Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the uv group with 5 updates:

Package From To
click 8.3.0 8.3.1
universal-pathlib 0.3.5 0.3.6
frozendict 2.4.6 2.4.7
pytest 9.0.0 9.0.1
altair 5.5.0 6.0.0

Updates click from 8.3.0 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

  • Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137
Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090
Commits
  • 1d038f2 release version 8.3.1
  • 03f3889 Fix Ruff UP038 warning (#3141)
  • 3867781 Fix Ruff UP038 warning
  • b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
  • 437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
  • ea70da4 Don't test using a file in docs/ (#3102)
  • e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
  • a92c573 Fix test_edit to work with BSD sed (#3129)
  • bd131e1 Fix test_edit to work with BSD sed
  • 0b5c6b7 Add Best practices section (#3127)
  • Additional commits viewable in compare view

Updates universal-pathlib from 0.3.5 to 0.3.6

Release notes

Sourced from universal-pathlib's releases.

v0.3.6

What's Changed

Added

  • upath: add UnsupportedOperation exception for better pathlib compatibility (#474)
  • upath: backport pathlib 3.10-3.14 method signatures (follow_symlinks, newline, case_sensitive, recurse_symlinks, walk_up, etc.) (#476)
  • docs: add ProxyUPath usage example (#475)
  • tests: add comprehensive pathlib backport signature tests (#474, #476, #477)

Fixed

  • upath.types: correct st_birthtime and st_birthtime_ns availability (Windows 3.12+, macOS, FreeBSD only) (#476, #477)
  • upath: fix stat() return type to use StatResultType protocol (#476)
  • upath: fix equality checks for extensions and local paths (#477)
  • upath.implementations.local: fix _copy_from method (#477)
  • upath.core: remove unneeded lines in _fs_factory (#478)

Changed

  • upath.core: raise TypeError when creating UPath with incompatible protocols (#477)

Full Changelog: fsspec/universal_pathlib@v0.3.5...v0.3.6

Changelog

Sourced from universal-pathlib's changelog.

[0.3.6] - 2025-11-13

Added

  • upath: add UnsupportedOperation exception for better pathlib compatibility (#474)
  • upath: backport pathlib 3.10-3.14 method signatures (follow_symlinks, newline, case_sensitive, recurse_symlinks, walk_up, etc.) (#476)
  • docs: add ProxyUPath usage example (#475)
  • tests: add comprehensive pathlib backport signature tests (#474, #476, #477)

Fixed

  • upath.types: correct st_birthtime and st_birthtime_ns availability (Windows 3.12+, macOS, FreeBSD only) (#476, #477)
  • upath: fix stat() return type to use StatResultType protocol (#476)
  • upath: fix equality checks for extensions and local paths (#477)
  • upath.implementations.local: fix _copy_from method (#477)
  • upath.core: remove unneeded lines in _fs_factory (#478)

Changed

  • upath.core: raise TypeError when creating UPath with incompatible protocols (#477)
Commits

Updates frozendict from 2.4.6 to 2.4.7

Release notes

Sourced from frozendict's releases.

frozendict v2.4.7

What's Changed

  • Now pickle is only marginally slower than dict for C Extension!
  • Added wheels also for riscv64, armv7l, ppc64le and s390x archs and for old 32 bit archs.
  • readded "generic" pure py wheel. Details here: Marco-Sulla/python-frozendict#108

Full Changelog: Marco-Sulla/python-frozendict@v2.4.6...v2.4.7

Commits
  • d4ee759 trying Clion
  • ac8bf39 (un)pickling now is only a little slower than dict!
  • 539fb87 moved riscv64 to QEMU
  • cb26d20 restoring uv to only images that works
  • aad86e1 relaxed func_2
  • 42aa0bf trying to restore uv for all
  • d21bf59 moved riscv64 to ubuntu-24.04-arm
  • 0046cd7 uv doesn't work with musl on cibuildwheel 3.2.1
  • c713d07 forgot to remove ppc64le and s390x from non-QEMU pipeline
  • d4f625b fix QEMU
  • Additional commits viewable in compare view

Updates pytest from 9.0.0 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

  • #13895: Restore support for skipping tests via raise unittest.SkipTest.
  • #13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
  • #13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
  • #13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

  • #13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.
  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.
Commits
  • d1b64aa Prepare release version 9.0.1
  • 0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
  • a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
  • 2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
  • a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
  • 4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
  • 15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
  • 0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
  • fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
  • b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
  • Additional commits viewable in compare view

Updates altair from 5.5.0 to 6.0.0

Release notes

Sourced from altair's releases.

v6.0.0

Release v6.0.0

The Vega-Altair team is pleased to announce the release of version 6.0.0. Firstly, we are grateful for the many returning contributors (@​franzhaas, @​dangotbanned, @​dsmedia, @​joelostblom, @​tempdata73, @​mattijn, @​jonmmease, @​eitanlees, @​kurtmckee, @​MarcoGorelli), and a special shoutout to all the new contributors (@​JasonnnW3000, @​edmundmiller, @​jannisko, @​stanmart, @​star1327p, @​baldwint, @​daizutabi, @​azjps, @​joaopalmeiro, @​bobot). You are all awesome!

In short what is included with the version 6 release of Altair.

  • we now compile against Vega-Lite version 6 (to be specific, version 6.1.0) and provide support for Python 3.14.
  • we have a new datasets module, altair.datasets, lazily access to datasets from https://github.com/vega/vega-datasets.
  • we are now thread-safe, altair specifications should be stable after re-running.
  • we improved docs and included new examples, eg. this faceted choropleth of habitat species across geographical counties https://altair-viz.github.io/gallery/maps_faceted_species.html.
  • we improved the typing experiences.
  • we migrated to uv as part of the infrastructure modernization and now have automated weekly builds.

We test all changes thoroughly, but nevertheless, if you encounter any issue or like to start a discussion. Please feel free!

Full details are available in the complete changelog below.

Breaking

Enhancements

Bug Fixes

Documentation

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the uv group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [click](https://github.com/pallets/click) | `8.3.0` | `8.3.1` |
| [universal-pathlib](https://github.com/fsspec/universal_pathlib) | `0.3.5` | `0.3.6` |
| [frozendict](https://github.com/Marco-Sulla/python-frozendict) | `2.4.6` | `2.4.7` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.0` | `9.0.1` |
| [altair](https://github.com/vega/altair) | `5.5.0` | `6.0.0` |


Updates `click` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.0...8.3.1)

Updates `universal-pathlib` from 0.3.5 to 0.3.6
- [Release notes](https://github.com/fsspec/universal_pathlib/releases)
- [Changelog](https://github.com/fsspec/universal_pathlib/blob/main/CHANGELOG.md)
- [Commits](fsspec/universal_pathlib@v0.3.5...v0.3.6)

Updates `frozendict` from 2.4.6 to 2.4.7
- [Release notes](https://github.com/Marco-Sulla/python-frozendict/releases)
- [Commits](Marco-Sulla/python-frozendict@v2.4.6...v2.4.7)

Updates `pytest` from 9.0.0 to 9.0.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.0...9.0.1)

Updates `altair` from 5.5.0 to 6.0.0
- [Release notes](https://github.com/vega/altair/releases)
- [Commits](vega/altair@v5.5.0...v6.0.0)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: universal-pathlib
  dependency-version: 0.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: frozendict
  dependency-version: 2.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: pytest
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv
- dependency-name: altair
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant