Repository navigation
chore(deps): bump the python-minor-patch group across 5 directories with 6 updates - #86
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…ith 6 updates Bumps the python-minor-patch group with 3 updates in the / directory: [boto3](https://github.com/boto/boto3), [sqlglot](https://github.com/tobymao/sqlglot) and [trino](https://github.com/trinodb/trino-python-client). Bumps the python-minor-patch group with 4 updates in the /adapters/duckdb directory: [boto3](https://github.com/boto/boto3), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy) and [psycopg2-binary](https://github.com/psycopg/psycopg2). Bumps the python-minor-patch group with 3 updates in the /adapters/postgres directory: [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy) and [psycopg2-binary](https://github.com/psycopg/psycopg2). Bumps the python-minor-patch group with 3 updates in the /adapters/trino directory: [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy) and [trino](https://github.com/trinodb/trino-python-client). Bumps the python-minor-patch group with 1 update in the /contract directory: [sqlglot](https://github.com/tobymao/sqlglot). Updates `boto3` from 1.43.85 to 1.43.112 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.85...1.43.112) Updates `sqlglot` from 30.17.0 to 30.22.0 - [Commits](tobymao/sqlglot@v30.17.0...v30.22.0) Updates `trino` from 0.339.0 to 0.340.0 - [Release notes](https://github.com/trinodb/trino-python-client/releases) - [Changelog](https://github.com/trinodb/trino-python-client/blob/master/CHANGES.md) - [Commits](trinodb/trino-python-client@0.339.0...0.340.0) Updates `boto3` from 1.43.85 to 1.43.112 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.85...1.43.112) Updates `ruff` from 0.16.5 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.17.0) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.0) Updates `psycopg2-binary` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `ruff` from 0.16.5 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.17.0) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.0) Updates `psycopg2-binary` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `ruff` from 0.16.5 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.17.0) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.1...v2.4.0) Updates `trino` from 0.339.0 to 0.340.0 - [Release notes](https://github.com/trinodb/trino-python-client/releases) - [Changelog](https://github.com/trinodb/trino-python-client/blob/master/CHANGES.md) - [Commits](trinodb/trino-python-client@0.339.0...0.340.0) Updates `sqlglot` from 30.17.0 to 30.22.0 - [Commits](tobymao/sqlglot@v30.17.0...v30.22.0) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.112 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: sqlglot dependency-version: 30.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: trino dependency-version: 0.340.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: boto3 dependency-version: 1.43.112 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: trino dependency-version: 0.340.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: sqlglot dependency-version: 30.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
|
Dependabot can't resolve your Python dependency files. Because of this, Dependabot cannot update this pull request. |
carolsimone
added a commit
that referenced
this pull request
Oct 23, 2026
ruff 0.17.1, mypy 2.4.0, boto3 1.43.114, sqlglot 30.23.0, trino 0.340.0, psycopg2-binary 2.9.13, in every pyproject.toml that pins them, and urllib3 2.7.0 to 2.8.0 in uv.lock (CVE-2026-97687, CVE-2026-97689; Trivy attributes them to any PR that touches the lock). Dependabot #86 and #95 missed the runtime's own mypy/ruff pins, which left the workspace unsatisfiable. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WbJuV948a1y7LyJG3YSXq9 Signed-off-by: Simone Carolini <simonecarolini.sc@gmail.com>
carolsimone
added a commit
that referenced
this pull request
Oct 23, 2026
ruff 0.17.1, mypy 2.4.0, boto3 1.43.114, sqlglot 30.23.0, trino 0.340.0, psycopg2-binary 2.9.13, in every pyproject.toml that pins them, and urllib3 2.7.0 to 2.8.0 in uv.lock (CVE-2026-97687, CVE-2026-97689; Trivy attributes them to any PR that touches the lock). Dependabot #86 and #95 missed the runtime's own mypy/ruff pins, which left the workspace unsatisfiable. Claude-Session: https://claude.ai/code/session_01WbJuV948a1y7LyJG3YSXq9 Signed-off-by: Simone Carolini <simonecarolini.sc@gmail.com> Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
Owner
|
Superseded by #99. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/uv/python-minor-patch-97d027eb9d
branch
October 23, 2026 08:22
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the python-minor-patch group with 3 updates in the / directory: boto3, sqlglot and trino.
Bumps the python-minor-patch group with 4 updates in the /adapters/duckdb directory: boto3, ruff, mypy and psycopg2-binary.
Bumps the python-minor-patch group with 3 updates in the /adapters/postgres directory: ruff, mypy and psycopg2-binary.
Bumps the python-minor-patch group with 3 updates in the /adapters/trino directory: ruff, mypy and trino.
Bumps the python-minor-patch group with 1 update in the /contract directory: sqlglot.
Updates
boto3from 1.43.85 to 1.43.112Commits
9ca5e36Merge branch 'release-1.43.112'6f065c3Bumping version to 1.43.112a980c79Add changelog entries from botocorec14ee96Merge branch 'release-1.43.111'3557491Merge branch 'release-1.43.111' into develop2309640Bumping version to 1.43.1111d6d2d9Add changelog entries from botocored948ed5Merge branch 'release-1.43.110'9b19947Merge branch 'release-1.43.110' into developdedcde7Bumping version to 1.43.110Updates
sqlglotfrom 30.17.0 to 30.22.0Commits
b8333a8fix(optimizer)!: remove infer_schema from optimizer (#8552)1d8e1c9fix(optimizer)!: annotate sha2 for redshift properly (#8577)b78bd9cchore: avoid compiling schema.py (#8576)1ebf43eSync w/ integration tests51864e7fix(bigquery)!: edge case in array generationbea35b3fix(bigquery,duckdb): don't drop array elements after a subquery (#8575)361b23bfix(parser): allow SEARCH + CYCLE and CYCLE TO ... DEFAULT [CLAUDE] (#8574)6683ad2fix(optimizer)!: resolve correlated UNNEST fields from projection types (#8571)9f2f4cdfix(optimizer)!: resolve correlated UNNEST fields from projection types (#8571)1e2cc21fix(optimizer)!: preserve CASE branches before always-true conditions (#8572)Updates
trinofrom 0.339.0 to 0.340.0Release notes
Sourced from trino's releases.
Changelog
Sourced from trino's changelog.
Commits
74c6156Bump version to 0.340.06b2a00fAdd 0.340.0 release notes2301d8eScope empty response retries to statement requestsc4b2c57Fix bytes binding for VARBINARY across both the DBAPI and SQLAlchemy paths5b662beFix zombie $partitions queries left running by SQLAlchemy reflection1a4ba08Add allow_insecure_auth to opt out of the HTTP+auth guardUpdates
boto3from 1.43.85 to 1.43.112Commits
9ca5e36Merge branch 'release-1.43.112'6f065c3Bumping version to 1.43.112a980c79Add changelog entries from botocorec14ee96Merge branch 'release-1.43.111'3557491Merge branch 'release-1.43.111' into develop2309640Bumping version to 1.43.1111d6d2d9Add changelog entries from botocored948ed5Merge branch 'release-1.43.110'9b19947Merge branch 'release-1.43.110' into developdedcde7Bumping version to 1.43.110Updates
rufffrom 0.16.5 to 0.17.0Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
5b27c1cBump version to 0.17.0 (#29259)8f362bfIntegrate vendored Unicode names into Ruff88a50d6Revert upstream Unicode loose matching276832aRevert upstream Unicode alias normalization26911caVendor unicode_names2 from upstream27e3797[ruff] Stabilizeos-path-commonprefix(RUF071) (#28764)bbb52c1[flake8-tidy-imports] Stabilizelazy-import-immediately-resolved(`TID255...5aa9cbd[flake8-tidy-imports] Stabilizelazy-import-mismatch(TID254) (#28760)dba1bc8[flake8-import-conventions] Adddatetime as dtas a conventional alias (`...ef23c9cUpdate default and latest Python versions for 3.15 (#28792)Updates
mypyfrom 2.3.1 to 2.4.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
935ba8aBump version to 2.4.0334a678Add link for PR 22066 in mypy 2.4 changelog (#22082)fe69660Finalize mypy 2.4 changelog (#22080)541fd87Various mypy 2.4 changelog updates (#22077)b231182Update native parser docs (#22078)04fe42cInitial Changelog for Mypy 2.4 (#22071)0617494Quick fix for non UTF-8 encodings with new parser (#22066)b2f9b60Bump librt to 0.16.0 (#22067)9d798dcSync typeshed (#22054)0861bb6Reduce max protocol stack size to 20 (#22053)Updates
psycopg2-binaryfrom 2.9.12 to 2.9.13Changelog
Sourced from psycopg2-binary's changelog.
... (truncated)
Commits
f650e7achore: bump to release 2.9.13368c8a1chore!: drop support for Python 3.99b39e65chore: drop scaleway build support2ca7041fix: fix handling of PostgreSQL 18 exceptions5385c02Build CPython 3.15 wheels1d32e1fci: only attempt triggering documentation refresh when pushing on main repo433e7b7chore: add pyproject.toml file to declare a PEP 517 build backend8fb80bcfix: fix parsing of malformed int64 input in arraysf98014afix: fix parsing of malformed bytea input822b79cchore: bump dependencies in binary packageUpdates
rufffrom 0.16.5 to 0.17.0Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
5b27c1cBump version to 0.17.0 (#29259)8f362bfIntegrate vendored Unicode names into Ruff88a50d6Revert upstream Unicode loose matching276832aRevert upstream Unicode alias normalization26911caVendor unicode_names2 from upstream27e3797[ruff] Stabilizeos-path-commonprefix(RUF071) (#28764)bbb52c1[flake8-tidy-imports] Stabilizelazy-import-immediately-resolved(`TID255...5aa9cbd[flake8-tidy-imports] Stabilizelazy-import-mismatch(TID254) (#28760)dba1bc8[flake8-import-conventions] Adddatetime as dtas a conventional alias (`...ef23c9cUpdate default and latest Python versions for 3.15 (#28792)Updates
mypyfrom 2.3.1 to 2.4.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
935ba8aBump version to 2.4.0334a678Add link for PR 22066 in mypy 2.4 changelog (#22082)fe69660Finalize mypy 2.4 changelog (#22080)541fd87Various mypy 2.4 changelog updates (#22077)b231182Update native parser docs (#22078)04fe42cInitial Changelog for Mypy 2.4 (#22071)0617494Quick fix for non UTF-8 encodings with new parser (#22066)b2f9b60Bump librt to 0.16.0 (#22067)9d798dcSync typeshed (#22054)0861bb6Reduce max protocol stack size to 20 (#22053)Updates
psycopg2-binaryfrom 2.9.12 to 2.9.13Changelog
Sourced from psycopg2-binary's changelog.
... (truncated)
Commits
f650e7achore: bump to release 2.9.13368c8a1chore!: drop support for Python 3.99b39e65chore: drop scaleway build support2ca7041fix: fix handling of PostgreSQL 18 exceptions5385c02Build CPython 3.15 wheels1d32e1fci: only attempt triggering documentation refresh when pushing on main repo433e7b7chore: add pyproject.toml file to declare a PEP 517 build backend8fb80bcfix: fix parsing of malformed int64 input in arraysf98014afix: fix parsing of malformed bytea input822b79cchore: bump dependencies in binary packageUpdates
rufffrom 0.16.5 to 0.17.0Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
5b27c1c...Description has been truncated