Skip to content

Bump the python-dependencies group across 1 directory with 7 updates - #53

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d74fcf375b
Open

Bump the python-dependencies group across 1 directory with 7 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-d74fcf375b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 7 updates in the / directory:

Package From To
narwhals 2.24.0 2.25.0
pydantic 2.13.4 2.13.5
maturin 1.14.1 1.15.0
pre-commit 4.6.1 4.6.2
ruff 0.16.2 0.16.5
nbformat 5.11.0 5.11.1
ipywidgets 8.1.8 8.1.9

Updates narwhals from 2.24.0 to 2.25.0

Release notes

Sourced from narwhals's releases.

Narwhals v2.25.0

Changes

🚀 Performance improvements

  • perf: remove redundant work in eager when/then, schema resolution, selectors, and module lookups (#3797)

✨ Enhancements

  • feat: add str.strip_chars_{start,end} (#3843)
  • feat: Add maintain_order argument to {Expr, Series}.list.unique (#3697)
  • feat(typing): Introduce PluginName NewType so plugin backends can type check (#3794)
  • feat(ibis): Add support for Expr.list.median for ibis backend (#3791)

🐞 Bug fixes

  • fix: follow left-hand-index alignment rule for pandas-like concat (#3866)
  • fix: null propagation for str boolean methods (#3865)
  • fix: consistently place null's in with_row_index(order_by=...) (#3863)
  • fix: honor schema column selection/order in pandas-like from_dicts (#3856)
  • fix: use exact quantile for median on the pyarrow backend (#3855)
  • fix: order Categorical columns by value in the pyarrow backend (#3862)
  • fix: is_in was not preserving nulls where possible (#3859)
  • fix: preserve nulls in pandas-like Expr.dt.ordinal_day (#3805)
  • fix: resolve failing cross-references in documentation (#3790)

📖 Documentation

  • docs: reorganise contributing.md and add useful make commands (#3836)
  • fix: resolve failing cross-references in documentation (#3790)
  • docs: Add Intella to "resources" (#3788)

🛠️ Other improvements

  • ci: pin pandas in scikit-lego job to get ci green (#3860)
  • chore: Bump pyrefly 1.2, remove some unnecessary pyrefly: ignores (#3848)
  • chore: fix pandas nightly (#3849)
  • chore: Remove pins in pyproject.toml, as dependencies are pinned in uv.lock anyway (#3847)
  • chore: prek autoupdate (#3828)
  • chore: add trailing-whitespace precommit (#3826)
  • chore: Update uv lock, pre-commit hooks and fix linting issues (#3813)
  • refactor: Dispatch IO functions via *Namespace methods (#3793)
  • ci: fix lightgbm downstream test (#3801)
  • chore: refactor compliant implementations to use expression_args instead of **expressifiable_args (#3766)
  • chore: Small performance and robustness cleanups (#3798)
  • chore: prek autoupdate (#3858)
  • chore: prek autoupdate (#3846)
  • ci: consolidate action updates in renovate and add zizmor pre-commit hook (#3835)
  • test: split cat.get_categories tests for expr and series (#3814)

... (truncated)

Commits
  • c481508 release: Bump version to 2.25.0
  • 813f3bb update build process, remove push to stable branch (#3868)
  • bc34ee7 fix: follow left-hand-index alignment rule for pandas-like concat (#3866)
  • f5ba091 fix: null propagation for str boolean methods (#3865)
  • d2b5bcc fix: consistently place null's in with_row_index(order_by=...) (#3863)
  • 93fb199 fix: honor schema column selection/order in pandas-like from_dicts (#3856)
  • 799eabf feat: add str.strip_chars_{start,end} (#3843)
  • 2ae3429 ci: pin pandas in scikit-lego job to get ci green (#3860)
  • 618f9b8 fix: use exact quantile for median on the pyarrow backend (#3855)
  • c679eba fix: order Categorical columns by value in the pyarrow backend (#3862)
  • Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates maturin from 1.14.1 to 1.15.0

Release notes

Sourced from maturin's releases.

v1.15.0

What's Changed

New Contributors

Full Changelog: PyO3/maturin@v1.14.1...v1.15.0

Changelog

Sourced from maturin's changelog.

1.15.0

  • Set UV_PYTHON when running maturin develop with uv (#3236)
  • Set UID and GID headers in pax (#3241)
  • Replace unguarded panics with explicit errors on fallible input (#3242)
  • Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback (#3244)
  • Fix abi3t PyModExport entrypoint check (#3246)
  • Fix maturin build --pgo -i <version> with uv install (#3237)
  • Refactor: apply some mechanical cleanups (#3250)
  • Refactor: BuildOrchestrator pipeline deduplication (#3251)
  • Refactor: improve context and environment hygiene (#3252)
  • Fix(ci): honor ~= and ==X.* in requires-python for generate-ci (#3249)
  • Refactor: type cleanup for options, tags, and wheel metadata (#3253)
  • Refactor: InstallDest, single BridgeModel, and ui output facade (#3254)
  • Don’t specify generate-import-lib for PyO3 0.29 (#3258)
  • Refactor build so that pgo is part of normal pathway (#3257)
  • Fix: verify bindings detection with cargo tree in workspaces (#3264)
  • Fix: harden cargo tree verification of bindings detection (#3266)
  • Feat: support --pgo for maturin develop (#3270)
  • Feat: support MATURIN_PGO env var to activate --pgo (#3271)
  • Docs: correct crate feature documentation; remove stale clippy allow
  • Fix: deduplicate SBOM includes across full merged list, preserving first-seen order
  • Feat: type the bindings input with a single-source-of-truth enum (#3273)
  • Don't force export of the PyInit_{module_name} in UniFfi mode (#3275)
  • Switch musllinux images to musllinux_1_2 as musllinux_1_1 is EOL (#3280)
  • Fix(generate-stubs): write stubs into the module's package directory (#3282)
  • Fix group not cwd (#3284)
  • Docs: document missing [tool.maturin] config fields (#3287)
  • Update cargo-zigbuild & cargo-xwin to 0.23.1
Commits

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates ruff from 0.16.2 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates nbformat from 5.11.0 to 5.11.1

Release notes

Sourced from nbformat's releases.

v5.11.1

5.11.1

(Full Changelog)

Merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​aryansk (activity) | @​Carreau (activity)

Changelog

Sourced from nbformat's changelog.

5.11.1

(Full Changelog)

Merged PRs

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​aryansk (activity) | @​Carreau (activity)

Commits
  • 75f819f Publish 5.11.1
  • 4db76de Bump github/codeql-action from 4.37.3 to 4.37.5 in the actions group
  • 3eca403 Try to skip publishing to NPM to be able to publish a patch version on
  • d2c5d33 disable pendingdeprecationWarnings for now
  • 003ea2c fix steps to skip
  • 2e1272b style: pre-commit fixes
  • 0bd4ebe Clarify normalize guidance in the changelog
  • See full diff in compare view

Updates ipywidgets from 8.1.8 to 8.1.9

Release notes

Sourced from ipywidgets's releases.

Release 8.1.9

What's Changed

New Contributors

Full Changelog: jupyter-widgets/ipywidgets@8.1.8...8.1.9

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
Bump the python-dependencies group across 1 directory with 7 updates
47c0055 
Bumps the python-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [narwhals](https://github.com/narwhals-dev/narwhals) | `2.24.0` | `2.25.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [maturin](https://github.com/pyo3/maturin) | `1.14.1` | `1.15.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.5` |
| [nbformat](https://github.com/jupyter/nbformat) | `5.11.0` | `5.11.1` |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `8.1.8` | `8.1.9` |



Updates `narwhals` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/narwhals-dev/narwhals/releases)
- [Commits](narwhals-dev/narwhals@v2.24.0...v2.25.0)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `maturin` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](PyO3/maturin@v1.14.1...v1.15.0)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `ruff` from 0.16.2 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.5)

Updates `nbformat` from 5.11.0 to 5.11.1
- [Release notes](https://github.com/jupyter/nbformat/releases)
- [Changelog](https://github.com/jupyter/nbformat/blob/main/CHANGELOG.md)
- [Commits](jupyter/nbformat@v5.11.0...v5.11.1)

Updates `ipywidgets` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.8...8.1.9)

---
updated-dependencies:
- dependency-name: narwhals
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: maturin
  dependency-version: 1.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: nbformat
  dependency-version: 5.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ipywidgets
  dependency-version: 8.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Python dependency updates managed by uv labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Python dependency updates managed by uv

0 participants