Skip to content

Deps: Bump the python-packages group with 9 updates#100

Merged
greenbonebot merged 1 commit into
mainfrom
dependabot/pip/python-packages-86d733a1f8
Oct 20, 2025
Merged

Deps: Bump the python-packages group with 9 updates#100
greenbonebot merged 1 commit into
mainfrom
dependabot/pip/python-packages-86d733a1f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2025

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 9 updates:

Package From To
uvicorn 0.37.0 0.38.0
coverage 7.10.7 7.11.0
psycopg 3.2.10 3.2.11
pydantic 2.12.0 2.12.3
pydantic-core 2.41.1 2.41.4
pytokens 0.1.10 0.2.0
ruff 0.14.0 0.14.1
uvloop 0.21.0 0.22.1
watchfiles 1.1.0 1.1.1

Updates uvicorn from 0.37.0 to 0.38.0

Release notes

Sourced from uvicorn's releases.

Version 0.38.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Changelog

Sourced from uvicorn's changelog.

0.38.0 (October 18, 2025)

Added

  • Support Python 3.14 (#2723)
Commits

Updates coverage from 7.10.7 to 7.11.0

Changelog

Sourced from coverage's changelog.

Version 7.11.0 — 2025-10-15

  • Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

Commits
  • 20ef00b docs: sample HTML for 7.11.0
  • 5edf8eb docs: prep for 7.11.0
  • 2c023ae build: 3.15 is supported
  • 2f1b95b refactor: no need for _BaseCoverageException
  • 72b1bcc build: test light-threads on all versions of Python
  • 16e9379 refactor: move core tests to their own file
  • bc8875d test: change a test to be in-process so metacov can capture its work
  • 8e5d5b1 build: tweak some version info
  • b0236df test: more tests for core selection, and some refactoring of them
  • 56edde6 build: next version will be 7.11.0
  • Additional commits viewable in compare view

Updates psycopg from 3.2.10 to 3.2.11

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.0 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

.. rubric:: New top-level features

  • Add :ref:template strings queries \<template-strings> (:ticket:[#1054](https://github.com/psycopg/psycopg/issues/1054)).
  • Cursors are now iterators, not only iterables. This means you can call next(cur) to fetch the next row (:ticket:[#1064](https://github.com/psycopg/psycopg/issues/1064)).
  • Add Cursor.results() to iterate over the result sets of the queries executed though ~Cursor.executemany() or ~Cursor.execute() (:ticket:[#1080](https://github.com/psycopg/psycopg/issues/1080)).

.. rubric:: New libpq wrapper features

  • Add pq.PGconn.used_gssapi attribute and Capabilities.has_used_gssapi() function (:ticket:[#1138](https://github.com/psycopg/psycopg/issues/1138)).
  • Add ConnectionInfo.full_protocol_version attribute, Capabilities.has_full_protocol_version() function (:ticket:[#1079](https://github.com/psycopg/psycopg/issues/1079)).

.. rubric:: Other changes

  • Disable default GSSAPI preferential connection in the binary package (:ticket:[#1136](https://github.com/psycopg/psycopg/issues/1136)).

    .. warning::

    Please explicitly set the gssencmode_ connection parameter or the :envvar:PGGSSENCMODE environment variable to interact reliably with the GSSAPI.

  • Drop support for Python 3.8 (:ticket:[#976](https://github.com/psycopg/psycopg/issues/976)) and 3.9 (:ticket:[#1056](https://github.com/psycopg/psycopg/issues/1056)).

Psycopg 3.2.11 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix spurious readiness flags in some of the wait functions (:ticket:[#1141](https://github.com/psycopg/psycopg/issues/1141)).
  • Fix high CPU usage using the wait_c function on Windows (:ticket:[#645](https://github.com/psycopg/psycopg/issues/645)).

... (truncated)

Commits
  • 6ddbf02 chore: adapt license metadata to license expression
  • 1ee98f6 fest: mark test flakey to unblock wheel packages
  • 2905e07 ci: fix proxy-based tests
  • 975821f chore: bump psycopg package version to 3.2.11
  • 6a3e637 Merge pull request #1187 from dvarrazzo/perf/transpose-loading
  • c058159 perf: load results by row rather than by column
  • a75b613 Merge branch 'fix/binary-copy-rowlevel-3.2' into maint-3.2
  • 87d0780 refactor: drop copy format code path with buffer creation
  • def0bcd fix(c): fix copy buffer corruption on dumping error
  • b4e8f17 test: add test to reveal the buffer corruption on dump error
  • Additional commits viewable in compare view

Updates pydantic from 2.12.0 to 2.12.3

Release notes

Sourced from pydantic's releases.

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also adds back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

Full Changelog: pydantic/pydantic@v2.12.2...v2.12.3

v2.12.2 2025-10-14

v2.12.2 (2025-10-14)

What's Changed

Fixes

  • Release a new pydantic-core version, as a corrupted CPython 3.10 manylinux2014_aarch64 wheel got uploaded (pydantic-core#1843).
  • Fix issue with recursive generic models with a parent model class by @​Viicos in #12398

Full Changelog: pydantic/pydantic@v2.12.1...v2.12.2

v2.12.1 2025-10-13

v2.12.1 (2025-10-13)

GitHub release

What's Changed

This is the first 2.12 patch release, addressing most (but not all yet) regressions from the initial 2.12.0 release.

Fixes

New Contributors

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.3 (2025-10-17)

GitHub release

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also add back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

v2.12.2 (2025-10-14)

GitHub release

What's Changed

Fixes

  • Release a new pydantic-core version, as a corrupted CPython 3.10 manylinux2014_aarch64 wheel got uploaded (pydantic-core#1843).
  • Fix issue with recursive generic models with a parent model class by @​Viicos in #12398

v2.12.1 (2025-10-13)

GitHub release

What's Changed

This is the first 2.12 patch release, addressing most (but not all yet) regressions from the initial 2.12.0 release.

Fixes

New Contributors

... (truncated)

Commits
  • 1a8850d Prepare release 2.12.3
  • 09dbcf2 Add FieldInfo.asdict() method, improve documentation around FieldInfo
  • 5da4331 Improve documentation about serialize as any behavior
  • 9c86324 Raise a warning when an invalid after model validator function signature is r...
  • 36a73c6 Update pydantic-extra-types dependency to version >=2.10.6
  • 1e616a3 Prepare release v2.12.2
  • dc302e2 Fix issue with recursive generic models with a parent model class
  • 6876485 Bump pydantic-core to v2.41.4
  • b4076c6 Prepare release 2.12.1
  • b67f072 Bump pydantic-core to v2.41.3
  • Additional commits viewable in compare view

Updates pydantic-core from 2.41.1 to 2.41.4

Release notes

Sourced from pydantic-core's releases.

v2.41.4

No release notes provided.

v2.41.3

No release notes provided.

v2.41.2 2025-10-13

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-core@v2.41.1...v2.41.2

Commits

Updates pytokens from 0.1.10 to 0.2.0

Commits
  • 0a9c1d4 Merge pull request #6 from tusharsadhwani/packaging
  • 606253e Update tests and fix packaging
  • 594b445 Update docs: pytokens is no longer a console script
  • See full diff in compare view

Updates ruff from 0.14.0 to 0.14.1

Release notes

Sourced from ruff's releases.

0.14.1

Release Notes

Released on 2025-10-16.

Preview features

  • [formatter] Remove parentheses around multiple exception types on Python 3.14+ (#20768)
  • [flake8-bugbear] Omit annotation in preview fix for B006 (#20877)
  • [flake8-logging-format] Avoid dropping implicitly concatenated pieces in the G004 fix (#20793)
  • [pydoclint] Implement docstring-extraneous-parameter (DOC102) (#20376)
  • [pyupgrade] Extend UP019 to detect typing_extensions.Text (UP019) (#20825)
  • [pyupgrade] Fix false negative for TypeVar with default argument in non-pep695-generic-class (UP046) (#20660)

Bug fixes

  • Fix false negatives in Truthiness::from_expr for lambdas, generators, and f-strings (#20704)
  • Fix syntax error false positives for escapes and quotes in f-strings (#20867)
  • Fix syntax error false positives on parenthesized context managers (#20846)
  • [fastapi] Fix false positives for path parameters that FastAPI doesn't recognize (FAST003) (#20687)
  • [flake8-pyi] Fix operator precedence by adding parentheses when needed (PYI061) (#20508)
  • [ruff] Suppress diagnostic for f-string interpolations with debug text (RUF010) (#20525)

Rule changes

  • [airflow] Add warning to airflow.datasets.DatasetEvent usage (AIR301) (#20551)
  • [flake8-bugbear] Mark B905 and B912 fixes as unsafe (#20695)
  • Use DiagnosticTag for more rules - changes display in editors (#20758,#20734)

Documentation

  • Update Python compatibility from 3.13 to 3.14 in README.md (#20852)
  • Update lint.flake8-type-checking.quoted-annotations docs (#20765)
  • Update setup instructions for Zed 0.208.0+ (#20902)
  • [flake8-datetimez] Clarify docs for several rules (#20778)
  • Fix typo in RUF015 description (#20873)

Other changes

  • Reduce binary size (#20863)
  • Improved error recovery for unclosed strings (including f- and t-strings) (#20848)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.1

Released on 2025-10-16.

Preview features

  • [formatter] Remove parentheses around multiple exception types on Python 3.14+ (#20768)
  • [flake8-bugbear] Omit annotation in preview fix for B006 (#20877)
  • [flake8-logging-format] Avoid dropping implicitly concatenated pieces in the G004 fix (#20793)
  • [pydoclint] Implement docstring-extraneous-parameter (DOC102) (#20376)
  • [pyupgrade] Extend UP019 to detect typing_extensions.Text (UP019) (#20825)
  • [pyupgrade] Fix false negative for TypeVar with default argument in non-pep695-generic-class (UP046) (#20660)

Bug fixes

  • Fix false negatives in Truthiness::from_expr for lambdas, generators, and f-strings (#20704)
  • Fix syntax error false positives for escapes and quotes in f-strings (#20867)
  • Fix syntax error false positives on parenthesized context managers (#20846)
  • [fastapi] Fix false positives for path parameters that FastAPI doesn't recognize (FAST003) (#20687)
  • [flake8-pyi] Fix operator precedence by adding parentheses when needed (PYI061) (#20508)
  • [ruff] Suppress diagnostic for f-string interpolations with debug text (RUF010) (#20525)

Rule changes

  • [airflow] Add warning to airflow.datasets.DatasetEvent usage (AIR301) (#20551)
  • [flake8-bugbear] Mark B905 and B912 fixes as unsafe (#20695)
  • Use DiagnosticTag for more rules - changes display in editors (#20758,#20734)

Documentation

  • Update Python compatibility from 3.13 to 3.14 in README.md (#20852)
  • Update lint.flake8-type-checking.quoted-annotations docs (#20765)
  • Update setup instructions for Zed 0.208.0+ (#20902)
  • [flake8-datetimez] Clarify docs for several rules (#20778)
  • Fix typo in RUF015 description (#20873)

Other changes

  • Reduce binary size (#20863)
  • Improved error recovery for unclosed strings (including f- and t-strings) (#20848)

Contributors

... (truncated)

Commits
  • 2bffef5 Bump 0.14.1 (#20925)
  • e64d772 Standardize syntax error construction (#20903)
  • 0369668 [pydoclint] Implement docstring-extraneous-parameter (DOC102) (#20376)
  • 058fc37 [ty] Fix panic 'missing root' when handling completion request (#20917)
  • ec9faa3 [ty] Run file watching tests serial when using nextest (#20918)
  • 7155a62 [ty] Add version hint for failed stdlib attribute accesses (#20909)
  • a67e069 More CI improvements (#20920)
  • 6a1e91c [ty] Check typeshed VERSIONS for parent modules when reporting failed stdlib ...
  • 3db5d59 Don't use codspeed or depot runners in CI jobs on forks (#20894)
  • d23826c [ty] cache Type::is_redundant_with (#20477)
  • Additional commits viewable in compare view

Updates uvloop from 0.21.0 to 0.22.1

Release notes

Sourced from uvloop's releases.

v0.22.1

This is identical to 0.22.0, re-ran with CI fixes

v0.22.0

Changes

Fixes

Commits

Updates watchfiles from 1.1.0 to 1.1.1

Release notes

Sourced from watchfiles's releases.

v1.1.1 2025-10-14

What's Changed

New Contributors

Full Changelog: samuelcolvin/watchfiles@v1.1.0...v1.1.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the python-packages group with 9 updates
b4caf1f 
Bumps the python-packages group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.37.0` | `0.38.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.7` | `7.11.0` |
| [psycopg](https://github.com/psycopg/psycopg) | `3.2.10` | `3.2.11` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.0` | `2.12.3` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.41.1` | `2.41.4` |
| [pytokens](https://github.com/tusharsadhwani/pytokens) | `0.1.10` | `0.2.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.0` | `0.14.1` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.21.0` | `0.22.1` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.0` | `1.1.1` |


Updates `uvicorn` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.37.0...0.38.0)

Updates `coverage` from 7.10.7 to 7.11.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.7...7.11.0)

Updates `psycopg` from 3.2.10 to 3.2.11
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.10...3.2.11)

Updates `pydantic` from 2.12.0 to 2.12.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.0...v2.12.3)

Updates `pydantic-core` from 2.41.1 to 2.41.4
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.41.1...v2.41.4)

Updates `pytokens` from 0.1.10 to 0.2.0
- [Commits](tusharsadhwani/pytokens@0.1.10...0.2.0)

Updates `ruff` from 0.14.0 to 0.14.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.0...0.14.1)

Updates `uvloop` from 0.21.0 to 0.22.1
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.21.0...v0.22.1)

Updates `watchfiles` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: coverage
  dependency-version: 7.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: psycopg
  dependency-version: 3.2.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pydantic
  dependency-version: 2.12.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pydantic-core
  dependency-version: 2.41.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytokens
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.14.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: uvloop
  dependency-version: 0.22.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: watchfiles
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 20, 2025
@dependabot dependabot Bot requested review from a team as code owners October 20, 2025 04:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 20, 2025
@greenbonebot greenbonebot enabled auto-merge (rebase) October 20, 2025 04:14
@greenbonebot greenbonebot merged commit c7730a5 into main Oct 20, 2025
8 of 11 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-86d733a1f8 branch October 20, 2025 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bjoernricks bjoernricks bjoernricks approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@bjoernricks @greenbonebot