Skip to content

pip: bump lmdb from 1.6.2 to 2.2.1 - #2032

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/lmdb-2.2.1
Closed

pip: bump lmdb from 1.6.2 to 2.2.1#2032
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/lmdb-2.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Bumps lmdb from 1.6.2 to 2.2.1.

Changelog

Sourced from lmdb's changelog.

2026-06-03 2.2.1 #################

Improvements

  • lmdb.aio async wrapper methods (on AsyncEnvironment, AsyncTransaction, and AsyncCursor) are now real class attributes rather than synthesized by __getattr__, making them visible to dir(), inspect.signature(), help(), IPython, and stubtest. Non-callable attributes still proxy through. (#460, contributed by jorenham)

  • Added type stubs for the lmdb.aio module. (#455, contributed by jorenham)

Fixes

  • Fix a segmentation fault on Linux/aarch64 when an Environment is closed from a different thread than the one holding an active write transaction. Environment.close() now waits for the owning thread to release the write transaction before unmapping the lock file. (#465, reported by sdvillal)

  • Reject adversarial on-disk values that could overflow size arithmetic or cause implementation-defined narrowing of mv_size when reading crafted databases. (#462, #463)

  • Fix crashes on out-of-memory conditions in the CPython extension's error paths. (#453)

  • Fix and modernize the type stubs, including __all__ exports and the Cursor.iter* parameter defaults in __init__.pyi. (#454, #457, #459, contributed by jorenham)

Other

  • Remove remaining Python 2 compatibility code. (#456, contributed by jorenham)

  • Run the test suite natively on Linux/aarch64 in CI; previously aarch64 wheels were built but never tested. (#465)

2026-03-29 2.2.0 #################

New features

... (truncated)

Commits
  • ca9ad8e Bump version to 2.2.1 for release
  • e846b0e aio: use relative import for Cursor/Environment/Transaction
  • e8ea50a Make aio proxied methods runtime-introspectable (#460)
  • c866fd3 Fix aarch64 segfault when closing an env racing an active write txn (#465)
  • 030c333 Avoid impl-defined narrowing of adversarial mv_size in cpython.c (#463)
  • c191276 Guard size arithmetic on adversarial on-disk values in cpython.c (#462)
  • cd2a668 Fix parameter defaults for Cursor.iter* in __init__.pyi (#459)
  • ffa52d5 Add type stubs for aio (#455)
  • 78b770c Remove Python 2 remnants (#456)
  • 77876a1 Fix and modernize type stubs (#457)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major Major / breaking version release python Pull requests that update Python code labels Jun 10, 2026
@github-actions

Copy link
Copy Markdown
Original Dependabot description

Bumps lmdb from 1.6.2 to 2.2.1.

Changelog

Sourced from lmdb's changelog.

2026-06-03 2.2.1 #################

Improvements

  • lmdb.aio async wrapper methods (on AsyncEnvironment, AsyncTransaction, and AsyncCursor) are now real class attributes rather than synthesized by __getattr__, making them visible to dir(), inspect.signature(), help(), IPython, and stubtest. Non-callable attributes still proxy through. (#460, contributed by jorenham)

  • Added type stubs for the lmdb.aio module. (#455, contributed by jorenham)

Fixes

  • Fix a segmentation fault on Linux/aarch64 when an Environment is closed from a different thread than the one holding an active write transaction. Environment.close() now waits for the owning thread to release the write transaction before unmapping the lock file. (#465, reported by sdvillal)

  • Reject adversarial on-disk values that could overflow size arithmetic or cause implementation-defined narrowing of mv_size when reading crafted databases. (#462, #463)

  • Fix crashes on out-of-memory conditions in the CPython extension's error paths. (#453)

  • Fix and modernize the type stubs, including __all__ exports and the Cursor.iter* parameter defaults in __init__.pyi. (#454, #457, #459, contributed by jorenham)

Other

  • Remove remaining Python 2 compatibility code. (#456, contributed by jorenham)

  • Run the test suite natively on Linux/aarch64 in CI; previously aarch64 wheels were built but never tested. (#465)

2026-03-29 2.2.0 #################

New features

... (truncated)

Commits
  • ca9ad8e Bump version to 2.2.1 for release
  • e846b0e aio: use relative import for Cursor/Environment/Transaction
  • e8ea50a Make aio proxied methods runtime-introspectable (#460)
  • c866fd3 Fix aarch64 segfault when closing an env racing an active write txn (#465)
  • 030c333 Avoid impl-defined narrowing of adversarial mv_size in cpython.c (#463)
  • c191276 Guard size arithmetic on adversarial on-disk values in cpython.c (#462)
  • cd2a668 Fix parameter defaults for Cursor.iter* in __init__.pyi (#459)
  • ffa52d5 Add type stubs for aio (#455)
  • 78b770c Remove Python 2 remnants (#456)
  • 77876a1 Fix and modernize type stubs (#457)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@meta-cla meta-cla Bot added the cla signed label Jun 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/lmdb-2.2.1 branch 2 times, most recently from b100ad8 to 59c2fc7 Compare June 24, 2026 22:37
@dependabot
dependabot Bot force-pushed the dependabot/pip/lmdb-2.2.1 branch 2 times, most recently from e732939 to d27f293 Compare July 2, 2026 18:50
@dependabot
dependabot Bot force-pushed the dependabot/pip/lmdb-2.2.1 branch from d27f293 to 0ca052f Compare July 6, 2026 17:04
Bumps [lmdb](https://github.com/jnwatson/py-lmdb) from 1.6.2 to 2.2.1.
- [Changelog](https://github.com/jnwatson/py-lmdb/blob/master/ChangeLog)
- [Commits](jnwatson/py-lmdb@py-lmdb_1.6.2...py-lmdb_2.2.1)

---
updated-dependencies:
- dependency-name: lmdb
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/lmdb-2.2.1 branch from 0ca052f to cb29941 Compare July 8, 2026 17:13
@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #2088.

@dependabot dependabot Bot closed this Jul 15, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/lmdb-2.2.1 branch July 15, 2026 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla signed dependencies Pull requests that update a dependency file major Major / breaking version release python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants