Skip to content

chore(deps): update all non-major dependencies #42

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update all non-major dependencies #42

renovate wants to merge 1 commit into from
+48 −48

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 25, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
anyio (changelog) ==4.11.0 -> ==4.12.0 age confidence minor
asttokens ==3.0.0 -> ==3.0.1 age confidence patch
attrs (changelog) ==25.3.0 -> ==25.4.0 age confidence minor
certifi ==2025.8.3 -> ==2025.11.12 age confidence minor
charset-normalizer (changelog) ==3.4.3 -> ==3.4.4 age confidence patch
click (changelog) ==8.3.0 -> ==8.3.1 age confidence patch
docutils (changelog) ==0.21.2 -> ==0.22.3 age confidence minor
duckdb (changelog) ==1.4.0 -> ==1.4.2 age confidence patch
fonttools ==4.60.0 -> ==4.61.0 age confidence minor
idna (changelog) ==3.10 -> ==3.11 age confidence minor
iniconfig ==2.1.0 -> ==2.3.0 age confidence minor
ipython ==9.1.0 -> ==9.8.0 age confidence project.optional-dependencies minor
ipython ==9.1.0 -> ==9.8.0 age confidence minor
jiter ==0.11.0 -> ==0.12.0 age confidence minor
jupyter-core ==5.8.1 -> ==5.9.1 age confidence minor
loro ==1.8.1 -> ==1.10.0 age confidence minor
marimo >0.14,<0.15 -> >0.18,<0.19 age confidence project.optional-dependencies minor
marimo ==0.14.17 -> ==0.18.3 age confidence minor
markdown (changelog) ==3.9 -> ==3.10 age confidence minor
markupsafe (changelog) ==3.0.2 -> ==3.0.3 age confidence patch
matplotlib ==3.10.6 -> ==3.10.7 age confidence patch
matplotlib-inline ==0.1.7 -> ==0.2.1 age confidence minor
micropip ==0.10.1 -> ==0.11.0 age confidence minor
narwhals ==2.5.0 -> ==2.13.0 age confidence minor
numpy (changelog) ==2.3.3 -> ==2.3.5 age confidence patch
orjson (changelog) ==3.11.3 -> ==3.11.5 age confidence patch
pandas ==2.3.2 -> ==2.3.3 age confidence patch
platformdirs (changelog) ==4.4.0 -> ==4.5.1 age confidence minor
polars (changelog) ==1.33.1 -> ==1.36.0 age confidence minor
psutil ==7.1.0 -> ==7.1.3 age confidence patch
pydantic (changelog) ==2.11.9 -> ==2.12.5 age confidence minor
pydantic-core ==2.33.2 -> ==2.41.5 age confidence minor
pymdown-extensions ==10.16.1 -> ==10.18 age confidence minor
python 3.13 -> 3.14 age confidence uses-with minor
pyyaml (source) ==6.0.2 -> ==6.0.3 age confidence patch
referencing (changelog) ==0.36.2 -> ==0.37.0 age confidence minor
rpds-py ==0.27.1 -> ==0.30.0 age confidence minor
ruff (source, changelog) ==0.13.1 -> ==0.14.8 age confidence minor
sphinx-autodoc-typehints (changelog) ==3.1.0 -> ==3.5.2 age confidence project.optional-dependencies minor
sphinx-autodoc-typehints (changelog) ==3.1.0 -> ==3.5.2 age confidence minor
sqlglot ==27.17.0 -> ==27.29.0 age confidence minor
starlette (changelog) ==0.48.0 -> ==0.50.0 age confidence minor
typing-inspection (changelog) ==0.4.1 -> ==0.4.2 age confidence patch
urllib3 (changelog) ==2.5.0 -> ==2.6.1 age confidence minor
uvicorn (changelog) ==0.37.0 -> ==0.38.0 age confidence minor

Release Notes

agronholm/anyio (anyio)

v4.12.0

Compare Source

  • Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#​1025)
  • Added an asynchronous implementation of the functools module (#​1001)
  • Added support for uvloop=True on Windows via the winloop implementation (#​960; PR by @​Vizonex)
  • Added support for use as a context manager to anyio.lowlevel.RunVar (#​1003)
  • Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#​1009)
  • Added the ability to set the token count of a CapacityLimiter to zero (#​1019; requires Python 3.10 or later when using Trio)
  • Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#​1033; PR by @​northisup)
  • Dropped sniffio as a direct dependency and added the get_available_backends() function (#​1021)
  • Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#​671; PR by @​gschaffner)
  • Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#​1002; PR by @​gschaffner)
  • Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#​1011; PR by @​gschaffner)
  • Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#​1028; PR by @​saper)
  • Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#​985)
gristlabs/asttokens (asttokens)

v3.0.1

Compare Source

python-attrs/attrs (attrs)

v25.4.0

Compare Source

Backwards-incompatible Changes

  • Class-level kw_only=True behavior is now consistent with dataclasses.

    Previously, a class that sets kw_only=True makes all attributes keyword-only, including those from base classes.
    If an attribute sets kw_only=False, that setting is ignored, and it is still made keyword-only.

    Now, only the attributes defined in that class that doesn't explicitly set kw_only=False are made keyword-only.

    This shouldn't be a problem for most users, unless you have a pattern like this:

    @&#8203;attrs.define(kw_only=True)
class Base:
    a: int
    b: int = attrs.field(default=1, kw_only=False)

@&#8203;attrs.define
class Subclass(Base):
    c: int

    Here, we have a kw_only=True attrs class (Base) with an attribute that sets kw_only=False and has a default (Base.b), and then create a subclass (Subclass) with required arguments (Subclass.c).
    Previously this would work, since it would make Base.b keyword-only, but now this fails since Base.b is positional, and we have a required positional argument (Subclass.c) following another argument with defaults.
    #​1457

Changes

  • Values passed to the __init__() method of attrs classes are now correctly passed to __attrs_pre_init__() instead of their default values (in cases where kw_only was not specified).
    #​1427

  • Added support for Python 3.14 and PEP 749.
    #​1446,
    #​1451

  • attrs.validators.deep_mapping() now allows to leave out either key_validator xor value_validator.
    #​1448

  • attrs.validators.deep_iterator() and attrs.validators.deep_mapping() now accept lists and tuples for all validators and wrap them into a attrs.validators.and_().
    #​1449

  • Added a new experimental way to inspect classes:

    attrs.inspect(cls) returns the effective class-wide parameters that were used by attrs to construct the class.

    The returned class is the same data structure that attrs uses internally to decide how to construct the final class.
    #​1454

  • Fixed annotations for attrs.field(converter=...).
    Previously, a tuple of converters was only accepted if it had exactly one element.
    #​1461

  • The performance of attrs.asdict() has been improved by 45–260%.
    #​1463

  • The performance of attrs.astuple() has been improved by 49–270%.
    #​1469

  • The type annotation for attrs.validators.or_() now allows for different types of validators.

    This was only an issue on Pyright.
    #​1474

certifi/python-certifi (certifi)

v2025.11.12

Compare Source

v2025.10.5

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.4

Compare Source

Changed
  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2
Removed
  • setuptools-scm as a build dependency.
Misc
  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.
pallets/click (click)

v8.3.1

Compare Source

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
    :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through
    the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
    behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters
    through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is
    empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to
    type_cast_value. :issue:3069 :pr:3090
duckdb/duckdb-python (duckdb)

v1.4.2: Python DuckDB v1.4.2

Compare Source

This is a bug fix release for various issues discovered after we released v1.4.1.

Also see the DuckDB v1.4.2 Changelog.

What's Changed

Full Changelog: duckdb/duckdb-python@v1.4.1...v1.4.2

v1.4.1

Compare Source

DuckDB Core: v1.4.1

Bug Fixes
  • ADBC Driver: Fixed ADBC driver implementation (#​81)
  • SQLAlchemy compatibility: Added __hash__ method overload (#​61)
  • Error Handling: Reset PyErr before throwing Python exceptions (#​69)
  • Polars Lazyframes: Fixed Polars expression pushdown (#​102)
Code Quality Improvements & Developer Experience
  • MyPy Support: MyPy is functional again and better integrated with the dev workflow
  • Stubs: Re-created and manually curated stubs for the binary extension
  • Type Shadowing: Deprecated typing and functional modules
  • Linting & Formatting: Comprehensive code quality improvements with Ruff
  • Type Annotations: Added missing overloads and improved type coverage
  • Pre-commit Integration: Added ruff, clang-format, cmake-format and mypy configs
  • CI/CD: Added code quality workflow
fonttools/fonttools (fonttools)

v4.61.0

Compare Source

  • [varLib.main]: SECURITY Only use basename(vf.filename) to prevent path traversal attacks when running fonttools varLib command-line script, or code which invokes fonttools.varLib.main(). Fixes CVE-2025-66034, see: GHSA-768j-98cg-p3fv.
  • [feaLib] Sort BaseLangSysRecords by tag (#​3986).
  • Drop support for EOL Python 3.9 (#​3982).
  • [instancer] Support --remove-overlaps for fonts with CFF2 table (#​3975).
  • [CFF2ToCFF] Add --remove-overlaps option (#​3976).
  • [feaLib] Raise an error for rsub with NULL target (#​3979).
  • [bezierTools] Fix logic bug in curveCurveIntersections (#​3963).
  • [feaLib] Error when condition sets have the same name (#​3958).
  • [cu2qu.ufo] skip processing empty glyphs to support sparse kerning masters (#​3956).
  • [unicodedata] Update to Unicode 17. Require unicodedata2 >= 17.0.0 when installed with 'unicode' extra.

v4.60.1

Compare Source

  • [ufoLib] Reverted accidental method name change in UFOReader.getKerningGroupConversionRenameMaps
    that broke compatibility with downstream projects like defcon (#​3948, #​3947, robotools/defcon#478).
  • [ufoLib] Added test coverage for getKerningGroupConversionRenameMaps method (#​3950).
  • [subset] Don't try to subset BASE table; pass it through by default instead (#​3949).
  • [subset] Remove empty BaseRecord entries in MarkBasePos lookups (#​3897, #​3892).
  • [subset] Add pruning for MarkLigPos and MarkMarkPos lookups (#​3946).
  • [subset] Remove duplicate features when subsetting (#​3945).
  • [Docs] Added documentation for the visitor module (#​3944).
kjd/idna (idna)

v3.11

Compare Source

pytest-dev/iniconfig (iniconfig)

v2.3.0

Compare Source

=====

  • add IniConfig.parse() classmethod with strip_inline_comments parameter (fixes #​55)
    • by default (strip_inline_comments=True), inline comments are properly stripped from values
    • set strip_inline_comments=False to preserve old behavior if needed
  • IniConfig() constructor maintains backward compatibility (does not strip inline comments)
  • users should migrate to IniConfig.parse() for correct comment handling
  • add strip_section_whitespace parameter to IniConfig.parse() (regarding #​4)
    • opt-in parameter to strip Unicode whitespace from section names
    • when True, strips Unicode whitespace (U+00A0, U+2000, U+3000, etc.) from section names
    • when False (default), preserves existing behavior for backward compatibility
  • clarify Unicode whitespace handling (regarding #​4)
    • since iniconfig 2.0.0 (Python 3 only), all strings are Unicode by default
    • Python 3's str.strip() has handled Unicode whitespace since Python 3.0 (2008)
    • iniconfig automatically benefits from this in all supported versions (Python >= 3.10)
    • key names and values have Unicode whitespace properly stripped using Python's built-in methods

v2.2.0

Compare Source

=====

  • drop Python 3.8 and 3.9 support (now requires Python >= 3.10)
  • add Python 3.14 classifier
  • migrate from hatchling to setuptools 77 with setuptools_scm
  • adopt PEP 639 license specifiers and PEP 740 build attestations
  • migrate from black + pyupgrade to ruff
  • migrate CI to uv and unified test workflow
  • automate GitHub releases and PyPI publishing via Trusted Publishing
  • include tests in sdist
  • modernize code for Python 3.10+ (remove future annotations, TYPE_CHECKING guards)
  • rename _ParsedLine to ParsedLine
ipython/ipython (ipython)

v9.8.0

Compare Source

v9.7.0

Compare Source

v9.6.0

Compare Source

v9.5.0

Compare Source

v9.4.0

Compare Source

v9.3.0

Compare Source

v9.2.0

Compare Source

pydantic/jiter (jiter)

v0.12.0: 2025-11-09

Compare Source

What's Changed

Full Changelog: pydantic/jiter@v0.11.1...v0.12.0

v0.11.1: 2025-10-17

Compare Source

What's Changed
New Contributors

Full Changelog: pydantic/jiter@v0.11.0...v0.11.1

jupyter/jupyter_core (jupyter-core)

v5.9.1

Compare Source

v5.9.0

Compare Source

(Full Changelog)

Enhancements made
Bugs fixed
Maintenance and upkeep improvements
Documentation improvements
Contributors to this release

(GitHub contributors page for this release)

@​AThePeanut4 | @​Carreau | @​dependabot | @​krassowski | @​minrk | @​nikimagic | @​stonebig

loro-dev/loro-py (loro)

v1.10.0

Compare Source

v1.8.2

Compare Source

marimo-team/marimo (marimo)

v0.18.3

Compare Source

What's Changed

✨ Enhancements

  • handle nans and infs in table filter (#​7402)
  • Improve scroll position handling when toggling between edit and app mode (#​7406)
  • Enhance lazy df utilities and ensure dataframe type preservation in transformations (#​7401)
  • Add file limit, warning, and more performant file detection (#​7368)
  • Detect and warn about duplicate shortcuts (#​7412)

🐛 Bug fixes

  • Update NavigationMenu for correct popover positioning (#​7403)
  • Line parsing for debugpy (#​7415)
  • Bump max version altair (#​7414)
  • Handle decimal in column hist (#​7413)
  • Hide pylsp error on the home page (#​7416)
  • Lazy import psutil for windows (#​7411)
  • Deserialization of user config in pyodide (#​7405)

Contributors

Thanks to all our community and contributors who made this release possible: @​dmadisetti, @​Light2Dark, @​mscolnick

Full Changelog: marimo-team/marimo@0.18.2...0.18.3

v0.18.2

Compare Source

What's Changed

✨ Enhancements

  • Inline relative images inside pyodide (#​7324)
  • add context menu for copy, copy selected and filter for table cells (#​7351)
  • merge Agents and chat into 1 sidebar panel (#​7332)
  • allow dict() and .items() on CLIArgs (#​7335)

🐛 Bug fixes

  • Prevent SQL cells from auto-converting when mo.sql() is in conditional expressions (#​7390)
  • Edge-case for dependent top-level defs (#​7392)
  • fix search for tables for pandas (#​7387)
  • Remove NaN from number plugin (#​7364)
  • Keep colors in console outputs with ansi colors (#​7367)
  • prevent form rerendering infinitely due to NaNs (#​7363)
  • ui.dataframe: use polars codegen for lazyframe (#​7314)

📚 Documentation

  • Deployment on slurm (#​7376)
  • add rules and max tokens to llm docs (#​7358)

📝 Other changes

  • Support cmd+g to cycle through next (simialr to browsers) (#​7393)
  • Honor preventDefault in editor hotkeys (#​7394)
  • Make the install/uninstall API endpoints non-blocking (#​7375)
  • [pre-commit.ci] pre-commit autoupdate (#​7145) (f2558fa)
  • Handle categorical and enum types in narwhals table search (#​7389)
  • Add mapping for 'sky' to 'skypilot' (#​7383)
  • Prevent debugger button from showing in scratchpad (#​7381)
  • Use python code when renaming variables (#​7380)
  • add opencode agent and cleanup dropdown (#​7374)
  • Parentheses for Ibis filter in python code output of marimo.ui.dataframe (#​7373)
  • Bump express from 5.1.0 to 5.2.1 (#​7369)
  • Revert "enforcing labels in PR before merge" (#​7366)
  • add error boundary for tables (#​7362)
  • Recommeneded extensions and settings (#​7323)
  • Update all storybook dependencies to v10 (major) (#​7328)
  • Update dependency @​typescript/native-preview to v7.0.0-dev.20251128.1 (#​7346)
  • fix dates rendering in table (#​7361)
  • Add noreferrer to external markdown links to prevent 403 errors (#​7360)
  • Handle out-of-bounds tool call index in AI streaming (#​7330) (#​7356) (29a5ae2)
  • Unfold code in traceback errors (#​7321)
  • Update all npm non-major dependencies (#​7348)
  • Forward status of copilot to footer icon (#​7312)
  • Vegafusion background for mo.ui.altair_chart() (#​7357)
  • Upgrade biome (#​7355)
  • convert decimals to string (#​7341)
  • simplify model card and align with ai provider tab (#​7336)
  • add tiny invisible width to end of numeric charts for tooltip (#​7337)
  • more duckdb data types, use sets instead (#​7326)
  • Another duckdb type - null (#​7320)
  • Explicit aggregation column selection in dataframe Group By (#​7261)
  • handle vertical tab and backspace escape characters (#​7313)

Contributors

Thanks to all our community and contributors who made this release possible: @​app/dependabot, @​app/renovate, @​cosmo-grant, @​dmadisetti, @​hodlen, @​koaning, @​Light2Dark, @​mscolnick, @​szst11

New Contributors

Full Changelog: marimo-team/marimo@0.18.1...0.18.2

v0.18.1

Compare Source

What's Changed
✨ Enhancements
  • Include mo.sidebar() when using Grid layout (#​7308)
  • load marimo claude.md rules from source (with a fallback to docs.marimo.io) (#​7279)
  • Add more github models, pass default headers (#​7306)
  • Implement delta-based streaming and configurable streaming for AI chat models (#​7259)
  • Add back missing outline panel (#​7302)
  • add markdown rendering for tables in popout (#​7299)
  • polars to_dicts() instead of to_json for nan handling (#​7297)
  • Altair embed options to remove actions (#​7277)
  • Add Claude 4.5 Opus model to models.yml (#​7289)
  • pandas change to to_dict instead of to_json and fix rich elems (#​7223)
  • Add Gemini v3 (#​7282)
  • Fallback to --no-cache for uv installations that fail (#​7256)
  • support diff dialects in sql formatter (#​7270)
  • Add precision option to mo.ui.datetime (#​7251)
  • Add redirect_console_to_browser to marimo.create_asgi_app (#​7249)
  • minimal cell create buttons (#​7235)
  • Enhance cell log handling to include tracebacks (#​7248)
  • Module watcher perf improvements (#​7218)
  • fix popout columns logic for long strings (#​7201)
  • Remove gap and border-radius for cell (#​7237)
  • Poetry package list support for v2 (#​7144)
🐛 Bug fixes
  • Anthropic reasoning models for temperature fixes (#​7310)
  • Json parsing with inf/nan (#​7309)
  • 'marimo edit' for absolute directory (#​7291)
  • columns.tsx LocaleNumber to use maximumFractionalDigits (#​7263)
  • Splitting when installing multiple packages (#​7307)
  • remove create cell button background on hover (#​7298)
  • Still allow codegen even if there are duplicate defs (#​7280)
  • Handle tab control character in notebook output (#​7275)
  • prevent layout shift from new cell buttons (#​7276)
  • downgrade vega-lite to 6.3.1 to fix numeric tooltips (#​7271)
  • Ensure datetime exports include millisecond precision in CSV output (#​7244)
  • simplify edit notebook tool and add google tool schema cleanup (#​7228)
  • fix css selector for border-radius cell (#​7245)
📚 Documentation
  • lint rule: check for branching expressions (#​7287)
📝 Other changes
Contributors

Thanks to all our community and contributors who made this release possible: @​adamwdraper, @​app/renovate, @​cosmo-grant, @​dmadisetti, @​koaning, @​Light2Dark, @​manzt, @​mscolnick, @​patyork, @​robd518

New Contributors

Full Changelog: marimo-team/marimo@0.18.0...0.18.1

[v0.18.0](https://redirect.github.com/marimo-team/marimo/releases/

@coveralls
Copy link

coveralls commented Apr 25, 2025 •
edited
Loading

Pull Request Test Coverage Report for Build 20040983726

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 92.258%
Totals Coverage Status
Change from base Build 18002325789: 0.0%
Covered Lines: 143
Relevant Lines: 155
💛 - Coveralls

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 7a81baa to 6576ce8 Compare May 2, 2025 12:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from c064051 to 9b13c19 Compare May 9, 2025 21:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 2174cf0 to b05cbbf Compare May 15, 2025 20:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b05cbbf to 5aa0ac0 Compare May 17, 2025 23:46
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 7e6321e to f0bab33 Compare November 17, 2025 11:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 57de679 to 41b1bd1 Compare November 26, 2025 16:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from e14b29f to 0f79174 Compare December 5, 2025 16:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 97bb263 to 927c525 Compare December 7, 2025 17:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 927c525 to 9fdbba1 Compare December 8, 2025 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@coveralls