Skip to content

Bump the uv-major group with 3 updates - #3637

Merged
liquidsec merged 1 commit into
devfrom
dependabot/uv/dev/uv-major-e9f4a9d71e
Nov 12, 2026
Merged

Bump the uv-major group with 3 updates#3637
liquidsec merged 1 commit into
devfrom
dependabot/uv/dev/uv-major-e9f4a9d71e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-major group with 3 updates: xmltodict, websockets and cachetools.

Updates xmltodict from 0.14.2 to 1.0.4

Release notes

Sourced from xmltodict's releases.

v1.0.4

1.0.4 (2026-02-22)

Bug Fixes

  • unparse: add bytes_errors policy and handle bytes scalars consistently (ed70434)

v1.0.3

1.0.3 (2026-02-15)

Bug Fixes

  • unparse: serialize None text/attrs as empty values (fixes #401) (aa16511)

Documentation

  • readme: fix Fedora and Arch package links (fd6a73b)

v1.0.2

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

v1.0.1

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

v1.0.0

... (truncated)

Changelog

Sourced from xmltodict's changelog.

1.0.4 (2026-02-22)

Bug Fixes

  • unparse: add bytes_errors policy and handle bytes scalars consistently (ed70434)

1.0.3 (2026-02-15)

Bug Fixes

  • unparse: serialize None text/attrs as empty values (fixes #401) (aa16511)

Documentation

  • readme: fix Fedora and Arch package links (fd6a73b)

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

1.0.0 (2025-09-12)

⚠ BREAKING CHANGES

... (truncated)

Commits
  • 8d7f1fd chore(master): release 1.0.4
  • ed70434 fix(unparse): add bytes_errors policy and handle bytes scalars consistently
  • 89c4bf7 chore(master): release 1.0.3
  • fd6a73b docs(readme): fix Fedora and Arch package links
  • aa16511 fix(unparse): serialize None text/attrs as empty values (fixes #401)
  • f7d76c9 style: lines required between function definitions
  • 1bfb267 build: remove unnecessary wheel from dependencies
  • d9f6d40 build: no need for README.md in MANIFEST.in
  • 34378ef build: pep 639 compliance
  • d079849 chore(master): release 1.0.2
  • Additional commits viewable in compare view

Updates websockets from 16.1.1 to 17.4

Release notes

Sourced from websockets's releases.

17.4

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.3

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.2

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • 625a59e Release version 17.4.
  • 368a4c1 Add instructions for AI coding agents.
  • d061796 Prevent flaky coverage.
  • 98ed271 Chain causes to ConnectionClosed consistently.
  • d3c1ce1 Prevent memory exhaustion through unlimited empty fragments.
  • 170c815 Ignore all expected exceptions in HTTP fuzzers.
  • 0a9044f Remove PYTHONPATH declaration.
  • 2b8bc2f Bump pypa/cibuildwheel from 4.3.1 to 4.3.3
  • 60bc200 Switch back to the sysmon tracer for coverage.
  • 268a5bb Mark explicitly for loops that don't exit normally.
  • Additional commits viewable in compare view

Updates cachetools from 7.2.7 to 8.0.0

Changelog

Sourced from cachetools's changelog.

v8.0.0 (2026-11-06)

  • Drop Python 3.10 support (breaking change).

  • Drop support for deprecated @cachedmethod features (breaking change).

  • Drop support for @cached(cache=None) (breaking change).

  • Require custom cache classes to support __len__ when used with info=True (breaking change).

  • Refactor _CacheInfo and make it public as CacheInfo (potentially breaking change).

  • Return callable objects instead of functions from @cached and the cachetools.func decorators (potentially breaking change).

  • Do not set cache_info to None on @cached wrappers if info is not set (potentially breaking change).

  • Raise TypeError for @cachedmethod descriptors assigned after class creation, i.e. without __set_name__ being called (potentially breaking change).

  • Various performance improvements.

  • Various documentation improvements.

  • Various test improvements.

v7.3.0 (2026-11-05)

  • Use OrderedDict for defined and faster LFUCache eviction.

  • Various unit test improvements.

  • Minor type stub improvements.

  • Minor documentation improvements.

v7.2.8 (2026-10-31)

  • Fix type stubs for TTLCache and TLRUCache with default timer.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the uv-major group with 3 updates
6c2d535 
Bumps the uv-major group with 3 updates: [xmltodict](https://github.com/martinblech/xmltodict), [websockets](https://github.com/python-websockets/websockets) and [cachetools](https://github.com/tkem/cachetools).


Updates `xmltodict` from 0.14.2 to 1.0.4
- [Release notes](https://github.com/martinblech/xmltodict/releases)
- [Changelog](https://github.com/martinblech/xmltodict/blob/master/CHANGELOG.md)
- [Commits](martinblech/xmltodict@v0.14.2...v1.0.4)

Updates `websockets` from 16.1.1 to 17.4
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@16.1.1...17.4)

Updates `cachetools` from 7.2.7 to 8.0.0
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.2.7...v8.0.0)

---
updated-dependencies:
- dependency-name: xmltodict
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-major
- dependency-name: websockets
  dependency-version: '17.4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-major
- dependency-name: cachetools
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 12, 2026
@github-actions

github-actions Bot commented Nov 12, 2026

Copy link
Copy Markdown
Contributor

📊 Performance Benchmark Report

Comparing dev (3b6dc9c82) (baseline) vs dependabot/uv/dev/uv-major-e9f4a9d71e (c1e2ee2fa) (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 3.30ms 3.10ms -5.9% ⚪ ✅
Bloom Filter Large Scale Dns Brute Force 13.50ms 13.32ms -1.3% ⚪ ✅
Large Closest Match Lookup 308.38ms 319.65ms +3.7% ⚪ ✅
Realistic Closest Match Workload 171.46ms 170.45ms -0.6% ⚪ ✅
Event Memory Medium Scan 1402 B/event 1402 B/event +0.0% ⚪ ✅
Event Memory Large Scan 1527 B/event 1527 B/event +0.0% ⚪ ✅
Event Validation Full Scan Startup Small Batch 27.30ms 26.96ms -1.2% ⚪ ✅
Event Validation Full Scan Startup Large Batch 140.45ms 140.91ms +0.3% ⚪ ✅
Make Event Autodetection Small 21.62ms 22.02ms +1.8% ⚪ ✅
Make Event Autodetection Large 219.13ms 219.94ms +0.4% ⚪ ✅
Make Event Explicit Types 9.20ms 9.18ms -0.2% ⚪ ✅
Excavate Single Thread Small 3.664s 3.423s -6.6% ⚪ ✅
Excavate Single Thread Large 11.094s 10.632s -4.2% ⚪ ✅
Excavate Parallel Tasks Small 3.937s 3.654s -7.2% ⚪ ✅
Excavate Parallel Tasks Large 6.654s 6.388s -4.0% ⚪ ✅
Intercept Throughput Small 384.14ms 380.40ms -1.0% ⚪ ✅
Intercept Throughput Medium 378.38ms 381.04ms +0.7% ⚪ ✅
Dns Throughput Quiet 1.875s 1.895s +1.1% ⚪ ✅
Dns Throughput Loaded 1.034s 1.124s +8.7% ⚪ ✅
Dns Throughput Inherited 1.580s 1.612s +2.1% ⚪ ✅
Is Ip Performance 2.01ms 1.97ms -1.7% ⚪ ✅
Make Ip Type Performance 162.76µs 164.71µs +1.2% ⚪ ✅
Mixed Ip Operations 2.09ms 2.03ms -2.8% ⚪ ✅
Memory Use Web Crawl 1.1 MB 1.1 MB +0.0% ⚪ ✅
Memory Use Subdomain Enum 28.4 MB 28.4 MB +0.0% ⚪ ✅
Memory Use Deep Chain 5.1 MB 5.1 MB +0.0% ⚪ ✅
Memory Use Parallel Chains 17.6 MB 12.8 MB -27.5% 🟢🟢🟢 🚀
Scan Throughput 100 2.335s 2.424s +3.8% ⚪ ✅
Scan Throughput 1000 20.458s 20.674s +1.1% ⚪ ✅
Typical Queue Shuffle 4.96µs 5.02µs +1.3% ⚪ ✅
Priority Queue Shuffle 23.65µs 23.89µs +1.0% ⚪ ✅

🎯 Performance Summary

+ 1 improvement 🚀
  30 unchanged ✅

🔍 Significant Changes (>10%)

  • Memory Use Parallel Chains: 27.5% 🚀 less memory

🐍 Python Version 3.11.18

@singlerider singlerider self-assigned this Nov 12, 2026
@liquidsec
liquidsec merged commit e5584f7 into dev Nov 12, 2026
21 checks passed
@liquidsec
liquidsec deleted the dependabot/uv/dev/uv-major-e9f4a9d71e branch November 12, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@liquidsec liquidsec liquidsec approved these changes

Assignees

@singlerider singlerider

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@liquidsec @singlerider