Skip to content

chore(deps): update python dependencies (minor/patch)#3266

Open
renovate[bot] wants to merge 1 commit into
devfrom
renovate/python-dependencies-(minorpatch)
Open

chore(deps): update python dependencies (minor/patch)#3266
renovate[bot] wants to merge 1 commit into
devfrom
renovate/python-dependencies-(minorpatch)

Conversation

@renovate

@renovate renovate Bot commented Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
click (changelog) ~=8.3.0 → ~=8.4.1 age confidence
fastapi (changelog) ==0.135.1 → ==0.136.3 age confidence
filelock ~=3.25.2 → ~=3.29.3 age confidence
mypy (changelog) ~=1.19.1 → ~=1.20.2 age confidence
paramiko (changelog) ~=3.4.1 → ~=3.5.1 age confidence
polars (changelog) ~=1.35.2 → ~=1.41.2 age confidence
pre-commit ~=4.5.1 → ~=4.6.0 age confidence
prometheus-client ==0.24.1 → ==0.25.0 age confidence
pydantic (changelog) ~=2.12.5 → ~=2.13.4 age confidence
pyinstaller (changelog) ==6.19.0 → ==6.21.0 age confidence
pyinstaller-hooks-contrib ==2026.3 → ==2026.6 age confidence
pyqt6 ~=6.10.2 → ~=6.11.0 age confidence
pytest-cov (changelog) ~=7.0.0 → ~=7.1.0 age confidence
tables (changelog) ==3.10.2 → ==3.11.1 age confidence
types-paramiko (changelog) ~=3.4.0 → ~=3.5.0 age confidence
types-requests (changelog) ~=2.32.4 → ~=2.33.0 age confidence
uvicorn (changelog) ~=0.42.0 → ~=0.49.0 age confidence

Release Notes

pallets/click (click)

v8.4.1

Compare Source

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type
    conversion again. :issue:3458 :issue:3484
  • Zsh completion scripts parse correctly on Windows. :issue:3277 :pr:3466
  • Shell completion of Choice Enum values produces a valid completion
    result. :issue:3015
  • Fix empty byte-string handling in echo. :issue:3487
  • Fix closed file error with echo_via_pager. :issue:3449

v8.4.0

Compare Source

Released 2026-05-17

  • :class:ParamType typing improvements. :pr:3371

    • :class:ParamType is now a generic abstract base class,
      parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all
      concrete types (str for :class:STRING, int for
      :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific
      :class:~typing.TypedDict subclasses instead of
      dict[str, Any].
    • :class:CompositeParamType and the number-range base are now
      generic with abstract methods.

  • Refactor convert_type to extract type inference into a private
    _guess_type helper, and add :func:typing.overload signatures.
    :pr:3372

  • :class:Parameter typing improvements. :pr:2805

    • :class:Parameter is now an abstract base class, making explicit
      that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None.
      When expose_value=False, the name is set to "" instead
      of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now
      typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1
    or :class:Tuple type, matching environment variable behavior.
    :issue:2745 :pr:3364

  • Auto-detect type=UNPROCESSED for flag_value of non-basic types
    (not str, int, float, or bool), so programmer-provided
    Python objects like classes and enum members are passed through unchanged
    instead of being stringified. Previously type=click.UNPROCESSED had
    to be set explicitly. :issue:2012 :pr:3363

  • The error hint now uses :meth:Command.get_help_option_names to pick
    non-shadowed help option names, so Try '... -h' no longer points to a
    subcommand option that shadows -h. The longest surviving name is
    shown (--help over -h) for readability. :issue:2790 :pr:3208

  • Fix readline functionality on non-Windows platforms. Prompt text is now
    passed directly to readline instead of being printed separately, allowing
    proper backspace, line editing, and line wrapping behavior. :issue:2968
    :pr:2969

  • Use :func:os.startfile on Windows to open URLs in :func:open_url,
    replacing the start built-in which cannot be invoked without
    shell=True. :issue:3164 :pr:3186

  • Fix Fish shell completion errors when option help text contains newlines.
    :issue:3043 :pr:3126

  • Add :class:NoSuchCommand exception with suggestions for misspelled
    commands. :issue:3107 :pr:3228

  • Use :class:ValueError message when conversion in :class:FuncParamType would
    fail. :issue:3105 :pr:3211

  • Add click.get_pager_file for file-like access to an output
    pager. :pr:1572 :pr:3405

  • :func:~click.formatting.wrap_text now measures line width in visible
    characters, ignoring ANSI escape sequences. :pr:3420

  • Fix :meth:HelpFormatter.write_usage emitting only a blank line when
    called without args. The usage prefix and program name are now
    written even when no arguments follow, and the trailing separator
    space is stripped so the line ends at the program name.
    :issue:3360 :pr:3434

  • Show custom error messages from types when :func:prompt with
    hide_input=True fails validation, instead of always showing a
    generic message. Built-in type messages mask the input value.
    :issue:2809 :pr:3256

  • Add capture parameter to :class:CliRunner with two modes: sys
    (default) and fd. fd redirects file descriptors 1 and 2
    via :func:os.dup2 so output that bypasses sys.stdout (stale stream
    references, C extensions, subprocesses, faulthandler) is captured
    with proper isolation. :issue:854 :issue:2412 :issue:2468
    :issue:2497 :issue:2761 :issue:2827 :issue:2865 :pr:3391

  • Revert the 8.3.3 change that exposed the original file descriptor
    via fileno() on the redirected CliRunner streams in the default
    capture mode. os.dup2(w, sys.stdout.fileno()) calls inside a CLI no
    longer mutate the host runner's stdout, which broke Pytest's fd-level
    capture teardown. C-level consumers that need a real fd should use
    capture="fd". :issue:3384 :pr:3391

  • Mark additional built-in strings with gettext() to extend translation
    coverage. :pr:2902

  • Fix feature switch groups (several flag_value options sharing one
    parameter name) silently dropping an explicit default when a sibling
    option without an explicit default was declared first. Arbitration is now
    source-aware: a more explicit :class:ParameterSource always wins, and
    within ParameterSource.DEFAULT, an option that received an explicit
    default= keyword wins over a sibling whose default was auto-derived.
    The 8.3.x first-wins fallback for remaining ties was reverted to the
    pre-8.3.x last-wins fallback. :issue:3403 :pr:3404

  • Fix missing space between option help text and the (DEPRECATED)
    label, and localize the option label so it matches the command label.
    The label and the DeprecationWarning reason suffix are now produced
    by shared helpers. :pr:3423

  • Document short option stacking (-abc is parsed as -a -b -c) and
    clarify that multi-character short option names are not supported.
    :issue:2779 :pr:3431

v8.3.3

Compare Source

v8.3.2

Compare Source

Released 2026-04-02

  • Fix handling of flag_value when is_flag=False to allow such options to be
    used without an explicit value. :issue:3084 :pr:3152
  • Hide Sentinel.UNSET values as None when using lookup_default().
    :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer.
    :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering
    logging interaction, multi-threaded safety, and sequential invocation
    isolation. Add high-iteration stress tests behind a stress marker
    with a dedicated CI job. :pr:3139
  • Fix callable flag_value being instantiated when used as a default via
    default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225

v8.3.1

Compare Source

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
    :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through
    the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
    behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters
    through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is
    empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to
    type_cast_value. :issue:3069 :pr:3090
fastapi/fastapi (fastapi)

v0.136.3

Compare Source

Refactors
  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #​15589 by @​tiangolo.

v0.136.1

Compare Source

Upgrades
Internal

v0.136.0

Compare Source

Upgrades

v0.135.4

Compare Source

Refactors
Internal

v0.135.3

Compare Source

Features
Docs
Internal

v0.135.2

Compare Source

Upgrades
Docs
Translations
Internal
tox-dev/py-filelock (filelock)

v3.29.3

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.29.2...3.29.3

v3.29.2

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.29.1...3.29.2

v3.29.1

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.29.0...3.29.1

v3.29.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.28.0...3.29.0

v3.28.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.27.0...3.28.0

python/mypy (mypy)

v1.20.2

Compare Source

v1.20.1

Compare Source

  • Always disable sync in SQLite cache (Ivan Levkivskyi, PR 21184)
  • Temporarily skip few base64 tests (Ivan Levkivskyi, PR 21193)
  • Revert dict.__or__ typeshed change (Ivan Levkivskyi, PR 21186)
  • Fix narrowing for match case with variadic tuples (Shantanu, PR 21192)
  • Avoid narrowing type[T] in type calls (Shantanu, PR 21174)
  • Fix regression for catching empty tuple in except (Shantanu, PR 21153)
  • Fix reachability for frozenset and dict view narrowing (Shantanu, PR 21151)
  • Fix narrowing with chained comparison (Shantanu, PR 21150)
  • Avoid narrowing to unreachable at module level (Shantanu, PR 21144)
  • Allow dangerous identity comparisons to Any typed variables (Shantanu, PR 21142)
  • --warn-unused-config should not be a strict flag (Ivan Levkivskyi, PR 21139)

v1.20.0

Compare Source

paramiko/paramiko (paramiko)

v3.5.1

Compare Source

v3.5.0

Compare Source

pre-commit/pre-commit (pre-commit)

v4.6.0

Compare Source

==================

Features
  • pre-commit hook-impl: allow --hook-dir to be missing to enable easier
    usage with git 2.54+ git hooks.
Fixes
prometheus/client_python (prometheus-client)

v0.25.0

Compare Source

What's Changed

Full Changelog: prometheus/client_python@v0.24.1...v0.25.0

pydantic/pydantic (pydantic)

v2.13.4: 2026-05-06

Compare Source

v2.13.4 (2026-05-06)

What's Changed
Packaging
Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3

Compare Source

GitHub release

What's Changed
Fixes

v2.13.2

Compare Source

v2.13.1: 2026-04-15

Compare Source

v2.13.1 (2026-04-15)

What's Changed
Fixes

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0

Compare Source

GitHub release

The highlights of the v2.13 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features
  • Allow default factories of private attributes to take validated model data by @​Viicos in #​13013
Changes
Fixes
  • Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #​13049
  • Fix model equality when using runtime extra configuration by @​Viicos in #​13062
Packaging
New Contributors
pyinstaller/pyinstaller (pyinstaller)

v6.21.0

Compare Source

Please see the v6.21.0 section of the changelog for a list of the changes since v6.20.0.

v6.20.0

Compare Source

Please see the v6.20.0 section of the changelog for a list of the changes since v6.19.0.

pyinstaller/pyinstaller-hooks-contrib (pyinstaller-hooks-contrib)

v2026.6

Compare Source

Updated hooks


* Fix bug in ``pyi_rth_osgeo.py`` where the "GDAL_DATA" environment variable
  would not get set on Windows when building from a conda environment. (`#​1021
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1021>`_)
* Update ``dash`` hook for compatibility with ``dash`` 4.2.0. (`#&#8203;1026
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1026>`_)
* Update ``toga`` hooks for compatibility with ``toga`` 0.5.4. (`#&#8203;1016
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1016>`_)

Project & Process
  • Exclude generated Python bytecode files from source and wheel distributions.
    (#&#8203;1019 <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1019>_)

v2026.5

Compare Source

New hooks


* Add a hook for ``plum``, to automatically discover and collect the
  ``{id}__mypyc`` top-level module. (`#&#8203;1008
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1008>`_)
* Add a hook for ``tensorrt``, which loads dynamic libraries. (`#&#8203;1005
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1005>`_)
* Add hook for ``psycopg_c`` (C-extension installation of Psycopg 3) to
  ensure that ``psycopg_c._uuid`` module is collected, in order to prevent
  missing-module error when working with data of UUID data type. (`#&#8203;1010
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1010>`_)

Updated hooks
  • Rework the findlibs run-time hook to improve compatibility with
    findlibs >= 0.1.0 and avoid problems with contemporary versions
    of eccodes / eccodeslib. (#&#8203;1014 <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1014>_)
  • Update trame_client hook to collect package's metadata, which is
    required by trame-client v3.12.0 and later. (#&#8203;1015 <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1015>_)

v2026.4

Compare Source

New hooks


* Add a hook for ``imagingcontrol4``, which loads dynamic libraries. (`#&#8203;1001
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1001>`_)

Updated hooks
  • Update chardet hook for compatibility with chardet v7.4.0. (#&#8203;1004 <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1004>_)
  • Update hook for weasyprint to collect the harfbuzz-subset shared
    library when building with WeasyPrint v63.0 or later. (#&#8203;999 <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/999>_)
pytest-dev/pytest-cov (pytest-cov)

v7.1.0

Compare Source

  • Fixed total coverage computation to always be consistent, regardless of reporting settings.
    Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
    reporting options.
    See #&#8203;641 <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
    It checks if there is already existing plugin for this message by comparing filter regular expression.
    When filter is specified on command line the message is escaped and does not match an expected message.
    A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation.
    Contributed by Art Pelling in #&#8203;718 <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
    "vivodi" in #&#8203;738 <https://github.com/pytest-dev/pytest-cov/pull/738>.
    Also closed #&#8203;736 <https://github.com/pytest-dev/pytest-cov/issues/736>    .

  • Fixed some assertions in tests.
    Contributed by in Markéta Machová in #&#8203;722 <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

PyTables/PyTables (tables)

v3.11.1

Compare Source

=============================

  • TBW

v3.11.0

Compare Source

=============================

  • Fix blosc2 loading (:issue:1305, :issue:1306).
Kludex/uvicorn (uvicorn)

v0.49.0: Version 0.49.0

Compare Source

What's Changed

  • Bump httptools minimum version to 0.8.0 by @​Kludex in #​2962
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) by @​Kludex in #​2971

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

v0.48.0: Version 0.48.0

Compare Source

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

v0.47.0: Version 0.47.0

Compare Source

What's Changed

  • Eagerly import the ASGI app in the parent process by @​Kludex

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "after 9am and before 6pm every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file minor or patch labels Jun 18, 2026
@renovate renovate Bot force-pushed the renovate/python-dependencies-(minorpatch) branch from 3eea2b8 to 7f98af8 Compare June 18, 2026 11:05
@renovate

renovate Bot commented Jun 18, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock
Command failed: uv lock --upgrade-package click --upgrade-package fastapi --upgrade-package filelock --upgrade-package mypy --upgrade-package paramiko --upgrade-package polars --upgrade-package pre-commit --upgrade-package prometheus-client --upgrade-package pydantic --upgrade-package pyinstaller --upgrade-package pyinstaller-hooks-contrib --upgrade-package pyqt6 --upgrade-package pytest-cov --upgrade-package tables --upgrade-package types-paramiko --upgrade-package types-requests --upgrade-package uvicorn
Using CPython 3.14.6 interpreter at: /opt/containerbase/tools/python/3.14.6/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version >= '3.14' and platform_python_implementation !=
  │ 'PyPy'):
  ╰─▶ Because antares-launcher==1.4.9 depends on paramiko>=3.4.1,<3.5.dev0 and
      your project depends on antares-launcher==1.4.9, we can conclude that
      your project depends on paramiko>=3.4.1,<3.5.dev0.
      And because your project depends on paramiko>=3.5.1,<3.6.dev0 and your
      project requires antarest[desktop], we can conclude that your project's
      requirements are unsatisfiable.

@renovate renovate Bot force-pushed the renovate/python-dependencies-(minorpatch) branch from 7f98af8 to f0fa936 Compare June 18, 2026 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file minor or patch size/M

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants