Skip to content

Bump the python-packages group with 5 updates#193

Merged
MaxHalford merged 2 commits into
mainfrom
dependabot/uv/python-packages-7c07908da9
May 12, 2026
Merged

Bump the python-packages group with 5 updates#193
MaxHalford merged 2 commits into
mainfrom
dependabot/uv/python-packages-7c07908da9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps the python-packages group with 5 updates:

Package From To
db-dtypes 1.5.1 1.6.0
pandas 2.3.3 3.0.3
google-cloud-bigquery-storage 2.37.0 2.38.0
requests 2.33.1 2.34.0
ty 0.0.34 0.0.35

Updates db-dtypes from 1.5.1 to 1.6.0

Release notes

Sourced from db-dtypes's releases.

db-dtypes: v1.6.0

v1.6.0 (2026-05-06)

Features

Changelog

Sourced from db-dtypes's changelog.

1.6.0 (2022-10-13)

Features

  • Use GitHub's default README as index page (#255) (17f6ca0)

Bug Fixes

  • Render emphasis properly and markdown in tables (#258) (4bbd921)

1.5.0 (2022-07-11)

Features

Bug Fixes

1.4.8 (2022-05-24)

Bug Fixes

  • add hardcoded IAM references temporarily (#209) (5dc99d2)

1.4.7 (2022-04-12)

Bug Fixes

  • add markdown header if it is missing (#203) (ccd53bd)

1.4.6 (2022-04-06)

Bug Fixes

  • support parsing summary docstring that is not well formed (#200) (a1b362d)

1.4.5 (2022-03-18)

Bug Fixes

... (truncated)

Commits
  • 3997a10 chore: librarian release pull request: 20260506T163115Z (#16964)
  • f655e49 chore: add type annotation to SYNCPOINTS (#16973)
  • f149bd7 refactor(bigframes): Modularize compiler routing as proxy executor (#16907)
  • 19db82f chore(bigframes): remove leftover support for Python <= 3.9 (#16961)
  • 2dedaac chore: test CommonResource resource name alias (#16965)
  • 9652a08 fix: pass resource aliases to file-level CommonResources (#16945)
  • 78a48b0 fix(google-cloud-core): Drop support for Python 3.9 (#16953)
  • 5975c48 fix(dns): Drop support for Python 3.9 (#16954)
  • d5bea2e fix(crc32c): Drop support for Python 3.8 and 3.9 (#16955)
  • 63f6d96 fix(sqlalchemy-bigquery): Drop support for Python 3.8 and 3.9 (#16956)
  • Additional commits viewable in compare view

Updates pandas from 2.3.3 to 3.0.3

Release notes

Sourced from pandas's releases.

pandas 3.0.3

We are pleased to announce the release of pandas 3.0.3. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.2

We are pleased to announce the release of pandas 3.0.2. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

... (truncated)

Commits
  • 72f2fea RLS: 3.0.3 (#65590)
  • 2897590 Backport PR #65436 on branch 3.0.x (Account for privatization of matplotlib `...
  • 49894b5 Backport PR #65499 on branch 3.0.x (BUG: fix check if pyarrow is installed in...
  • 1c6d1e3 [backport 3.0.x] PERF: remove special casing for zoneinfo in tz_localize_to_u...
  • 2a54711 Backport PR #64379 on branch 3.0.x (PERF: improve performance with ZoneInfo t...
  • 036bb7c Backport PR #65482 on branch 3.0.x (PERF: don't call unique on dtypes for che...
  • bf4c182 Backport PR #65410 on branch 3.0.x (TST: also convert str index to object in ...
  • dd02d75 [backport 3.0.x] BUG: keep fsspec OpenFile alive for chained URL reads (#6547...
  • aef3d0f [backport 3.0.x] CI: lowercase types-pymysql/types-pyyaml to fix mamba 2.6.0 ...
  • bb8e248 Backport PR #65399 on branch 3.0.x (DOC: fix source link for classes in the r...
  • Additional commits viewable in compare view

Updates google-cloud-bigquery-storage from 2.37.0 to 2.38.0

Release notes

Sourced from google-cloud-bigquery-storage's releases.

google-cloud-bigquery-storage: v2.38.0

v2.38.0 (2026-05-06)

Bug Fixes

Commits
  • 3997a10 chore: librarian release pull request: 20260506T163115Z (#16964)
  • f655e49 chore: add type annotation to SYNCPOINTS (#16973)
  • f149bd7 refactor(bigframes): Modularize compiler routing as proxy executor (#16907)
  • 19db82f chore(bigframes): remove leftover support for Python <= 3.9 (#16961)
  • 2dedaac chore: test CommonResource resource name alias (#16965)
  • 9652a08 fix: pass resource aliases to file-level CommonResources (#16945)
  • 78a48b0 fix(google-cloud-core): Drop support for Python 3.9 (#16953)
  • 5975c48 fix(dns): Drop support for Python 3.9 (#16954)
  • d5bea2e fix(crc32c): Drop support for Python 3.8 and 3.9 (#16955)
  • 63f6d96 fix(sqlalchemy-bigquery): Drop support for Python 3.8 and 3.9 (#16956)
  • Additional commits viewable in compare view

Updates requests from 2.33.1 to 2.34.0

Release notes

Sourced from requests's releases.

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2340-2026-05-11

Changelog

Sourced from requests's changelog.

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates ty from 0.0.34 to 0.0.35

Release notes

Sourced from ty's releases.

0.0.35

Release Notes

Released on 2026-05-10.

Bug fixes

  • Allow ParamSpec specialization through unioned generic classes (#24826)
  • Fix cross-file find-references for keyword arguments (#25043)
  • Fix comparison between negative and positive literal integers (#25023)
  • Reject dataclass decorator parameters based on supported Python version (#25029)

LSP server

  • Adjust start of block folding range to preserve visible header for character-precise LSP clients. (#24917)
  • Emit folding ranges from the language server for multi-line block headers. (#24978)
  • Skip global search for references if identifier is not externally visible (#25033)
  • Speed-up find-references by using multithreading for cross-file searches (#25042)

CLI

  • Include severity in JUnit diagnostics (#25080)

Core type checking

  • Check non-generic overload implementations (#24936)
  • Expand support for narrowing within walruses (#24968)
  • Filter overloads based on return type for ParamSpec mapping (#24769)
  • Improve support for recursive types (#24773)
  • Include TypedDict type context when inferring mixed constructors (#25039)
  • Include TypedDict type context when inferring string keys (#25037)
  • Preserve NewType and TypeAliasType in implicit aliases (#25072)
  • Provide type cntext for generator expression yields (#25069)
  • Provide type context for boolean operands (#25070)
  • Selectively promote a union of homogeneous fixed-length tuples to a single variadic tuple (#24705)
  • Support narrowing on __class__ checks (#24997)
  • Use more precise exception types when catching a union (#25076)

Diagnostics

  • Include error context for overload consistency diagnostics (#24950)

Performance

  • Cache results in desperate module resolution (#24977)
  • Lazily initialize builder when transforming a union type (#24929)
  • Project reachability constraints before narrowing (#24982)
  • Skip parameter accumulation for object variadics (#24976)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.35

Released on 2026-05-10.

Bug fixes

  • Allow ParamSpec specialization through unioned generic classes (#24826)
  • Fix cross-file find-references for keyword arguments (#25043)
  • Fix comparison between negative and positive literal integers (#25023)
  • Reject dataclass decorator parameters based on supported Python version (#25029)

LSP server

  • Adjust start of block folding range to preserve visible header for character-precise LSP clients. (#24917)
  • Emit folding ranges from the language server for multi-line block headers. (#24978)
  • Skip global search for references if identifier is not externally visible (#25033)
  • Speed-up find-references by using multithreading for cross-file searches (#25042)

CLI

  • Include severity in JUnit diagnostics (#25080)

Core type checking

  • Check non-generic overload implementations (#24936)
  • Expand support for narrowing within walruses (#24968)
  • Filter overloads based on return type for ParamSpec mapping (#24769)
  • Improve support for recursive types (#24773)
  • Include TypedDict type context when inferring mixed constructors (#25039)
  • Include TypedDict type context when inferring string keys (#25037)
  • Preserve NewType and TypeAliasType in implicit aliases (#25072)
  • Provide type cntext for generator expression yields (#25069)
  • Provide type context for boolean operands (#25070)
  • Selectively promote a union of homogeneous fixed-length tuples to a single variadic tuple (#24705)
  • Support narrowing on __class__ checks (#24997)
  • Use more precise exception types when catching a union (#25076)

Diagnostics

  • Include error context for overload consistency diagnostics (#24950)

Performance

  • Cache results in desperate module resolution (#24977)
  • Lazily initialize builder when transforming a union type (#24929)
  • Project reachability constraints before narrowing (#24982)
  • Skip parameter accumulation for object variadics (#24976)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Upgrade Python dependencies with a major bump to pandas 3.0.3 and minor updates to requests, google-cloud-bigquery-storage, db-dtypes, and ty. Also adds explicit compute_project_id None checks to prevent misconfiguration at runtime and align with stricter typing.

  • Dependencies

    • pandas 2.3.3 → 3.0.3 (requires Python 3.11+, removes transitive pytz; tzdata only on Windows/Emscripten)
    • requests 2.34.0 (inline types, bug fixes)
    • google-cloud-bigquery-storage 2.38.0, db-dtypes minor update, ty 0.0.35
  • Migration

    • Ensure the runtime is Python 3.11+.
    • If code relied on pytz, add it explicitly or migrate to zoneinfo (tzdata is only pulled on Windows/Emscripten).
    • BigQueryDatabase.default_client and determine_client_for_script now raise ValueError when compute_project_id cannot be determined; set it explicitly or verify project resolution logic.

Written for commit d4dc5b9. Summary will update on new commits.

Bumps the python-packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [db-dtypes](https://github.com/googleapis/google-cloud-python) | `1.5.1` | `1.6.0` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.3` | `3.0.3` |
| [google-cloud-bigquery-storage](https://github.com/googleapis/google-cloud-python) | `2.37.0` | `2.38.0` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.34` | `0.0.35` |


Updates `db-dtypes` from 1.5.1 to 1.6.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@db-dtypes-v1.5.1...db-dtypes-v1.6.0)

Updates `pandas` from 2.3.3 to 3.0.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.3)

Updates `google-cloud-bigquery-storage` from 2.37.0 to 2.38.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-bigquery-storage-v2.37.0...google-cloud-bigquery-storage-v2.38.0)

Updates `requests` from 2.33.1 to 2.34.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.0)

Updates `ty` from 0.0.34 to 0.0.35
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.34...0.0.35)

---
updated-dependencies:
- dependency-name: db-dtypes
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pandas
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: google-cloud-bigquery-storage
  dependency-version: 2.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: requests
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ty
  dependency-version: 0.0.35
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 12, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.
Architecture diagram
sequenceDiagram
    participant App as Application Code
    participant Pandas as pandas 3.0.3
    participant BigQuery as google-cloud-bigquery-storage 2.38.0
    participant Requests as requests 2.34.0
    participant Ty as ty 0.0.35 (type checker)
    participant DBTypes as db-dtypes 1.6.0
    participant ZoneInfo as zoneinfo (stdlib)
    
    Note over App,DBTypes: NEW: pandas 3.0.3 dependency tree change
    Note over ZoneInfo: pytz replaced by zoneinfo (Python 3.11+)
    
    App->>Pandas: read_csv(), DataFrame operations
    Pandas->>ZoneInfo: CHANGED: timezone handling (no longer pytz)
    ZoneInfo-->>Pandas: tz-aware datetime
    
    alt Windows/Emscripten runtime
        Pandas->>Pandas: Uses tzdata package as fallback
    end
    
    App->>BigQuery: read_table(), query results
    BigQuery->>Requests: NEW: HTTP API calls with URI path handling
    Requests->>Requests: Bugfix: preserve duplicate leading slashes in paths
    Requests->>Requests: Bugfix: no greedy matching on no_proxy domains
    Requests-->>BigQuery: Response with correct history (no self-reference)
    BigQuery-->>App: Arrow/DataFrame results
    
    alt Type-checking pipeline
        Ty->>Pandas: NEW: validate type annotations on pandas API
        Ty->>Requests: NEW: validate inline types (replaces typeshed)
        Ty->>Ty: Caching improvements, multithreaded reference search
    end
    
    App->>DBTypes: geo/date data types from BigQuery
    DBTypes->>DBTypes: NEW: mypy session support (type checking)
    DBTypes-->>App: Typed data structures
    
    Note over App,Ty: All packages now require Python 3.11+
Loading

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@MaxHalford MaxHalford merged commit 982935d into main May 12, 2026
3 checks passed
@MaxHalford MaxHalford deleted the dependabot/uv/python-packages-7c07908da9 branch May 12, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant