvewheel` from 1.13.1 to 1.13.2
- [Changelog](https://github.com/adang1345/delvewheel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/adang1345/delvewheel/commits)

Updates `iniconfig` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.3.0...v2.3.1)

Updates `numpy` from 2.5.3 to 2.5.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.3...v2.5.4)

Updates `tomlkit` from 0.15.1 to 0.15.2
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.15.1...0.15.2)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: pymupdf
  dependency-version: 1.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: bm25s
  dependency-version: 0.3.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: pymupdf
  dependency-version: 1.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: bm25s
  dependency-version: 0.3.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: bm25s
  dependency-version: 0.3.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: cmake
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: delvewheel
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: iniconfig
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: numpy
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
- dependency-name: tomlkit
  dependency-version: 0.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot
dependabot Bot requested a review from SNatangelo as a code owner November 2, 2026 20:52
@dependabot dependabot Bot added the python Pull requests that update python code label Nov 2, 2026
@github-actions

github-actions Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

CLA verified

All identified contributors are covered by the Callimachus CLA check. ✅

View the exact Callimachus CLA v1.1.

@SNatangelo SNatangelo changed the title Bump the compatible-patches group across 3 directories with 9 updates Update six compatible dependencies and align verified source manifests Nov 3, 2026
SNatangelo
SNatangelo previously approved these changes Nov 3, 2026
@dependabot
dependabot Bot dismissed SNatangelo’s stale review November 3, 2026 09:23

The merge-base changed after approval.

@SNatangelo
SNatangelo merged commit 3a9821e into main Nov 3, 2026
5 checks passed
@SNatangelo
SNatangelo deleted the dependabot/pip/compatible-patches-0c49ada89a branch November 3, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant