Skip to content

chore(deps): bump the python-minor-and-patch group across 1 directory with 4 updates - #167

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-15ace189cc
Open

chore(deps): bump the python-minor-and-patch group across 1 directory with 4 updates#167
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-15ace189cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited by cursor Bot
Loading

Copy link
Copy Markdown

Bumps the python-minor-and-patch group with 4 updates in the / directory: pydantic, polars, ruff and pyright.

Updates pydantic from 2.13.3 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • See full diff in compare view

Updates polars from 1.41.2 to 1.42.1

Release notes

Sourced from polars's releases.

Python Polars 1.42.1

⚠️ Deprecations

  • Deprecate strict parameter of pl.concat, replace with new how='horizontal_extend' (#27965)

🚀 Performance improvements

  • Add a sampled resolve mode for multi-file parquet metadata (#28111)
  • Speed up small dtype series sums with a upcast sum kernel (#27958)
  • Don't block on path expansion (#28073)

✨ Enhancements

  • Close ResourceWarning leaks in database tests (#28066)

🐞 Bug fixes

  • Incorrect sorted fast-path returning nan for grouped max (#28129)
  • Fix panic on scan_parquet filter of fixed-size binary column (#28122)
  • Fix decimal dynamic float cast (#28126)
  • Fix pyiceberg key dot HDFS prefix filter (#28109)
  • Fix projection pushdown panic on select(len()) after groupby (#28108)
  • Fully resolve remaining ResourceWarning leaks in database/iceberg tests (#28107)
  • Expiry time loading for AWS DeferredRefreshableCredentials (#28099)
  • Close ResourceWarning leaks in database tests (#28066)
  • Avoid panic on temporal extraction for datetime columns with nulls (#28054)
  • Prevent panic in replace when old/new contain Expr or object dtype values (#27433)

📖 Documentation

  • Fix dataset regression in the examples (#28131)
  • Emphasize to generally not ever write Rust tests (#28082)
  • Mention Polars skill in User Guide's LLM section (#28113)

🛠️ Other improvements

  • Disallow usage of tokio::spawn in clippy (#28123)
  • Improve Makefile with respect to venv robustness (#28110)
  • Remove legacy prelude glob imports from leaf files (#28114)
  • Skip pandas 3.0.4 due to pd.TimeDelta segfault (#28125)
  • Update mypy to the new 2.x release (#28116)
  • Ensure pyrefly checks run as part of make pre-commit (#28095)
  • Fix test_select_explode_height_filter_order_by failure when POLARS_MAX_THREADS=2 (#28090)
  • Add Morsel::height (#28060)

Thank you to all our contributors for making this release possible! @​0guban0v, @​Kevin-Patyk, @​TNieuwdorp, @​alexander-beedie, @​azimafroozeh, @​dsprenkels, @​kdn36, @​nameexhaustion, @​orlp, @​raphaelroshan, @​ritchie46 and @​sar-cheng

Python Polars 1.42.0

⚠️ Deprecations

... (truncated)

Commits
  • 0df0c25 Python Polars 1.42.1 (#28128)
  • 876bfb8 docs: Fix dataset regression in the examples (#28131)
  • 07560f7 chore(rust): Disallow usage of tokio::spawn in clippy (#28123)
  • aa5d073 fix: Incorrect sorted fast-path returning nan for grouped max (#28129)
  • a2f2559 docs: Emphasize to generally not ever write Rust tests (#28082)
  • 156e7f5 chore(python): Improve Makefile with respect to venv robustness (#28110)
  • fc09271 fix: Fix panic on scan_parquet filter of fixed-size binary column (#28122)
  • 3dce32b docs: Mention Polars skill in User Guide's LLM section (#28113)
  • bd27f24 refactor(rust): Remove legacy prelude glob imports from leaf files (#28114)
  • 853a398 fix: Fix decimal dynamic float cast (#28126)
  • Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

0.15.21

Released on 2026-07-09.

Preview features

... (truncated)

Commits

Updates pyright from 1.1.409 to 1.1.411

Commits

Note

Low Risk
Lockfile-only dependency bumps within existing version constraints; no direct code changes, though pydantic/polars runtime behavior could change slightly on upgrade.

Overview
Updates the locked versions of four packages in uv.lock only—no pyproject.toml or application source changes.

Runtime / optional: pydantic 2.13.3 → 2.13.4 (with pydantic-core 2.46.3 → 2.46.4) and polars / polars-runtime-32 1.41.2 → 1.42.1.

Dev tooling: ruff 0.15.12 → 0.15.22 and pyright 1.1.409 → 1.1.411.

CI still uses uv sync --locked with existing ruff/pyright steps; behavior may shift slightly from upstream patch/minor releases (e.g. polars bugfixes, ruff rule/perf changes).

Reviewed by Cursor Bugbot for commit 191a695. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the python-minor-and-patch group with 4 updates chore(deps): bump the python-minor-and-patch group across 1 directory with 4 updates Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-and-patch-15ace189cc branch from d4a027d to 7b76527 Compare July 20, 2026 13:18
@dependabot
chore(deps): bump the python-minor-and-patch group across 1 directory…
191a695 
… with 4 updates

Bumps the python-minor-and-patch group with 4 updates in the / directory: [pydantic](https://github.com/pydantic/pydantic), [polars](https://github.com/pola-rs/polars), [ruff](https://github.com/astral-sh/ruff) and [pyright](https://github.com/RobertCraigie/pyright-python).


Updates `pydantic` from 2.13.3 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.3...v2.13.4)

Updates `polars` from 1.41.2 to 1.42.1
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.41.2...py-1.42.1)

Updates `ruff` from 0.15.12 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.12...0.15.22)

Updates `pyright` from 1.1.409 to 1.1.411
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.409...v1.1.411)

---
updated-dependencies:
- dependency-name: polars
  dependency-version: 1.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-and-patch-15ace189cc branch from 7b76527 to 191a695 Compare July 27, 2026 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants