Skip to content

deps(core-py): bump the all group across 1 directory with 3 updates - #2670

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/core/wren-core-py/all-0c6fa91aac
Open

deps(core-py): bump the all group across 1 directory with 3 updates#2670
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/core/wren-core-py/all-0c6fa91aac

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 3 updates in the /core/wren-core-py directory: maturin, pyarrow and ruff.

Updates maturin from 1.9.4 to 1.15.0

Release notes

Sourced from maturin's releases.

v1.15.0

What's Changed

New Contributors

Full Changelog: PyO3/maturin@v1.14.1...v1.15.0

... (truncated)

Changelog

Sourced from maturin's changelog.

1.15.0

  • Set UV_PYTHON when running maturin develop with uv (#3236)
  • Set UID and GID headers in pax (#3241)
  • Replace unguarded panics with explicit errors on fallible input (#3242)
  • Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback (#3244)
  • Fix abi3t PyModExport entrypoint check (#3246)
  • Fix maturin build --pgo -i <version> with uv install (#3237)
  • Refactor: apply some mechanical cleanups (#3250)
  • Refactor: BuildOrchestrator pipeline deduplication (#3251)
  • Refactor: improve context and environment hygiene (#3252)
  • Fix(ci): honor ~= and ==X.* in requires-python for generate-ci (#3249)
  • Refactor: type cleanup for options, tags, and wheel metadata (#3253)
  • Refactor: InstallDest, single BridgeModel, and ui output facade (#3254)
  • Don’t specify generate-import-lib for PyO3 0.29 (#3258)
  • Refactor build so that pgo is part of normal pathway (#3257)
  • Fix: verify bindings detection with cargo tree in workspaces (#3264)
  • Fix: harden cargo tree verification of bindings detection (#3266)
  • Feat: support --pgo for maturin develop (#3270)
  • Feat: support MATURIN_PGO env var to activate --pgo (#3271)
  • Docs: correct crate feature documentation; remove stale clippy allow
  • Fix: deduplicate SBOM includes across full merged list, preserving first-seen order
  • Feat: type the bindings input with a single-source-of-truth enum (#3273)
  • Don't force export of the PyInit_{module_name} in UniFfi mode (#3275)
  • Switch musllinux images to musllinux_1_2 as musllinux_1_1 is EOL (#3280)
  • Fix(generate-stubs): write stubs into the module's package directory (#3282)
  • Fix group not cwd (#3284)
  • Docs: document missing [tool.maturin] config fields (#3287)
  • Update cargo-zigbuild & cargo-xwin to 0.23.1

1.14.1

  • Bump uraimo/run-on-arch-action to v3 to fix pytest job (#3221)
  • Fix platform tag logic to generate the same as cpython on AIX (#3220)
  • Bump pyo3-introspection (#3227)
  • Upgrade cargo-zigbuild & cargo-xwin (#3228)
  • Fix issues around crates enabling abi3 and abi3t features (#3226)
  • Add PEP 740 publish attestations to PyPI releases (#3230)
  • Set PYO3_PYTHON to run scripts for stable ABI builds (#3233)
  • Fix shell quoting in CI scripts (#3231)

1.14.0

  • Support parent-relative pyproject metadata in sdists (#3182)
  • Update PyPI platform tag validation (#3187)
  • Maint: update setup emsdk action in generate-ci (#3194)
  • Fix: only shim bin wheels during auditwheel repair (#3197)
  • Fix: avoid editable ELF truncation from stale hardlinks (#3199)
  • Fix Pyodide Emscripten platform tags (#3191)
  • Use pax instead of GNU headers for tar (#3203)

... (truncated)

Commits

Updates pyarrow from 25.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Commits

Updates ruff from 0.13.1 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

@dependabot dependabot Bot added core dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 24138d0 to 3ddf82b Compare August 21, 2026 11:24
Bumps the all group with 3 updates in the /core/wren-core-py directory: [maturin](https://github.com/pyo3/maturin), [pyarrow](https://github.com/apache/arrow) and [ruff](https://github.com/astral-sh/ruff).


Updates `maturin` from 1.9.4 to 1.15.0
- [Release notes](https://github.com/pyo3/maturin/releases)
- [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md)
- [Commits](PyO3/maturin@v1.9.4...v1.15.0)

Updates `pyarrow` from 25.0.0 to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-25.0.1)

Updates `ruff` from 0.13.1 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.1...0.16.4)

---
updated-dependencies:
- dependency-name: maturin
  dependency-version: 1.14.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: ruff
  dependency-version: 0.16.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 3ddf82b to 4fa6fbf Compare August 28, 2026 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants