Skip to content

deps: Bump the python-minor-and-patch group with 8 updates - #41

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-e0b2a2d451
Open

deps: Bump the python-minor-and-patch group with 8 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-e0b2a2d451

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 8 updates:

Package From To
pyarrow 25.0.0 25.0.1
httpx2 2.9.1 2.10.0
boto3 1.43.66 1.43.71
filelock 3.32.2 3.32.3
sentry-sdk 2.66.1 2.68.0
ruff 0.16.1 0.16.3
ty 0.0.69 0.0.71
hypothesis 6.165.2 6.165.7

Updates pyarrow from 25.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Commits

Updates httpx2 from 2.9.1 to 2.10.0

Release notes

Sourced from httpx2's releases.

v2.10.0

Highlights

🚀 Performance and memory improvements

  • Sending large HTTP/2 request bodies no longer copies the body quadratically - sending a 256 MiB body went from ~36s to under 0.1s (pydantic/httpx2#1127).
  • SSE parsing is up to 35x faster on highly fragmented streams (pydantic/httpx2#1117).
  • Cookie extraction is now skipped for responses without a Set-Cookie header, making typical requests roughly 8% faster (pydantic/httpx2#1107).

🕸️ WebAssembly / Emscripten support

httpx2 now runs on Pyodide / Emscripten, using a JavaScript fetch-based transport defined in httpx2-jsfetch (pydantic/httpx2#1119, pydantic/httpx2#1114). Thanks @​hoodmane!

httpx2

Added

Changed

Fixed

httpcore2

Added

Changed

Fixed

🙏 New Contributors

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.10.0 (August 9th, 2026)

Added

  • Add support for running on WebAssembly / Emscripten via Pyodide, using a JavaScript fetch-based transport defined in httpx2-jsfetch. (#1119)
  • Add max_event_size to cap SSE event buffering. (#1071)
  • Add RFC 9110 status code constants. (#1069)
  • Add support for Python 3.15. (#1090)

Changed

  • Improve SSE chunk buffering performance. (#1117)
  • Skip cookie extraction for responses without Set-Cookie headers. (#1107)
  • Return str | None instead of Any from Headers.get. (#1121)

Fixed

  • Enforce the WebSocket max message size across fragmented messages. (#1085)
  • Ignore unsolicited and duplicate WebSocket Pong frames. (#1122)
Commits
  • a966320 Version 2.10.0 (#1129)
  • dee1d1a Return str | None instead of Any from Headers.get (#1121)
  • dec24ad Use httpx2-jsfetch on Emscripten (#1119)
  • 454b8b2 Ignore unsolicited and duplicate Pong frames (#1122)
  • cbfc0e0 Improve SSE chunk buffering performance (#1117)
  • ad141d8 Refactor SSE parser coordination (#1118)
  • e0b0124 Make _client depend on the _transports package instead of its submodules ...
  • e52f963 Skip dependencies not needed on Emscripten (#1114)
  • 5d9eedc Add max_event_size to cap SSE event buffering (#1071)
  • 55fad71 Bump the python-packages group across 1 directory with 15 updates (#1112)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.66 to 1.43.71

Commits

Updates filelock from 3.32.2 to 3.32.3

Release notes

Sourced from filelock's releases.

3.32.3

What's Changed

Full Changelog: tox-dev/filelock@3.32.2...3.32.3

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.3 (2026-08-13)

  • The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

3.32.2 (2026-07-29)

  • A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:691

3.32.1 (2026-07-26)

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

3.32.0 (2026-07-21)

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685
  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685

3.31.2 (2026-07-21)

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their behavior. :pr:681

... (truncated)

Commits
  • 4aa742c Release 3.32.3
  • fb5ab3e 🐛 fix(fork): survive audit events during interpreter shutdown (#703)
  • 35f759c 📄 docs: publish llms.txt from the docs build (#700)
  • 4b6e966 [pre-commit.ci] pre-commit autoupdate (#699)
  • 0e0f666 build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#698)
  • 6689d82 🧪 test(strict): deflake close-fault injections on graalpy (#697)
  • df67bf7 [pre-commit.ci] pre-commit autoupdate (#696)
  • See full diff in compare view

Updates sentry-sdk from 2.66.1 to 2.68.0

Release notes

Sourced from sentry-sdk's releases.

2.68.0

Important

  • We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

    Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

    Action Needed

    If you had enable_logs set to True:

    • If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.
    • If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
    import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=True),
],
)

    If you had enable_logs set to False:

    • If you were using it to gate usages of the sentry_sdk.logger.X API, you'll need to remove the calls entirely or define a before_send_log callback to filter out unwanted logs.

    If you has enable_metrics set to False:

    • Any metrics emitted using the metrics API will be emitted. You'll need to drop them in a before_send_metric or remove the calls to the API.

    Why We're Doing This

    We recognize this is a disruptive change for some folks and want to make it clear this is a one-off. We're removing the options because they were an unnecessary hurdle that one had to jump through to be able to use logs and metrics, and it was confusing why the logging API would not just work on its own. On the other hand, we wanted to give you more fine-grained control over automatic collection.

New Features ✨

Other

Bug Fixes 🐛

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.68.0

Important

  • We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

    Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

    Action Needed

    If you had enable_logs set to True:

    • If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.
    • If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
    import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=True),
],
)

    If you had enable_logs set to False:

    • If you were using it to gate usages of the sentry_sdk.logger.X API, you'll need to remove the calls entirely or define a before_send_log callback to filter out unwanted logs.

    If you has enable_metrics set to False:

    • Any metrics emitted using the metrics API will be emitted. You'll need to drop them in a before_send_metric or remove the calls to the API.

    Why We're Doing This

    We recognize this is a disruptive change for some folks and want to make it clear this is a one-off. We're removing the options because they were an unnecessary hurdle that one had to jump through to be able to use logs and metrics, and it was confusing why the logging API would not just work on its own. On the other hand, we wanted to give you more fine-grained control over automatic collection.

New Features ✨

Other

Bug Fixes 🐛

... (truncated)

Commits
  • c819e66 Update README
  • 90446df Update CHANGELOG.md
  • cb2499c release: 2.68.0
  • 1c3b50d ref: Flush trace buckets when segment spans finish (#7170)
  • c200bdf test(django): Remove dead code and stale markers from the Django test suite (...
  • 4e4ea83 ref(boto3): Move crumbs to integration (#7165)
  • 0f0cd1f ref(stdlib): Move crumbs to integration (#7161)
  • 2fef9bc chore: Make enable_logs, enable_metrics no-op (#7177)
  • 8177739 ref(httpx,httpx2): Move crumbs to integrations (#7149)
  • e4d7398 ref(pyreqwest): Move crumbs to integration (#7148)
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates ty from 0.0.69 to 0.0.71

Release notes

Sourced from ty's releases.

0.0.71

Release Notes

Released on 2026-08-12.

Library support

  • Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

  • Diagnose invalid __getattribute__ calls (#27506)
  • Validate boolean conversion in comprehension filters (#27641)
  • Validate unpacked callable argument shapes (#27516)

Core type checking

  • Avoid introducing boolean literals when narrowing integers (#27698)
  • Fix truthiness inference for subclassable known classes (#27638)
  • Handle class objects that may be descriptors (#26687)
  • Infer type variables through nominal type[...] parameters (#27689)
  • Model exception flow with operation checkpoints (#27471)
  • Preserve constrained TypeVar types when slicing (#27645)
  • Preserve enum attributes on Self and bounded type variables (#27644)
  • Preserve enum exhaustiveness with custom _missing_ methods (#27700)
  • Preserve literal-string origin in comparison narrowing (#27582)
  • Resolve generic type aliases subscripted inside type[] (#27663)
  • Restrict equality impossibility to static bounds (#27655)

Performance

  • Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

Install ty 0.0.71

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.71/ty-installer.sh | sh

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.71

Released on 2026-08-12.

Library support

  • Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

  • Diagnose invalid __getattribute__ calls (#27506)
  • Validate boolean conversion in comprehension filters (#27641)
  • Validate unpacked callable argument shapes (#27516)

Core type checking

  • Avoid introducing boolean literals when narrowing integers (#27698)
  • Fix truthiness inference for subclassable known classes (#27638)
  • Handle class objects that may be descriptors (#26687)
  • Infer type variables through nominal type[...] parameters (#27689)
  • Model exception flow with operation checkpoints (#27471)
  • Preserve constrained TypeVar types when slicing (#27645)
  • Preserve enum attributes on Self and bounded type variables (#27644)
  • Preserve enum exhaustiveness with custom _missing_ methods (#27700)
  • Preserve literal-string origin in comparison narrowing (#27582)
  • Resolve generic type aliases subscripted inside type[] (#27663)
  • Restrict equality impossibility to static bounds (#27655)

Performance

  • Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

0.0.70

Released on 2026-08-10.

LSP server

  • Enable and downrank auto-import completions from stub-only modules (#27433)
  • Fix signature help at end of file (#27622)
  • Normalize type labels in structured docstrings (#26923)

... (truncated)

Commits

Updates hypothesis from 6.165.2 to 6.165.7

Commits
  • af00451 Bump hypothesis version to 6.165.7 and update changelog
  • d1cd5f6 Merge pull request #4861 from Liam-DeVoe/python-315-support
  • cec6388 Bump hypothesis version to 6.165.6 and update changelog
  • 49a2698 Merge pull request #4855 from Liam-DeVoe/publish-ppc64le-and-windows-arm64-wh...
  • 37999eb claude: support Python 3.15
  • a598ab9 Revert "optimize single-branch one_of"
  • f440660 optimize single-branch one_of
  • b5f6c94 claude: publish ppc64le and windows arm64 wheels
  • 2f49474 Bump hypothesis version to 6.165.5 and update changelog
  • 15e547b Merge pull request #4850 from Liam-DeVoe/rename-internal-example-terminology
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: Bump the python-minor-and-patch group with 8 updates
f006b1c 
Bumps the python-minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [pyarrow](https://github.com/apache/arrow) | `25.0.0` | `25.0.1` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.9.1` | `2.10.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.66` | `1.43.71` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.32.2` | `3.32.3` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.66.1` | `2.68.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.3` |
| [ty](https://github.com/astral-sh/ty) | `0.0.69` | `0.0.71` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.165.7` |


Updates `pyarrow` from 25.0.0 to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-25.0.1)

Updates `httpx2` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.9.1...v2.10.0)

Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.66...1.43.71)

Updates `filelock` from 3.32.2 to 3.32.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.32.2...3.32.3)

Updates `sentry-sdk` from 2.66.1 to 2.68.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.66.1...2.68.0)

Updates `ruff` from 0.16.1 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.3)

Updates `ty` from 0.0.69 to 0.0.71
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.69...0.0.71)

Updates `hypothesis` from 6.165.2 to 6.165.7
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.165.7)

---
updated-dependencies:
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: httpx2
  dependency-version: 2.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.71
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: filelock
  dependency-version: 3.32.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: sentry-sdk
  dependency-version: 2.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.71
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: hypothesis
  dependency-version: 6.165.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants