deps(pip): bump the python-dependencies group across 1 directory with 12 updates#1092
Open
dependabot[bot] wants to merge 2 commits into
Open
deps(pip): bump the python-dependencies group across 1 directory with 12 updates#1092dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
… 12 updates Updates the requirements on [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [pyarrow](https://github.com/apache/arrow), [azure-cosmos](https://github.com/Azure/azure-sdk-for-python), [openai](https://github.com/openai/openai-python), [eventlet](https://github.com/eventlet/eventlet), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib), [fastapi](https://github.com/fastapi/fastapi), [docutils](https://github.com/rtfd/recommonmark) and [m2r2](https://github.com/crossnox/m2r2) to permit the latest version. Updates `ruff` to 0.15.22 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.15.22) Updates `mypy` to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.2.0...v2.3.0) Updates `pyarrow` to 25.0.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.0) Updates `azure-cosmos` from 4.16.1 to 4.16.2 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.16.1...azure-cosmos_4.16.2) Updates `openai` from 2.45.0 to 2.46.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.45.0...v2.46.0) Updates `eventlet` from 0.41.0 to 0.41.1 - [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS) - [Commits](eventlet/eventlet@0.41.0...0.41.1) Updates `opentelemetry-api` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-sdk` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-instrumentation` from 0.64b0 to 0.65b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `fastapi` to 0.139.2 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.139.2) Updates `docutils` to 0.23 - [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md) - [Commits](https://github.com/rtfd/recommonmark/commits) Updates `m2r2` from 0.3.3.post2 to 0.3.4 - [Changelog](https://github.com/CrossNox/m2r2/blob/development/CHANGES.md) - [Commits](CrossNox/m2r2@v0.3.3.post2...v0.3.4) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.22 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: pyarrow dependency-version: 25.0.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: azure-cosmos dependency-version: 4.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: openai dependency-version: 2.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: eventlet dependency-version: 0.41.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-instrumentation dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: fastapi dependency-version: 0.139.2 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: docutils dependency-version: '0.23' dependency-type: direct:production dependency-group: python-dependencies - dependency-name: m2r2 dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Security Policy Alert: Harden Runner Policy ViolationThis workflow run has been blocked by StepSecurity's Harden Runner policy. This workflow run was blocked because one or more jobs are missing the Harden-Runner action, or it is not properly configured, which can introduce agent-bypass risk. Jobs not protected by Harden Runner:
Update the affected jobs so Harden Runner is initialized before any other action or command runs. For more information, see StepSecurity's Harden Runner documentation. |
Contributor
|
ℹ️ This Dependabot update was not auto-merged (production dependency or non-trivial change). Manual review requested. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on ruff, mypy, pyarrow, azure-cosmos, openai, eventlet, opentelemetry-api, opentelemetry-sdk, opentelemetry-instrumentation, fastapi, docutils and m2r2 to permit the latest version.
Updates
ruffto 0.15.22Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
0177a7eBump 0.15.22 (#26884)fe8ba85[pycodestyle] DocumentE731fix safety (#26847)f3cf7c8[ruff] Addrule-codes-in-selectors(RUF201) (#26772)d244fd7Document argfile support (#26803)f239758[flake8-pyi] Fix false positive in__all__(PYI053) (#26872)54acbcd[ty] SupportTypeVarTupleandUnpack(#25240)87fc38c[ty] Parallelize subtype hierarchy search (#26875)e454f91[ty] Share interned query keys across Salsa queries (#26794)6f361a7[ty] only collect expected types for files open in the editor (#25546)6d6b2b3[ty] Avoid allocations during Salsa interned lookups (#26877)Updates
mypyto 2.3.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
8aabf84Drop +dev from version4d8ad2aUpdate changelog for 2.3 release (#21728)2c21546[mypyc] Update documentation of race conditions under free threading (#21726)a9f62a3[mypyc] Make attribute access memory safe on free-threaded builds (#21705)0faa413UsePYODIDEenvironment variable for Emscripten cross-compilation detection...3d75cdb[mypyc] Borrow final attributes more aggressively (#21702)24c237d[mypyc] Improve documentation of Final (#21713)b5be217[mypyc] Update free threading Python compatibility docs (#21711)cbcb51aNarrow for frozendict membership check (#21709)af2bc0fSync typeshed (#21707)Updates
pyarrowto 25.0.0Release notes
Sourced from pyarrow's releases.
Commits
59bea6eMINOR: [Release] Update versions for 25.0.0381fab6MINOR: [Release] Update .deb/.rpm changelogs for 25.0.07f72d5bMINOR: [Release] Update CHANGELOG.md for 25.0.0fe2f85cGH-50336: [Release][Archery] Fix archery GitHub integration for release scrip...c658548GH-50293: [CI] Run check-labels for all triggers to avoid cancelling further ...f83c8caGH-50330: [C++][R][Parquet] Add missing typename in RleBitPackedDecoderGetRun...35e0f63GH-50318: [R][CI] Install missing libpng-dev for test-r-linux-as-cran (#50328)61ca7a9GH-50295: [C++][R] #include <ranges> in vector_select_k.cc breaks macOS CRAN ...1b6edb8GH-50291: [Python][Packaging] Stop using nightly build dependencies for build...e183ea9MINOR: [Docs] Add Timestamp With Offset to canonical extension types status (...Updates
azure-cosmosfrom 4.16.1 to 4.16.2Release notes
Sourced from azure-cosmos's releases.
Commits
eb67b14Revert "Add CFSClean enforcement (#48061)" (#48080)c839b8bCosmos: update changelog for release (#48005)f0ac2f5[ServiceBus] Document aiohttp>=3.14.0 recommendation for AmqpOverWebsocket (#...c91747dFix OneSettings validation logic to match schema (#48059)3eeccbbAdd CFSClean enforcement (#48061)8f8855b[Service Bus] Drain receive link and release messages on receiver close (#42917)777741bSync eng/common directory with azure-sdk-tools for PR 16342 (#48074)ebe3b5eupdate autorelease resolve step as authenticated step (#48073)e5f122a[monitor opentelemetry exporter] Handle ServiceResponseError as retryable to ...2cad71aBump TypeSpec Python emitter to 0.63.3 (#48068)Updates
openaifrom 2.45.0 to 2.46.0Release notes
Sourced from openai's releases.
Changelog
Sourced from openai's changelog.
Commits
0e6adb1release: 2.46.0 (#3501)Updates
eventletfrom 0.41.0 to 0.41.1Changelog
Sourced from eventlet's changelog.
Commits
475e2fdUpdate changelog for version 0.41.1 (#1095)22e2ad3Fix 4 DNS tests that fail without /etc/resolv.conf (#1093)a101b94Temporarily avoid using newer greenlet (#1099)9ae53a3wsgi: Handle ENOTCONN (#1092)176808fBump actions dependent on nodejs 20 (#1091)Updates
opentelemetry-apifrom 1.43.0 to 1.44.0Changelog
Sourced from opentelemetry-api's changelog.
... (truncated)
Commits
53a5a40Prepare release 1.44.0/0.65b0 (#5422)d9f34e7Fixup eachdist.py handling of package names (#5417)d10f472opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)ae8feebUpdate otelbot token workflows to use client IDs (#5404)67a2abdFix Context in-place mutability bypass via inherited dict methods (#5399)87baad9Bump semconv to 1.42.0 (#5410)23dc0b2opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)bec55fdopentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...55d0b7aopentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...6115db2opentelemetry-sdk: add log record limits environment variables (#5300)Updates
opentelemetry-sdkfrom 1.43.0 to 1.44.0Changelog
Sourced from opentelemetry-sdk's changelog.
... (truncated)
Commits
53a5a40Prepare release 1.44.0/0.65b0 (#5422)d9f34e7Fixup eachdist.py handling of package names (#5417)d10f472opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)ae8feebUpdate otelbot token workflows to use client IDs (#5404)67a2abdFix Context in-place mutability bypass via inherited dict methods (#5399)87baad9Bump semconv to 1.42.0 (#5410)23dc0b2opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)bec55fdopentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...55d0b7aopentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...6115db2opentelemetry-sdk: add log record limits environment variables (#5300)Updates
opentelemetry-instrumentationfrom 0.64b0 to 0.65b0Release notes
Sourced from opentelemetry-instrumentation's releases.
... (truncated)
Changelog
Sourced from opentelemetry-instrumentation's changelog.
... (truncated)
Commits
Updates
fastapito 0.139.2Release notes
Sourced from fastapi's releases.
Commits
866b7a3🔖 Release version 0.139.2 (#16014)7b3effe📝 Update release notes7fe315c🐛 Refactor router route building to make it thread-safe, mainly relevant for ...c48e67b🔖 Release version 0.139.1 (#16012)2acc4fb📝 Update release noteseb75fd0🐛 Fix frontend fallback support for doted paths like/users/john.doe(#16011)9b8410b📝 Update release notese24d44c📝 Fix topic repository list not being displayed andskip_usersnot being ap...93b78f8📝 Update release notesb959b44📝 Update release notesUpdates
docutilsto 0.23Changelog
Sourced from docutils's changelog.
... (truncated)
Commits
Updates
m2r2from 0.3.3.post2 to 0.3.4Changelog
Sourced from m2r2's changelog.
... (truncated)
Commits
df70dfacommitfb8b32bcommit48a01a8commit178352acommit3a14daccommit8a7953dMerge to master (#74)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions