Skip to content

chore(deps): bump the uv-minor-patch group across 1 directory with 22 updates - #162

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/uv-minor-patch-c21f05acf5
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/uv-minor-patch-c21f05acf5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-minor-patch group with 22 updates in the / directory:

Package From To
filelock 3.32.4 3.32.5
click 8.4.1 8.5.0
simplejson 4.1.1 4.1.2
pydantic 2.13.4 2.13.5
bitarray 3.10.1 3.11.0
cassandra-driver 3.30.0 3.30.1
msgpack 1.2.1 1.2.2
deltalake 1.6.2 1.6.3
grpcio 1.83.0 1.83.1
protobuf 7.36.0 7.36.1
redis 8.0.0 8.1.0
sqlmodel 0.0.38 0.0.42
gitpython 3.1.59 3.1.62
rapidyaml 0.13.0.post2 0.15.2
fastapi 0.136.3 0.141.1
gunicorn 26.0.0 26.2.0
ruff 0.15.17 0.16.6
pre-commit 4.6.0 4.6.2
setuptools-scm 10.2.1 10.2.3
grpcio-tools 1.83.0 1.83.1
build 1.5.0 1.6.0
ty 0.0.73 0.0.79

Updates filelock from 3.32.4 to 3.32.5

Release notes

Sourced from filelock's releases.

3.32.5

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.32.4...3.32.5

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start


3.32.6 (2026-09-08)


  • SoftFileLease and AsyncSoftFileLease now reject a boolean or non-finite lease_duration, which used to publish an owner record their own owner property reads back as malformed. :pr:723
  • Reject non-finite heartbeat, stale, and polling intervals in SoftReadWriteLock and AsyncSoftReadWriteLock, including cached singleton construction and overflow in the default stale threshold. :pr:724
  • Honor acquisition timeouts and blocking=False during SoftReadWriteLock state-mutex contention, including failed writer cleanup. Cross-host recovery of an abandoned .state marker remains unsupported. :pr:726
  • Allow acquiring existing lock files that grant write access through group permissions or an ACL even when their owner-write mode bit is unset. :pr:728
  • Preserve exception notes and custom attributes when copying or pickling Timeout and SoftFileLockProtocolError. :pr:729

3.32.5 (2026-08-31)


  • SoftFileLease.token and AsyncSoftFileLease.token now read None after a failed acquisition, so a contender turned away by a live holder no longer reports a token for a claim it never published. :pr:721
  • Document that mode has no setter: unlike poll_interval, timeout, blocking and lifetime, it is fixed at construction and lock.mode = ... raises AttributeError. :pr:716

3.32.4 (2026-08-23)


  • StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705
  • WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705
  • Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

3.32.3 (2026-08-13)


  • The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

... (truncated)

Commits
  • 1585dfe Release 3.32.5
  • 00177c3 🐛 fix(lease): clear token after failed acquire (#721)
  • 5aeb9b6 📝 docs: say that mode is read-only in the thread-local section (#716)
  • 2634dd1 [pre-commit.ci] pre-commit autoupdate (#720)
  • 37dccf0 🧪 test(fork): report where a stalled fork stops (#715)
  • See full diff in compare view

Updates click from 8.4.1 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
  • Fix test failures when using pytest >= 9.1. {pr}3656
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
  • {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
  • The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits
  • 8b19813 Release version 8.5.0
  • 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
  • 131c86a Add FAQ entry about UnicodeEncodeError on Windows
  • e1fd594 Add support of pathlib.Path to edit (#3781)
  • a1d8785 Add support of pathlib.Path to edit
  • 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
  • a6256bf Forwards all user's parameters set in PAGER
  • 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
  • 9835b0f Resolve the pager command once, in _pager_contextmanager
  • f36d58b Refactor pager stream handling (#3767)
  • Additional commits viewable in compare view

Updates simplejson from 4.1.1 to 4.1.2

Release notes

Sourced from simplejson's releases.

v4.1.2

What's Changed

New Contributors

Full Changelog: simplejson/simplejson@v4.1.1...v4.1.2

Changelog

Sourced from simplejson's changelog.

Version 4.1.2 released 2026-08-26

Version 4.1.1 released 2026-04-24

  • The build_wheels_py27 CI job now also builds Python 2.7 wheels for Windows AMD64 and Windows x86, joining the existing Py2.7 manylinux1 / manylinux2010 x86_64 wheels. This unblocks offline / --no-index installs on Py2.7-on-Windows (the original reporter's case), which previously had no matching binary wheel on PyPI, fell through to the sdist, and failed on the PEP 517 isolated-build step complaining that setuptools>=42 was not in the wheelhouse. simplejson/simplejson#377

Version 4.1.0 released 2026-04-22

  • The C extension now accelerates encoding when indent= is set. Previously the encoder fell back to the pure-Python implementation whenever a non-None indent was passed; now the C encoder emits the newline-plus-indent prefix, the level-aware item separator, and the closing indent directly. A representative nested-dict workload benchmarks about 4-5x faster end-to-end, and the indent=0 and empty-container edge cases continue to match the Python output byte-for-byte.

  • The C extension now emits PEP 678 exc.add_note() annotations on serialization failures, matching the pure-Python encoder. A chained error on {'a': [1, object(), 3]} produces the same three notes (when serializing object object, when serializing list item 1, when serializing dict item 'a') whether the speedups are loaded or not, so the add_note assertions in test_errors.py no longer need indent=2 to force the Python path.

Version 4.0.1 released 2026-04-18

  • Skip uploading Pyodide/wasm wheels to PyPI, which rejects them with "unsupported platform tag 'pyodide_2024_0_wasm32'". The wheels are still built in CI and preserved as workflow artifacts. simplejson/simplejson#375

... (truncated)

Commits
  • d1fe71a Add missing changelog entries (#384)
  • aa1f2c4 Update CHANGES for v4.1.2 (#383)
  • b84ad54 Report the comma position for illegal trailing comma errors (#382)
  • b0fe1ef Handle non-finite Decimals like floats in the encoder (fixes #149) (#381)
  • fa8feea Report the offending char, not the backslash, for invalid \X escapes (#380)
  • bded822 Fix control character error position when content precedes the control char (...
  • See full diff in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates bitarray from 3.10.1 to 3.11.0

Changelog

Sourced from bitarray's changelog.

Change log

3.11.0 (2026-09-01):

  • add run-length codec: util.rl_encode() and util.rl_decode()
  • add util.sc_stat()
  • add Comparison of bitarray codecs <codecs.rst>__ documentation
  • optimize sparse block selection for trailing zeros
  • preserve bitarrays when buffer reallocation fails
  • consistent input validation for large util.sum_indices() inputs
  • improve sparse-compression and debug-mode tests, including new tests for slice adjustment adjust_slice()
  • move private sysinfo() and ssqi() out of the top-level namespace

3.10.1 (2026-08-07):

  • move internal tests for util._Random class into devel/test_random.py
  • add debug-mode introspection and tests for decodetree structure
  • fix util.pprint() for very narrow output widths
  • substantially simplify util.ba2int() and util.int2ba()

3.10.0 (2026-07-31):

  • add free threading support <free_threading.rst>__
  • add bitarray/test_free_threading.py - these free-threading tests are imported when Python was compiled using --disable-gil
  • add official support for decodetree methods .nodes() and .todict()
  • util.huffman_code() and util.canonical_huffman() return codedicts mapping symbols to frozenbitarrays
  • fix free-threading bug in binode_make_tree()
  • use a private capsule to safely share the bitarray type between the _bitarray and _util extension modules
  • bitarrays in prefix codes passed to .decode() or decodetree() cannot exceed 256 bits
  • the following methods/functions also accept a frozendict (added in Python 3.15): .decode(), decodetree(), .encode(), util.huffman_code() and util.canonical_huffman()
  • make C code more cohesive

3.9.2 (2026-07-25):

  • add more critical sections in Python-facing operations
  • optimize mask indexing operations for sparse and dense masks
  • move tests for internal ssqi() to devel/test_sum_indices.py
  • remove all occurrences of PySlice_GetIndicesEx (deprecated since Python 3.6.1)

... (truncated)

Commits
  • ec1ea4a add release date - update docs
  • 492b553 avoid MSVC warning about possible loas of data
  • b54a84c validate large sum_indices() inputs consistently
  • 0921579 clarify sc_encode_lock_held() output invariant
  • 3fda1fd update changelog
  • 9610fe6 naming
  • 970c2cc simplify update_doc.py - update readme
  • f53a9fb link codec functions to codec comparison
  • 7025085 add new codecs document
  • a0e2114 update README key features
  • Additional commits viewable in compare view

Updates cassandra-driver from 3.30.0 to 3.30.1

Changelog

Sourced from cassandra-driver's changelog.

3.30.1

June 19, 2026

Bug Fixes

  • Wheels for 3.30.0 include Cython-generated .c files (CASSPYTHON-21)
  • Mark non-security md5 usage to allow for compatibility with fips (PR 1288/1294)
  • Prevent crash at exit (PR 1287)

Others

  • Removed obsolete check for python version > 3.7+ (CASSPYTHON-18)
Commits
  • ec21afc Release 3.30.1: changelog, version and documentation
  • 2ff1672 CASSPYTHON-18: removed obsolete check for python version > 3.7+
  • e80ef69 Add security-model discoverability (AGENTS.md -> SECURITY.md -> security model)
  • 88bf585 CASSPYTHON-23 Remove CloudTests and CloudSchemaTests
  • 81faea2 Prevent crash at exit
  • f685c2c Mark non-security md5 usage to allow for compatibility with fips
  • c6bee69 CASSPYTHON-21 Wheels for 3.30.0 include Cython-generated .c files
  • See full diff in compare view

Updates msgpack from 1.2.1 to 1.2.2

Release notes

Sourced from msgpack's releases.

v1.2.2

What's Changed

New Contributors

Full Changelog: msgpack/msgpack-python@v1.2.1...v1.2.2

Changelog

Sourced from msgpack's changelog.

1.2.2

Release Date: 2026-08-27

  • Fix the read_size documentation. #700
  • Fix silent truncation when unpacking an out-of-range timestamp with timestamp=3. #701
  • Prevent reentrant calls to Unpacker.feed() while unpacking. #704
  • Improve error handling and reporting in unpacking functions. #707
  • Fix Timestamp.from_datetime() precision for far-future datetimes. #710
  • Fix typos in the documentation. #712
  • Validate the nanoseconds range when unpacking timestamps in the C extension. #716
  • Fix a use-after-free in the unpackb() ExtraData path for non-contiguous input. #722
  • Prevent a buffer overflow when converting Packer's buf_size. #726
  • Translate RecursionError to StackError in the fallback Unpacker.skip(). #727
  • Raise OverflowError when use_single_float=True cannot represent a value. #728
Commits
  • 7381b31 release
  • ee1bd3c release v1.2.2 (#730)
  • 57d28a2 Raise OverflowError when use_single_float cannot represent a value (#728)
  • d374a17 Avoid parallel execution of the recursion-limit nesting test on free-threaded...
  • e94e1dc Validate nanoseconds range when unpacking timestamps in the C extension (#716)
  • 2e4be09 fix: translate RecursionError to StackError in fallback Unpacker.skip() (#727)
  • 9f9bdae Convert Packer's buf_size once (#726)
  • 809bfcd remove unused variable
  • 186d4db Bump pypa/cibuildwheel from 4.1.1 to 4.2.0(#724)
  • ea6b84f Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencie...
  • Additional commits viewable in compare view

Updates deltalake from 1.6.2 to 1.6.3

Release notes

Sourced from deltalake's releases.

python-v1.6.3

What's Changed

New Contributors

Full Changelog: delta-io/delta-rs@python-v1.6.2...python-v1.6.3

Commits
  • cee6f9e bump cargo.toml to 1.6.3
  • 98e3094 chore: crates/aws: Cleanup S3 storage options
  • d983411 chore: drop now-unused Field import in merge
  • 4cef8c4 fix(datafusion): pass element type to new_list in merge CDF fan-out
  • 4325ef1 chore: move StatisticsContext import into exec_meta test module
  • 7c67866 test(datafusion): drive statistics via StatisticsContext
  • 6a1b0a9 fix(datafusion): port DeltaScanMetaExec to statistics_from_inputs
  • 73e3829 fix(datafusion): port wrapper execs to statistics_from_inputs
  • 2f14205 fix(datafusion): port DeltaScanExec to statistics_from_inputs
  • e3d5de9 fix(datafusion): tolerate flattened string encoding in file_id test
  • Additional commits viewable in compare view

Updates grpcio from 1.83.0 to 1.83.1

Release notes

Sourced from grpcio's releases.

Release v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Commits
  • aae2670 [Backport][v1.83.x] Fix legacy_channel.cc compile error with `std::optional<a...
  • b77ea36 [Backport][v1.83.x] Memory optimization (#43297)
  • 9dcd5aa [CI] Fix Python 3.15 Sanity (#43299)
  • ed8899e [Backport][v1.83.x] Fixing bug in GoAway and gRPC Message Compression (#43270)
  • 5f8d6df [Release] Bump version to 1.83.1 (on v1.83.x branch) (#43274)
  • 291e0be [Backport][v1.83.x][Python] Fix the StatusCode Enums to be int (#43252)
  • 05ceb5d [CI][Backport][v1.83.x][Python] Fix PSM Interop xds-v3 Python continuous fail...
  • dbc73b8 [Backport][v1.83.x][PHP]updated workflow to preserve github folder (#43243)
  • See full diff in compare view

Updates protobuf from 7.36.0 to 7.36.1

Commits

Updates redis from 8.0.0 to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

  • Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).
  • Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).
  • Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).
  • Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).
  • Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).
  • Sentinel — replica sentinel aliases (#4127).

🚀 New Features

  • Add replica sentinel aliases (#4127)
  • Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)
  • feat: add TS.READ command support to the timeseries module (#4170)
  • feat: add SDIFFCARD and SUNIONCARD command support (#4171)
  • feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)
  • feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)
  • feat: add async maintenance-notifications support for standalone and cluster clients (#4177)
  • feat: add COLLECT reducer support to search aggregations (#4179)
  • feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)
  • feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)
  • feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

  • feat: add client-side HIMPORT fieldset support for standalone and cluster clients (

… updates

Bumps the uv-minor-patch group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.32.4` | `3.32.5` |
| [click](https://github.com/pallets/click) | `8.4.1` | `8.5.0` |
| [simplejson](https://github.com/simplejson/simplejson) | `4.1.1` | `4.1.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [bitarray](https://github.com/ilanschnell/bitarray) | `3.10.1` | `3.11.0` |
| [cassandra-driver](https://github.com/apache/cassandra-python-driver) | `3.30.0` | `3.30.1` |
| [msgpack](https://github.com/msgpack/msgpack-python) | `1.2.1` | `1.2.2` |
| [deltalake](https://github.com/delta-io/delta-rs) | `1.6.2` | `1.6.3` |
| [grpcio](https://github.com/grpc/grpc) | `1.83.0` | `1.83.1` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `7.36.0` | `7.36.1` |
| [redis](https://github.com/redis/redis-py) | `8.0.0` | `8.1.0` |
| [sqlmodel](https://github.com/fastapi/sqlmodel) | `0.0.38` | `0.0.42` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.59` | `3.1.62` |
| [rapidyaml](https://github.com/biojppm/rapidyaml-python) | `0.13.0.post2` | `0.15.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.3` | `0.141.1` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.16.6` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.2` |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `10.2.1` | `10.2.3` |
| [grpcio-tools](https://github.com/grpc/grpc) | `1.83.0` | `1.83.1` |
| [build](https://github.com/pypa/build) | `1.5.0` | `1.6.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.73` | `0.0.79` |



Updates `filelock` from 3.32.4 to 3.32.5
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.32.4...3.32.5)

Updates `click` from 8.4.1 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.5.0)

Updates `simplejson` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/main/CHANGES.txt)
- [Commits](simplejson/simplejson@v4.1.1...v4.1.2)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `bitarray` from 3.10.1 to 3.11.0
- [Changelog](https://github.com/ilanschnell/bitarray/blob/master/doc/changelog.rst)
- [Commits](ilanschnell/bitarray@3.10.1...3.11.0)

Updates `cassandra-driver` from 3.30.0 to 3.30.1
- [Changelog](https://github.com/apache/cassandra-python-driver/blob/trunk/CHANGELOG.rst)
- [Commits](apache/cassandra-python-driver@3.30.0...3.30.1)

Updates `msgpack` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.2.1...v1.2.2)

Updates `deltalake` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/delta-io/delta-rs/releases)
- [Changelog](https://github.com/delta-io/delta-rs/blob/main/CHANGELOG.md)
- [Commits](delta-io/delta-rs@python-v1.6.2...python-v1.6.3)

Updates `grpcio` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.83.0...v1.83.1)

Updates `protobuf` from 7.36.0 to 7.36.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `redis` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v8.0.0...v8.1.0)

Updates `sqlmodel` from 0.0.38 to 0.0.42
- [Release notes](https://github.com/fastapi/sqlmodel/releases)
- [Changelog](https://github.com/fastapi/sqlmodel/blob/main/docs/release-notes.md)
- [Commits](fastapi/sqlmodel@0.0.38...0.0.42)

Updates `gitpython` from 3.1.59 to 3.1.62
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.59...3.1.62)

Updates `rapidyaml` from 0.13.0.post2 to 0.15.2
- [Commits](https://github.com/biojppm/rapidyaml-python/commits/v0.15.2)

Updates `fastapi` from 0.136.3 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.141.1)

Updates `gunicorn` from 26.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@26.0.0...26.2.0)

Updates `ruff` from 0.15.17 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.17...0.16.6)

Updates `pre-commit` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.2)

Updates `setuptools-scm` from 10.2.1 to 10.2.3
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@setuptools-scm-v10.2.1...setuptools-scm-v10.2.3)

Updates `grpcio-tools` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.83.0...v1.83.1)

Updates `build` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.0...1.6.0)

Updates `ty` from 0.0.73 to 0.0.79
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.73...0.0.79)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: simplejson
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: bitarray
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: cassandra-driver
  dependency-version: 3.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: msgpack
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: deltalake
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: grpcio
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: protobuf
  dependency-version: 7.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: sqlmodel
  dependency-version: 0.0.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: gitpython
  dependency-version: 3.1.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: rapidyaml
  dependency-version: 0.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: setuptools-scm
  dependency-version: 10.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: grpcio-tools
  dependency-version: 1.83.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: build
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: ty
  dependency-version: 0.0.79
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 11, 2026
soad003 added a commit that referenced this pull request Sep 14, 2026
setuptools 84.0.0 is dependabot #154; the pin it used to sit under was
already established as vestigial (it only silenced a pkg_resources
warning).

ruff is held back OUT of the uv-minor-patch group of #162. 0.16.6 widens
the default rule set: `make lint` reports 3442 errors (2741 autofixable)
on a tree that is clean under 0.15.x, and that -- not the code -- is what
turned every job of #162 red. The suite passed there, 2318 passed / 0
failed, so none of the other 21 bumps is implicated. Adopting 0.16 is its
own change, either the autofixes or an explicit `lint.select`, with a
reviewable diff rather than one smuggled in behind a lockfile bump.

The ty bump inside the group (0.0.73 -> 0.0.79) does pay for itself
immediately: it flags `if "large_binary" in ste or "named input expected
length":` in the delta sink, where the second operand is a bare string
literal and so always true. Every ArrowInvalid took the shrink-the-row-
group retry and the `else: raise e` was dead, so an unrelated Arrow error
burned 20 attempts and then surfaced as a message naming neither it nor
the file.
@soad003

soad003 commented Sep 14, 2026

Copy link
Copy Markdown
Member

21 of the 22 bumps are integrated into develop via #. ruff is held at 0.15.17: 0.16.6 widens the default rule set and reports 3442 findings (2741 autofixable) on a clean tree, which is what failed every job here — the suite itself passed. Adopting 0.16 gets its own PR.

@soad003 soad003 closed this Sep 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/uv/uv-minor-patch-c21f05acf5 branch September 14, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant