chore(deps): bump the python-patch group across 1 directory with 33 updates by dependabot[bot] · Pull Request #151 · TexasCoding/project-x-py

dependabot · 2026-09-29T11:41:03Z

Bumps the python-patch group with 33 updates in the / directory:

Package	From	To
polars	`1.32.2`	`1.44.2`
numpy	`2.3.2`	`2.5.3`
pydantic	`2.11.7`	`2.13.5`
pyyaml	`6.0.2`	`6.0.3`
lz4	`4.4.4`	`4.4.5`
deprecated	`1.2.18`	`1.3.1`
uvloop	`0.21.0`	`0.22.1`
ruff	`0.12.8`	`0.16.9`
isort	`9.0.0`	`9.0.1`
pre-commit	`4.2.0`	`4.6.2`
aioresponses	`0.7.8`	`0.7.9`
pytest-mock	`3.14.1`	`3.15.1`
mkdocs-jupyter	`0.25.1`	`0.26.3`
mkdocs-autorefs	`1.4.2`	`1.4.4`
mkdocs-gen-files	`0.5.0`	`0.6.1`
mkdocs-literate-nav	`0.6.2`	`0.6.3`
mkdocs-section-index	`0.3.10`	`0.3.12`
mike	`2.1.3`	`2.2.0`
types-requests	`2.32.4.20250611`	`2.33.0.20260906`
types-pytz	`2026.3.1.20260727`	`2026.4.0.20260926`
psutil	`7.0.0`	`7.2.2`
pyjwt	`2.13.0`	`2.15.0`
py-spy	`0.4.1`	`0.4.2`
pytest-benchmark	`5.1.0`	`5.3.0`
bandit	`1.8.6`	`1.9.4`
pip-audit	`2.10.1`	`2.9.0`
semgrep	`1.178.0`	`1.156.0`
vulture	`2.14`	`2.16`
build	`1.3.0`	`1.6.1`
libcst	`1.8.2`	`1.9.0`
pydeps	`3.0.1`	`3.0.8`
types-deprecated	`1.2.15.20250304`	`1.3.1.20260728`
types-psutil	`7.0.0.20250822`	`7.2.2.20260906`

Updates polars from 1.32.2 to 1.44.2

Release notes

Sourced from polars's releases.

Python Polars 1.44.2

🛠️ Other improvements

Backport 1.44.2 (#29216)

Thank you to all our contributors for making this release possible! @EndPositive, @dsprenkels, @kdn36, @lun3x, @nameexhaustion and @orlp

Python Polars 1.44.1

Thank you to all our contributors for making this release possible! @Kevin-Patyk, @henrytsanford, @jonasdedden, @orlp and @ritchie46

Python Polars 1.44.0

⚠️ Deprecations

Deprecate rechunk parameter for all read/scan functions (#28063)

Deprecate Expr.rechunk() (#28692)

Deprecate struct.rename_fields() with an incorrect number of fields (#28672)

🚀 Performance improvements

Add private env var toggle for HTTP rate limit (#28882)

Relax default CloudRetryConfig for rate limit stability (#28885)

Elide generic cross join on subquery decorrelation in equality predicates (#28876)

cache CTE's in SQL layer (#28864)

Allow CSPE if manual caches are set (#28859)

Lower unqualified join predicates to inner joins in SQL (#28854)

Rechunk mask for DataFrame filter (#28762)

Improve performance of when/then/otherwise by masking out unevaluated elements (#28498)

Drop unused projections in filter on streaming engine (#28713)

Retain Parquet Partial metadata on filter (#28737)

✨ Enhancements

Support integer fixed-array dot products (#28829)

SQL correlated in (#28927)

Support more join_types in join_where (#28880)

Support Iceberg schema evolution (#28794)

SQL conformance (#28494)

Introduce RemoteEngine and a common base class for all engines (#28800)

Support Iceberg table with V3 deletion vectors in native scan_iceberg (#28772)

Support Iceberg snapshot properties (#28793)

Expose sinked_paths_callback on sink_parquet as unstable parameter (#28814)

Add infer_schema_files to CSV inference hint (#28809)

Add native fixed-array dot (#28504)

Export query metrics to polars_cloud (#28757)

Support Iceberg object storage paths (#28634)

More CSEE simplification (#28731)

... (truncated)

Commits

1bd8ec1 Python Polars 1.44.2
ccc3842 refactor(rust): Reduce code monomorphization in eager joins (#29087)
22f274b refactor(rust): Reduce serde monomorphization (#29088)
b069c83 feat(python): Add organization to Config.enable_monitoring (#29221)
d5a00ec ci: Skip tests that are currently failing on windows (#28962)
22dc741 test(python): Update test for latest pyiceberg (#29090)
d1a325b fix: Include the library path in the plugin dlopen error message (#29213)
461fe0e feat(python): Add a workspace argument to Config.enable_monitoring (#29196)
0ced41b fix: Wrap IoError in PathIoError such that callers can extract untruncated pa...
3b4075b refactor: Bump object_store for new DnsResolver trait (#29145)
Additional commits viewable in compare view

Updates numpy from 2.3.2 to 2.5.3

Release notes

Sourced from numpy's releases.

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

The NumPy 2.5.3 is a patch release that fixes bugs discovered after the 2.5.2 release. Apart from the usual bug and maintenance work, there are a number of StringDType related fixes for problems discovered during the ongoing string work in the main branch.

This release supports Python versions 3.12-3.15

Changes

Casting a fixed-width byte string array (np.bytes_) to StringDType now raises TypeError when the bytes are not valid UTF-8. Previously the invalid bytes were stored as-is and later caused undefined behavior in string operations.

(gh-32296)

MaskedArray._fill_value would become stale when ufuncs that change dtype left the result holding a fill_value typed for the old dtype. The mismatch was silent until something later called _check_fill_value, such as .view(), and then a TypeError would be raised. Now, when the copied fill_value is no longer valid for the new dtype, fall back to the default fill_value for that dtype instead of propagating the stale value. This may raise a ComplexWarning if the fill_value is complex and the new dtype is real.

(gh-32423)

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Charles Harris

Iason Krommydas

James Davies +

Joren Hammudoglu

Maanas Arora

Matti Picus

Nathan Goldbaum

Shikhar Goel +

Yeonho Kim +

Pull requests merged

A total of 27 pull requests were merged for this release.

#32235: MAINT: Prepare 2.5.x for further development

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits

dd88c0c Merge pull request #32511 from charris/prepare-2.5.3
edcac6a REL: Prepare for the NumPy 2.5.3 release
fd4d908 Merge pull request #32509 from charris/backport-32496
65bb1da BUG: fix crash in ufunc.resolve_dtypes with a Python scalar type (#32496)
294956e Merge pull request #32506 from charris/backport-32503
26428d9 DOC: fix scipy docs links in intersphinx mapping (#32507)
5fab1cb DOC: use static scipy doc site for intershpinx (#32503)
7beed2f Merge pull request #32481 from ngoldbaum/stringdtype-backport
8972f70 Merge pull request #32478 from charris/backport-32466
ab1b589 Merge pull request #32477 from charris/backport-32423
Additional commits viewable in compare view

Updates pydantic from 2.11.7 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Bump libc from 0.2.155 to 0.2.185 by @Viicos in #13109

Adapt pydantic-core linker flags on macOS by @washingtoneg and @Viicos in #13147

Fixes

Preserve RootModel core metadata by @Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Bump libc from 0.2.155 to 0.2.185 by @Viicos in #13109

Adapt pydantic-core linker flags on macOS by @washingtoneg and @Viicos in #13147

Fixes

Preserve RootModel core metadata by @Viicos in #13129

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

v2.13.1 (2026-04-15)

... (truncated)

Commits

001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
558379f Bump twine to v7.0.0
2cfd5d3 Do not check for docs build
a735bee Fix more Clippy lints
7eed4a1 Fix Clippy 0.1.95 warnings
b353bbb Prepare release v2.13.5
63d2ccc Count validated model fields once in smart unions
a53ec2e Speed up PyPy CI tests
d65e0f9 Workaround circular import error in Mypy
47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

49790e7 Release 6.0.3 (#889)
See full diff in compare view

Updates lz4 from 4.4.4 to 4.4.5

Release notes

Sourced from lz4's releases.

v4.4.5

What's Changed

Enable CPython free-threaded wheel builds by @andfoy in python-lz4/python-lz4#301

Correct the import of _compression for Python 3.14 by @befeleme in python-lz4/python-lz4#303

Keep GitHub Actions up to date with GitHub's Dependabot by @cclauss in python-lz4/python-lz4#311

Build wheels for Python 3.14 by @cclauss in python-lz4/python-lz4#309

Fix typos discovered by codespell by @cclauss in python-lz4/python-lz4#312

Bump pypa/cibuildwheel from 3.2.0 to 3.2.1 in the github-actions group across 1 directory by @dependabot[bot] in python-lz4/python-lz4#315

New Contributors

@andfoy made their first contribution in python-lz4/python-lz4#301

@befeleme made their first contribution in python-lz4/python-lz4#303

@cclauss made their first contribution in python-lz4/python-lz4#311

@dependabot[bot] made their first contribution in python-lz4/python-lz4#315

Full Changelog: python-lz4/python-lz4@v4.4.4...v4.4.5

Commits

59b2d81 Bump pypa/cibuildwheel in the github-actions group across 1 directory
849e154 Fix typos discovered by codespell
438df39 Remove cp314t from cibw_build matrix
8c82a0d Build wheels for Python 3.14
5c9f556 Keep GitHub Actions up to date with GitHub's Dependabot
d838750 Update lz4/frame/init.py
708e6d4 Correct the import of _compression for Python 3.14
022d538 Address review comments
e54341f CI: disable armv7l
689440c CI: disable pytest-run-parallel altogeogether in aarch64
Additional commits viewable in compare view

Updates deprecated from 1.2.18 to 1.3.1

Release notes

Sourced from deprecated's releases.

v1.3.1

What's Changed

v1.3.1 by @laurent-laporte-pro in laurent-laporte-pro/deprecated#95

Full Changelog: laurent-laporte-pro/deprecated@v1.3.0...v1.3.1

v1.3.0

What's Changed

Allow and test wrapt 2.x by @musicinmybrain in laurent-laporte-pro/deprecated#88

docs: update the Wrapt compatibility matrix to include Python 3.13 and 3.14 by @laurent-laporte-pro in laurent-laporte-pro/deprecated#91

chore(ci): run coverage only in the dedicated coverage env by @laurent-laporte-pro in laurent-laporte-pro/deprecated#92

feature: parameter deprecation by @laurent-laporte-pro in laurent-laporte-pro/deprecated#93

v1.3.0 by @laurent-laporte-pro in laurent-laporte-pro/deprecated#90

New Contributors

@musicinmybrain made their first contribution in laurent-laporte-pro/deprecated#88

Full Changelog: laurent-laporte-pro/deprecated@v1.2.18...v1.3.0

Changelog

Sourced from deprecated's changelog.

Changelog 1.2.x

All notable changes for the 1.2.x releases.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[!NOTE] The library "Python-Deprecated" was renamed "Deprecated", simply! This project is more consistent because now, the name of the library is the same as the name of the Python package.

In your setup.py, you can replace the "Python-Deprecated" dependency with "Deprecated".

In your source code, nothing has changed, you will always use import deprecated, as before.

I decided to keep the same version number because there is really no change in the source code (only in comment or documentation).

Commits

d135459 v1.3.1 (#95)
b29c0db feat(pyproject): add TestPyPI configuration for package publishing
ee5014a docs(changelog): update changelog for v1.3.1 and include previous versions
13db9ba docs(changelog): add v1.3.1 release notes for packaging fix and missing sourc...
72fecf8 docs(changelog): update v1.3.0 release notes to indicate yanked status and re...
966df9d Prepare next version 1.3.1 (unreleased)
3ad781a v1.3.0 (#90)
e9eed1e docs(tutorial): add documentation for deprecated parameters decorator
969a6cd feat: add experimental @deprecated_params decorator (#93)
3f30cdb docs(changelog): add experimental @deprecated_params decorator
Additional commits viewable in compare view

Updates uvloop from 0.21.0 to 0.22.1

Release notes

Sourced from uvloop's releases.

v0.22.1

This is identical to 0.22.0, re-ran with CI fixes

v0.22.0

Changes

Fixes for Python 3.14 (#638) (by @graingert @hroncok @paulocheque @fantix in 46456b6a for #637)

Add free-threading support (#693) (by @kumaraditya303 in 286b3707 for #642)

Fixes

Use Cython enum for __PREALLOCED_BUFS (#634) (by @jakirkham in 7bb12a17 for #634)

test: fix getaddrinfo test (#663) (by @fantix in 56807922 for #663)

test: fix task name for Python 3.13.3/3.14 (#662) (by @cjwatson in 96b7ed31 for #662)

Commits

74f4c96 uvloop 0.22.1
321d345 ci: bump pypa/gh-action-pypi-publish
3cf6b44 uvloop 0.22.0
e4d569e ci: use native ubuntu-24.04-arm
d9fa054 ci: fix test and release workflow
7effa90 ci: fix artifact handling
286b370 add free-threading support (#693)
46456b6 Fixes for Python 3.14 (#638)
96b7ed3 test: fix task name for Python 3.13.3/3.14 (#662)
5680792 test: fix getaddrinfo test (#663)
Additional commits viewable in compare view

Updates ruff from 0.12.8 to 0.16.9

Release notes

Sourced from ruff's releases.

0.16.9

Release Notes

Released on 2026-09-24.

Preview features

[ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

[flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)

[flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

Update LibCST-based fixes for Python 3.15 (#28616)

[flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

Fix horizontal overflow on the rules documentation page (#28699)

Update rules table with category information (#28651)

[flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)

[flake8-bugbear] Document type-checker interaction (B010) (#28509)

[flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)

[ruff] Mention related isort settings (RUF022) (#28719)

Contributors

@qinpei-dev

@sanjayrohith

@ntBre

@webdevsamran

@zaniebot

@ewdurbin

@MichaReiser

@spaceone

@IbrahimKhan12

@devtechedge

@GruffElixir

Install ruff 0.16.9

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.9

Released on 2026-09-24.

Preview features

[ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

[flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)

[flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

Update LibCST-based fixes for Python 3.15 (#28616)

[flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

Fix horizontal overflow on the rules documentation page (#28699)

Update rules table with category information (#28651)

[flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)

[flake8-bugbear] Document type-checker interaction (B010) (#28509)

[flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)

[ruff] Mention related isort settings (RUF022) (#28719)

Contributors

@qinpei-dev

@sanjayrohith

@ntBre

@webdevsamran

@zaniebot

@ewdurbin

@MichaReiser

@spaceone

@IbrahimKhan12

@devtechedge

@GruffElixir

0.16.8

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

... (truncated)

Commits

0be08a2 Bump version to 0.16.9 (#28882)
b4920b7 Rename ruff_cli to ruff_command_line (#28881)
47c751b Update dependency astral-sh/uv to v0.12.18 (#28880)
8c244e5 [flake8-comprehensions] Document map/generator exception behavior (C417...
5edf5a1 Use target form in rooster.version_files (#28876)
915bb2b [ty] Prefer existing @ paths over response files in Ruff and ty (#28877)
4710e1a ci(github): update version number in placeholder of issue template (#28871)
eedfc62 [ty] Propagate outer type context through cast calls (#28855)
ceaa6a0 [ty] Contain rendered code within Markdown fences (#28869)
dba0f30 authorize ruff-pre-commit dispatch via OIDC (#28867)
Additional commits viewable in compare view

Updates isort from 9.0.0 to 9.0.1

Release notes

Sourced from isort's releases.

9.0.1

🪲 Fixes

Restore python -m isort by excluding __main__ from mypyc compilation by @DanielNoord with @Copilot in PyCQA/isort#2643

Other changes

Add changelog entries for last releases by @DanielNoord in PyCQA/isort#2641

Full Changelog: PyCQA/isort@9.0.0...9.0.1

Changelog

Sourced from isort's changelog.

Changelog

NOTE: isort follows the semver versioning standard. Find out more about isort's release policy here.

Please find a complete overview of all releases on Github.

Releases

Unreleased

Commits

131f4ad Fix review typing and import order in CLI invocation test
9491900 Test python -m isort invocation directly
f0a2dca Fix python -m isort by excluding main from mypyc
037c2b2 Add changelog entries for last releases
See full diff in compare view

Updates pre-commit from 4.2.0 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

pre-commit v4.5.1

Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.

pre-commit v4.5.0

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

pre-commit v4.4.0

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

... (truncated)

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

4.5.1 - 2025-12-16

Fixes

Fix language: python with repo: local without additional_dependencies.

#3597 PR by @asottile.

... (truncated)

Commits

9767b6c v4.6.2
42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
3056619 fix language: node for hooks with build scripts and npm 11.x
242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos

…pdates Bumps the python-patch group with 33 updates in the / directory: | Package | From | To | | --- | --- | --- | | [polars](https://github.com/pola-rs/polars) | `1.32.2` | `1.44.2` | | [numpy](https://github.com/numpy/numpy) | `2.3.2` | `2.5.3` | | [pydantic](https://github.com/pydantic/pydantic) | `2.11.7` | `2.13.5` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [lz4](https://github.com/python-lz4/python-lz4) | `4.4.4` | `4.4.5` | | [deprecated](https://github.com/laurent-laporte-pro/deprecated) | `1.2.18` | `1.3.1` | | [uvloop](https://github.com/MagicStack/uvloop) | `0.21.0` | `0.22.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.12.8` | `0.16.9` | | [isort](https://github.com/PyCQA/isort) | `9.0.0` | `9.0.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.6.2` | | [aioresponses](https://github.com/pnuckowski/aioresponses) | `0.7.8` | `0.7.9` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.1` | `3.15.1` | | [mkdocs-jupyter](https://github.com/danielfrg/mkdocs-jupyter) | `0.25.1` | `0.26.3` | | [mkdocs-autorefs](https://github.com/mkdocstrings/autorefs) | `1.4.2` | `1.4.4` | | [mkdocs-gen-files](https://github.com/oprypin/mkdocs-gen-files) | `0.5.0` | `0.6.1` | | [mkdocs-literate-nav](https://github.com/oprypin/mkdocs-literate-nav) | `0.6.2` | `0.6.3` | | [mkdocs-section-index](https://github.com/oprypin/mkdocs-section-index) | `0.3.10` | `0.3.12` | | [mike](https://github.com/jimporter/mike) | `2.1.3` | `2.2.0` | | [types-requests](https://github.com/python/typeshed) | `2.32.4.20250611` | `2.33.0.20260906` | | [types-pytz](https://github.com/python/typeshed) | `2026.3.1.20260727` | `2026.4.0.20260926` | | [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.2.2` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.13.0` | `2.15.0` | | [py-spy](https://github.com/benfred/py-spy) | `0.4.1` | `0.4.2` | | [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark) | `5.1.0` | `5.3.0` | | [bandit](https://github.com/PyCQA/bandit) | `1.8.6` | `1.9.4` | | [pip-audit](https://github.com/pypa/pip-audit) | `2.10.1` | `2.9.0` | | [semgrep](https://github.com/semgrep/semgrep) | `1.178.0` | `1.156.0` | | [vulture](https://github.com/jendrikseipp/vulture) | `2.14` | `2.16` | | [build](https://github.com/pypa/build) | `1.3.0` | `1.6.1` | | [libcst](https://github.com/Instagram/LibCST) | `1.8.2` | `1.9.0` | | [pydeps](https://github.com/thebjorn/pydeps) | `3.0.1` | `3.0.8` | | [types-deprecated](https://github.com/python/typeshed) | `1.2.15.20250304` | `1.3.1.20260728` | | [types-psutil](https://github.com/python/typeshed) | `7.0.0.20250822` | `7.2.2.20260906` | Updates `polars` from 1.32.2 to 1.44.2 - [Release notes](https://github.com/pola-rs/polars/releases) - [Commits](pola-rs/polars@py-1.32.2...py-1.44.2) Updates `numpy` from 2.3.2 to 2.5.3 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.3.2...v2.5.3) Updates `pydantic` from 2.11.7 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.11.7...v2.13.5) Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) Updates `lz4` from 4.4.4 to 4.4.5 - [Release notes](https://github.com/python-lz4/python-lz4/releases) - [Commits](python-lz4/python-lz4@v4.4.4...v4.4.5) Updates `deprecated` from 1.2.18 to 1.3.1 - [Release notes](https://github.com/laurent-laporte-pro/deprecated/releases) - [Changelog](https://github.com/laurent-laporte-pro/deprecated/blob/master/CHANGELOG-1.2.md) - [Commits](laurent-laporte-pro/deprecated@v1.2.18...v1.3.1) Updates `uvloop` from 0.21.0 to 0.22.1 - [Release notes](https://github.com/MagicStack/uvloop/releases) - [Commits](MagicStack/uvloop@v0.21.0...v0.22.1) Updates `ruff` from 0.12.8 to 0.16.9 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.8...0.16.9) Updates `isort` from 9.0.0 to 9.0.1 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@9.0.0...9.0.1) Updates `pre-commit` from 4.2.0 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.2.0...v4.6.2) Updates `aioresponses` from 0.7.8 to 0.7.9 - [Release notes](https://github.com/pnuckowski/aioresponses/releases) - [Commits](pnuckowski/aioresponses@0.7.8...0.7.9) Updates `pytest-mock` from 3.14.1 to 3.15.1 - [Release notes](https://github.com/pytest-dev/pytest-mock/releases) - [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-mock@v3.14.1...v3.15.1) Updates `mkdocs-jupyter` from 0.25.1 to 0.26.3 - [Changelog](https://github.com/danielfrg/mkdocs-jupyter/blob/main/CHANGELOG.md) - [Commits](https://github.com/danielfrg/mkdocs-jupyter/commits) Updates `mkdocs-autorefs` from 1.4.2 to 1.4.4 - [Release notes](https://github.com/mkdocstrings/autorefs/releases) - [Changelog](https://github.com/mkdocstrings/autorefs/blob/main/CHANGELOG.md) - [Commits](mkdocstrings/autorefs@1.4.2...1.4.4) Updates `mkdocs-gen-files` from 0.5.0 to 0.6.1 - [Release notes](https://github.com/oprypin/mkdocs-gen-files/releases) - [Commits](oprypin/mkdocs-gen-files@v0.5.0...v0.6.1) Updates `mkdocs-literate-nav` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/oprypin/mkdocs-literate-nav/releases) - [Commits](oprypin/mkdocs-literate-nav@v0.6.2...v0.6.3) Updates `mkdocs-section-index` from 0.3.10 to 0.3.12 - [Release notes](https://github.com/oprypin/mkdocs-section-index/releases) - [Commits](oprypin/mkdocs-section-index@v0.3.10...v0.3.12) Updates `mike` from 2.1.3 to 2.2.0 - [Release notes](https://github.com/jimporter/mike/releases) - [Changelog](https://github.com/jimporter/mike/blob/master/CHANGES.md) - [Commits](jimporter/mike@v2.1.3...v2.2.0) Updates `types-requests` from 2.32.4.20250611 to 2.33.0.20260906 - [Commits](https://github.com/python/typeshed/commits) Updates `types-pytz` from 2026.3.1.20260727 to 2026.4.0.20260926 - [Commits](https://github.com/python/typeshed/commits) Updates `psutil` from 7.0.0 to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v7.0.0...v7.2.2) Updates `pyjwt` from 2.13.0 to 2.15.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.13.0...2.15.0) Updates `py-spy` from 0.4.1 to 0.4.2 - [Release notes](https://github.com/benfred/py-spy/releases) - [Changelog](https://github.com/benfred/py-spy/blob/master/CHANGELOG.md) - [Commits](benfred/py-spy@v0.4.1...v0.4.2) Updates `pytest-benchmark` from 5.1.0 to 5.3.0 - [Release notes](https://github.com/ionelmc/pytest-benchmark/releases) - [Changelog](https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst) - [Commits](ionelmc/pytest-benchmark@v5.1.0...v5.3.0) Updates `bandit` from 1.8.6 to 1.9.4 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](PyCQA/bandit@1.8.6...1.9.4) Updates `pip-audit` from 2.10.1 to 2.9.0 - [Release notes](https://github.com/pypa/pip-audit/releases) - [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md) - [Commits](pypa/pip-audit@v2.10.1...v2.9.0) Updates `semgrep` from 1.178.0 to 1.156.0 - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.178.0...v1.156.0) Updates `vulture` from 2.14 to 2.16 - [Release notes](https://github.com/jendrikseipp/vulture/releases) - [Changelog](https://github.com/jendrikseipp/vulture/blob/main/CHANGELOG.md) - [Commits](jendrikseipp/vulture@v2.14...v2.16) Updates `build` from 1.3.0 to 1.6.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.3.0...1.6.1) Updates `libcst` from 1.8.2 to 1.9.0 - [Release notes](https://github.com/Instagram/LibCST/releases) - [Changelog](https://github.com/Instagram/LibCST/blob/main/CHANGELOG.md) - [Commits](Instagram/LibCST@v1.8.2...v1.9.0) Updates `pydeps` from 3.0.1 to 3.0.8 - [Release notes](https://github.com/thebjorn/pydeps/releases) - [Changelog](https://github.com/thebjorn/pydeps/blob/master/CHANGELOG.md) - [Commits](thebjorn/pydeps@v3.0.1...v3.0.8) Updates `types-deprecated` from 1.2.15.20250304 to 1.3.1.20260728 - [Commits](https://github.com/python/typeshed/commits) Updates `types-psutil` from 7.0.0.20250822 to 7.2.2.20260906 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: polars dependency-version: 1.44.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: numpy dependency-version: 2.5.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: lz4 dependency-version: 4.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: deprecated dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: uvloop dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: ruff dependency-version: 0.16.9 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: isort dependency-version: 9.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: aioresponses dependency-version: 0.7.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: pytest-mock dependency-version: 3.15.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: mkdocs-jupyter dependency-version: 0.26.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: mkdocs-autorefs dependency-version: 1.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: mkdocs-gen-files dependency-version: 0.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: mkdocs-literate-nav dependency-version: 0.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: mkdocs-section-index dependency-version: 0.3.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: mike dependency-version: 2.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: types-requests dependency-version: 2.33.0.20260906 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: types-pytz dependency-version: 2026.4.0.20260926 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: pyjwt dependency-version: 2.15.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: py-spy dependency-version: 0.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: pytest-benchmark dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: bandit dependency-version: 1.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: pip-audit dependency-version: 2.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: semgrep dependency-version: 1.156.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: vulture dependency-version: '2.16' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: build dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: libcst dependency-version: 1.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: pydeps dependency-version: 3.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-patch - dependency-name: types-deprecated dependency-version: 1.3.1.20260728 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch - dependency-name: types-psutil dependency-version: 7.2.2.20260906 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-patch ... Signed-off-by: dependabot[bot] <support@github.com>

TexasCoding · 2026-09-29T11:57:51Z

Daily maintenance (2026-09-29): not merging.

This replaces closed #144 after cachetools landed in #150 / v4.3.3. CI lint is red: ruff UP042 on Features(str, Enum) (wants enum.StrEnum). That cleanup still awaits maintainer OK because str() behavior for Features would change.

Also the resolved lock regresses security pins from #149:

semgrep / mcp move backward from the patched line on main (mcp 1.29.0)

Leave open until StrEnum/UP042 is decided and the lock is regenerated without pulling semgrep/mcp backward.

dependabot · 2026-10-02T11:36:11Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 29, 2026

This was referenced Oct 2, 2026

fix(deps): security floors without Dependabot lock regressions #153

Merged

chore(deps): bump the security group across 1 directory with 4 updates #152

Closed

dependabot Bot closed this Oct 2, 2026

dependabot Bot deleted the dependabot/uv/python-patch-9b9be42079 branch October 2, 2026 11:36

TexasCoding mentioned this pull request Oct 3, 2026

chore(deps): bump the python-patch group across 1 directory with 29 updates #154

Merged

Navigation Menu

Repository navigation

chore(deps): bump the python-patch group across 1 directory with 33 updates - #151

chore(deps): bump the python-patch group across 1 directory with 33 updates#151
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-patch-9b9be42079

dependabot Bot commented on behalf of github Sep 29, 2026 •

edited

Loading

Uh oh!

TexasCoding commented Sep 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Python Polars 1.44.2

🛠️ Other improvements

Python Polars 1.44.1

Python Polars 1.44.0

⚠️ Deprecations

🚀 Performance improvements

✨ Enhancements

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

Changes

Contributors

Pull requests merged

Facility preparation

Prior to release

Add/drop Python versions

Backport pull requests

Update 2.4.0 milestones

Check the numpy-release repo

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 2026-04-15

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 (2026-04-15)

6.0.3

What's Changed

v4.4.5

What's Changed

New Contributors

v1.3.1

What's Changed

v1.3.0

What's Changed

New Contributors

Changelog 1.2.x

v0.22.1

v0.22.0

Changes

Fixes

0.16.9

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Contributors

Install ruff 0.16.9

Install prebuilt binaries via shell script

0.16.9

Preview features

Bug fixes

Rule changes

dependabot Bot commented on behalf of github Sep 29, 2026 •

edited

Loading