Skip to content

Bump the pip-minor-patch group with 5 updates - #29

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-minor-patch-c4908f4628
Open

Bump the pip-minor-patch group with 5 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-minor-patch-c4908f4628

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-minor-patch group with 5 updates:

Package From To
boto3 1.43.123 1.43.126
fastapi 0.162.0 0.162.2
psycopg 3.3.6 3.3.8
sqlalchemy 2.1.6 2.1.8
ruff 0.17.3 0.17.4

Updates boto3 from 1.43.123 to 1.43.126

Commits
  • ef06721 Merge branch 'release-1.43.126'
  • de8922c Bumping version to 1.43.126
  • 03472f1 Add changelog entries from botocore
  • 0b10f04 Merge branch 'release-1.43.125'
  • 6b6c175 Merge branch 'release-1.43.125' into develop
  • 140a240 Bumping version to 1.43.125
  • e239fae Add changelog entries from botocore
  • fef3ef7 Merge branch 'release-1.43.124'
  • 6b03fe3 Merge branch 'release-1.43.124' into develop
  • edc2ae0 Bumping version to 1.43.124
  • Additional commits viewable in compare view

Updates fastapi from 0.162.0 to 0.162.2

Release notes

Sourced from fastapi's releases.

0.162.2

FastAPI includes an official skill that helps coding agents use new features and recommended patterns for your installed version. Install it with uvx library-skills in your project. See Develop with AI.

Docs

Internal

0.162.1

Docs

Translations

Internal

Commits

Updates psycopg from 3.3.6 to 3.3.8

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.9 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Use the C implementation of the wait functions on Windows too. It was disabled because of an excessive CPU usage, fixed in Psycopg 3.2.11 (:ticket:[#645](https://github.com/psycopg/psycopg/issues/645)).
  • Fix dumping of Decimal 0 with large exponent (part of 🎫[#1414](https://github.com/psycopg/psycopg/issues/1414)).
  • Close the connection if the query cancellation following a Ctrl-C or a task cancellation is interrupted again, instead of leaving it stuck in ACTIVE state (:ticket:[#1435](https://github.com/psycopg/psycopg/issues/1435)).
  • Limit the memory used by :sql:COPY FROM if the server consumes data slower than it is produced. Add a !flush_threshold parameter to ~copy.LibpqWriter to tune it (:ticket:[#1437](https://github.com/psycopg/psycopg/issues/1437)).
  • Don't wait on the event loop when the socket is already writable, which made pipeline mode, ~AsyncCursor.executemany() and ~AsyncCopy.write() on async connections several times slower than on sync ones (:ticket:[#1468](https://github.com/psycopg/psycopg/issues/1468)).
  • Fix client-side quoting of negative zero floats and decimals, which could produce a -- SQL comment (:ticket:[#1480](https://github.com/psycopg/psycopg/issues/1480)).
  • Raise DataError instead of !ValueError registering a composite whose name or attributes are not valid namedtuple names, for instance Python keywords (:ticket:[#1482](https://github.com/psycopg/psycopg/issues/1482)).
  • Speed up the C implementation of the sync wait function, in particular when the connection doesn't need to wait, for instance at every ~Copy.write() (:ticket:[#1484](https://github.com/psycopg/psycopg/issues/1484)).
  • Don't replace the exception raised in a :sql:COPY block, for instance an interruption, with an error terminating the operation (:ticket:[#1486](https://github.com/psycopg/psycopg/issues/1486)).
  • Fix ~copy.QueuedLibpqWriter hanging forever, instead of raising the error, if sending data to the server fails while its queue is full (:ticket:[#1489](https://github.com/psycopg/psycopg/issues/1489)).
  • Performance improvements to lists dumping (:tickets:[#1490](https://github.com/psycopg/psycopg/issues/1490), [#1491](https://github.com/psycopg/psycopg/issues/1491)).
  • 2.5x faster UUID loading in the C implementation (:ticket:[#1494](https://github.com/psycopg/psycopg/issues/1494)).
  • Reduce the size of the binary packages by about 15 to 40%, depending on the platform.

Current release

... (truncated)

Commits
  • b9e2f35 chore: bump psycopg package version to 3.3.8
  • 53a0eb4 Merge pull request #1478 from dvarrazzo/fix-openssldir-1476
  • 0880f2e ci: fix skipping the OpenSSL build if already installed
  • d48cc84 fix(binary): don't use /etc/ssl as OpenSSL directory
  • 2ce4384 ci: only restore the libpq cache in the packages-bin workflow
  • 78bf2ad docs: add news entry for #1477
  • ae74a87 Revert "chore(deps): bump pypa/cibuildwheel"
  • 4daf632 chore: bump psycopg package version to 3.3.7
  • 7ce93bb chore(deps): bump pypa/cibuildwheel
  • 70dce7a test: run three assertions trapped after the expected exception
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.1.6 to 2.1.8

Release notes

Sourced from sqlalchemy's releases.

2.1.8

Released: November 3, 2026

general

  • [general] [change] All files published to PyPI for a release, including the source distribution as well as all wheels, are now uploaded using PyPI's trusted publishing mechanism from SQLAlchemy's GitHub Actions workflow, and include a PEP 740 attestation, so that every file in a release carries provenance information. Previously, the source distribution and some wheels were uploaded without an attestation, which caused PyPI to display provenance warnings for recent releases.

    This change is also backported to: 2.0.57

    References: #13759

2.1.7

Released: November 3, 2026

orm

  • [orm] [feature] Added _orm.SessionTransaction.connections and _orm.SessionTransaction.bound_connection(), which return the connections a _orm.SessionTransaction has already acquired, without acquiring a new one. This allows, for example, checking whether any connection in the transaction has been invalidated before emitting further SQL. A SAVEPOINT transaction returned by _orm.Session.begin_nested() reports only the connections used within that SAVEPOINT; the root transaction returned by _orm.Session.get_transaction() reports all connections. The same accessors are available on _asyncio.AsyncSessionTransaction, returning _asyncio.AsyncConnection objects. Pull request courtesy Artur Shiriev.

    References: #13685

  • [orm] [bug] An informative InvalidRequestError is now raised when more than one PropComparator.of_type() loader option is applied along the same relationship using targets of differing classes, such as two _orm.aliased() constructs against different subclasses, which previously failed with a bare AssertionError during compilation. These options can't be combined since each target brings its own aliased copy of the base table; to load multiple subclasses along a single relationship, a single _orm.with_polymorphic() object that includes all of the target classes should be used.

... (truncated)

Commits

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
  • c9150f0 Add project walltime benchmarks for Ruff (#30061)
  • 64989ec [ty] Report invalid module globs once per override pattern (#30031)
  • 367a563 [ty] Fix conditional type and tuple annotations (#29987)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip-minor-patch group with 5 updates
26c3267 
Bumps the pip-minor-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.123` | `1.43.126` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.162.0` | `0.162.2` |
| [psycopg](https://github.com/psycopg/psycopg) | `3.3.6` | `3.3.8` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.1.6` | `2.1.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.3` | `0.17.4` |


Updates `boto3` from 1.43.123 to 1.43.126
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.123...1.43.126)

Updates `fastapi` from 0.162.0 to 0.162.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.162.0...0.162.2)

Updates `psycopg` from 3.3.6 to 3.3.8
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.3.6...3.3.8)

Updates `sqlalchemy` from 2.1.6 to 2.1.8
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `ruff` from 0.17.3 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.3...0.17.4)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.126
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: fastapi
  dependency-version: 0.162.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: psycopg
  dependency-version: 3.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: sqlalchemy
  dependency-version: 2.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: ruff
  dependency-version: 0.17.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants