Skip to content

chore(deps): bump the python-dev group with 7 updates - #133

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dev-ddd0940db9
Open

chore(deps): bump the python-dev group with 7 updates#133
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dev-ddd0940db9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dev group with 7 updates:

Package From To
sqlmodel 0.0.47 0.0.48
typer 0.27.2 0.27.3
polars 1.44.2 2.0.0
prefect 3.8.7 3.8.8
hypothesis 6.168.3 6.168.5
ruff 0.16.9 0.16.10
ty 0.0.84 0.0.85

Updates sqlmodel from 0.0.47 to 0.0.48

Release notes

Sourced from sqlmodel's releases.

0.0.48

Features

Internal

Changelog

Sourced from sqlmodel's changelog.

0.0.48 (2026-10-06)

Features

Internal

Commits

Updates typer from 0.27.2 to 0.27.3

Release notes

Sourced from typer's releases.

0.27.3

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

Changelog

Sourced from typer's changelog.

0.27.3 (2026-10-06)

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

Commits

Updates polars from 1.44.2 to 2.0.0

Release notes

Sourced from polars's releases.

Python Polars 2.0.0

💥 Breaking changes

  • Run SQL window functions over grouped rows on the aggregated rows, and evaluate QUALIFY before the projection (#29746)
  • Type exact SQL numeric literals as Decimal and truncate SQL %/DIV (#29536)
  • Allow deterministic expression plugins to opt into CSE/CSPE (#29428)
  • Read Parquet ENUM type as pl.String (#29331)
  • More map operations (#29296)
  • Deprecate cut/qcut (#29329)

🚀 Performance improvements

  • Fix phases ending too soon due to join sampling (#29752)
  • Group record batch fetches of remote IPC scans (#29750)
  • Mark group-by node as memory intensive pipeline blocker (#29749)
  • Don't inline slow OOC memory drift path (#29745)
  • Only prefetch on unspill when there is memory headroom (#29701)
  • Pushdown filters to scan_lance (#29538)
  • Do not materialize equal ScalarColumns in Column::append/extend (#28989)
  • Evaluate scalar windows in the streaming window node (#29698)
  • Don't materialize scalar columns in DataFrame::estimated_size (#29711)
  • Defer cached pread from prefetch to decode for Parquet (#29702)
  • Decode IPC scans out of order when order is not observed (#29675)
  • IPC metadata suffix fetch (#29692)
  • Speed up null tracking in streaming group-by sum, min and max (#29691)
  • Cache Iceberg manifest files across scans (#29623)
  • Improve pushdown support for fallible Hive predicates (#29594)
  • Streamline BytecodeParser method rewriting (#29632)
  • Stream from_dicts records straight into column buffers (#29656)
  • Read correlated SQL aggregates from the outer join when the subquery repeats it (#29685)
  • Emit files unordered for remote IPC files when order not observed (#29678)
  • Don't keep input order for order-insensitive windows in all engines (#29680)
  • Fix parallelization in top-k reducer (#29684)
  • Share one bloom filter between the build threads of a runtime filter (#29677)
  • Add streaming (out-of-core) sort (#29657)
  • Insert keys that start a run of equal keys into the hot group-by table right away (#29673)
  • Prefetch key-row hash table lookups in blocks (#29663)
  • Lower count-guarded sums to a sum that is null on empty input (#29668)
  • Use single PUT for small cloud uploads (#29603)
  • Don't cache plain scans in the streaming engine (#29654)
  • Change single-key group-by hash table layout and add prefetching (#29661)
  • Use the integer ranges of sampled parquet row groups in filter estimates (#29655)
  • Raise HTTP rate-limiter read init default (#29584)
  • Change join hash table layout and add prefetching (#29653)
  • Add a fast-path for as_list with only a single input (#29592)
  • Use one runtime filter builder per thread for a finished sample (#29646)
  • Compute decimal addition, subtraction and multiplication in i64 when values fit (#29638)
  • Spread decimal sums and means over lanes and check the sum's 38 digits once (#29637)
  • Compute decimal addition, subtraction and multiplication without per-row validity (#29634)
  • Skip or reuse UDF disassembly in BytecodeParser (#29625)

... (truncated)

Commits
  • 22a147d perf: Fix phases ending too soon due to join sampling (#29752)
  • e319cca Python Polars 2.0 (#29723)
  • d1d6ba4 fix: Find SQL aggregates by their function name, and raise on nested aggregat...
  • 5c6a473 perf: Group record batch fetches of remote IPC scans (#29750)
  • c630040 perf: Mark group-by node as memory intensive pipeline blocker (#29749)
  • e1fbe49 fix: Run SQL window functions over grouped rows on the aggregated rows, and e...
  • 3de661d feat: Enable OOC by default with 80% of available RAM as threshold (#29741)
  • 0159b45 refactor: Hold the category mapping in the categorical is_in lookup (#29747)
  • 29995b3 perf: Don't inline slow OOC memory drift path (#29745)
  • 8399cf6 fix: Match categories added after is_in prepares a string haystack (#29744)
  • Additional commits viewable in compare view

Updates prefect from 3.8.7 to 3.8.8

Release notes

Sourced from prefect's releases.

3.8.8 - I take my wildcards literally

This is the last release that will support Python 3.10 — future releases will require Python 3.11 or later.

Bug Fixes 🐞

Integrations & Dependencies 🤝

Development & Tidiness 🧹

... (truncated)

Commits
  • b73b09d docs: Add release notes for 3.8.8 (#23322)
  • 27c1c71 Add opt-in POSIX paths to filter_files while preserving the native default (#...
  • d074b9f docs: document worker healthcheck maintenance contract in AGENTS.md (#23312)
  • e7d7c59 fix flows multi select readability by using checkbox (#23034)
  • 9502320 Allow prefect work-pool update --concurrency-limit 0 (#23299)
  • 23d32bc Use POSIX paths in prefect deploy flow picker (#23310)
  • 3fbbdf4 Reload collections when a worker type is missing after install (#23237)
  • 50b046e Keep event persister periodic flush alive when the database raises `Cancelled...
  • 85cbd1f Keep the worker healthcheck healthy while the API is in maintenance (#23230)
  • 69b2c7f Don't reschedule a flow run the server already finished on SIGTERM (#23244)
  • Additional commits viewable in compare view

Updates hypothesis from 6.168.3 to 6.168.5

Commits
  • ca2a4c6 Bump hypothesis version to 6.168.5 and update changelog
  • c1c9957 Merge pull request #4894 from MarcoGorelli/django-from-field-return-type
  • d862501 Bump hypothesis version to 6.168.4 and update changelog
  • de4ec1c Merge pull request #4887 from HypothesisWorks/create-pull-request/patch
  • 8a80889 add pypy312 support
  • 9ee265d Update pinned dependencies
  • f92f61c Fix the return type of django's from_field
  • See full diff in compare view

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Commits
  • 3265ed1 Bump version to 0.16.10 (#29055)
  • e786964 Authorize shared PR security-review workflow to publish findings (#29052)
  • a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
  • b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
  • 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
  • 317e0a3 [ty] Bound nested callable signature display (#29049)
  • 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
  • 56180bc [ty] Specialize instance members once (#29043)
  • aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
  • 2d25346 [ty] Improve unresolved-import documentation (#29039)
  • Additional commits viewable in compare view

Updates ty from 0.0.84 to 0.0.85

Release notes

Sourced from ty's releases.

0.0.85

Release Notes

Released on 2026-10-06.

Preview features

  • Refresh uv project metadata when uv files change (#28529)

Bug fixes

  • Avoid recursive lambda class decorator panics (#28984)
  • Compare observable notebook state for equality (#28874)
  • Detect recursive alias cycles through intersections (#28916)
  • Fix anchoring of include and exclude patterns after the project's root changed (#28995)
  • Fix stack overflow when inferring dynamic class metaclasses (#28917)
  • Normalize recursive dataclass transform metadata (#28920)
  • Normalize recursive TypedDicts during cycle recovery (#28918)
  • Preserve cycle markers in ParamSpec specialization (#29024)

CLI

  • Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

  • Add namespace package support to import completions. (#28202)
  • Avoid stale I/O diagnostics when closing deleted files (#28988)
  • Contain rendered code within Markdown fences (#28869)
  • Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

  • Add opt-in truthiness-test-of-none-union rule (#28889)
  • Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
  • Bound nested callable signature display (#29049)
  • Explain outdated uv versions in metadata errors (#28959)
  • Improve display of string literal types that include unicode characters or double quotes (#29089)
  • Improve uv metadata diagnostics (#28990)
  • Preserve constrained type-variable failure diagnostics (#28768)
  • Preserve generic inference errors during diagnostic recovery (#28811)
  • Report deprecated overloads in decorator applications (#28999)

Core type checking

  • Bound methods without a receiver are not callable (#28981)
  • Fix member lookup on union-bounded type variables (#29018)
  • Fix type variable inference for final class objects (#29097)
  • Freshen ParamSpec identities consistently (#28826)
  • Honor generic property setters in protocol compatibility (#28562)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.85

Released on 2026-10-06.

Preview features

  • Refresh uv project metadata when uv files change (#28529)

Bug fixes

  • Avoid recursive lambda class decorator panics (#28984)
  • Compare observable notebook state for equality (#28874)
  • Detect recursive alias cycles through intersections (#28916)
  • Fix anchoring of include and exclude patterns after the project's root changed (#28995)
  • Fix stack overflow when inferring dynamic class metaclasses (#28917)
  • Normalize recursive dataclass transform metadata (#28920)
  • Normalize recursive TypedDicts during cycle recovery (#28918)
  • Preserve cycle markers in ParamSpec specialization (#29024)

CLI

  • Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

  • Add namespace package support to import completions. (#28202)
  • Avoid stale I/O diagnostics when closing deleted files (#28988)
  • Contain rendered code within Markdown fences (#28869)
  • Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

  • Add opt-in truthiness-test-of-none-union rule (#28889)
  • Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
  • Bound nested callable signature display (#29049)
  • Explain outdated uv versions in metadata errors (#28959)
  • Improve display of string literal types that include unicode characters or double quotes (#29089)
  • Improve uv metadata diagnostics (#28990)
  • Preserve constrained type-variable failure diagnostics (#28768)
  • Preserve generic inference errors during diagnostic recovery (#28811)
  • Report deprecated overloads in decorator applications (#28999)

Core type checking

  • Bound methods without a receiver are not callable (#28981)
  • Fix member lookup on union-bounded type variables (#29018)
  • Fix type variable inference for final class objects (#29097)
  • Freshen ParamSpec identities consistently (#28826)
  • Honor generic property setters in protocol compatibility (#28562)
  • Infer nominal generic specializations from bounded type variables (#28812)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dev group with 7 updates
a9f9bbd 
Bumps the python-dev group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [sqlmodel](https://github.com/fastapi/sqlmodel) | `0.0.47` | `0.0.48` |
| [typer](https://github.com/fastapi/typer) | `0.27.2` | `0.27.3` |
| [polars](https://github.com/pola-rs/polars) | `1.44.2` | `2.0.0` |
| [prefect](https://github.com/PrefectHQ/prefect) | `3.8.7` | `3.8.8` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.168.3` | `6.168.5` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.16.10` |
| [ty](https://github.com/astral-sh/ty) | `0.0.84` | `0.0.85` |


Updates `sqlmodel` from 0.0.47 to 0.0.48
- [Release notes](https://github.com/fastapi/sqlmodel/releases)
- [Changelog](https://github.com/fastapi/sqlmodel/blob/main/docs/release-notes.md)
- [Commits](fastapi/sqlmodel@0.0.47...0.0.48)

Updates `typer` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.2...0.27.3)

Updates `polars` from 1.44.2 to 2.0.0
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.44.2...py-2.0.0)

Updates `prefect` from 3.8.7 to 3.8.8
- [Release notes](https://github.com/PrefectHQ/prefect/releases)
- [Commits](PrefectHQ/prefect@3.8.7...3.8.8)

Updates `hypothesis` from 6.168.3 to 6.168.5
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.168.3...v6.168.5)

Updates `ruff` from 0.16.9 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.16.10/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.16.10)

Updates `ty` from 0.0.84 to 0.0.85
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.84...0.0.85)

---
updated-dependencies:
- dependency-name: sqlmodel
  dependency-version: 0.0.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dev
- dependency-name: typer
  dependency-version: 0.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dev
- dependency-name: polars
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dev
- dependency-name: prefect
  dependency-version: 3.8.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dev
- dependency-name: hypothesis
  dependency-version: 6.168.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dev
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dev
- dependency-name: ty
  dependency-version: 0.0.85
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 10, 2026
@coderabbitai

coderabbitai Bot commented Oct 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 709d18e8-eeef-4f4e-8bce-c8a375aa7f86

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants