Skip to content

Bump the uv-minor-patch group across 1 directory with 10 updates - #3636

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/uv-minor-patch-6c172c205b
Open

Bump the uv-minor-patch group across 1 directory with 10 updates#3636
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/uv-minor-patch-6c172c205b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the uv-minor-patch group with 10 updates in the / directory:

Package From To
pip 26.2.2 26.3
pycryptodome 4.3.0 4.4.0
regex 2026.9.29 2026.11.9
xxhash 4.0.2 4.1.0
pydantic 2.14.2 2.14.3
requests 2.33.0 2.34.2
pre-commit 4.6.2 4.7.0
fastapi 0.162.0 0.162.2
ruff 0.17.3 0.17.4
mkdocs-material 9.8.0 9.8.1

Updates pip from 26.2.2 to 26.3

Changelog

Sourced from pip's changelog.

26.3 (2026-11-02)

Improved Documentation

  • Clarify in the security policy that pip has never considered installing untrusted wheels safe. This is because Python's import system is dynamic, so pip cannot guarantee that installing a wheel will not execute third-party code. ([#14412](https://github.com/pypa/pip/issues/14412) <https://github.com/pypa/pip/issues/14412>_)

Deprecations and Removals

  • Block unexpected imports during installation, warn about unsafe imports afterward, and improve recovery from interrupted installations. ([#13842](https://github.com/pypa/pip/issues/13842) <https://github.com/pypa/pip/issues/13842>_)

Features

  • Show build backend warnings for local source directories and log them at debug level for other sources. ([#14372](https://github.com/pypa/pip/issues/14372) <https://github.com/pypa/pip/issues/14372>_)
  • Add support for selecting extras in pylock.toml files with -r pylock.toml[extra1,extra2]. ([#14205](https://github.com/pypa/pip/issues/14205) <https://github.com/pypa/pip/issues/14205>_)
  • Allow --group to select non-default groups from local pylock files, e.g. --group pylock.toml:docs. ([#14390](https://github.com/pypa/pip/issues/14390) <https://github.com/pypa/pip/issues/14390>_)
  • Support --no-binary with -r pylock.toml. Before, pip would get the sdist from the index instead of the locked URL, or fail if no wheel were available in the lock file. ([#14187](https://github.com/pypa/pip/issues/14187) <https://github.com/pypa/pip/issues/14187>_)
  • Speed up installing a wheel with console scripts by not resolving every PATH entry. ([#14235](https://github.com/pypa/pip/issues/14235) <https://github.com/pypa/pip/issues/14235>_)
  • Clarify the warning for ~-prefixed leftover distribution directories. ([#11849](https://github.com/pypa/pip/issues/11849) <https://github.com/pypa/pip/issues/11849>_)

Bug Fixes

  • Report build-backend import failures as pip errors instead of displaying an uncaught traceback. ([#12248](https://github.com/pypa/pip/issues/12248) <https://github.com/pypa/pip/issues/12248>_)
  • No longer log the "pip is looking at multiple versions of a package" message until pip has looked at at least two versions of that package. ([#12928](https://github.com/pypa/pip/issues/12928) <https://github.com/pypa/pip/issues/12928>_)
  • Fix pip's self version check reporting an outdated version from the environment instead of the running pip when run as a zipapp. ([#13084](https://github.com/pypa/pip/issues/13084) <https://github.com/pypa/pip/issues/13084>_)
  • Fix a fatal error when using the PIP_CONFIG_FILE environment variable with pip config set. ([#13279](https://github.com/pypa/pip/issues/13279) <https://github.com/pypa/pip/issues/13279>_)
  • Avoid misleading error messages that include extra markers such as ; extra == "..." when installing packages. ([#13618](https://github.com/pypa/pip/issues/13618) <https://github.com/pypa/pip/issues/13618>_)
  • When installing to a custom --prefix, use the posix_prefix scheme when running from a Debian patched Python distribution to avoid a superfluous /local/ subdirectory. ([#13634](https://github.com/pypa/pip/issues/13634) <https://github.com/pypa/pip/issues/13634>_)
  • Refuse to follow an HTTP redirect to a file: URL. ([#14171](https://github.com/pypa/pip/issues/14171) <https://github.com/pypa/pip/issues/14171>_)
  • Prevent wheel cache origin mismatch warnings from exposing URL credentials. ([#14232](https://github.com/pypa/pip/issues/14232) <https://github.com/pypa/pip/issues/14232>_)
  • Report the incomplete-download error on Windows, not a PermissionError. ([#14237](https://github.com/pypa/pip/issues/14237) <https://github.com/pypa/pip/issues/14237>_)
  • Fix the global configuration location on macOS in virtual environments created from Homebrew Python. ([#14303](https://github.com/pypa/pip/issues/14303) <https://github.com/pypa/pip/issues/14303>_)
  • Reject extra arguments to pip config edit instead of silently ignoring them. ([#14347](https://github.com/pypa/pip/issues/14347) <https://github.com/pypa/pip/issues/14347>_)
  • Honor supplied hashes when using --no-require-hashes. ([#14355](https://github.com/pypa/pip/issues/14355) <https://github.com/pypa/pip/issues/14355>_)

... (truncated)

Commits
  • 191854f Bump for release
  • 063058b Update AUTHORS.txt
  • d1a81c8 Merge pull request #14233 from carrerasdarren-cell/fix/cache-origin-redact-auth
  • 942a415 Merge pull request #14423 from notatallshaw/fix/pkg-resources-deadline-20261102
  • f424f1a Merge pull request #14424 from notatallshaw/vendor/msgpack-1.2.4-20261102
  • 720a89a Merge branch 'main' into fix/cache-origin-redact-auth
  • 8e3414c Merge pull request #14247 from notatallshaw/enforce-import-block
  • 5156e03 Upgrade msgpack to 1.2.4
  • 95e2e6b Merge branch 'main' into enforce-import-block
  • 3859fd1 Defer pkg_resources metadata errors until pip 27.0
  • Additional commits viewable in compare view

Updates pycryptodome from 4.3.0 to 4.4.0

Release notes

Sourced from pycryptodome's releases.

v4.4.0 - Lyon

New features

  • Added the elliptic curve secp256k1 to Crypto.PublicKey.ECC: key generation, import and export, ECDSA with Crypto.Signature.DSS, and ECDH with Crypto.Protocol.DH.
  • Added the mode 'sec1' to Crypto.Signature.DSS.new, for randomized ECDSA on all Weierstrass curves. Mode 'fips-186-3' does not accept secp256k1, which is not a curve of that standard.
  • GH#759: Added the parameter low_s to Crypto.Signature.DSS.new, for ECDSA signatures in the low-S form (for all curves): signing normalizes s, and verifying rejects a high s.
  • ECDSA signatures in DER encoding are about 5-8x faster.

Resolved issues

  • ECC.import_key raised TypeError instead of ValueError for an OpenSSH public key with an unsupported curve or key type, or with a malformed body.
  • ECC.import_key accepted an OpenSSH key (public or private) whose curve did not match its key type.
  • GH#960: In HPKE, a message rejected by unseal() consumed a sequence number, so all later messages of that context failed too. The sequence number now only advances when unseal() succeeds (RFC 9180, Section 5.2). Thanks to Zulfareen Shaikh.
  • In HPKE, a seal() that raised an exception also consumed a sequence number, so the receiver could not unseal the messages that followed.
Changelog

Sourced from pycryptodome's changelog.

4.4.0 (7 November 2026) +++++++++++++++++++++++++++

New features

  • Added the elliptic curve secp256k1 to Crypto.PublicKey.ECC: key generation, import and export, ECDSA with Crypto.Signature.DSS, and ECDH with Crypto.Protocol.DH.
  • Added the mode 'sec1' to Crypto.Signature.DSS.new, for randomized ECDSA on all Weierstrass curves. Mode 'fips-186-3' does not accept secp256k1, which is not a curve of that standard.
  • GH#759: Added the parameter low_s to Crypto.Signature.DSS.new, for ECDSA signatures in the low-S form (for all curves): signing normalizes s, and verifying rejects a high s.
  • ECDSA signatures in DER encoding are about 5-8x faster.

Resolved issues

  • ECC.import_key raised TypeError instead of ValueError for an OpenSSH public key with an unsupported curve or key type, or with a malformed body.
  • ECC.import_key accepted an OpenSSH key (public or private) whose curve did not match its key type.
  • GH#960: In HPKE, a message rejected by unseal() consumed a sequence number, so all later messages of that context failed too. The sequence number now only advances when unseal() succeeds (RFC 9180, Section 5.2). Thanks to Zulfareen Shaikh.
  • In HPKE, a seal() that raised an exception also consumed a sequence number, so the receiver could not unseal the messages that followed.
Commits

Updates regex from 2026.9.29 to 2026.11.9

Commits
  • d9289db Git issue 633: TypeError from optimise() (unexpected keyword 'in_set') for (?...
  • 8fa6617 Git issue 632: AttributeError: 'AnyAll' object has no attribute 'rebuild' for...
  • 394996c Git issue 630: RuntimeError: invalid RE code for a fuzzy limit of 2**32 or more
  • 2f43f0c Git issue 631: RuntimeError: invalid RE code when searching with (?r:(())a\G)...
  • b71ca71 Git issue 629: SEGV (NULL pointer dereference) in Match.fuzzy_changes with PO...
  • bb0db39 Updated main.yml to build manylinux2014 wheels on Python 3.11.
  • ce4f246 Git issue 626: \X does not apply Unicode 18.0.0's changed GB9c (10 GraphemeBr...
  • edf9c06 Git issue 625: KeyError instead of ValueError when both VERSION0 and VERSION1...
  • See full diff in compare view

Updates xxhash from 4.0.2 to 4.1.0

Release notes

Sourced from xxhash's releases.

v4.1.0

  • Dispatch XXH3 on x86 targets at runtime: link xxh_x86dispatch.c into vendored x86 and x86_64 builds so one baseline wheel selects SSE2, AVX2, or AVX512 for xxh3_64 and xxh3_128 inputs longer than 240 bytes, including streaming update(). On AVX2 those inputs are about 1.5x faster.
  • Upgrade bundled xxHash from v0.8.3 to v0.8.4.
Changelog

Sourced from xxhash's changelog.

v4.1.0 2026-11-09


- Dispatch XXH3 on x86 targets at runtime: link ``xxh_x86dispatch.c``
  into vendored x86 and x86_64 builds so one baseline wheel selects
  SSE2, AVX2, or AVX512 for ``xxh3_64`` and ``xxh3_128`` inputs
  longer than 240 bytes, including streaming ``update()``. On AVX2
  those inputs are about 1.5x faster.
- Upgrade bundled xxHash from v0.8.3 to v0.8.4.
Commits
  • fee71df Release v4.1.0
  • a5f1b70 chore(ci): update github actions
  • b898be6 Add 3.4.2, 3.5.1 and 3.6.1 changelog entries
  • d9d08e5 bench: add short-input walltime control benchmarks for XXH3
  • 7ce01db bench: add walltime benchmarks for long XXH3 inputs
  • 12e341d ci: move macOS arm64 builds to macos-15
  • 6b912bc Dispatch XXH3 on x86 targets at runtime
  • 54c8635 chore(ci): update actions
  • 1bec141 Upgrade xxHash from v0.8.3 to v0.8.4
  • 6f6fe04 ci: build the sdist with Python 3.12
  • See full diff in compare view

Updates pydantic from 2.14.2 to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

  • Build wheels for GraalPy 3.13 by @​msimacek in #14136.

    The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

Fixes

  • Fix various issues about GC tracking in pydantic-core by @​Viicos in #13819
  • Include null in serialization JSON Schema for unless-none field serializers by @​Kropiunig in #13848
  • Fix RecursionError when copying or unpickling models with defer_build by @​Viicos in #14115
  • Remove dead default_factory check in unsupported Field() attribute by @​owtaylor in #14129
  • Disallow non string extra keys during validation by @​Viicos in #14135
  • Fix deeply nested data being reported as a cyclic reference by @​Viicos in #14164

New Contributors

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • ea492e0 Bump pydantic-core to v2.50.4
  • 4f4a33f Prepare release v2.14.3
  • dca067b Benchmark TypedDict schema generation across builds
  • a2d1f6c Skip annotation handler setup when annotations are empty
  • 3ae0a40 Construct builtin scalar union schemas directly
  • 358d36f Skip general schema dispatch for builtin scalars
  • 3cc701a Improve schema generation for fixed type handlers
  • 762db7e Remove redundant None check in union schema generation
  • c214986 Bump pytest-codspeed to v5.0.4
  • 038ee97 Bump typing-inspection to v0.4.5
  • Additional commits viewable in compare view

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates fastapi from 0.162.0 to 0.162.2

Release notes

Sourced from fastapi's releases.

0.162.2

FastAPI includes an official skill that helps coding agents use new features and recommended patterns for your installed version. Install it with uvx library-skills in your project. See Develop with AI.

Docs

Internal

0.162.1

Docs

Translations

Internal

Commits

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 12, 2026
@github-actions

github-actions Bot commented Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

📊 Performance Benchmark Report

Comparing dev (85c43a365) (baseline) vs dependabot/uv/dev/uv-minor-patch-6c172c205b (d1fd08b17) (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 2.99ms 2.89ms -3.4% ⚪ ✅
Bloom Filter Large Scale Dns Brute Force 12.09ms 11.72ms -3.1% ⚪ ✅
Large Closest Match Lookup 254.07ms 261.56ms +2.9% ⚪ ✅
Realistic Closest Match Workload 138.43ms 137.75ms -0.5% ⚪ ✅
Event Memory Medium Scan 1402 B/event 1402 B/event +0.0% ⚪ ✅
Event Memory Large Scan 1527 B/event 1527 B/event +0.0% ⚪ ✅
Event Validation Full Scan Startup Small Batch 22.10ms 22.28ms +0.8% ⚪ ✅
Event Validation Full Scan Startup Large Batch 123.06ms 117.04ms -4.9% ⚪ ✅
Make Event Autodetection Small 16.36ms 16.26ms -0.6% ⚪ ✅
Make Event Autodetection Large 163.13ms 162.94ms -0.1% ⚪ ✅
Make Event Explicit Types 6.74ms 6.66ms -1.2% ⚪ ✅
Excavate Single Thread Small 2.634s 2.732s +3.7% ⚪ ✅
Excavate Single Thread Large 7.342s 7.489s +2.0% ⚪ ✅
Excavate Parallel Tasks Small 2.799s 2.877s +2.8% ⚪ ✅
Excavate Parallel Tasks Large 4.618s 4.641s +0.5% ⚪ ✅
Intercept Throughput Small 375.04ms 368.95ms -1.6% ⚪ ✅
Intercept Throughput Medium 366.22ms 364.95ms -0.3% ⚪ ✅
Dns Throughput Quiet 1.511s 1.494s -1.1% ⚪ ✅
Dns Throughput Loaded 787.61ms 825.61ms +4.8% ⚪ ✅
Dns Throughput Inherited 1.208s 1.203s -0.4% ⚪ ✅
Is Ip Performance 1.76ms 1.73ms -1.3% ⚪ ✅
Make Ip Type Performance 157.15µs 162.04µs +3.1% ⚪ ✅
Mixed Ip Operations 1.81ms 1.80ms -0.9% ⚪ ✅
Memory Use Web Crawl 1.1 MB 1.1 MB -0.9% ⚪ ✅
Memory Use Subdomain Enum 28.4 MB 28.4 MB +0.0% ⚪ ✅
Memory Use Deep Chain 5.1 MB 5.1 MB +0.0% ⚪ ✅
Memory Use Parallel Chains 13.9 MB 13.9 MB -0.4% ⚪ ✅
Scan Throughput 100 1.734s 1.691s -2.5% ⚪ ✅
Scan Throughput 1000 14.116s 14.010s -0.8% ⚪ ✅
Typical Queue Shuffle 4.15µs 4.18µs +0.9% ⚪ ✅
Priority Queue Shuffle 20.84µs 21.10µs +1.3% ⚪ ✅

🎯 Performance Summary

✅ No significant performance changes detected (all changes <10%)

🐍 Python Version 3.11.18

@singlerider singlerider self-assigned this Nov 12, 2026
@dependabot
Bump the uv-minor-patch group across 1 directory with 10 updates
408a761 
Bumps the uv-minor-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pip](https://github.com/pypa/pip) | `26.2.2` | `26.3` |
| [pycryptodome](https://github.com/Legrandin/pycryptodome) | `4.3.0` | `4.4.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.9.29` | `2026.11.9` |
| [xxhash](https://github.com/ifduyue/python-xxhash) | `4.0.2` | `4.1.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.14.2` | `2.14.3` |
| [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.162.0` | `0.162.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.3` | `0.17.4` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.8.0` | `9.8.1` |



Updates `pip` from 26.2.2 to 26.3
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.2.2...26.3)

Updates `pycryptodome` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v4.3.0...v4.4.0)

Updates `regex` from 2026.9.29 to 2026.11.9
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.9.29...2026.11.9)

Updates `xxhash` from 4.0.2 to 4.1.0
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v4.0.2...v4.1.0)

Updates `pydantic` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.2...v2.14.3)

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `fastapi` from 0.162.0 to 0.162.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.162.0...0.162.2)

Updates `ruff` from 0.17.3 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.3...0.17.4)

Updates `mkdocs-material` from 9.8.0 to 9.8.1
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.8.0...9.8.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.162.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: mkdocs-material
  dependency-version: 9.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: pip
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: pycryptodome
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: pydantic
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: regex
  dependency-version: 2026.11.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: ruff
  dependency-version: 0.17.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-patch
- dependency-name: xxhash
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the uv-minor-patch group with 10 updates Bump the uv-minor-patch group across 1 directory with 10 updates Nov 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/uv-minor-patch-6c172c205b branch from a218447 to 408a761 Compare November 12, 2026 17:45

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@singlerider singlerider

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@singlerider