Skip to content

build(deps-dev): bump the uv-minor-patch group across 1 directory with 2 updates - #169

Merged
liquidsec merged 2 commits into
devfrom
dependabot/uv/dev/uv-minor-patch-ed6531f1dc
Nov 10, 2026
Merged

build(deps-dev): bump the uv-minor-patch group across 1 directory with 2 updates#169
liquidsec merged 2 commits into
devfrom
dependabot/uv/dev/uv-minor-patch-ed6531f1dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the uv-minor-patch group with 2 updates in the / directory: maturin and ruff.

Updates maturin from 1.10.2 to 1.16.0

Release notes

Sourced from maturin's releases.

v1.16.0

What's Changed

New Contributors

Full Changelog: PyO3/maturin@v1.15.0...v1.16.0

... (truncated)

Changelog

Sourced from maturin's changelog.

1.16.0

  • Update version mapping for GraalPy 3.13 (#3297)
  • Properly normalize / validate abiflags and include in environment signature (#3299)
  • Fix MinGW stable ABI library names in generated PyO3 config (#3298)
  • Fix: lossy-decode external command output in interpreter discovery (#3302)
  • Build(deps): update rustls for RUSTSEC-2026-0285 (#3308)
  • Ci: run conda tests one at a time (#3311)
  • Include SOABI_PLATFORM in Python 3.15 stable ABI extension filenames (#3305)
  • Sort compressed tag sets (#3315)
  • Update manylinux/musllinux policies to the latest main (#3322)
  • Docs: recommend declaring the Rust MSRV (#3317)
  • Emit a WASI platform tag for non-bin extension wheels (#3321)
  • Don't include the cargo target directory or cache directories in wheels built from sdists (#3320)
  • Fix: avoid global uv fallback in pixi environments (#3306)
  • Fix the cargo-deny advisories that fail Lint (#3328)
  • Find versioned interpreter names like pypy3.11 on Windows (#3325)
  • Update pyo3-introspection to 0.30 (#3329)
  • Ignore unreachable zip extract advisories in cargo deny (#3334)
  • Normalize Provides-Extra names from project.optional-dependencies (#3333)
  • Join a multi-line description into a single-line Summary (#3332)
  • Update https cert bundle for the eMudhra CA compromise (#3337)
  • Fix: use the toolchain pyodide-build expects (#3338)
  • Feat: upload emscripten wheels to pypi (#3340)
  • Use system ca certificates instead of ureq's WebPki when building with native-tls (#3341)
  • Put all License-File entries at the sdist root (#3331)
  • Pass macosx_deployment_target to zigbuild (#3313)
  • Use the pp80 ABI tag for PyPy 3.12 in the bundled sysconfig (#3343)
  • Fix: normalize Git Bash virtualenv paths on Windows (#3307)
  • Feat: add configurable PGO dependency group (#3278) (#3310)
  • Fix: update rustix to 1.1.5 (#3344)

1.15.0

  • Set UV_PYTHON when running maturin develop with uv (#3236)
  • Set UID and GID headers in pax (#3241)
  • Replace unguarded panics with explicit errors on fallible input (#3242)
  • Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback (#3244)
  • Fix abi3t PyModExport entrypoint check (#3246)
  • Fix maturin build --pgo -i <version> with uv install (#3237)
  • Refactor: apply some mechanical cleanups (#3250)
  • Refactor: BuildOrchestrator pipeline deduplication (#3251)
  • Refactor: improve context and environment hygiene (#3252)
  • Fix(ci): honor ~= and ==X.* in requires-python for generate-ci (#3249)
  • Refactor: type cleanup for options, tags, and wheel metadata (#3253)
  • Refactor: InstallDest, single BridgeModel, and ui output facade (#3254)
  • Don’t specify generate-import-lib for PyO3 0.29 (#3258)
  • Refactor build so that pgo is part of normal pathway (#3257)
  • Fix: verify bindings detection with cargo tree in workspaces (#3264)
  • Fix: harden cargo tree verification of bindings detection (#3266)

... (truncated)

Commits
  • 3bec0a3 Update maximum Python & PyPy version
  • b3e440d Release v1.16.0 (#3350)
  • f2cefaa fix: update rustix to 1.1.5 (#3344)
  • 3eb4add feat: add configurable PGO dependency group (#3278) (#3310)
  • 9375cf3 fix: normalize Git Bash virtualenv paths on Windows (#3307)
  • f8428c1 Use the pp80 ABI tag for PyPy 3.12 in the bundled sysconfig (#3343)
  • b6fb2f0 Pass macosx_deployment_target to zigbuild (#3313)
  • 979aad0 Put all License-File entries at the sdist root (#3331)
  • 323b38d use system ca certificates instead of ureq's WebPki when building with native...
  • d6ecbc0 feat: upload emscripten wheels to pypi (#3340)
  • Additional commits viewable in compare view

Updates ruff from 0.14.8 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

0.17.2

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 5, 2026
@github-actions

github-actions Bot commented Nov 5, 2026 •
edited
Loading

Copy link
Copy Markdown

DNS Resolver Benchmark

this PR @ 23872b6 against dev @ ab2568b, base → head, median of 3 interleaved rounds. Bold is significant across all 56 comparisons (Benjamini-Hochberg at 1%); the rest is noise.

regime qps unanswered p99 attempts/query
ceiling/1-resolver 24,150 → 24,191 (+0.2%) 0.00% → 0.00% 0.826s → 0.824s (-0.2%) 1.00 → 1.00
pool/32-resolvers 23,754 → 24,060 (+1.3%) 0.00% → 0.00% 0.840s → 0.829s (-1.3%) 1.00 → 1.00
pool/32-persistent 27,593 → 27,274 (-1.2%) 0.00% → 0.00% 0.722s → 0.731s (+1.2%) 1.00 → 1.00
impaired/10%-loss 200 → 200 (+0.0%) 0.00% → 0.00% 8.133s → 8.134s (+0.0%) 1.11 → 1.11
impaired/20%-REFUSED 3,421 → 3,451 (+0.9%) 0.00% → 0.00% 0.584s → 0.579s (-0.9%) 1.24 → 1.24
impaired/50ms-latency 621 → 622 (+0.0%) 0.00% → 0.00% 3.218s → 3.218s (-0.0%) 1.00 → 1.00
impaired/20%-then-2.5%-dead-names 229 → 224 (-2.1%) 5.43% → 5.43% 11.613s → 11.649s (+0.3%) 1.05 → 1.05
All metrics
regime p50 p100 sockets conntrack
ceiling/1-resolver 0.446s → 0.447s (+0.3%) 0.828s → 0.826s (-0.2%) 42 → 42 (+0.0%) 14,773 → 12,578 (-15%)
pool/32-resolvers 0.451s → 0.445s (-1.2%) 0.842s → 0.831s (-1.3%) 74 → 74 (+0.0%) 19,370 → 17,946 (-7.4%)
pool/32-persistent 0.390s → 0.401s (+2.8%) 0.725s → 0.733s (+1.2%) 42 → 42 (+0.0%) 30 → 31 (+3.3%)
impaired/10%-loss 4.276s → 4.276s (+0.0%) 9.987s → 9.985s (-0.0%) 46 → 46 (+0.0%) 2,106 → 2,129 (+1.1%)
impaired/20%-REFUSED 0.414s → 0.415s (+0.1%) 0.584s → 0.579s (-0.9%) 46 → 46 (+0.0%) 2,254 → 2,208 (-2.0%)
impaired/50ms-latency 1.839s → 1.836s (-0.1%) 3.218s → 3.218s (-0.0%) 46 → 46 (+0.0%) 165 → 1,729 (+948%)
impaired/20%-then-2.5%-dead-names 3.741s → 4.115s (+10.0%) 13.084s → 13.371s (+2.2%) 39 → 39 (+0.0%) 249 → 2,997 (+1104%)

@dependabot
build(deps-dev): bump the uv-minor-patch group across 1 directory wit…
be6f445 
…h 2 updates

Bumps the uv-minor-patch group with 2 updates in the / directory: [maturin](https://github.com/pyo3/maturin) and [ruff](https://github.com/astral-sh/ruff).


Updates `maturin` from 1.10.2 to 1.16.0
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](PyO3/maturin@v1.10.2...v1.16.0)

Updates `ruff` from 0.14.8 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.8...0.17.3)

---
updated-dependencies:
- dependency-name: maturin
  dependency-version: 1.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump the uv-minor-patch group with 2 updates build(deps-dev): bump the uv-minor-patch group across 1 directory with 2 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/uv-minor-patch-ed6531f1dc branch from 4924a3c to be6f445 Compare November 6, 2026 00:26
singlerider

This comment was marked as outdated.

Sign in to view

@singlerider
singlerider dismissed their stale review November 9, 2026 15:54

Posted in error.

singlerider
singlerider previously approved these changes Nov 9, 2026
View reviewed changes

@singlerider singlerider left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 ruff 0.17 and maturin 1.16. The only fallout is Markdown code-block formatting in the README.

@pjhartlieb

pjhartlieb commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@liquidsec
style: format README examples with ruff 0.17
23872b6 
ruff 0.17 formats Python code blocks in Markdown, so ruff format --check
failed on two mock_dns examples in README.md.
@liquidsec
liquidsec merged commit 7dd5fae into dev Nov 10, 2026
23 checks passed
@liquidsec
liquidsec deleted the dependabot/uv/dev/uv-minor-patch-ed6531f1dc branch November 10, 2026 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@singlerider singlerider singlerider left review comments

Assignees

@liquidsec liquidsec

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@pjhartlieb @singlerider @liquidsec