Skip to content

deps: bump the python-minor-and-patch group with 5 updates - #7

Merged
FiraSenax merged 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-829b138292
Oct 9, 2026
Merged

deps: bump the python-minor-and-patch group with 5 updates#7
FiraSenax merged 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-829b138292

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 5 updates:

Package From To
cryptography 50.0.1 50.0.2
charset-normalizer 3.5.1 3.5.2
pyinstaller-hooks-contrib 2026.7 2026.8
pythonnet 3.1.0 3.2.0
ruff 0.11.13 0.16.10

Updates cryptography from 50.0.1 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.

.. _v50-0-1:

Commits

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Commits
  • 935c29a Release 3.5.2 (#805)
  • 9d3238a test: disable traefik in downstream niquests
  • b4c0368 docs: write changelog entry for 3.5.2
  • 717da31 chore: bump version to 3.5.2
  • 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
  • 41e28b6 chore: raise Cython upper bound to 3.3
  • b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
  • f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
  • See full diff in compare view

Updates pyinstaller-hooks-contrib from 2026.7 to 2026.8

Release notes

Sourced from pyinstaller-hooks-contrib's releases.

v2026.8

Please see the changelog for more details

Changelog

Sourced from pyinstaller-hooks-contrib's changelog.

2026.8 (2026-09-30)

New hooks


* Add a hook for ``fastmcp``, which requires metadata for ``fastmcp-slim``
  or ``fastmcp`` dist to be collected. (`[#1044](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1044)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1044>`_)
* Add hook for ``py_ecc`` to collect metadata (required starting with
  ``py-ecc`` v7.0.0). (`[#1043](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1043)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1043>`_)
* Add hook for ``sentry_sdk.integrations.mcp`` to collect metadata of
  ``mcp`` dist, if available; the version information is required by the
  integration module's initialization code. Fixes run-time error when
  building with both ``sentry_sdk`` and ``mcp`` installed. (`[#1046](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046>`_)

Updated hooks

  • Update numcodecs hook for compatibility with numcodecs v0.17.0, which tries to obtain its version from dist metadata. ([#1046](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1046>_)
  • Update hooks for trame and pyvista in order to restore out-of-the-box functionality of pyvista.Plotter. ([#1048](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1048) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1048>_)
  • Update the duckdb hook to collect all submodules from the package, as some of them (for example, duckdb.filesystem) are referenced only from binary extensions. Fixes _duckdb.InvalidInputException: Invalid Input Error: This operation could not be completed because required module 'fsspec' is not installed error when trying to load data from a file (e.g., a JSON file). ([#1047](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1047) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1047>_)
Commits
  • 95791f0 Release v2026.8
  • 60c82e5 hooks: update hooks from trame/pyvista
  • 596fdb1 Scheduled weekly dependency update for week 39 (#1048)
  • 46db5f1 ci: set PYINSTALLER_ZLIB_COMPRESSION_LEVEL=1
  • d54454c hooks: update duckdb hook to collect the package's submodules
  • cd8260e hooks: add hook for sentry_sdk.integrations.mcp
  • 8158227 hooks: update numcodecs hook for compatibility with numcodecs v0.17.0
  • 1c90a77 Scheduled weekly dependency update for week 38 (#1046)
  • 1554e1b tests: update sha256 sum for mariadb_repo_setup script
  • e892f91 hooks: add hook for fastmcp - fastmcp-slim
  • Additional commits viewable in compare view

Updates pythonnet from 3.1.0 to 3.2.0

Release notes

Sourced from pythonnet's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: pythonnet/pythonnet@v3.1.0...v3.2.0

v3.2.0-rc2

What's Changed

New Contributors

Full Changelog: pythonnet/pythonnet@v3.2.0-rc1...v3.2.0-rc2

v3.2.0-rc1

What's Changed

Full Changelog: pythonnet/pythonnet@v3.1.0...v3.2.0-rc1

Changelog

Sourced from pythonnet's changelog.

3.2.0 - 2026-09-29

Added

  • Support for Python 3.15 (#2729)
  • Support for free-threaded Python 3.14 (Py_GIL_DISABLED) (#2721)
  • Threading documentation covering GIL ownership, managed threads, and free-threaded Python (#2721)

Changed

  • Raise the minimum supported Python version from 3.10 to 3.11 (#2729)
  • Make runtime caches and CLR type binding safe for concurrent access (#2721)
  • Migrate the Visual Studio solution to the .slnx format (#2733)
  • Update GitHub Actions dependencies (#2739)

Fixed

  • Fix races in finalization, buffer disposal, assembly path updates, and Python subclass creation (#2721)
  • Fix method binding initialization when methods are first accessed (#2721)
  • Fix wheel and NuGet preview package builds
  • Python exception raised on conversion failure (#2741)
  • Introduce additional pre-checks in PyBuffer_GetPointer to prevent memory corruption (#2745)
Commits
  • 1c6be81 Release 3.2.0
  • 22c5d77 Introduce additional pre-checks in PyBuffer_GetPointer to prevent memory corr...
  • 33b9fd2 Bump NUnit from 3.14.0 to 5.0.0 (#2744)
  • 72df9ae Second release candidate for 3.2.0
  • a7af7a8 Python exception raised on conversion failure (#2741)
  • 8bb66fd Release candidate for 3.2.0
  • b79b58a Update changelog and adjust docs
  • 03e5ee6 Fix nuget preview package build
  • 24cbcb1 Drop macos x86_64 from CI as Homebrew dropped it
  • 7b08d70 Python 3.14 free-threaded support (#2721)
  • Additional commits viewable in compare view

Updates ruff from 0.11.13 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

0.16.9

Released on 2026-09-24.

Preview features

  • [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

  • [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
  • [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

  • Update LibCST-based fixes for Python 3.15 (#28616)

... (truncated)

Commits
  • 3265ed1 Bump version to 0.16.10 (#29055)
  • e786964 Authorize shared PR security-review workflow to publish findings (#29052)
  • a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
  • b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
  • 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
  • 317e0a3 [ty] Bound nested callable signature display (#29049)
  • 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
  • 56180bc [ty] Specialize instance members once (#29043)
  • aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
  • 2d25346 [ty] Improve unresolved-import documentation (#29039)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the python-minor-and-patch group with 5 updates
83554e4 
Bumps the python-minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` |
| [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib) | `2026.7` | `2026.8` |
| [pythonnet](https://github.com/pythonnet/pythonnet) | `3.1.0` | `3.2.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.13` | `0.16.10` |


Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `charset-normalizer` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

Updates `pyinstaller-hooks-contrib` from 2026.7 to 2026.8
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](pyinstaller/pyinstaller-hooks-contrib@v2026.7...v2026.8)

Updates `pythonnet` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/pythonnet/pythonnet/releases)
- [Changelog](https://github.com/pythonnet/pythonnet/blob/master/CHANGELOG.md)
- [Commits](pythonnet/pythonnet@v3.1.0...v3.2.0)

Updates `ruff` from 0.11.13 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.13...0.16.10)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pythonnet
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@FiraSenax
FiraSenax merged commit ef05161 into main Oct 9, 2026
9 of 12 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-and-patch-829b138292 branch October 9, 2026 13:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@FiraSenax