Skip to content

Bump the python group across 1 directory with 6 updates - #32

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/python-7af89e4824
Closed

Bump the python group across 1 directory with 6 updates#32
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/python-7af89e4824

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python group with 6 updates in the / directory:

Package From To
tqdm 4.70.0 4.70.1
sqlalchemy 2.0.52 2.1.1
google-cloud-storage 3.14.1 3.15.0
google-cloud-compute 1.52.0 1.54.0
pillow-heif 1.7.0 1.8.0
ruff 0.16.7 0.16.9

Updates tqdm from 4.70.0 to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

  • contrib.concurrent: fix no-len iterables (#1830 <- #1828)
  • tests: major overhaul (#1819)
  • update AI policy in PR template
  • misc lint & tidy
  • CI: bump workflow actions & pre-commit hooks
Commits

Updates sqlalchemy from 2.0.52 to 2.1.1

Release notes

Sourced from sqlalchemy's releases.

2.1.1

Released: September 25, 2026

platform

  • [platform] [bug] Removed the legacy underscore-separated extra names such as mssql_pymssql and postgresql_psycopg from pyproject.toml. They normalize to the same names as the existing dash-separated extras, which is disallowed by PEP 685, and caused the 2.1.0 source distribution to fail to build with installers that enforce this rule, such as uv. The underscore spellings continue to work when installing, as installers normalize extra names before matching them.

    References: #13604

2.1.0

Released: September 24, 2026

orm

  • [orm] [feature] Added _orm.composite.column_template parameter to _orm.composite(). When the composite class is a dataclass, this parameter accepts a string template such as "person_%s", containing exactly one %s placeholder, that's used to generate column names for dataclass fields that don't otherwise have an explicit name, rather than using the bare field name. This removes the need to hand-write a _orm.mapped_column() for each field when the same composite dataclass is mapped multiple times on the same class with different column-name prefixes. Pull request courtesy Leonardo Rosa.

    References: #12575

  • [orm] [bug] Fixed issue where pickling an ORM object that had an instance level lazy loader established, such as when the _orm.raiseload() option is used, would emit a spurious warning regarding the loader containing additional criteria, if the object had itself been unpickled from a previous serialization. This would occur for objects that cross more than one serialization boundary, such as when using multiprocessing.

    This change is also backported to: 2.0.53

    References: #13574

  • [orm] [bug] Fixed issue where calling _orm.aliased() against an existing _orm.aliased() construct, without passing an explicit selectable, would disregard the selectable of the existing construct and produce an

... (truncated)

Commits

Updates google-cloud-storage from 3.14.1 to 3.15.0

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage: v3.15.0

3.15.0 (2026-09-24)

Features

  • storage: support storage_class in AsyncAppendableObjectWriter (#18289) (dc30df2)
  • storage: support storage_class via Blob in AsyncAppendableObjectWriter (#18318) (b0872f2)
Changelog

Sourced from google-cloud-storage's changelog.

3.15.0 (2026-06-02)

Features

3.14.0 (2026-04-02)

Features

3.13.0 (2026-03-26)

Features

Bug Fixes

3.12.0 (2026-03-23)

Features

3.11.0 (2026-03-05)

Features

3.10.0 (2026-02-12)

Documentation

... (truncated)

Commits
  • c0208c6 chore: release main (#18421)
  • e654dc2 chore(main): release google-auth 2.58.1 (#18462)
  • 1665e68 fix(auth): allow mTLS retry when credentials raise NotImplementedError on ref...
  • 89310be chore(main): release google-crc32c 1.9.0 (#18459)
  • 9cb21d0 fix: regenerate gencode with protobuf 6.33.5 (#18461)
  • 54f1019 feat: update API sources and regenerate (#18446)
  • a04c831 feat(firestore): add BSONDecimal128 support (#18395)
  • 1bf979a fix(crc32c): remove stale pypy reference from README (#18458)
  • fdaa618 chore(crc32c): run manylinux wheel validation and upload in isolated Python 3...
  • 5fe1ef3 feat: add 3.15 support to gapic library classifiers (#18450)
  • Additional commits viewable in compare view

Updates google-cloud-compute from 1.52.0 to 1.54.0

Release notes

Sourced from google-cloud-compute's releases.

google-cloud-compute: v1.54.0

1.54.0 (2026-09-17)

Features

google-cloud-compute: v1.53.0

1.53.0 (2026-09-14)

Features

Commits
  • 773373e chore: release main (#18368)
  • 3b3cc6f fix: empty commit to bump v1beta version (#18411)
  • dd24029 fix(spanner): release transaction lock if inline begin fails (#18409)
  • a511b55 chore: migrate pre-release test into nightly GitHub Action (#18387)
  • 91b7ae7 feat(google/cloud/backupdr/v1beta): add google-cloud-backupdr (#18399)
  • 20bdcc8 chore: onboard google-cloud-spanner-dbapi-driver (#18403)
  • 136d4b9 feat(firestore): add BSONInt32 support (#18388)
  • 8df34ce feat(google/cloud/networkservices/v1beta1): add google-cloud-network-services...
  • e9f8e59 feat: update API sources and regenerate (#18396)
  • 0d7d59c fix: disambiguate google-cloud-bigquery to_dataframe usage from `pandas-gbq...
  • Additional commits viewable in compare view

Updates pillow-heif from 1.7.0 to 1.8.0

Release notes

Sourced from pillow-heif's releases.

v1.8.0

Added

  • Reading of entity groups: entity_groups key in info dictionary, tells which images form a stereo pair in spatial photos. #476
  • Decoding of embedded thumbnails: HeifImage.get_thumbnail method and draft in the Pillow plugin, Image.thumbnail() uses them instead of decoding the full image. #477

Changed

  • Minimum required libheif version is 1.23.4. #480
  • libheif was updated from the 1.23.3 to 1.23.4 version. #479
  • libde265 was updated from the 1.1.2 to 1.1.3 version. #483

Fixed

  • Segmentation fault when opening a file whose metadata item type is not valid UTF-8. #478
  • Pillow plugin: load() of a multi-frame image reloaded the frame data on every call, discarding in-place changes and failing after thumbnail(). #477
  • A depth image of an item type that libheif cannot decode made the whole file unreadable with libheif 1.23.4, such depth images are now skipped. #480
  • Type checkers treated the names imported from pillow_heif as private since the py.typed marker was added in 1.7.0: Pyright/Pylance and mypy --strict reported them as not exported, Pyright/Pylance autocompletion did not offer them. #490 Thanks to @​BetoFernandez123
Changelog

Sourced from pillow-heif's changelog.

[1.8.0 - 2026-09-22]

Added

  • Reading of entity groups: entity_groups key in info dictionary, tells which images form a stereo pair in spatial photos. #476
  • Decoding of embedded thumbnails: HeifImage.get_thumbnail method and draft in the Pillow plugin, Image.thumbnail() uses them instead of decoding the full image. #477

Changed

  • Minimum required libheif version is 1.23.4. #480
  • libheif was updated from the 1.23.3 to 1.23.4 version. #479
  • libde265 was updated from the 1.1.2 to 1.1.3 version. #483

Fixed

  • Segmentation fault when opening a file whose metadata item type is not valid UTF-8. #478
  • Pillow plugin: load() of a multi-frame image reloaded the frame data on every call, discarding in-place changes and failing after thumbnail(). #477
  • A depth image of an item type that libheif cannot decode made the whole file unreadable with libheif 1.23.4, such depth images are now skipped. #480
  • Type checkers treated the names imported from pillow_heif as private since the py.typed marker was added in 1.7.0: Pyright/Pylance and mypy --strict reported them as not exported, Pyright/Pylance autocompletion did not offer them. #490 Thanks to @​BetoFernandez123
Commits
  • 1486e9f v1.8.0
  • 1ffdd5d fix: names imported from pillow_heif were private for type checkers (#490)
  • c775daf [pre-commit.ci] pre-commit autoupdate (#484)
  • 8f2c0f6 fix(tests): Pillow 13 resize order changes one hash bit (#489)
  • abcfd35 chore(deps): update dependency strukturag/libde265 to v1.1.3 (#483)
  • fa18f51 fix: a depth image of an unsupported item type made the file unreadable (#480)
  • efdbf03 [pre-commit.ci] pre-commit autoupdate (#481)
  • 07f7203 feat: decode embedded thumbnails, draft() in the Pillow plugin (#477)
  • d60dcd2 chore(deps): update dependency strukturag/libheif to v1.23.4 (#479)
  • 07334a0 fix: segfault on a metadata item type that is not valid UTF-8 (#478)
  • Additional commits viewable in compare view

Updates ruff from 0.16.7 to 0.16.9

Release notes

Sourced from ruff's releases.

0.16.9

Release Notes

Released on 2026-09-24.

Preview features

  • [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

  • [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
  • [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

  • Update LibCST-based fixes for Python 3.15 (#28616)
  • [flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

  • Fix horizontal overflow on the rules documentation page (#28699)
  • Update rules table with category information (#28651)
  • [flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)
  • [flake8-bugbear] Document type-checker interaction (B010) (#28509)
  • [flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)
  • [ruff] Mention related isort settings (RUF022) (#28719)

Contributors

Install ruff 0.16.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.9

Released on 2026-09-24.

Preview features

  • [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

  • [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
  • [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

  • Update LibCST-based fixes for Python 3.15 (#28616)
  • [flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

  • Fix horizontal overflow on the rules documentation page (#28699)
  • Update rules table with category information (#28651)
  • [flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)
  • [flake8-bugbear] Document type-checker interaction (B010) (#28509)
  • [flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)
  • [ruff] Mention related isort settings (RUF022) (#28719)

Contributors

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)

... (truncated)

Commits
  • 0be08a2 Bump version to 0.16.9 (#28882)
  • b4920b7 Rename ruff_cli to ruff_command_line (#28881)
  • 47c751b Update dependency astral-sh/uv to v0.12.18 (#28880)
  • 8c244e5 [flake8-comprehensions] Document map/generator exception behavior (C417...
  • 5edf5a1 Use target form in rooster.version_files (#28876)
  • 915bb2b [ty] Prefer existing @ paths over response files in Ruff and ty (#28877)
  • 4710e1a ci(github): update version number in placeholder of issue template (#28871)
  • eedfc62 [ty] Propagate outer type context through cast calls (#28855)
  • ceaa6a0 [ty] Contain rendered code within Markdown fences (#28869)
  • dba0f30 authorize ruff-pre-commit dispatch via OIDC (#28867)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python group across 1 directory with 6 updates
830b480 
Bumps the python group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [tqdm](https://github.com/tqdm/tqdm) | `4.70.0` | `4.70.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.52` | `2.1.1` |
| [google-cloud-storage](https://github.com/googleapis/google-cloud-python) | `3.14.1` | `3.15.0` |
| [google-cloud-compute](https://github.com/googleapis/google-cloud-python) | `1.52.0` | `1.54.0` |
| [pillow-heif](https://github.com/bigcat88/pillow_heif) | `1.7.0` | `1.8.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.7` | `0.16.9` |



Updates `tqdm` from 4.70.0 to 4.70.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.70.0...v4.70.1)

Updates `sqlalchemy` from 2.0.52 to 2.1.1
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `google-cloud-storage` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.14.1...google-cloud-storage-v3.15.0)

Updates `google-cloud-compute` from 1.52.0 to 1.54.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-compute-v1.52.0...google-cloud-compute-v1.54.0)

Updates `pillow-heif` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/bigcat88/pillow_heif/releases)
- [Changelog](https://github.com/bigcat88/pillow_heif/blob/master/CHANGELOG.md)
- [Commits](bigcat88/pillow_heif@v1.7.0...v1.8.0)

Updates `ruff` from 0.16.7 to 0.16.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.7...0.16.9)

---
updated-dependencies:
- dependency-name: tqdm
  dependency-version: 4.70.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: sqlalchemy
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: google-cloud-storage
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: google-cloud-compute
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pillow-heif
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.16.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 7, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/develop/python-7af89e4824 branch October 7, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants