Skip to content

Bump the poetry-dependencies group with 19 updates#206

Merged
aecorn merged 1 commit intomainfrom
dependabot/pip/poetry-dependencies-35e0f3c041
Feb 2, 2026
Merged

Bump the poetry-dependencies group with 19 updates#206
aecorn merged 1 commit intomainfrom
dependabot/pip/poetry-dependencies-35e0f3c041

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the poetry-dependencies group with 19 updates:

Package From To
oracledb 3.4.1 3.4.2
ruff 0.14.13 0.14.14
types-python-dateutil 2.9.0.20251115 2.9.0.20260124
coverage 7.13.1 7.13.2
cryptography 46.0.3 46.0.4
debugpy 1.8.19 1.8.20
google-auth 2.47.0 2.48.0
multidict 6.7.0 6.7.1
packaging 25.0 26.0
pathspec 1.0.3 1.0.4
protobuf 6.33.4 6.33.5
psutil 7.2.1 7.2.2
pycparser 2.23 3.0
pyjwt 2.10.1 2.11.0
pytokens 0.4.0 0.4.1
soupsieve 2.8.2 2.8.3
types-deprecated 1.3.1.20251101 1.3.1.20260130
wcwidth 0.2.14 0.5.3
wrapt 2.0.1 2.1.0

Updates oracledb from 3.4.1 to 3.4.2

Release notes

Sourced from oracledb's releases.

v3.4.2

python-oracledb 3.4.2 is now released. This release addresses a number of issues. See the full release notes for all of the details.

Commits
  • 51581ee Preparing to release python-oracledb 3.4.2.
  • 81ceb55 Fixed bug which caused Connection.call_timeout to be reset to zero when
  • 4a94025 Eliminated memory leak when converting a third party data frame to one
  • 36a2951 Fixed bug when decoding PL/SQL booleans in Oracle Database 12.1 (#565).
  • 6072f01 Grammar fix.
  • f8be001 Fixed bug causing hang when using asyncio and the database closes the
  • 6e0d8b9 Eliminated race condition in background thread/coroutine management for
  • 40200bf Adjusted code and tests to be capable of being run in environments other
  • 36f8899 Added support for ingesting Arrow arrays which only consist of null
  • 7bf23b6 Fixed bug when calling Cursor.executemany() with all of the values in at
  • Additional commits viewable in compare view

Updates ruff from 0.14.13 to 0.14.14

Release notes

Sourced from ruff's releases.

0.14.14

Release Notes

Released on 2026-01-22.

Preview features

  • Preserve required parentheses in lambda bodies (#22747)
  • Combine range suppression code diagnostics (#22613)
  • [airflow] Second positional argument to Asset/Dataset should not be a dictionary (AIR303) (#22453)
  • [ruff] Detect duplicate entries in __all__ (RUF068) (#22114)

Bug fixes

  • [pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)
  • [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • [flake8-pie] Detect duplicated declared class fields in PIE794 (#22717)

Rule changes

Documentation

  • Add --exit-non-zero-on-format to formatter exit codes section (#22761)
  • Update contributing guide for adding a new rule (#22779)
  • [FastAPI] Document fix safety for FAST001 (#22655)
  • [flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)
  • [pandas-vet] Make example error out-of-the-box (PD002) (#22561)
  • [refurb] Make the example work out of box (FURB101) (#22770)
  • [refurb] Make the example work out of box (FURB103) (#22769)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.14

Released on 2026-01-22.

Preview features

  • Preserve required parentheses in lambda bodies (#22747)
  • Combine range suppression code diagnostics (#22613)
  • [airflow] Second positional argument to Asset/Dataset should not be a dictionary (AIR303) (#22453)
  • [ruff] Detect duplicate entries in __all__ (RUF068) (#22114)

Bug fixes

  • [pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)
  • [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • [flake8-pie] Detect duplicated declared class fields in PIE794 (#22717)

Rule changes

Documentation

  • Add --exit-non-zero-on-format to formatter exit codes section (#22761)
  • Update contributing guide for adding a new rule (#22779)
  • [FastAPI] Document fix safety for FAST001 (#22655)
  • [flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)
  • [pandas-vet] Make example error out-of-the-box (PD002) (#22561)
  • [refurb] Make the example work out of box (FURB101) (#22770)
  • [refurb] Make the example work out of box (FURB103) (#22769)

Contributors

... (truncated)

Commits
  • 8b2e7b3 Prepare release v0.14.14 (#22813)
  • 4c7d1f5 [ty] Infer TypedDict types with >=1 required key as being always truthy (#2...
  • b7de434 add CCfW hooks (#22803)
  • b912dfc [pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)
  • 1ff062d [ty] Improve completion rankings for raise-from/except contexts (#22775)
  • 7e408a5 Update dependency wrangler to v4.59.1 (#22793)
  • ceb876b [flake8-pyi] Fix inconsistent handling of forward references for __new__,...
  • c5b4ee6 [ty] Support solving generics involving PEP 695 type aliases (#22678)
  • b9a6129 [ty] Improve support for kwarg splats in dictionary literals (#22781)
  • f516d47 Update contributing guide for adding a new rule (#22779)
  • Additional commits viewable in compare view

Updates types-python-dateutil from 2.9.0.20251115 to 2.9.0.20260124

Commits

Updates coverage from 7.13.1 to 7.13.2

Changelog

Sourced from coverage's changelog.

Version 7.13.2 — 2026-01-25

  • Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.

  • Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: coveragepy/coveragepy#2115 .. _issue 2117: coveragepy/coveragepy#2117

.. _changes_7-13-1:

Commits
  • 513e971 docs: sample HTML for 7.13.2
  • 27a8230 docs: prep for 7.13.2
  • 27d8daa refactor: plural does more
  • a2f248c fix: stdlib might be through a symlink. #2115
  • bc52a22 debug: re-organize Matchers to show more of what they do
  • f338d81 debug: build is a tuple, don't show it on two lines
  • 92020e4 refactor(test): convert to parametrized
  • 6387d0a test: let (most) tests run with no network
  • 1d31e33 build: workflows sometimes need more than 10 min
  • 6294978 refactor: an error message is now uniform across versions
  • Additional commits viewable in compare view

Updates cryptography from 46.0.3 to 46.0.4

Changelog

Sourced from cryptography's changelog.

46.0.4 - 2026-01-27


* `Dropped support for win_arm64 wheels`_.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

Commits

Updates debugpy from 1.8.19 to 1.8.20

Release notes

Sourced from debugpy's releases.

debugpy v1.8.20

Fixes for:

Enhancements:

Infrastructure work:

Thanks to @​rameshvarun, @​Xeonacid, and @​pdepetro for the commits

Commits

Updates google-auth from 2.47.0 to 2.48.0

Release notes

Sourced from google-auth's releases.

google-auth 2.48.0

2.48.0 (2026-01-21)

Features

Bug Fixes

v2.48.0rc0

2.48.0rc0 (2026-01-20)

Features

  • honor NO_GCE_CHECK environment variable (#1610) (383c98)
  • add configurable GCE Metadata Server retries (#1488) (454b44)
  • support mTLS IAM domain for Certificate based Access (#1938) (8dcf91)
  • add cryptography as required dependency (#1929) (52558a)

Bug Fixes

  • Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a2)
  • replace deprecated utcfromtimestamp (#1799) (e431f2)
  • detect correct auth when ADC env var is set by empty (#1374) (bfc07e)
  • removed content-header from AWS IMDS (#1934) (97bfea)
  • resolve circular imports (#1942) (25c1b0)
Changelog

Sourced from google-auth's changelog.

2.48.0 (2026-01-22)

Features

Bug Fixes

Commits
  • 6a982be chore: librarian release pull request: 20260121T162706Z (#1946)
  • 526d6c6 chore(tests): add cryptography to constraints file (#1944)
  • 52558ae feat: add cryptography as required dependency (#1929)
  • 8dcf91a feat(iam): Support the mTLS IAM domain for Certificate based Access (#1938)
  • db17a64 chore(tests): add sleep mocks (#1943)
  • 25c1b06 fix: resolve circular imports (#1942)
  • e5a28b5 tests: system tests for expired User Credentials (#1937)
  • 4292ab0 chore(deps): update dependency google-cloud-compute to v1.42.0 (#1939)
  • 4848ac4 chore: extracts unit tests to individual github actions (#1941)
  • 71e6e8e chore: dedent deprecation warning message (#1932)
  • Additional commits viewable in compare view

Updates multidict from 6.7.0 to 6.7.1

Release notes

Sourced from multidict's releases.

6.7.1

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: #1284.


Changelog

Sourced from multidict's changelog.

6.7.1

(2026-01-25)

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: :issue:1284.


Commits

Updates packaging from 25.0 to 26.0

Release notes

Sourced from packaging's releases.

26.0

Read about the performance improvements here: https://iscinumpy.dev/post/packaging-faster.

What's Changed

Features:

Behavior adaptations:

Fixes:

Performance:

... (truncated)

Changelog

Sourced from packaging's changelog.

26.0 - 2026-01-20


Features:
  • PEP 751: support pylock (:pull:900)
  • PEP 794: import name metadata (:pull:948)
  • Support for writing metadata to a file (:pull:846)
  • Support __replace__ on Version (:pull:1003)
  • Support positional pattern matching for Version and SpecifierSet (:pull:1004)

Behavior adaptations:

  • PEP 440 handling of prereleases for Specifier.contains, SpecifierSet.contains, and SpecifierSet.filter (:pull:897)
  • Handle PEP 440 edge case in SpecifierSet.filter (:pull:942)
  • Adjust arbitrary equality intersection preservation in SpecifierSet (:pull:951)
  • Return False instead of raising for .contains with invalid version (:pull:932)
  • Support arbitrary equality on arbitrary strings for Specifier and SpecifierSet's filter and contains method. (:pull:954)
  • Only try to parse as Version on certain marker keys, return False on unequal ordered comparisons (:pull:939)

Fixes:

  • Update _hash when unpickling Tag() (:pull:860)
  • Correct comment and simplify implicit prerelease handling in Specifier.prereleases (:pull:896)
  • Use explicit _GLibCVersion NamedTuple in _manylinux (:pull:868)
  • Detect invalid license expressions containing () (:pull:879)
  • Correct regex for metadata 'name' format (:pull:925)
  • Improve the message around expecting a semicolon (:pull:833)
  • Support nested parens in license expressions (:pull:931)
  • Add space before at symbol in Requirements string (:pull:953)
  • A root logger use found, use a packaging logger instead (:pull:965)
  • Better support for subclassing Marker and Requirement (:pull:1022)
  • Normalize all extras, not just if it comes first (:pull:1024)
  • Don't produce a broken repr if Marker fails to construct (:pull:1033)

Performance:

  • Avoid recompiling regexes in the tokenizer for a 3x speedup (:pull:1019)
  • Improve performance in _manylinux.py (:pull:869)
  • Minor cleanups to Version (:pull:913)
  • Skip redundant creation of Version's in specifier comparison (:pull:986)
  • Cache the Specifier's Version (:pull:985)
  • Make Version a little faster (:pull:987)
  • Minor Version regex cleanup (:pull:990)
  • Faster regex on Python 3.11.5+ for Version (:pull:988, :pull:1055)
  • Lazily calculate _key in Version (:pull:989, :pull:1048)
  • Faster canonicalize_version (:pull:993)
  • Use re.fullmatch in a couple more places (:pull:992, :pull:1029)
  • Use map instead of generator (:pull:996)
  • Deprecate ._version (_Version, a NamedTuple) (:pull:995, :pull:1062)
    </tr></table>

... (truncated)

Commits

Updates pathspec from 1.0.3 to 1.0.4

Release notes

Sourced from pathspec's releases.

v1.0.4

Release v1.0.4. See CHANGES.rst.

Changelog

Sourced from pathspec's changelog.

1.0.4 (2026-01-26)

  • Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103)_: Using re2 fails if pyre2 is also installed.

.. _Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103): cpburnz/python-pathspec#103

Commits

Updates protobuf from 6.33.4 to 6.33.5

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

Bumps the poetry-dependencies group with 19 updates:

| Package | From | To |
| --- | --- | --- |
| [oracledb](https://github.com/oracle/python-oracledb) | `3.4.1` | `3.4.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.13` | `0.14.14` |
| [types-python-dateutil](https://github.com/typeshed-internal/stub_uploader) | `2.9.0.20251115` | `2.9.0.20260124` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.1` | `7.13.2` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `46.0.4` |
| [debugpy](https://github.com/microsoft/debugpy) | `1.8.19` | `1.8.20` |
| [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.47.0` | `2.48.0` |
| [multidict](https://github.com/aio-libs/multidict) | `6.7.0` | `6.7.1` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.0` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.3` | `1.0.4` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.4` | `6.33.5` |
| [psutil](https://github.com/giampaolo/psutil) | `7.2.1` | `7.2.2` |
| [pycparser](https://github.com/eliben/pycparser) | `2.23` | `3.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.10.1` | `2.11.0` |
| [pytokens](https://github.com/tusharsadhwani/pytokens) | `0.4.0` | `0.4.1` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.8.2` | `2.8.3` |
| [types-deprecated](https://github.com/typeshed-internal/stub_uploader) | `1.3.1.20251101` | `1.3.1.20260130` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.14` | `0.5.3` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.0.1` | `2.1.0` |


Updates `oracledb` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/oracle/python-oracledb/releases)
- [Commits](oracle/python-oracledb@v3.4.1...v3.4.2)

Updates `ruff` from 0.14.13 to 0.14.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.13...0.14.14)

Updates `types-python-dateutil` from 2.9.0.20251115 to 2.9.0.20260124
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `coverage` from 7.13.1 to 7.13.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.1...7.13.2)

Updates `cryptography` from 46.0.3 to 46.0.4
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.3...46.0.4)

Updates `debugpy` from 1.8.19 to 1.8.20
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](microsoft/debugpy@v1.8.19...v1.8.20)

Updates `google-auth` from 2.47.0 to 2.48.0
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.47.0...v2.48.0)

Updates `multidict` from 6.7.0 to 6.7.1
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.7.0...v6.7.1)

Updates `packaging` from 25.0 to 26.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@25.0...26.0)

Updates `pathspec` from 1.0.3 to 1.0.4
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](cpburnz/python-pathspec@v1.0.3...v1.0.4)

Updates `protobuf` from 6.33.4 to 6.33.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `psutil` from 7.2.1 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.2.1...release-7.2.2)

Updates `pycparser` from 2.23 to 3.0
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v2.23...release_v3.00)

Updates `pyjwt` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.10.1...2.11.0)

Updates `pytokens` from 0.4.0 to 0.4.1
- [Commits](tusharsadhwani/pytokens@0.4.0...0.4.1)

Updates `soupsieve` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.2...2.8.3)

Updates `types-deprecated` from 1.3.1.20251101 to 1.3.1.20260130
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `wcwidth` from 0.2.14 to 0.5.3
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.2.14...0.5.3)

Updates `wrapt` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.0.1...2.1.0)

---
updated-dependencies:
- dependency-name: oracledb
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: ruff
  dependency-version: 0.14.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20260124
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: coverage
  dependency-version: 7.13.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: cryptography
  dependency-version: 46.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: debugpy
  dependency-version: 1.8.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: google-auth
  dependency-version: 2.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: multidict
  dependency-version: 6.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: packaging
  dependency-version: '26.0'
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: poetry-dependencies
- dependency-name: pathspec
  dependency-version: 1.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: protobuf
  dependency-version: 6.33.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: pycparser
  dependency-version: '3.0'
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: poetry-dependencies
- dependency-name: pyjwt
  dependency-version: 2.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: pytokens
  dependency-version: 0.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: soupsieve
  dependency-version: 2.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: types-deprecated
  dependency-version: 1.3.1.20260130
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: wcwidth
  dependency-version: 0.5.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: wrapt
  dependency-version: 2.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 1, 2026
@dependabot dependabot bot requested a review from aecorn as a code owner February 1, 2026 02:30
@dependabot dependabot bot added the python Pull requests that update Python code label Feb 1, 2026
@dependabot dependabot bot requested review from a team, Jonathan7SSB and efredborg as code owners February 1, 2026 02:30
@aecorn aecorn merged commit 270e7bf into main Feb 2, 2026
15 checks passed
@dependabot dependabot bot deleted the dependabot/pip/poetry-dependencies-35e0f3c041 branch February 2, 2026 08:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant