Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 14 updates#27

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-dependencies-6b52845803
Open

chore(deps): bump the python-dependencies group across 1 directory with 14 updates#27
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-dependencies-6b52845803

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Updates the requirements on polars[database,pyarrow], pandera[polars], sqlmodel, duckdb, rich, textual, pytest, pytest-cov, respx, hypothesis, ruff, ty, sqlfluff and sqlglot to permit the latest version.
Updates polars[database,pyarrow] to 1.39.3

Release notes

Sourced from polars[database,pyarrow]'s releases.

Python Polars 1.39.3

  • No changes

Thank you to all our contributors for making this release possible! @​ritchie46

Commits
  • 1cd236c version + lockfile
  • ebe3364 lockfile
  • 4f31f72 fix: Fix ColumnNotFound due to projection between filter/cache in CSPE (#26946)
  • 71873e5 bump
  • 39d1d4c fix: Fix the loop bounds in `BitmapBuilder::extend_each_repeated_from_slice_u...
  • 0f5ae40 fix: Default engine as streaming for collect_batches (#26932)
  • 266141e lockfile
  • 259723f Python Polars 1.39.1
  • 1b71c72 fix: Fix error passing Series of dates to business functions (#26927)
  • 16725ce fix: Propagate null in min_by / max_by for all-null by groups (#26919)
  • Additional commits viewable in compare view

Updates pandera[polars] to 0.30.1

Release notes

Sourced from pandera[polars]'s releases.

v0.30.1

What's Changed

New Contributors

Full Changelog: unionai-oss/pandera@v0.30.0...v0.30.1

Commits
  • 85a8af4 polars: support instance types (#2239)
  • 00f9e70 Refactor Pandera accessors to use schema registry for managing schemas (#2241)
  • e7e0e65 fix pandas docs reference in conf.py (#2237)
  • 61b1f90 unpin geopandas (#2236)
  • 96e4f9f fix bug in custom parser, built-in check, drop invalid rows (#2234)
  • 1be6856 polars column regex reports column name (#2233)
  • 2aee13d implement PydanticModel for polars (#2231)
  • 7492a00 Refactor empty DataFrame creation in DataFrameModel to eliminate deepcopy and...
  • 766eddc [🐼 pandas 3] change default string to pandas-native string (#2229)
  • 6900659 fix optional nested validation (#2218)
  • Additional commits viewable in compare view

Updates sqlmodel from 0.0.37 to 0.0.38

Release notes

Sourced from sqlmodel's releases.

0.0.38

Fixes

  • 🐛 Fix type annotation in SQLModel.__new__, avoid explicitly returning Any. PR #1846 by @​carljm.
  • 🐛 Fix tuple_ return type annotation. PR #1639 by @​kakeruzoku.

Docs

Internal

... (truncated)

Changelog

Sourced from sqlmodel's changelog.

0.0.38 (2026-04-02)

Fixes

  • 🐛 Fix type annotation in SQLModel.__new__, avoid explicitly returning Any. PR #1846 by @​carljm.
  • 🐛 Fix tuple_ return type annotation. PR #1639 by @​kakeruzoku.

Docs

Internal

... (truncated)

Commits
  • de0ecdf 🔖 Release version 0.0.38
  • 8363cc7 📝 Update release notes
  • ae672ce 🔨 Add pre-commit hook to ensure latest release header has date (#1786)
  • f9e8e4c 📝 Update release notes
  • 5da82e2 🐛 Fix type annotation in SQLModel.__new__, avoid explicitly returning Any...
  • 9a44fc4 📝 Update release notes
  • f7e193a ⬆ Bump pillow from 12.1.1 to 12.2.0 (#1845)
  • 2df429f 📝 Update release notes
  • a2474ce ⬆ Bump fastapi from 0.135.2 to 0.135.3 (#1844)
  • fc18b94 📝 Update release notes
  • Additional commits viewable in compare view

Updates duckdb from 1.4.4 to 1.5.1

Release notes

Sourced from duckdb's releases.

v1.5.1 Bugfix Release

DuckDB core v1.5.1 Changelog: duckdb/duckdb@v1.5.0...v1.5.1

What's Changed

  • Re-added basic support for the GEOMETRY type

DuckDB Python 1.5.0 "Variegata"

This is the 1.5.0 release of DuckDB's Python bindings. For a list of changes in DuckDB core, have a look at the DuckDB release notes and the blogpost.

Breaking Changes

  • Dropped Python 3.9 support. The minimum supported version is now Python 3.10.
  • Removed deprecated duckdb.typing and duckdb.functional modules. These were deprecated in 1.4.0. Use duckdb.sqltypes and duckdb.func instead.
  • Renamed column parameter to expression in relational API functions (e.g., min, max, sum, mean, etc.) to better reflect that these accept expressions, not just column names.
  • Deprecated fetch_arrow_table() and fetch_record_batch() on connections and relations. Use the new to_arrow_table() and to_arrow_reader() methods instead.

New Features

  • Polars LazyFrame projection and filter pushdown. DuckDB can now push down projections and filters when scanning Polars LazyFrames, including support for cast nodes and unstrict casts.
  • Polars Int128 / UInt128 support.
  • VARIANT type support — Python conversion, NumPy array wrapping, and type stubs.
  • TIME_NS type support — nanosecond-precision time values across Python, NumPy, and Spark type systems.
  • Profiling API — new get_profiling_info() and get_profiling_json() methods on connections, plus a refactored query_graph module with improved HTML visualization (dark mode, expandable phases, depth).
  • to_arrow_table() and to_arrow_reader() — new methods on connections and relations as the preferred Arrow export API.

Performance

  • __arrow_c_stream__ on relations — relations now export via the Arrow PyCapsule interface using PhysicalArrowCollector for zero-copy streaming.
  • Unified Arrow stream scanning via __arrow_c_stream__, with filter pushdown only when pyarrow is present.
  • Arrow schema caching to avoid repeated lookups during scanning.
  • Arrow object type caching to avoid repeated detection.
  • Empty params treated as None for .sql() — avoids unnecessary parameter binding overhead.
  • Simplified GIL management for FetchRow.

Bug Fixes

  • Fixed Python object leak in scalar UDFs — PyObject_CallObject return values are now properly stolen to avoid reference count leaks.
  • Fixed reference cycle between connections and relations that could prevent garbage collection.
  • Relations now hold a reference to their connection, preventing premature connection closure.
  • Fixed fsspec race condition in the Python filesystem implementation.
  • Fixed numeric conversion logic — improved handling of large integers (fallback to VARCHAR) and UNION types.
  • pyarrow.dataset import is now optional — no longer fails if pyarrow is installed without the dataset module.
  • Thrown a reasonable error when an Arrow array stream has already been consumed.

Build & Packaging

  • jemalloc enabled on Linux x86_64 only (aligned with DuckDB core), removed as a separately bundled extension.
  • MSVC runtime linked statically on Windows — eliminates the VS2019 workaround from duckdb/duckdb#17991.
Commits

Updates rich from 14.3.3 to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

The Faster Startup Release

No new features in this release, but there should be improved startup time for Rich apps, and potentially improved runtime if you have a lot of links.

[14.3.4] - 2026-04-11

Changed

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

[14.3.4] - 2026-04-11

Changed

Commits

Updates textual from 8.0.2 to 8.2.3

Release notes

Sourced from textual's releases.

The snappier resize Release

[8.2.3] - 2026-04-05

Changed

The Faster Resize Release

Fixed an issue where styles were being unneccesarily updated when resizing. Textual apps will now adapt to changes in the terminal size much more quickly.

[8.2.2] - 2026-04-03

Fixed

The Hot Select Release

Fixes a crash when a selected widget is removed while selecting

[8.2.1] - 2026-03-29

Fixed

The Select Release

This release enhances text selection, with auto-scrolling, and the ability to select across container widgets.

This work was sponsored by Mistral AI.

[8.2.0] - 2026-03-27

Added

The Hotly Completed Release

[8.1.1] - 2026-03-10

Fixed

The Paused Released

This release should smooth scrolling large documents, particularly for Python < 3.14

[8.1.0] - 2026-03-10

... (truncated)

Changelog

Sourced from textual's changelog.

[8.2.3] - 2026-04-05

Changed

[8.2.2] - 2026-04-03

Fixed

[8.2.1] - 2026-03-29

Fixed

[8.2.0] - 2026-03-27

Added

[8.1.1] - 2026-03-10

Fixed

[8.1.0] - 2026-03-10

Changed

Added

Commits

Updates pytest from 9.0.2 to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

Updates pytest-cov from 7.0.0 to 7.1.0

Changelog

Sourced from pytest-cov's changelog.

7.1.0 (2026-03-21)

  • Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation. Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and "vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>. Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.

  • Fixed some assertions in tests. Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

Commits
  • 66c8a52 Bump version: 7.0.0 → 7.1.0
  • f707662 Make the examples use pypy 3.11.
  • 6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
  • 8ebf20b Update changelog.
  • 861d30e Remove the backup context manager - shouldn't be needed since coverage 5.0, ...
  • fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
  • 78c9c4e Only run the 3.9 on older deps.
  • 4849a92 Punctuation.
  • 197c35e Update changelog and hopefully I don't forget to publish release again :))
  • 14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
  • Additional commits viewable in compare view

Updates respx from 0.22.0 to 0.23.1

Release notes

Sourced from respx's releases.

Version 0.23.1

0.23.1 (8th April 2026)

Fixed

  • Fix regression causing params pattern to stop working under some conditions, by doing a strict detection of ANY in multi items patterns (#313)

CI

  • Update workflows actions (#310)

Version 0.23.0

0.23.0 (7th April 2026)

Fixed

  • Fix data pattern with list value (#264)
  • Fix and enhance incorrect documentations about iterable side effects (#287)
  • Fix documentation typo, thanks @​markhobson (#298)
  • Fix support for multiple slashes // in URL path by not using urljoin when prepending path, thanks @​lewiscollard and @​Skeen (#302)
  • Type Route.respond json as Any to align with HTTPX, thanks @​JacobHayes (#284)
  • Properly handle ANY in MuitiItems patterns (#289)

CI

Changelog

Sourced from respx's changelog.

[0.23.1] - 2026-04-08

Fixed

  • Fix regression causing params pattern to stop working under some conditions, by doing a strict detection of ANY in multi items patterns (#313)

CI

  • Update workflows actions (#310)

[0.23.0] - 2026-04-07

Fixed

  • Fix data pattern with list value (#264)
  • Fix and enhance incorrect documentations about iterable side effects (#287)
  • Fix documentation typo, thanks @​markhobson (#298)
  • Fix support for multiple slashes // in URL path by not using urljoin when prepending path, thanks @​lewiscollard and @​Skeen (#302)
  • Type Route.respond json as Any to align with HTTPX, thanks @​JacobHayes (#284)
  • Properly handle ANY in MuitiItems patterns (#289)

CI

Commits

Updates hypothesis from 6.151.9 to 6.151.12

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.151.12

This release improves "Phase.explain" output by excluding pytest- related syrupy files as a possible source of variation.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.151.11

This patch improves printing of primitive values generated from complex strategies, particularly for "from_regex()". Previously, these would often be printed as function calls desctribing how to construct them. Now they will always be printed as a literal value.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.151.10

When shrinking takes more than five minutes, Hypothesis now prints the "@​seed" decorator alongside the slow-shrinking warning so you can reproduce the failure.

Thanks to Ian Hunt-Isaak for this contribution!

The canonical version of these notes (with links) is on readthedocs.

Commits

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
ca91779 
…th 14 updates

Updates the requirements on [polars[database,pyarrow]](https://github.com/pola-rs/polars), [pandera[polars]](https://github.com/pandera-dev/pandera), [sqlmodel](https://github.com/fastapi/sqlmodel), [duckdb](https://github.com/duckdb/duckdb-python), [rich](https://github.com/Textualize/rich), [textual](https://github.com/Textualize/textual), [pytest](https://github.com/pytest-dev/pytest), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [respx](https://github.com/lundberg/respx), [hypothesis](https://github.com/HypothesisWorks/hypothesis), [ruff](https://github.com/astral-sh/ruff), [ty](https://github.com/astral-sh/ty), [sqlfluff](https://github.com/sqlfluff/sqlfluff) and [sqlglot](https://github.com/tobymao/sqlglot) to permit the latest version.

Updates `polars[database,pyarrow]` to 1.39.3
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.38.1...py-1.39.3)

Updates `pandera[polars]` to 0.30.1
- [Release notes](https://github.com/pandera-dev/pandera/releases)
- [Commits](unionai-oss/pandera@v0.29.0...v0.30.1)

Updates `sqlmodel` from 0.0.37 to 0.0.38
- [Release notes](https://github.com/fastapi/sqlmodel/releases)
- [Changelog](https://github.com/fastapi/sqlmodel/blob/main/docs/release-notes.md)
- [Commits](fastapi/sqlmodel@0.0.37...0.0.38)

Updates `duckdb` from 1.4.4 to 1.5.1
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.4.4...v1.5.1)

Updates `rich` from 14.3.3 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.3.3...v15.0.0)

Updates `textual` from 8.0.2 to 8.2.3
- [Release notes](https://github.com/Textualize/textual/releases)
- [Changelog](https://github.com/Textualize/textual/blob/main/CHANGELOG.md)
- [Commits](Textualize/textual@v8.0.2...v8.2.3)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `respx` from 0.22.0 to 0.23.1
- [Release notes](https://github.com/lundberg/respx/releases)
- [Changelog](https://github.com/lundberg/respx/blob/master/CHANGELOG.md)
- [Commits](lundberg/respx@0.22.0...0.23.1)

Updates `hypothesis` from 6.151.9 to 6.151.12
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.151.9...hypothesis-python-6.151.12)

Updates `ruff` from 0.15.4 to 0.15.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.10)

Updates `ty` from 0.0.19 to 0.0.29
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.19...0.0.29)

Updates `sqlfluff` from 4.0.4 to 4.1.0
- [Release notes](https://github.com/sqlfluff/sqlfluff/releases)
- [Changelog](https://github.com/sqlfluff/sqlfluff/blob/main/CHANGELOG.md)
- [Commits](sqlfluff/sqlfluff@4.0.4...4.1.0)

Updates `sqlglot` from 30.0.3 to 30.4.2
- [Commits](tobymao/sqlglot@v30.0.3...v30.4.2)

---
updated-dependencies:
- dependency-name: polars[database,pyarrow]
  dependency-version: 1.39.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pandera[polars]
  dependency-version: 0.30.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: sqlmodel
  dependency-version: 0.0.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: duckdb
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: textual
  dependency-version: 8.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: respx
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.151.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.15.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: sqlfluff
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: sqlglot
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 13, 2026

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 13, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nbadb Ready Ready Preview, Comment Apr 13, 2026 6:24am

@dependabot dependabot bot requested a review from wyattowalsh as a code owner April 13, 2026 06:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wyattowalsh wyattowalsh Awaiting requested review from wyattowalsh wyattowalsh is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants