Skip to content

deps: Bump the python-minor-and-patch group across 1 directory with 10 updates - #53

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-cae032a38d
Closed

deps: Bump the python-minor-and-patch group across 1 directory with 10 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-cae032a38d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 10 updates in the / directory:

Package From To
typer 0.26.8 0.27.0
platformdirs 4.10.0 4.11.0
vgi-rpc 0.26.0 0.28.0
duckdb 1.5.4 1.5.5
numpy 2.5.0 2.5.1
sqlglot 30.12.0 30.14.0
mypy 2.1.0 2.3.0
ty 0.0.55 0.0.63
mkdocs-material 9.7.6 9.7.7
pymdown-extensions 11.0 11.0.1

Updates typer from 0.26.8 to 0.27.0

Release notes

Sourced from typer's releases.

0.27.0

Breaking Changes

Internal

Changelog

Sourced from typer's changelog.

0.27.0 (2026-07-15)

Breaking Changes

Internal

Commits

Updates platformdirs from 4.10.0 to 4.11.0

Release notes

Sourced from platformdirs's releases.

4.11.0

What's Changed

Full Changelog: tox-dev/platformdirs@4.10.1...4.11.0

4.10.1

What's Changed

Full Changelog: tox-dev/platformdirs@4.10.0...4.10.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.11.0 (2026-07-21)

  • Declare support for Python 3.15 and run the test suite against it, currently in beta. :pr:512

4.10.1 (2026-07-18)

  • Stop leaking memory on repeated Windows folder lookups. get_win_folder_via_ctypes defined a fresh ctypes structure on every call, and each one registered a pointer type that was never released; the resolver is now built once and reused. :pr:507

4.10.0 (2026-05-28)

  • Add :func:~platformdirs.user_publicshare_dir, :func:~platformdirs.user_templates_dir, :func:~platformdirs.user_fonts_dir, and :func:~platformdirs.user_preference_dir :pr:491
  • Add :func:~platformdirs.user_projects_dir backed by $XDG_PROJECTS_DIR :pr:490
  • Return only the first path from :func:~platformdirs.site_config_path on macOS when multipath is set :pr:488 - by :user:lphuc2250gma

4.9.6 (2026-04-09)

  • Fix macOS XDG variables leaking across :func:~platformdirs.user_config_dir, :func:~platformdirs.user_data_dir, and :func:~platformdirs.user_state_dir when only some are set :pr:473 - by :user:Goddesen
  • Avoid duplicate site directories in Unix :meth:~platformdirs.PlatformDirs.iter_config_dirs and :meth:~platformdirs.PlatformDirs.iter_data_dirs when use_site_for_root is active :pr:469 - by :user:viccie30

4.9.4 (2026-03-05)

  • Respect XDG_CONFIG_HOME when reading the user-dirs configuration :pr:453 - by :user:bysiber
  • Create the directory in Android :func:~platformdirs.user_log_dir and :func:~platformdirs.user_runtime_dir when ensure_exists is set :pr:452 - by :user:bysiber

... (truncated)

Commits
  • 2140495 Release 4.11.0
  • a562df9 👷 ci: run the test suite against Python 3.15 (#512)
  • 7c764c4 [pre-commit.ci] pre-commit autoupdate (#511)
  • 2e74013 Release 4.10.1
  • 3076722 📝 docs(changelog): rebuild against release history (#510)
  • 42751ce 🚀 ci(release): towncrier changelog + publish on tag push (#509)
  • d2e5756 fix(windows): stop leaking ctypes pointer types on repeated calls (#507)
  • 4f52c4f build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 in the all group (#506)
  • f68e56f build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in the all group (#504)
  • 806560b build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in the all group (#502)
  • Additional commits viewable in compare view

Updates vgi-rpc from 0.26.0 to 0.28.0

Release notes

Sourced from vgi-rpc's releases.

v0.28.0 — proxy proof

Adds proxy proof: an opt-in gate letting a worker refuse any request that did not arrive through a trusted proxy.

The proxy mints a per-request HMAC-SHA256 over a timestamp, a nonce and the worker's own identifier, keyed by a secret shared only with that worker. Unlike a forwarded assertion about what happened at a TLS terminator, a proof cannot be produced by someone who merely reaches the worker directly — without the secret there is nothing to replay.

  • docs/proxy-proof-spec.md is the normative cross-language contract.
  • http/_proof.py — mint/verify, per-(proxy, origin) secret derivation, and the off/allow/require gate.
  • http/_replay.py — nonce cache bounded by capacity as well as TTL.
  • require_all() composes a precondition with a credential as an AND; chain_authenticate now rejects a PreconditionGate at construction, since chaining is first-success-wins and would make the gate bypassable.
  • serve_http() gains authenticate= and token_key=.
  • Conformance: TestProxyProof (fixture-gated) and TestProxyProofOffMode (ungated).

Also fixes TestHealth::test_health_does_not_require_auth, which asserted 401 against a path that does not exist and so proved nothing about auth.

v0.27.0

Preserve extra batch metadata across a re-frame

An intermediary that re-serializes a request — e.g. the Cedar proxy stripping an argument or injecting a row filter — rebuilds the request batch's custom_metadata and would drop any application keys the client set on it. Most importantly this loses the result-cache (M6) conditional-revalidation validators (vgi.cache.if_none_match / if_modified_since), which ride the request batch, not the payload — so the worker recomputes instead of answering 304 not_modified.

write_request / _write_request gain an extra_metadata parameter that merges additional custom_metadata into the request batch. Framework keys (method / version / shm / trace) always win, so a caller can never forge them.

Tolerate empty IPC buffers from lenient producers

deserialize_record_batch now decodes a schema-only / empty IPC stream to a zero-row batch instead of raising IPCError. Lenient producers (the Rust / Go / Java SDKs, tolerated by the DuckDB C++ client) omit the batch for an empty nested value, so a strict consumer must accept it rather than fail closed on a legitimate response.

v0.26.1

Decode compressed requests even when response compression is off

make_wsgi_app(compression_level=None) dropped _CompressionMiddleware entirely — but that middleware does two independent jobs: decompressing request bodies and compressing response bodies. Removing it removed both.

So a compression-disabled server fed a zstd request body handed compressed bytes straight to the Arrow reader and returned a 500 (Invalid IPC stream: negative continuation token) instead of decoding it.

That path is reachable in practice: the DuckDB engine client defaults to zstd request bodies and only re-picks a codec on a 415, so it never learns to stop.

The fix

The two capabilities are now separately expressible:

  • encode_levels — governs response compression; empty means never compress a response.
  • decode_encodings — governs which request Content-Encoding values are accepted.

A boolean flag was deliberately not used: it would have left the encode and decode sets fused, which is precisely the bug.

VGI-Supported-Encodings still tracks the encode set and is still emitted present-but-empty when compression is off. Being lenient about what we accept is not a capability worth announcing — the header is the contract a client negotiates against. Unknown request codecs still return 415.

Conformance

Two new cross-language cases:

  • an advertised codec must round-trip as a request body;
  • a compression-disabled server must answer a compressed request with a negotiated result and never a 5xx.

... (truncated)

Commits
  • 1ca87e4 fix: satisfy pydoclint for the new proxy-proof modules
  • aff3927 fix: satisfy strict type checks for the proxy-proof conformance group
  • f92baa7 release: 0.28.0 — proxy proof (HMAC proof-of-hop for workers)
  • b259a9f release: 0.27.0 — extra_metadata passthrough + empty-buffer tolerance
  • b6a21e4 style: apply ruff format to test_wire + utils
  • 2689e5e write_request: carry extra batch metadata across a re-frame
  • e540919 deserialize: tolerate empty IPC buffers from lenient producers
  • 2417ad8 Release 0.26.1
  • 9f4f2dd fix(http): decode compressed requests even when response compression is off
  • See full diff in compare view

Updates duckdb from 1.5.4 to 1.5.5

Release notes

Sourced from duckdb's releases.

v1.5.5 Bugfix Release

See DuckDB's changelog for all changes in DuckDB.

What's Changed in DuckDB-Python

Commits

Updates numpy from 2.5.0 to 2.5.1

Release notes

Sourced from numpy's releases.

v2.5.1 (July 4, 2026)

NumPy 2.5.1 Release Notes

The NumPy 2.5.1 is a patch release that fixes bugs discovered after the 2.5.0 release. The most noticeable is the fix is to the numpy datetime cython API which should allow downstream to support NumPy versions older than 2.5. Preparation for Python 3.15 continues along with typing improvements.

This release supports Python versions 3.12-3.14

Changes

  • The minimum supported GCC version has been updated from 9.3.0 to 10.3.0

    (gh-31843)

Contributors

A total of 10 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Adhyan Gupta +
  • Ankit Ahlawat
  • Charles Harris
  • Iason Krommydas
  • Joren Hammudoglu
  • Kumar Aditya
  • Nathan Goldbaum
  • Sebastian Berg
  • Ties Jan Hefting +
  • Vineet Kumar

Pull requests merged

A total of 20 pull requests were merged for this release.

  • #31707: MAINT: Prepare 2.5.x for further development
  • #31721: CI: fix new cython-lint errors (#31711)
  • #31723: MAINT: Update meson to match main
  • #31729: TST: use setup-sde instead of curl to get SDE binaries (#31727)
  • #31829: BUG: Relax finfo to be easier accessible for all user dtypes...
  • #31831: TYP: Fix flatiter.__next__ return type for object_ and...
  • #31832: BUG: avoid deadlocks using NpyString API (#31682)
  • #31833: BUG: fix out array leak in reduceat and accumulate when dtype...
  • #31835: BUG: fix numpy datetime cython APIs to be compatible with older...
  • #31836: TYP: Fix incorrect dtype inference of asarray([]) (#31732)
  • #31837: TYP: Fix np.ma.masked_array 2.5.0 regression
  • #31838: FIX: Refactor error handling in array_setstate to prevent typecode...
  • #31839: TST: xfail multithreaded BLAS test more generously
  • #31840: MAINT: Rename subroutine for crackfortran tests

... (truncated)

Commits
  • 5e1d03f Merge pull request #31863 from charris/prepare-2.5.1
  • ad0b66b REL: Prepare for the NumPy 2.5.1 release.
  • 9df8516 Merge pull request #31858 from charris/backport-31688
  • 4dee265 Merge pull request #31857 from charris/backport-31775
  • dc8d553 Merge pull request #31856 from charris/backport-31846
  • 67cb4a8 fix:Signed integer overflow in datetime.c (#31688)
  • baa2589 TST: Clean up imports, formatting, and assertions
  • 2fe5ba4 TEST: Refactor tests to use np.testing.assert_raises_regex per review
  • bb46581 MAINT: Remove deprecated Python recursion fix
  • 8f34214 MAINT: Move SeedSequence recursion guard to C-layer and add tests
  • Additional commits viewable in compare view

Updates sqlglot from 30.12.0 to 30.14.0

Commits
  • 29c651b Chore: retrigger v30.14.0 release
  • b9fd4c9 Fix(typing): on_qualify expects a Table argument
  • ebf3dd8 Sync w/ integration tests
  • 2aae7f7 feat(postgres)!: preserve x IS NOT NULL instead of normalizing to NOT x IS NU...
  • ba0bff3 fix(jsonpath): preserve falsey union members (#7957)
  • 296d8b0 Chore: polish README file (#7947)
  • 33de21f feat(optimizer)!: annotate regexpsubstr for mysql (#7946)
  • 26078eb feat(optimizer)!: annotate unhex for mysql (#7944)
  • 166cd4d feat(optimizer)!: annotate substringindex for mysql (#7945)
  • 6bb78c9 Feat(snowflake): add support for input => select ... kwarg syntax
  • Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
  • 24c237d [mypyc] Improve documentation of Final (#21713)
  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
  • cbcb51a Narrow for frozendict membership check (#21709)
  • af2bc0f Sync typeshed (#21707)
  • Additional commits viewable in compare view

Updates ty from 0.0.55 to 0.0.63

Release notes

Sourced from ty's releases.

0.0.63

Release Notes

Released on 2026-07-23.

Core type checking

  • Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
  • Allow equality narrowing across non-final classes (#27031)
  • Allow interpolated string literals to be promoted to str (#27104)
  • Fix double specialization of generic type aliases (#27058)
  • Fix intersections of type and TypeForm (#27099)
  • When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)

Library support

  • Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
  • Pydantic: Support special underscore parameters in BaseSettings models (#27098)

Performance

  • Avoid exponential narrowing of optional dynamic match subjects (#27100)
  • Avoid normalizing cached absolute file paths (#26998)

Contributors

Install ty 0.0.63

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.63/ty-installer.ps1 | iex"

Download ty 0.0.63

File Platform Checksum
ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.63

Released on 2026-07-23.

Core type checking

  • Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
  • Allow equality narrowing across non-final classes (#27031)
  • Allow interpolated string literals to be promoted to str (#27104)
  • Fix double specialization of generic type aliases (#27058)
  • Fix intersections of type and TypeForm (#27099)
  • When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)

Library support

  • Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
  • Pydantic: Support special underscore parameters in BaseSettings models (#27098)

Performance

  • Avoid exponential narrowing of optional dynamic match subjects (#27100)
  • Avoid normalizing cached absolute file paths (#26998)

Contributors

0.0.62

Released on 2026-07-21.

Bug fixes

  • Guard recursive Protocol and TypedDict relations (#26990)
  • Prevent stack overflows in recursive type relation checks (#26503)
  • Recover from cancelled file indexing (#26876)

Diagnostics

  • Avoid editing ignore comments with trailing reasons (#26939)
  • Prefer innermost inline suppressions (#26940)
  • Remove unused own-line ignore comments (#27013)
  • Reuse applicable own-line suppressions in --add-ignore (#26925)

Configuration

  • Respect rules and analysis in PEP 723 script metadata configurations (#26671)

... (truncated)

Commits

Updates mkdocs-material from 9.7.6 to 9.7.7

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.7

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates.

The path forward is Zensical, our next-generation static site generator built from first principles. If you’re planning a new documentation project or thinking about your long-term setup, we encourage you to start exploring Zensical.

Organizations requiring support beyond this date can get in touch to discuss options.

Read the full announcement on our blog

Changes

  • Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @​p- for responsibly reporting this issue.

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.7 (2026-07-17)

  • Fixed DOM-based XSS vulnerability in search suggestions

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved

... (truncated)

Commits

Updates pymdown-extensions from 11.0 to 11.0.1

Release notes

Sourced from pymdown-extensions's releases.

11.0.1

  • FIX: BetterEm: Fix regex pattern inefficiencies.
  • FIX: Tilde: Fix regex pattern inefficiencies.
  • FIX: Caret: Fix regex pattern inefficiencies.
  • FIX: MagicLink: Fix regex pattern inefficiencies.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: Bump the python-minor-and-patch group across 1 directory with 1…
be0b58b 
…0 updates

Bumps the python-minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [typer](https://github.com/fastapi/typer) | `0.26.8` | `0.27.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.10.0` | `4.11.0` |
| [vgi-rpc](https://github.com/Query-farm/vgi-rpc-python) | `0.26.0` | `0.28.0` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.4` | `1.5.5` |
| [numpy](https://github.com/numpy/numpy) | `2.5.0` | `2.5.1` |
| [sqlglot](https://github.com/tobymao/sqlglot) | `30.12.0` | `30.14.0` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.55` | `0.0.63` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.6` | `9.7.7` |
| [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `11.0` | `11.0.1` |



Updates `typer` from 0.26.8 to 0.27.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.0)

Updates `platformdirs` from 4.10.0 to 4.11.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.0...4.11.0)

Updates `vgi-rpc` from 0.26.0 to 0.28.0
- [Release notes](https://github.com/Query-farm/vgi-rpc-python/releases)
- [Commits](Query-farm/vgi-rpc-python@v0.26.0...v0.28.0)

Updates `duckdb` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.4...v1.5.5)

Updates `numpy` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.0...v2.5.1)

Updates `sqlglot` from 30.12.0 to 30.14.0
- [Commits](tobymao/sqlglot@v30.12.0...v30.14.0)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `ty` from 0.0.55 to 0.0.63
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.55...0.0.63)

Updates `mkdocs-material` from 9.7.6 to 9.7.7
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.6...9.7.7)

Updates `pymdown-extensions` from 11.0 to 11.0.1
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](facelessuser/pymdown-extensions@11.0...11.0.1)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: platformdirs
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: vgi-rpc
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: duckdb
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: numpy
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: sqlglot
  dependency-version: 30.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.63
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pymdown-extensions
  dependency-version: 11.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 27, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-and-patch-cae032a38d branch July 27, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants