Bump the python-packages group across 1 directory with 8 updates#191
Merged
Conversation
dependabot
Bot
added
dependencies
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 1 file
Architecture diagram
sequenceDiagram
participant Lock as uv.lock
participant Pip as pip resolver
participant Click as click 8.3.3
participant GitPython as GitPython 3.1.49
participant Pandas as pandas 2.3.3
participant Pytz as pytz 2026.2
participant DBTypes as db-dtypes 1.5.1
participant SQLGlot as sqlglot 30.7.0
participant Prek as prek 0.3.11
participant Ruff as ruff 0.15.12
participant Ty as ty 0.0.34
Note over Lock,Ty: Dependency resolution environment
Lock->>Pip: Resolve version constraints
Pip->>Pip: Evaluate transitive dependencies
Pip-->>Lock: Emit updated lock entries
Note over Click: Security: shell=False for subprocess
opt Pager/editor command
Click->>Click: shlex.split() to build argv list
Click->>Click: subprocess.Popen without shell=True
end
Note over GitPython: Security: sanitized ref/config writes
opt Reference creation
GitPython->>GitPython: Validate ref path is inside repo
alt Path escapes repo
GitPython->>GitPython: Reject out-of-repo access
end
end
opt Config write
GitPython->>GitPython: Reject control characters in values
end
Note over Pandas: Pinned to 2.3.x stable line
Pandas->>Pytz: Import for timezone support
Pytz-->>Pandas: tz database
Note over DBTypes: Compatible with pandas 2.x
DBTypes->>Pandas: Use DataFrame/Series APIs
Note over SQLGlot: New DuckDB HEX_ENCODE support
SQLGlot->>SQLGlot: Add HEX_ENCODE transpilation rule
Note over Prek: New shell hook option & auto-update filters
alt hook entry with shell:
Prek->>Prek: Execute via sh/bash/pwsh/powershell/cmd
else direct argv
Prek->>Prek: Direct subprocess execution
end
Note over Ruff: #ruff:ignore and #ruff:file-ignore
Ruff->>Ruff: Parse per-file suppression comments
Ruff->>Ruff: Parse logical-line suppression comments
Note over Ty: Type checker improvements & LSP features
Ty->>Ty: functools.partial type inference
Ty->>Ty: TypedDict/NamedTuple go-to-definition
Ty->>Ty: String annotation reference finding
Bumps the python-packages group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [click](https://github.com/pallets/click) | `8.3.2` | `8.3.3` | | [db-dtypes](https://github.com/googleapis/google-cloud-python) | `1.4.4` | `1.5.1` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.46` | `3.1.50` | | [sqlglot](https://github.com/tobymao/sqlglot) | `30.6.0` | `30.7.0` | | [prek](https://github.com/j178/prek) | `0.3.9` | `0.3.13` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.11` | `0.15.12` | | [ty](https://github.com/astral-sh/ty) | `0.0.32` | `0.0.34` | Updates `click` from 8.3.2 to 8.3.3 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.2...8.3.3) Updates `db-dtypes` from 1.4.4 to 1.5.1 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-cloud-vmwareengine-v1.4.4...db-dtypes-v1.5.1) Updates `gitpython` from 3.1.46 to 3.1.50 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.46...3.1.50) Updates `pandas` from 3.0.2 to 2.3.3 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.2...v2.3.3) Updates `sqlglot` from 30.6.0 to 30.7.0 - [Commits](tobymao/sqlglot@v30.6.0...v30.7.0) Updates `prek` from 0.3.9 to 0.3.13 - [Release notes](https://github.com/j178/prek/releases) - [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md) - [Commits](j178/prek@v0.3.9...v0.3.13) Updates `ruff` from 0.15.11 to 0.15.12 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.11...0.15.12) Updates `ty` from 0.0.32 to 0.0.34 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.32...0.0.34) --- updated-dependencies: - dependency-name: click dependency-version: 8.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: db-dtypes dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: gitpython dependency-version: 3.1.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pandas dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: prek dependency-version: 0.3.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: ruff dependency-version: 0.15.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: sqlglot dependency-version: 30.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ty dependency-version: 0.0.34 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/uv/python-packages-27767f4a74
branch
from
36dd6d1 to
84cbbf4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-packages group with 7 updates in the / directory:
8.3.28.3.31.4.41.5.13.1.463.1.5030.6.030.7.00.3.90.3.130.15.110.15.120.0.320.0.34Updates
clickfrom 8.3.2 to 8.3.3Release notes
Sourced from click's releases.
Changelog
Sourced from click's changelog.
Commits
c06d2d0Release 8.3.3f1f191eApply format guidelines to commits since latest 8.3.2 release (#3343)bb59ba0Apply format guidelines to commits since latest 8.3.2 release4a35225Reduce blast-radius ofUNSETindefault_map(#3240)c07bb93Merge branch 'stable' into unset-in-default-mapc7e1ba8ReorderParameterSource(#3248)76552ffShow default string in prompt (#3328)ac5cec5Reorder ParameterSource from most to least explicit8c452e0Merge branch 'stable' into show-default-string-in-prompt8c95c73Reconcile default value passing and default activation (#3239)Updates
db-dtypesfrom 1.4.4 to 1.5.1Release notes
Sourced from db-dtypes's releases.
Changelog
Sourced from db-dtypes's changelog.
... (truncated)
Commits
4e80530chore: create a release (#16193)ab44f7echore(deps): update dependency requests to v2.33.0 [security] (#16464)943a979chore(migration): Migrate code from googleapis/sphinx-docfx-yaml into package...e3731d5Merge branch 'main' into migration.gapic-generator-python.migration.2026-03-2...7a05a34chore: create a release (#16191)c23b067fix typoc174901add placeholder for system test nox session0f19d85chore: fix missing heading in changelog (#16189)a16755dchore: librarian onboard pull request: 20260323T111101Z (#16141)9694ce9chore: librarian onboard pull request: 20260323T114549Z (#16143)Updates
gitpythonfrom 3.1.46 to 3.1.50Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
5a294a6bump version to 3.1.50d7b029fMerge pull request #2142 from gitpython-developers/fix-validate-config-key-ne...5453842Validate config key section names before writing1085a7cMerge pull request #2128 from meliezer/fix-worktree-git-dirb7f5fdeMerge pull request #2141 from gitpython-developers/dependabot/submodules/git/...4e8cd45Bump git/ext/gitdb from335c0f6to53c94d69e94459Merge pull request #2140 from gitpython-developers/dependabot/pre_commit/pre-...714e2e1Xfail Windows symlink-capable index mutation testb17f113Bump https://github.com/astral-sh/ruff-pre-commitaee2fd5bump version to 3.1.49Updates
pandasfrom 3.0.2 to 2.3.3Commits
9c8bc3eRLS: 2.3.36aa788a[backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)b64f0df[backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...058eb2b[backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...2ca088d[backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...92bf98f[backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...e57c7d6Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)e0fe9a0Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...23a1085BUG: improve future warning for boolean operations with missaligned indexes (...6113696Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...Updates
sqlglotfrom 30.6.0 to 30.7.0Commits
693f4edSync w/ integration testsfab6ccffeat(duckdb): Add transpilation support for HEX_ENCODE function (#7591)9bd7e7cchore(publish): Do not build sqlglotc wheels for 3.9 (#7600)43be379Chore: bump sqlglot-mypy to 1.20.0.post6 (#7598)e550d00fix(parser): FROM with JOIN subqueries (#7597)17432c6Fix(generator)!: do not indent newlines within identifiers in pretty mode fix...b573c46Update docstring for annotate types closes #7587327efbfSync w/ integration tests25552eeFeat(optimizer): canonicalize internal query names (#7580)9f169abFix(redshift): supportAPPROXIMATE PERCENTILE_DISCround-trip (#7585)Updates
prekfrom 0.3.9 to 0.3.13Release notes
Sourced from prek's releases.
... (truncated)
Changelog
Sourced from prek's changelog.
... (truncated)
Commits
81b290eBump version to 0.3.13 (#2050)3f5e5c6Respect hook filters for message files (#2049)1fab887Add Godot Engine to users in README (#2047)93a71e0Remove deleteddist/post/index.cjsfrom publish prek version workflow (#2046)56d6d0cBump version to 0.3.12 (#2045)5f94f6fAdd project auto-update cooldown config (#2044)c52833eAdd global auto-update cooldown8af3054Pass commit message file to workspace hooks (#2043)1bf54f5Update Rust crate serde-saphyr to 0.0.25 (#2036)8c9761aBump rand to 0.9.4 (#2040)Updates
rufffrom 0.15.11 to 0.15.12Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
Commits
66f93cfBump 0.15.12 (#24815)476a4d0[ty] Complete support for more detailed diagnostics on possibly unbound error...ed669eaImplement#ruff:file-ignorefile-level suppressions (#23599)e73d952[ty] Include inferred type ininvalid-keyconcise diagnostic for union/inte...80feb29[ty] report only dead annotation-only locals as unused (#24811)0fbf2bcDrop deprecated license classifier (#24808)43b174c[ty] Infer lambda parameter types withCallabletype context (#24317)4f449ae[ty] Add error context for intersection types (#24772)5b4e753[ty] Add support for goto in literal enum member inlay hint (#24792)e7cc762[ty] Add error context for TypedDict assignments (#24790)Updates
tyfrom 0.0.32 to 0.0.34Release notes
Sourced from ty's releases.
... (truncated)
Changelog
Sourced from ty's changelog.
... (truncated)
Commits
d00448eBump version to 0.0.34 (#3392)e9e4c90docs: Reference correct issue in FAQ regarding strict mode (#3385)1b70eaeRelease: move 'diagnostics' section further down (#3373)d439e37CHANGELOG: Rename to 'Notable changes' (#3372)c512d84Bump version to 0.0.33 (#3368)4cd7b33Upgrade Depot runners from macOS 14 to 15 (#3363)c78b832Update rui314/setup-mold digest to 9c9c13b (#3342)dea3381Update actions/cache action to v5.0.5 (#3343)d451af4update typing-features and faqs (#3335)052d70bUpdate prek dependencies (#3344)