Skip to content

deps(core-py): bump the all group across 1 directory with 4 updates - #2849

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/core/wren-core-py/all-a67688f95b
Open

deps(core-py): bump the all group across 1 directory with 4 updates#2849
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/core/wren-core-py/all-a67688f95b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 4 updates in the /core/wren-core-py directory: maturin, pyarrow, pytest and ruff.

Updates maturin from 1.9.4 to 1.16.0

Release notes

Sourced from maturin's releases.

v1.16.0

What's Changed

New Contributors

Full Changelog: PyO3/maturin@v1.15.0...v1.16.0

... (truncated)

Changelog

Sourced from maturin's changelog.

1.16.0

  • Update version mapping for GraalPy 3.13 (#3297)
  • Properly normalize / validate abiflags and include in environment signature (#3299)
  • Fix MinGW stable ABI library names in generated PyO3 config (#3298)
  • Fix: lossy-decode external command output in interpreter discovery (#3302)
  • Build(deps): update rustls for RUSTSEC-2026-0285 (#3308)
  • Ci: run conda tests one at a time (#3311)
  • Include SOABI_PLATFORM in Python 3.15 stable ABI extension filenames (#3305)
  • Sort compressed tag sets (#3315)
  • Update manylinux/musllinux policies to the latest main (#3322)
  • Docs: recommend declaring the Rust MSRV (#3317)
  • Emit a WASI platform tag for non-bin extension wheels (#3321)
  • Don't include the cargo target directory or cache directories in wheels built from sdists (#3320)
  • Fix: avoid global uv fallback in pixi environments (#3306)
  • Fix the cargo-deny advisories that fail Lint (#3328)
  • Find versioned interpreter names like pypy3.11 on Windows (#3325)
  • Update pyo3-introspection to 0.30 (#3329)
  • Ignore unreachable zip extract advisories in cargo deny (#3334)
  • Normalize Provides-Extra names from project.optional-dependencies (#3333)
  • Join a multi-line description into a single-line Summary (#3332)
  • Update https cert bundle for the eMudhra CA compromise (#3337)
  • Fix: use the toolchain pyodide-build expects (#3338)
  • Feat: upload emscripten wheels to pypi (#3340)
  • Use system ca certificates instead of ureq's WebPki when building with native-tls (#3341)
  • Put all License-File entries at the sdist root (#3331)
  • Pass macosx_deployment_target to zigbuild (#3313)
  • Use the pp80 ABI tag for PyPy 3.12 in the bundled sysconfig (#3343)
  • Fix: normalize Git Bash virtualenv paths on Windows (#3307)
  • Feat: add configurable PGO dependency group (#3278) (#3310)
  • Fix: update rustix to 1.1.5 (#3344)

1.15.0

  • Set UV_PYTHON when running maturin develop with uv (#3236)
  • Set UID and GID headers in pax (#3241)
  • Replace unguarded panics with explicit errors on fallible input (#3242)
  • Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback (#3244)
  • Fix abi3t PyModExport entrypoint check (#3246)
  • Fix maturin build --pgo -i <version> with uv install (#3237)
  • Refactor: apply some mechanical cleanups (#3250)
  • Refactor: BuildOrchestrator pipeline deduplication (#3251)
  • Refactor: improve context and environment hygiene (#3252)
  • Fix(ci): honor ~= and ==X.* in requires-python for generate-ci (#3249)
  • Refactor: type cleanup for options, tags, and wheel metadata (#3253)
  • Refactor: InstallDest, single BridgeModel, and ui output facade (#3254)
  • Don’t specify generate-import-lib for PyO3 0.29 (#3258)
  • Refactor build so that pgo is part of normal pathway (#3257)
  • Fix: verify bindings detection with cargo tree in workspaces (#3264)
  • Fix: harden cargo tree verification of bindings detection (#3266)

... (truncated)

Commits
  • 3bec0a3 Update maximum Python & PyPy version
  • b3e440d Release v1.16.0 (#3350)
  • f2cefaa fix: update rustix to 1.1.5 (#3344)
  • 3eb4add feat: add configurable PGO dependency group (#3278) (#3310)
  • 9375cf3 fix: normalize Git Bash virtualenv paths on Windows (#3307)
  • f8428c1 Use the pp80 ABI tag for PyPy 3.12 in the bundled sysconfig (#3343)
  • b6fb2f0 Pass macosx_deployment_target to zigbuild (#3313)
  • 979aad0 Put all License-File entries at the sdist root (#3331)
  • 323b38d use system ca certificates instead of ureq's WebPki when building with native...
  • d6ecbc0 feat: upload emscripten wheels to pypi (#3340)
  • Additional commits viewable in compare view

Updates pyarrow from 25.0.0 to 26.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 26.0.1

Release Notes URL: https://arrow.apache.org/release/26.0.1.html

Apache Arrow 26.0.1 RC1

Release Notes: Release Candidate: 26.0.1 RC1

Apache Arrow 26.0.0

Release Notes URL: https://arrow.apache.org/release/26.0.0.html

Apache Arrow 26.0.0 RC0

Release Notes: Release Candidate: 26.0.0 RC0

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Commits
  • 9e5d697 MINOR: [Release] Update versions for 26.0.1
  • 905f17c MINOR: [Release] Update .deb/.rpm changelogs for 26.0.1
  • 2c3234c MINOR: [Release] Update CHANGELOG.md for 26.0.1
  • 8d3388b GH-55316: [CI][FlightRPC][ODBC] Apply ports.patch in Windows build (#55317)
  • 3ec2cf1 GH-54936: [C++] Ensure reading an invalid map array from IPC doesn't crash (#...
  • f942ba3 GH-51684: [C++][Parquet][FOLLOWUP] Speed up content-defined chunking with a l...
  • 700a983 GH-52161: [C++][Parquet] Add support for string/binary view to content define...
  • ba754c4 GH-51669: [C++][Parquet] Preserve cipher in plaintext footer metadata (#54884)
  • 16f1823 GH-50544: [C++][Gandiva] Fix out-of-bounds read in round with most negative p...
  • ae357c6 GH-53518: [Parquet] Reject unsupported compression codecs (#53522)
  • Additional commits viewable in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

  • #14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

  • #8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

    Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

  • #993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

    • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
    • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

    pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

  • #14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

  • #14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

  • #14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

    They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

  • #14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

  • #7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

  • #14743: Full diff: now contains a legend explaining the + & - symbols in diff output.
  • #2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.
  • #6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

  • #10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits
  • ae1d0ff Prepare release version 9.2.0
  • 143ce31 pre-commit: exclude codespell on generated release announcements
  • 532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
  • a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
  • 679d09c [pre-commit.ci] pre-commit autoupdate (#15266)
  • 41d12cd docs: clarify typing for yield fixtures
  • b9022ba Merge pull request #15182 from 1871698/docs/improve-getting-started-description
  • 16f87a7 docs: improve getting-started.rst test execution description
  • 082ed70 Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6
  • ae37a01 Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4
  • Additional commits viewable in compare view

Updates ruff from 0.13.1 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
  • c9150f0 Add project walltime benchmarks for Ruff (#30061)
  • 64989ec [ty] Report invalid module globs once per override pattern (#30031)
  • 367a563 [ty] Fix conditional type and tuple annotations (#29987)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added core dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 6, 2026
@coderabbitai

coderabbitai Bot commented Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: cad6f2b9-d651-448f-9bc2-f2cea49bf04e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@dependabot
deps(core-py): bump the all group across 1 directory with 4 updates
47995aa 
Bumps the all group with 4 updates in the /core/wren-core-py directory: [maturin](https://github.com/pyo3/maturin), [pyarrow](https://github.com/apache/arrow), [pytest](https://github.com/pytest-dev/pytest) and [ruff](https://github.com/astral-sh/ruff).


Updates `maturin` from 1.9.4 to 1.16.0
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](PyO3/maturin@v1.9.4...v1.16.0)

Updates `pyarrow` from 25.0.0 to 26.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-26.0.1)

Updates `pytest` from 9.1.1 to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.1...9.2.0)

Updates `ruff` from 0.13.1 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.1...0.17.4)

---
updated-dependencies:
- dependency-name: maturin
  dependency-version: 1.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pyarrow
  dependency-version: 26.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-a67688f95b branch from 9f6c350 to 47995aa Compare November 13, 2026 11:24

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

core dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants