Skip to content

Bump the python-packages group with 7 updates#403

Merged
dolfinus merged 1 commit into
developfrom
dependabot/uv/python-packages-373deedb9a
Jul 23, 2026
Merged

Bump the python-packages group with 7 updates#403
dolfinus merged 1 commit into
developfrom
dependabot/uv/python-packages-373deedb9a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 7 updates:

Package From To
pyspark 3.5.8 3.5.9
faker 40.31.0 40.35.0
gevent 26.5.0 26.7.0
ruff 0.15.21 0.15.22
prek 0.4.9 0.4.10
types-jwcrypto 1.5.7.20260518 1.5.8.20260720
mkdocs-material 9.7.6 9.7.7

Updates pyspark from 3.5.8 to 3.5.9

Commits
  • 7c14a3c Preparing Spark release v3.5.9-rc1
  • b8fd7f5 [MINOR][SPARK-3.5] Upgrade to Ivy 2.5.3
  • c85adcb [BACKPORT][MINOR][UI] Encode query parameters when generating log page scripts
  • b75a07d [SPARK-56227][3.5][CORE] Fix GcmTransportCipher to correctly handle multiple ...
  • 4596d25 [SPARK-57962][PYTHON] Guard against path traversal in install_spark tar extra...
  • 2b0fc2a [MINOR][UI] Escape HTML when rendering error messages in the Web UI tables
  • d3ab824 [SQL] Allow more control over UDT creation during input loading
  • ecd72da [SPARK][SQL] LDAP Thriftserver improvement
  • ff7a771 [SPARK-58033][PYTHON][DOC] Fix py4j version requirement in PySpark installa...
  • 6108643 [SPARK-58030][SQL][TEST] Make FileDataSourceV2FallBackSuite robust to extra l...
  • Additional commits viewable in compare view

Updates faker from 40.31.0 to 40.35.0

Release notes

Sourced from faker's releases.

Release v40.35.0

See CHANGELOG.md.

Release v40.34.0

See CHANGELOG.md.

Release v40.33.2

See CHANGELOG.md.

Release v40.33.1

See CHANGELOG.md.

Release v40.33.0

See CHANGELOG.md.

Release v40.32.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.35.0 - 2026-07-22

  • Fix: add correct bban_format so ru_RU iban() generates valid Russian IBANs (#2416). Thanks @​CedricConday.

v40.34.0 - 2026-07-22

  • Fix: correct BBAN length so da_DK iban() generates valid Danish IBANs (#2409). Thanks @​CedricConday.

v40.33.2 - 2026-07-22

  • Validate positive=True against a non-positive max_value in pydecimal (#2428). Thanks @​Sreekant13.

v40.33.1 - 2026-07-22

  • Make uuid1() and uuid7() reproducible under a fixed seed (#2427). Thanks @​vidigoat.

v40.33.0 - 2026-07-22

  • Add alphanumeric CNPJ support for pt_BR via flag (#2402). Thanks @​moohbr.

v40.32.0 - 2026-07-20

Commits
  • 2e83f45 Bump version: 40.34.0 → 40.35.0
  • b1caba1 📝 Update CHANGELOG.md
  • 706aaca 💄 Lint code
  • 6f8f18f fix(ru_RU): add correct bban_format so iban() is valid (#2416)
  • b92cf24 Bump version: 40.33.2 → 40.34.0
  • db5e23c 📝 Update CHANGELOG.md
  • 7659c7f fix(da_DK): correct BBAN length so iban() generates valid Danish IBANs (#2409)
  • d20ef7c Bump version: 40.33.1 → 40.33.2
  • 40bd28b 📝 Update CHANGELOG.md
  • fdf861d Validate positive=True against a non-positive max_value in pydecimal (#2428)
  • Additional commits viewable in compare view

Updates gevent from 26.5.0 to 26.7.0

Commits
  • 1ae8449 Preparing release 26.7.0
  • af4fad4 Add note about change in binary wheel building.
  • 894a6e1 gevent/resolver/_addresses.py: Apply suggestion from @​koteshyelamati and move...
  • 4bbfae8 Merge pull request #2190 from gevent/os-close-no-init-hub
  • fbc0ca7 Blanket skip two SSL tests that are highly environment sensitive.
  • bef4cdd Disable 3.15 on windows entirely for now; everything is crashing and I'm pret...
  • 95c5b1e Attempt some CFFI-related workarounds.
  • 2b754a5 cython won't build on windows, must stick to precompiled version. Debugging a...
  • ebcebb0 Track down why 3.15 was initting the hub.
  • dcf4eae Merge pull request #2189 from ddorian/fix-shutdown-atexit-order
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates prek from 0.4.9 to 0.4.10

Release notes

Sourced from prek's releases.

0.4.10

Release Notes

Released on 2026-07-16.

Enhancements

  • Add PHP language support (#2314)
  • Add freeze option to update settings (#2323)
  • Add tag filters to update configuration (#2354)
  • Identify 'mts' and 'cts' as TypeScript files (#2209)
  • Publish Alpine Docker images (#2352)
  • Support builtin and meta in try-repo (#2350)

Bug fixes

  • Fix Python discovery order (#2348)
  • Fix Windows progress rendering (#2328)
  • Preserve configured repo values for updates (#2324)
  • Scope synthetic GIT_WORK_TREE to git commands (#2356)

Documentation

  • Expand common workflows guide (#2351)

Contributors

Install prek 0.4.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.10

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.10

Released on 2026-07-16.

Enhancements

  • Add PHP language support (#2314)
  • Add freeze option to update settings (#2323)
  • Add tag filters to update configuration (#2354)
  • Identify 'mts' and 'cts' as TypeScript files (#2209)
  • Publish Alpine Docker images (#2352)
  • Support builtin and meta in try-repo (#2350)

Bug fixes

  • Fix Python discovery order (#2348)
  • Fix Windows progress rendering (#2328)
  • Preserve configured repo values for updates (#2324)
  • Scope synthetic GIT_WORK_TREE to git commands (#2356)

Documentation

  • Expand common workflows guide (#2351)

Contributors

Commits

Updates types-jwcrypto from 1.5.7.20260518 to 1.5.8.20260720

Commits

Updates mkdocs-material from 9.7.6 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates.

The path forward is Zensical, our next-generation static site generator built from first principles. If you’re planning a new documentation project or thinking about your long-term setup, we encourage you to start exploring Zensical.

Organizations requiring support beyond this date can get in touch to discuss options.

Read the full announcement on our blog

Changes

  • Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

  • Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-packages group with 7 updates
c50ac59 
Bumps the python-packages group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [pyspark](https://github.com/apache/spark) | `3.5.8` | `3.5.9` |
| [faker](https://github.com/joke2k/faker) | `40.31.0` | `40.35.0` |
| [gevent](https://github.com/gevent/gevent) | `26.5.0` | `26.7.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.15.22` |
| [prek](https://github.com/j178/prek) | `0.4.9` | `0.4.10` |
| [types-jwcrypto](https://github.com/python/typeshed) | `1.5.7.20260518` | `1.5.8.20260720` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.6` | `9.7.7` |


Updates `pyspark` from 3.5.8 to 3.5.9
- [Commits](apache/spark@v3.5.8...v3.5.9)

Updates `faker` from 40.31.0 to 40.35.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.31.0...v40.35.0)

Updates `gevent` from 26.5.0 to 26.7.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@26.5.0...26.7.0)

Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `prek` from 0.4.9 to 0.4.10
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.9...v0.4.10)

Updates `types-jwcrypto` from 1.5.7.20260518 to 1.5.8.20260720
- [Commits](https://github.com/python/typeshed/commits)

Updates `mkdocs-material` from 9.7.6 to 9.7.7
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.6...9.7.7)

---
updated-dependencies:
- dependency-name: pyspark
  dependency-version: 3.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: faker
  dependency-version: 40.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: gevent
  dependency-version: 26.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: prek
  dependency-version: 0.4.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: types-jwcrypto
  dependency-version: 1.5.8.20260720
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the type:dependency Dependency-related changes label Jul 23, 2026
@MTSOnGithub
MTSOnGithub enabled auto-merge (rebase) July 23, 2026 05:18
@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown

Coverage

Coverage Report •
FileStmtsMissBranchBrPartCoverMissing
TOTAL536864283217487% 
report-only-changed-files is enabled. No files were changed during this commit :)

@dolfinus
dolfinus disabled auto-merge July 23, 2026 07:29
@dolfinus
dolfinus merged commit 21fa70d into develop Jul 23, 2026
23 of 26 checks passed
@dolfinus
dolfinus deleted the dependabot/uv/python-packages-373deedb9a branch July 23, 2026 07:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MTSOnGithub MTSOnGithub MTSOnGithub approved these changes

Assignees

No one assigned

Labels

type:dependency Dependency-related changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@MTSOnGithub @dolfinus