Bump the python group across 1 directory with 13 updates by dependabot[bot] · Pull Request #450 · egraphs-good/egglog-python

dependabot · 2026-10-08T16:40:55Z

Bumps the python group with 13 updates in the / directory:

Package	From	To
black	`26.5.1`	`26.10.0`
opentelemetry-api	`1.44.0`	`1.45.0`
numba	`0.67.0`	`0.68.0`
llvmlite	`0.49.0`	`0.50.0`
ruff	`0.16.8`	`0.16.10`
mypy	`2.3.1`	`2.4.0`
jupyterlab	`4.6.3`	`4.6.4`
ipykernel	`7.3.0`	`7.4.0`
opentelemetry-sdk	`1.44.0`	`1.45.0`
opentelemetry-exporter-otlp-proto-http	`1.44.0`	`1.45.0`
pydata-sphinx-theme	`0.21.0`	`0.22.0`
sphinx-autodoc-typehints	`3.13.7`	`3.13.8`
jupytext	`1.19.5`	`1.19.6`

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

--line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)

Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)

Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)

Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)

Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)

Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)

Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)

Preserve blank lines that come immediately before a # fmt: on comment (#5300)

Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)

Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)

Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)

Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)

Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)

Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)

Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)

Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)

Fix inline comments on a bracket inside a comprehension being dropped (#5330)

Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)

Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)

Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)

Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)

Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

--line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)

Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)

Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)

Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)

Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)

Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)

Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)

Preserve blank lines that come immediately before a # fmt: on comment (#5300)

Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)

Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)

Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)

Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)

Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)

Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)

Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)

Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)

Fix inline comments on a bracket inside a comprehension being dropped (#5330)

Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)

Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)

Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)

Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)

Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits

4f1883b Prepare release 26.10.0 (#5478)
93e5c82 Do not split a docstring on non-newline characters (#5461)
2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
d078e8e Refactor release process to be more automated and use immutable releases (#5296)
6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
e1c4783 Fix --force-exclude for paths containing .. (#5471)
34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
5fe7881 Fix preview blank lines after a stub method (#5439)
Additional commits viewable in compare view

Updates opentelemetry-api from 1.44.0 to 1.45.0

Release notes

Sourced from opentelemetry-api's releases.

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#5509)

opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#5511)

opentelemetry-sdk: add host.id to the host resource detector (#5653)

opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#5681)

Changed

Enable PIE (flake8-pie) ruff rule and fix all violations (#5150)

The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#5266)

opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#5369)

[BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#5380)

opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#5389)

opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)

opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#5491)

opentelemetry-sdk: SimpleSpanProcessor now drops spans ended after shutdown() instead of passing them to the exporter, and counts them on otel.sdk.processor.span.processed with error.type=already_shutdown. (#5512)

Bump pytest to 9.0.3 (#5518)

opentelemetry-exporter-otlp-proto-http: clarify that the endpoint= kwarg requires the full signal path (#5633)

opentelemetry-sdk: fix typos in SpanLimits docstring (#5658)

Fixed

opentelemetry-configuration: perform environment variable substitution on scalar values after parsing the configuration file, so ${VAR} references inside comments and mapping keys are no longer substituted and undefined references in comments no longer abort loading (#5407)

opentelemetry-configuration: declarative config environment variable substitution now replaces an unset variable that has no default with an empty value instead of raising an error, per the configuration spec. Resource attributes whose value resolves to null (an unset ${VAR} with no default) are skipped with a warning instead of being inserted as a null value. (#5408)

'scripts/build.sh: add opentelemetry-configurationandopentelemetry-proto-json` to the package to release (#5425)

opentelemetry-sdk: fix View instrument-name matching so a view configured with an instrument's real (mixed-case) name is applied; matching is now case-insensitive and platform-independent instead of relying on fnmatch's OS-dependent case handling (#5430)

opentelemetry-sdk: fix missing f-prefix in exponential histogram error messages (#5434)

opentelemetry-configuration: resolve false-positive warning logs for newer schema minor version (#5436)

opentelemetry-sdk: make methods on FixedSizeExemplarReservoirABC thread safe (#5437)

opentelemetry-propagator-jaeger: fix typing issues and enable pyright typechecking for the package opentelemetry-propagator-jaeger: skip uberctx- baggage headers with an empty value on extraction instead of raising TypeError (#5440)

opentelemetry-sdk: fix TypeError when instantiating a _BaseConfigurator subclass whose __init__ takes arguments (#5441)

opentelemetry-sdk: fix TypeError in os.fork() when a BatchProcessor or PeriodicExportingMetricReader is garbage collected (#5453)

opentelemetry-configuration: a declarative config key present with an empty (null) value on an object-typed node (e.g. always_on:, a - service: detector, or a metric console: exporter) is now treated the same as an explicit empty config (always_on: {}) instead of failing type dispatch or silently skipping the node. Both dict-typed nodes and dataclasses constructible with no arguments are covered. (#5454)

opentelemetry-api: fix copy-pasted log message in SpanContext.__delattr__ (#5455)

opentelemetry-sdk: reject views with ExponentialBucketHistogramAggregation for asynchronous instruments instead of silently producing no data (#5461)

opentelemetry-sdk: fill every bucket of SimpleFixedSizeExemplarReservoir before random sampling (#5462)

... (truncated)

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions

... (truncated)

Commits

4f0fcfa Prepare release 1.45.0/0.66b0 (#5690)
9406f34 opentelemetry-test-utils: add CapturingSampler for instrumentation tests (#5681)
1fe31a9 fix: update W3CBaggagePropagator to properly handle whitespace (#5680)
008b5b0 feat(config): wire top-level attribute_limits into per-signal providers (#5365)
edfad0c [opentelemetry-sdk] Fix overwriting of the service.instance.id which has been...
f5e0f62 opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)
e4021aa chore(ci): update ci (#5677)
0c6508c ci: restrict checkout credential persistence (#5589)
2e88971 Add host.id to host resource attributes (#5653)
5f851d2 opentelemetry-exporter-otlp-proto-grpc: fix incorrect default port for gRPC i...
Additional commits viewable in compare view

Updates numba from 0.67.0 to 0.68.0

Updates llvmlite from 0.49.0 to 0.50.0

Release notes

Sourced from llvmlite's releases.

0.50.0

Please find the detailed release notes here: https://llvmlite.readthedocs.io/en/v0.50.0/release-notes.html

Commits

de6d534 Merge pull request #1496 from swap357/changelog_0.50_final
c195535 add changelog update PR entry
d12d42b update date and PR list on CHANGE_LOG for 0.50.0 final release
ba6daa3 Merge pull request #1492 from swap357/cherry_pick_win-arm64_fix
b87d436 Merge pull request #1491 from swap357/ci/remove_bootstrap_channels_win-arm64
bb4a247 Merge pull request #1484 from swap357/changelog_0.50
6af5f88 address review: update glibc compatibility highlight
201997a add missing merge commit
78181e3 update changelog for v0.50.0
a3d4140 Merge pull request #1454 from numba/renovate/actions-checkout-7.x
Additional commits viewable in compare view

Updates ruff from 0.16.8 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

Add a migration guide for categories (#28087)

[pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

Reduce memory used by diagnostics (#28951)

Server

Avoid running uv format in untrusted workspaces (#28873)

Documentation

Fix links to moved changelog sections and renamed mdtests (#28941)

Add Python 3.15 as a supported version (#28907)

Add ty as a type checker example (#28906)

Other changes

Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

@ntBre

@spaceone

@HardMax71

@charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"
Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

Add a migration guide for categories (#28087)

[pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

Reduce memory used by diagnostics (#28951)

Server

Avoid running uv format in untrusted workspaces (#28873)

Documentation

Fix links to moved changelog sections and renamed mdtests (#28941)

Add Python 3.15 as a supported version (#28907)

Add ty as a type checker example (#28906)

Other changes

Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

@ntBre

@spaceone

@HardMax71

@charliermarsh

0.16.9

Released on 2026-09-24.

Preview features

[ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

[flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)

[flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

Update LibCST-based fixes for Python 3.15 (#28616)

... (truncated)

Commits

3265ed1 Bump version to 0.16.10 (#29055)
e786964 Authorize shared PR security-review workflow to publish findings (#29052)
a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
317e0a3 [ty] Bound nested callable signature display (#29049)
8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
56180bc [ty] Specialize instance members once (#29043)
aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
2d25346 [ty] Improve unresolved-import documentation (#29039)
Additional commits viewable in compare view

Updates mypy from 2.3.1 to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Python 3.15 Support

Mypy 2.4 supports running on Python 3.15 and type checking most Python 3.15 features. This includes the new builtin sentinel type for sentinel values (PEP 661), which mypy now supports (see below for details). Lazy imports (PEP 810) and unpacking in comprehensions (PEP 798) are also supported. Closed TypedDicts (PEP 728) have been supported since mypy 2.2, but the extra_items TypedDict argument, also introduced in PEP 728, is still unsupported. Support for extra_items will be added in a future mypy release.

Native Parser Enabled by Default

Mypy now uses the new native parser by default. It's based on the Ruff parser, and it's significantly faster than the legacy parser, which uses the stdlib ast module. The native parser also has other benefits:

You can target newer Python versions and use recent Python syntax even when running mypy on an older Python version. For example, you can use --python-version 3.15 when running mypy on Python 3.14.

Stub files can use syntax that is newer than the target Python version. For example, stubs can use the PEP 695 generic class syntax (class Box[T]: ...) when running on or targeting Python 3.10.

Parallel type checking requires the native parser.

The legacy parser is still available through --no-native-parser, or native_parser = False in the config file (native_parser = false under [tool.mypy] in pyproject.toml). We are planning to remove the legacy parser in early 2027. If you run into a problem with the native parser, please report it on the issue tracker.

Unlike the legacy parser, the native parser doesn't support type comments for variables defined by for and with statements. These type comments are silently ignored, and the types of the variables are

... (truncated)

Commits

935ba8a Bump version to 2.4.0
334a678 Add link for PR 22066 in mypy 2.4 changelog (#22082)
fe69660 Finalize mypy 2.4 changelog (#22080)
541fd87 Various mypy 2.4 changelog updates (#22077)
b231182 Update native parser docs (#22078)
04fe42c Initial Changelog for Mypy 2.4 (#22071)
0617494 Quick fix for non UTF-8 encodings with new parser (#22066)
b2f9b60 Bump librt to 0.16.0 (#22067)
9d798dc Sync typeshed (#22054)
0861bb6 Reduce max protocol stack size to 20 (#22053)
Additional commits viewable in compare view

Updates jupyterlab from 4.6.3 to 4.6.4

Release notes

Sourced from jupyterlab's releases.

v4.6.4

4.6.4

(Full Changelog)

Security fixes

GHSA-3325-v43h-43rv - moderate

GHSA-6966-vjj6-99xv - high

GHSA-jwrc-gm9j-263p - moderate

GHSA-3jqq-pw4j-pqcj - moderate

Bugs fixed

Backport of security patches on 4.6.x branch #19793 (@krassowski, @MUFFANUJ)

Cache and throttle path resolution to avoid requests storm #19726 (@krassowski)

Fix race when starting the search - keep correct filter #19765 (@krassowski)

Fix PyPI extension manager package.json inspection for tar.gz archives #19613 (@MUFFANUJ)

Fix resizing optimization for larger notebooks #19620 (@krassowski)

Preserve kernelspec metadata when spec is unavailable #19247 (@tomatotomata)

Fix respecting commsOverSubshells option in connectTo() #19734 (@krassowski)

Show context actions for all images, not only SVGs #19618 (@fly1d)

Save sidebar section expansion state from the hidden flag #19415 (@jtpio)

Fix memory leak when Property Inspector is open and other issues exposed by new linter rules #19318 (@krassowski)

Maintenance and upkeep improvements

Update links to jupyter-ydoc API after docs pages moved #19790 (@krassowski)

CI: align Yarn cache configuration #19737 (@zihjiang)

Use Galata filebrowser helpers in tests #19645 (@Darshan808)

Disable subshell usage in comm example #19725 (@krassowski)

Remove pin to old ipykernel v7 pre-release in UI tests #19672 (@krassowski)

Update Altair snapshot #19488 (@jtpio)

Use ui-test-report-comment action from maintainer-tools #19290 (@krassowski)

Backport PR #19307: Update @jupyter/eslint-plugin to v1.1, adopt ne… #19315 (@krassowski)

Update the copyright year to 2026 #19308 (@JussiRoos)

Documentation improvements

Fix the IPython display link in the json-extension README #19732 (@jtpio)

Update announcement banner to point to jupyter-wide announcement banner #19189 (@jasongrout)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Darshan808 (activity) | @fly1d (activity) | @jasongrout (activity) | @jtpio (activity) | @JussiRoos (activity) | @krassowski (activity) | @MUFFANUJ (activity) | @tomatotomata (activity) | @zihjiang (activity)

... (truncated)

Commits

384bff3 [ci skip] Publish 4.6.4
1f9dbe3 Merge pull request #19793 from krassowski/security-patches-4.6.x
de324ae Fix for GHSA-3jqq-pw4j-pqcj
f7e5f98 Fix for GHSA-jwrc-gm9j-263p
cf6e89a Fix for GHSA-6966-vjj6-99xv
e277bc9 Fix for GHSA-3325-v43h-43rv
cd56994 Backport PR #19790 on branch 4.6.x (Update links to jupyter-ydoc API after ...
bbadd02 Backport PR #19726 on branch 4.6.x (Cache and throttle path resolution to avo...
4ccae66 Backport PR #19765 on branch 4.6.x (Fix race when starting the search - keep ...
6c0f664 Backport PR #19737 on branch 4.6.x (CI: align Yarn cache configuration) (#19766)
Additional commits viewable in compare view

Updates ipykernel from 7.3.0 to 7.4.0

Release notes

Sourced from ipykernel's releases.

v7.4.0

7.4.0

(Full Changelog)

New features added

Enable setting and resetting a thread-local parent header #1546 (@jasongrout, @minrk)

Enhancements made

Allow async cell to process Comm messages #1565 (@davidbrochart, @JohanMabille, @kylebarron)

Bump minimum Python to 3.11, update linting, drop dead branches #1553 (@Carreau, @minrk)

Defer the psutil import until it is actually needed #1551 (@Carreau, @minrk)

validate variable names in copyToGlobals debug handler #1537 (@sahvx655-wq, @JohanMabille)

create debugger tmp directory with 0o700 permissions #1530 (@sahvx655-wq, @JohanMabille, @minrk)

Update the supported_encryption to use a list as per JEP latest state #1528 (@krassowski, @Carreau, @JohanMabille)

Make psutil optional at runtime #1527 (@yves-surrel, @ianthomas23)

Bugs fixed

Create _control_lock before its users #1568 (@tovrstra, @minrk)

Reply with busy -> error -> idle if subshell unknown #1558 (@krassowski, @Carreau, @JohanMabille)

Send the shell reply through the ZMQStream instead of raw on its socket #1529 (@BoykoNeov, @ZupoLlask, @claude, @ianthomas23, @practicusai, @thomasjm)

Enable ProactorEventLoop on windows for ipykernel #1469 (@NewUserHa, @BoykoNeov, @Gravifer, @ZupoLlask, @claude, @ianthomas23)

Maintenance and upkeep improvements

try to fix publish workflow #1571 (@minrk)

chore: update pre-commit hooks #1570 (@davidbrochart)

Use dependency groups instead of extras #1563 (@davidbrochart)

MAINT: Switch zizmor to the github action #1561 (@Carreau, @Yann-P)

Fix downstream test: install ipykernel from sour...
Description has been truncated

Bumps the python group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [black](https://github.com/psf/black) | `26.5.1` | `26.10.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [numba](https://numba.pydata.org) | `0.67.0` | `0.68.0` | | [llvmlite](https://github.com/numba/llvmlite) | `0.49.0` | `0.50.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.16.10` | | [mypy](https://github.com/python/mypy) | `2.3.1` | `2.4.0` | | [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `4.6.3` | `4.6.4` | | [ipykernel](https://github.com/ipython/ipykernel) | `7.3.0` | `7.4.0` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.0` | | [pydata-sphinx-theme](https://github.com/pydata/pydata-sphinx-theme) | `0.21.0` | `0.22.0` | | [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.13.7` | `3.13.8` | | [jupytext](https://github.com/jupytext/jupytext) | `1.19.5` | `1.19.6` | Updates `black` from 26.5.1 to 26.10.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.5.1...26.10.0) Updates `opentelemetry-api` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0) Updates `numba` from 0.67.0 to 0.68.0 Updates `llvmlite` from 0.49.0 to 0.50.0 - [Release notes](https://github.com/numba/llvmlite/releases) - [Commits](numba/llvmlite@v0.49.0...v0.50.0) Updates `ruff` from 0.16.8 to 0.16.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.8...0.16.10) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.0) Updates `jupyterlab` from 4.6.3 to 4.6.4 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.6.3...@jupyterlab/lsp@4.6.4) Updates `ipykernel` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/ipython/ipykernel/releases) - [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md) - [Commits](ipython/ipykernel@v7.3.0...v7.4.0) Updates `opentelemetry-sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0) Updates `opentelemetry-exporter-otlp-proto-http` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.0) Updates `pydata-sphinx-theme` from 0.21.0 to 0.22.0 - [Release notes](https://github.com/pydata/pydata-sphinx-theme/releases) - [Changelog](https://github.com/pydata/pydata-sphinx-theme/blob/main/RELEASE.md) - [Commits](pydata/pydata-sphinx-theme@v0.21.0...v0.22.0) Updates `sphinx-autodoc-typehints` from 3.13.7 to 3.13.8 - [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases) - [Commits](tox-dev/sphinx-autodoc-typehints@3.13.7...3.13.8) Updates `jupytext` from 1.19.5 to 1.19.6 - [Release notes](https://github.com/jupytext/jupytext/releases) - [Changelog](https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md) - [Commits](jupytext/jupytext@v1.19.5...v1.19.6) --- updated-dependencies: - dependency-name: black dependency-version: 26.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-api dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: numba dependency-version: 0.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: llvmlite dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: ruff dependency-version: 0.16.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: jupyterlab dependency-version: 4.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: ipykernel dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pydata-sphinx-theme dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: sphinx-autodoc-typehints dependency-version: 3.13.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: jupytext dependency-version: 1.19.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

codspeed · 2026-10-08T16:53:30Z

Merging this PR will not alter performance

✅ 14 untouched benchmarks

_{Comparing dependabot/uv/python-80086b88d6 (0961963) with main (22bfc5a)}

dependabot · 2026-10-13T20:21:08Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 8, 2026

dependabot Bot closed this Oct 13, 2026

dependabot Bot deleted the dependabot/uv/python-80086b88d6 branch October 13, 2026 20:21

Navigation Menu

Repository navigation

Bump the python group across 1 directory with 13 updates - #450

Bump the python group across 1 directory with 13 updates#450
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-80086b88d6

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

Uh oh!

codspeed Bot commented Oct 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.10.0

Stable style

Version 26.10.0

Stable style

Version 1.45.0/0.66b0

Added

Changed

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

0.50.0

0.16.10

Release Notes

Preview features

Performance

Server

Documentation

Other changes

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.16.10

0.16.10

Preview features

Performance

Server

Documentation

Other changes

Contributors

0.16.9

Preview features

Bug fixes

Rule changes

Mypy Release Notes

Next Release

Mypy 2.4

Python 3.15 Support

Native Parser Enabled by Default

v4.6.4

4.6.4

Security fixes

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

v7.4.0

7.4.0

New features added

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Uh oh!

codspeed Bot commented Oct 8, 2026

Merging this PR will not alter performance

Uh oh!

dependabot Bot commented on behalf of github Oct 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading