Skip to content

chore(deps)(deps): bump the python-dependencies group with 8 updates - #900

Merged
tschm merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-697fc4c396
Jul 28, 2026
Merged

chore(deps)(deps): bump the python-dependencies group with 8 updates#900
tschm merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-697fc4c396

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 8 updates:

Package From To
polars 1.43.0 1.43.1
fastapi 0.139.2 0.140.7
pandas 3.0.3 3.0.5
yfinance 1.5.1 1.5.2
marimo 0.23.14 0.23.15
hypothesis 6.157.2 6.161.8
pre-commit 4.6.0 4.6.1
ty 0.0.61 0.0.64

Updates polars from 1.43.0 to 1.43.1

Release notes

Sourced from polars's releases.

Python Polars 1.43.1

🚀 Performance improvements

  • Optimize not(bool_f) to not_bool_f (#28474)

✨ Enhancements

  • Allow callback sinks on cloud (#28458)

🐞 Bug fixes

  • Fix panic on self join of scan_delta / scan_iceberg (#28468)
  • Fix UB on first/last_non_null with empty chunk (#28495)
  • Do not CSE non-column height expr on streaming engine (#28480)
  • Propagate adjusted sortedness through Gather (#28493)
  • Deduplicate the expression equality checks (#28483)
  • Address 3VL issue with SQL NOT IN interaction with NULL values and joins (#28484)
  • Use total comparison in Expr literal values (#28482)
  • Ensure SQL SUM and CORR aggregates return NULL for all-null inputs, add TOTAL (#28475)
  • Share null_count_dtype helper between Delta and Iceberg, fixing SchemaError (#28479)
  • Remove non-output columns from the equi-join and semi/anti-join operators (#28446)
  • Fix dropped slice on multiple unions (#28477)
  • Fix in-memory engine incorrect slice on maintain order join (#28478)
  • Check join schema by position (#28455)
  • Block predicate pushdown past overwritten window keys (#28429)

📖 Documentation

  • Update and restructure README (#28490)
  • Minor fixes to Spark migration guide (#27730)
  • Relocate Polars Cloud & On-Prem User Guide (#28462)
  • Add notes on k8s operator (#28445)

🛠️ Other improvements

  • Make hive_part extraction a function and public (#28507)
  • Deduplicate the expression equality checks (#28483)
  • Bump ruff and mypy package versions (#28456)
  • Fix flaky test (#28454)

Thank you to all our contributors for making this release possible! @​AnirudhRahul, @​EndPositive, @​Jesse-Bakker, @​alexander-beedie, @​carnarez, @​dancsi, @​mdroogh, @​mroeschke, @​nameexhaustion, @​nchammas, @​orlp, @​r-brink and @​ritchie46

Commits
  • 8d438be Python Polars 1.43.1 (#28523)
  • a3e282a refactor: Make hive_part extraction a function and public (#28507)
  • f6d2bec docs: Update and restructure README (#28490)
  • b78761c feat(rust): Support reading IEEE 754 total order Parquet column order (#27896)
  • b1268f1 fix: Fix panic on self join of scan_delta / scan_iceberg (#28468)
  • 0d4a49a fix(rust): Decrement ParkGroup worker count when worker exits (#28492)
  • a3982dd fix(rust): Add missing Send bounds in Connector (#28497)
  • 49ceb73 fix: Fix UB on first/last_non_null with empty chunk (#28495)
  • 1f63626 fix: Do not CSE non-column height expr on streaming engine (#28480)
  • f75402e fix: Propagate adjusted sortedness through Gather (#28493)
  • Additional commits viewable in compare view

Updates fastapi from 0.139.2 to 0.140.7

Release notes

Sourced from fastapi's releases.

0.140.6

Refactors

  • ⚡️ Avoid flattening dependencies for request parameters, mainly for OpenAPI. PR #16073 by @​tiangolo.

0.140.5

Refactors

0.140.4

Refactors

0.140.3

Refactors

0.140.2

Refactors

Internal

0.140.1

Refactors

  • ♻️ Update the lru_cache limit for dependencies to account for large apps. PR #16062 by @​tiangolo.

0.140.0

Refactors

Docs

Internal

... (truncated)

Commits

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates yfinance from 1.5.1 to 1.5.2

Release notes

Sourced from yfinance's releases.

1.5.2

Fix yfinance breaking with curl_cffi>=0.16

Thanks @​dokson

Changelog

Sourced from yfinance's changelog.

1.5.2

Patches

  • Fix yfinance breaking with curl_cffi>=0.16
Commits
  • beac22d Version 1.5.2
  • e8f005e Merge pull request #2910 from dokson/fix/curl-cffi-cache-attr-detection
  • e5f9079 Fix: don't treat curl_cffi>=0.16 sessions as caching (presence of .cache != a...
  • See full diff in compare view

Updates marimo from 0.23.14 to 0.23.15

Release notes

Sourced from marimo's releases.

0.23.15

What's Changed

✨ Enhancements

  • Prefill issue-report fields via include toggles (#10307)
  • Searchable combobox for secret/env fields (#10253)
  • Support default file browser selection (#10255)
  • Previewable issue diagnostics in the feedback modal (#10251)
  • Stream file-browser downloads from disk (#10247)
  • Support theme override via query param (#10196)
  • Target the current session so agents connect to the right notebook (#10169)
  • Propagate request trace context to the kernel (#10166)
  • Add deck-level content alignment control (#10176)
  • Update LLM model catalog (#10157)
  • Queue follow-up messages while assistant is streaming (#10174)

🐛 Bug fixes

  • Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
  • Reject catch-all getattr objects as DB connections (#10301)
  • Clamp dropdown to viewport and portal into fullscreen root (#10297)
  • Retain static output through initial hydration (#10298)
  • Exclude marimo package from modulefinder crawl (#10249)
  • Harden create-test-release action (#10278)
  • Remeasure container-width Vega charts when host gains size (#10266)
  • Avoid recursively scanning anywidget state (#10254)
  • Retry invalid anywidget modules (#10259)
  • Resolve pytest race condition during edit (#10139)
  • Canonicalize widget files in HTML exports (#10261)
  • Resolve version from marimo-base (#10260)
  • Handle PEP 695 TypeAlias in DeprivateVisitor (#10227)
  • Support Google Vertex with Pydantic-AI v2 (#10256)
  • Pin pydantic-ai instrumentation version (#10239)
  • Stringify bare pint values in JSON encoding (#10242)
  • Restore retina rendering for matplotlib figures (#10246)
  • Make long error toasts readable and copyable (#10243)
  • Serialize pandas via Arrow IPC instead of deprecated feather (#10244)
  • Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
  • Dismiss Jedi signature hint on Escape and closing paren (#10162)
  • prevent AI in-editor input from disappearing on rejection (#10206)
  • Disable scroll view on mobile to prevent crash (#10212)
  • Surface load errors instead of rendering a silent blank (#10121)
  • Scope skew-protection exemption to login form (#10164)
  • Skip missing-package nudge for marimo.* imports (#10167)
  • Resolve normalized package names to their module (#10165)
  • Sort packages panel list case-insensitively (#10168)
  • Do not fire anywidget change listeners at mount (#10179)
  • Preserve output DOM across present/edit mode toggles (#10160)
  • Do not broadcast anywidget echo_update acks back to clients (#10178)
  • Preserve leading underscores in to_camel_case (#10170)
  • Prevent marimo check from formatting regular markdown files (#10138)

... (truncated)

Commits

Updates hypothesis from 6.157.2 to 6.161.8

Commits
  • ab93776 Bump hypothesis version to 6.161.8 and update changelog
  • a685a97 Merge pull request #4825 from Zac-HD/claude/hypothesis-issue-4261-bci6bn
  • 336621b tweaks
  • 1f8a20a format
  • cbef62d vendor an equivalent to coverage_enable_subprocess
  • 33910f1 Pin the actions we added, and don't persist credentials
  • 9f17c8a Drop a pragma which our exclude patterns already cover
  • 755feb2 Combine coverage data across our CI jobs
  • 7abed42 Point our coverage config references at pyproject.toml
  • e052dde Bump hypothesis version to 6.161.7 and update changelog
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates ty from 0.0.61 to 0.0.64

Release notes

Sourced from ty's releases.

0.0.64

Release Notes

Released on 2026-07-27.

Bug fixes

  • Fix identity narrowing for NewTypes (#26439)
  • Make reachability analysis idempotent (#27163)

LSP server

  • Fix ParamSpec declaration hover and type navigation (#27183)
  • Implement LSP textDocument/implementation request (#25410)
  • Introduce shared primitives for parsing backticks in docstrings (#26928)
  • Render NumPy docstrings as structured Markdown (#25925)

CLI

  • Add --exclude-scripts and --include-scripts (#27169)
  • Discover uv workspace roots (#25551)

Diagnostics

  • Add a lint rule for combined abstract and final decorators (#26932)
  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
  • Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

  • Allow unresolved unused venv home paths (#27162)
  • Simplify script metadata query (#27121)

Core type checking

  • Decorate only overload implementation signatures (#27147)
  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
  • Improve identity comparison inference for singleton types (#27126)
  • Improve tuple membership and rich comparison inference (#27164)
  • Model walrus bindings from comprehensions (#26466)
  • Narrow tagged unions using identity comparisons (#27130)
  • Preserve Self in __new__ calls (#27003)
  • Preserve receiver constraints when binding overloaded methods (#27038)
  • Support generic manual PEP 695 type aliases (#27083)
  • Treat bivariance as covariant (#24319)

Performance

  • Avoid cycles when resolving ModuleType globals (#27182)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.64

Released on 2026-07-27.

Bug fixes

  • Fix identity narrowing for NewTypes (#26439)
  • Make reachability analysis idempotent (#27163)

LSP server

  • Fix ParamSpec declaration hover and type navigation (#27183)
  • Implement LSP textDocument/implementation request (#25410)
  • Introduce shared primitives for parsing backticks in docstrings (#26928)
  • Render NumPy docstrings as structured Markdown (#25925)

CLI

  • Add --exclude-scripts and --include-scripts (#27169)
  • Discover uv workspace roots (#25551)

Diagnostics

  • Add a lint rule for combined abstract and final decorators (#26932)
  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
  • Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

  • Allow unresolved unused venv home paths (#27162)
  • Simplify script metadata query (#27121)

Core type checking

  • Decorate only overload implementation signatures (#27147)
  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
  • Improve identity comparison inference for singleton types (#27126)
  • Improve tuple membership and rich comparison inference (#27164)
  • Model walrus bindings from comprehensions (#26466)
  • Narrow tagged unions using identity comparisons (#27130)
  • Preserve Self in __new__ calls (#27003)
  • Preserve receiver constraints when binding overloaded methods (#27038)
  • Support generic manual PEP 695 type aliases (#27083)
  • Treat bivariance as covariant (#24319)

Performance

  • Avoid cycles when resolving ModuleType globals (#27182)
  • Avoid expanding optional enum comparisons (#27105)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps)(deps): bump the python-dependencies group with 8 updates
80a1a3c 
Bumps the python-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [polars](https://github.com/pola-rs/polars) | `1.43.0` | `1.43.1` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.139.2` | `0.140.7` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.3` | `3.0.5` |
| [yfinance](https://github.com/ranaroussi/yfinance) | `1.5.1` | `1.5.2` |
| [marimo](https://github.com/marimo-team/marimo) | `0.23.14` | `0.23.15` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.157.2` | `6.161.8` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` |
| [ty](https://github.com/astral-sh/ty) | `0.0.61` | `0.0.64` |


Updates `polars` from 1.43.0 to 1.43.1
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.43.0...py-1.43.1)

Updates `fastapi` from 0.139.2 to 0.140.7
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.2...0.140.7)

Updates `pandas` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

Updates `yfinance` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/ranaroussi/yfinance/releases)
- [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst)
- [Commits](ranaroussi/yfinance@1.5.1...1.5.2)

Updates `marimo` from 0.23.14 to 0.23.15
- [Release notes](https://github.com/marimo-team/marimo/releases)
- [Commits](marimo-team/marimo@0.23.14...0.23.15)

Updates `hypothesis` from 6.157.2 to 6.161.8
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.157.2...v6.161.8)

Updates `pre-commit` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

Updates `ty` from 0.0.61 to 0.0.64
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.61...0.0.64)

---
updated-dependencies:
- dependency-name: polars
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: fastapi
  dependency-version: 0.140.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: yfinance
  dependency-version: 1.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: marimo
  dependency-version: 0.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.161.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.64
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from tschm as a code owner July 28, 2026 05:10
@tschm
tschm merged commit e36bf10 into main Jul 28, 2026
62 checks passed
@tschm
tschm deleted the dependabot/uv/python-dependencies-697fc4c396 branch July 28, 2026 05:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tschm tschm Awaiting requested review from tschm tschm is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tschm