MAINT: Bump the minor-and-patch group with 8 updates - #2424
Merged
Roman Lutz (romanlutz) merged 4 commits intoAug 19, 2026
Conversation
Bumps the minor-and-patch group with 10 updates: | Package | From | To | | --- | --- | --- | | [azure-keyvault-secrets](https://github.com/Azure/azure-sdk-for-python) | `4.11.0` | `4.11.1` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.15.0` | `6.16.1` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.52` | | [transformers](https://github.com/huggingface/transformers) | `5.14.1` | `5.15.0` | | [pyarrow](https://github.com/apache/arrow) | `25.0.0` | `25.0.1` | | [litellm](https://github.com/BerriAI/litellm) | `1.91.5` | `1.97.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.69` | `0.0.72` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures) | `16.4` | `16.5` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.3` | Updates `azure-keyvault-secrets` from 4.11.0 to 4.11.1 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-keyvault-secrets_4.11.0...azure-keyvault-secrets_4.11.1) Updates `pypdf` from 6.15.0 to 6.16.1 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.15.0...6.16.1) Updates `sqlalchemy` from 2.0.51 to 2.0.52 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `transformers` from 5.14.1 to 5.15.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v5.14.1...v5.15.0) Updates `pyarrow` from 25.0.0 to 25.0.1 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-25.0.1) Updates `litellm` from 1.91.5 to 1.97.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.91.5...v1.97.0) Updates `ty` from 0.0.69 to 0.0.72 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.69...0.0.72) Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `pytest-rerunfailures` from 16.4 to 16.5 - [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst) - [Commits](pytest-dev/pytest-rerunfailures@16.4...16.5) Updates `ruff` from 0.16.2 to 0.16.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.2...0.16.3) --- updated-dependencies: - dependency-name: azure-keyvault-secrets dependency-version: 4.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pypdf dependency-version: 6.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sqlalchemy dependency-version: 2.0.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: transformers dependency-version: 5.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pyarrow dependency-version: 25.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: litellm dependency-version: 1.97.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ty dependency-version: 0.0.72 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pytest-rerunfailures dependency-version: '16.5' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.16.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Preserve the universal wheel required by the supported platforms while retaining the other dependency updates. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Avoid enabling the new unsound-return-statement rule until the existing typing findings can be addressed separately. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Roman Lutz (romanlutz)
approved these changes
Aug 19, 2026
Roman Lutz (romanlutz)
enabled auto-merge
August 19, 2026 18:38
Roman Lutz (romanlutz)
deleted the
dependabot/uv/minor-and-patch-ce3ad753b6
branch
August 19, 2026 19:27
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 8 updates:
4.11.04.11.16.15.06.16.12.0.512.0.525.14.15.15.025.0.025.0.14.6.14.6.216.416.50.16.20.16.3Note
tyremains below0.0.70because newer releases enableunsound-return-statementunder the repository's strict configuration. The typing findings will be fixed and the upper bound removed in a follow-up change.Updates
azure-keyvault-secretsfrom 4.11.0 to 4.11.1Release notes
Sourced from azure-keyvault-secrets's releases.
Commits
63f9d76[KeyVault] Fix Challenge Auth replay bug in secrets, certificates (#48537)8050793Don't use sparse chekout for private repos (#47776)19001b1Update helper function to print nested exception details. (#48520)c9e6a74Enable CFSClean network isolation for Python pipelines (#48483)23a9d53[Storage] Bump versions after STG 104 beta release (#48528)0c2dca4Sync eng/common directory with azure-sdk-tools for PR 16685 (#48522)fab4548[AutoPR azure-mgmt-fabric]-generated-from-SDK Generation - Python-6671798 (#4...833b8c5[AutoPR azure-mgmt-netapp]-generated-from-SDK Generation - Python-6620664 (#4...529ae05[AgentServer] Set StateStore release dates (#48532)9a7a054Reapply "[AgentServer] Remove task metadata in favor of State Store (#48416)"...Updates
pypdffrom 6.15.0 to 6.16.1Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
1bce7a7REL: 6.16.1d91ab70SEC: Limit iterations for outline retrieval and XForm text extraction (#3966)2b60c99REL: 6.16.0c9ba557SEC: Detect cycles in TreeObject.insert_child (#3964)c8e1c72BUG: Always define PdfWriter._reader (#3960)3a0f355ROB: Detect cyclic pages in _get_page_in_node (#3962)20512f4ROB: AppearanceStream: Only escape parentheses for 8-bit fonts (#3961)34ccd14MAINT: Deduplicate CatalogAttributes and CatalogDictionary (#3940)5b8f19eENH: AppearanceStream: Allow arbitrary rotations and apply rotations for anno...53bfbc6PI: Build /ToUnicode source-code bytes directly in parse_bfrange (#3952)Updates
sqlalchemyfrom 2.0.51 to 2.0.52Release notes
Sourced from sqlalchemy's releases.
... (truncated)
Commits
Updates
transformersfrom 5.14.1 to 5.15.0Release notes
Sourced from transformers's releases.
... (truncated)
Commits
5eddc12Release: v5.15.07bfaf47Add MuseGlimmer (#47867)4bd3150Revert "Fix CodeLlama tokenizer dropping leading whitespace on decode (#47488...fd12552Fix cached_files silently returning stale file on read-only filesystem (EROFS...e8ea728FixPhimoeIntegrationTest(#46539)9436284make examples under doc device agnostic (#47812)87b0711cancel deterministic for XPU in gemma4 tests (#47790)5d6dff8Serialize post-mlinter-review after post-link to avoid PR description race (#...96869d7Use content hash for mlinter review deduplication (#47830)e1d50b2Add new args in auto-docstring (#47737)Updates
pyarrowfrom 25.0.0 to 25.0.1Release notes
Sourced from pyarrow's releases.
Commits
beccec0MINOR: [Release] Update versions for 25.0.17bdf01aMINOR: [Release] Update .deb/.rpm changelogs for 25.0.191dbae1MINOR: [Release] Update CHANGELOG.md for 25.0.1849d463GH-50808: [Python] Narrow Feather deprecation to V1 format (#50685)e70ebf5GH-50600: [Release] Pin Python version in Conda verificationf5037beGH-50578: [C++][FlightRPC][ODBC] Always return SQL_NO_DATA from GetMoreResult...1491589GH-50503: [Parquet] Remove SVE128 unpack (#50611)d1eaaedGH-50326: [Python] Convert arrays to Python objects without per-element Scala...fe14135GH-50428: [C++] Better mimalloc configuration on macOS (#50549)8fb632aGH-50383: [Release] Remove deprecated -f flag on conda create environment (#5...Updates
pre-commitfrom 4.6.1 to 4.6.2Release notes
Sourced from pre-commit's releases.
Changelog
Sourced from pre-commit's changelog.
Commits
9767b6cv4.6.242ee3ffMerge pull request #3743 from pre-commit/npm-build-scripts-11-x3056619fixlanguage: nodefor hooks with build scripts and npm 11.xUpdates
pytest-rerunfailuresfrom 16.4 to 16.5Changelog
Sourced from pytest-rerunfailures's changelog.
Commits
88291f7Preparing release 16.581141e0Switch change log management to towncrier (#341)6df6fb5Create a fresh test class instance for each rerun (#340)0440e21fix: prevent rerun when teardown error matches --rerun-except (#338)5fc2d79feat: add --max-suite-reruns option to cap total reruns across suite (#332)5fc495aBump actions/setup-python from 6 to 7 in the actions group (#339)1087cc2Back to development: 16.5Updates
rufffrom 0.16.2 to 0.16.3Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
b0e4702Bump 0.16.3 (#27723)ecdd401[ty] Separate script and uv modules from project metadata (#27720)1263524[ty] Simplify display implementations with std::fmt::from_fn (#27718)59196ba[ty] Unify polarity-aware relation construction (#27707)b8c5e73[ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)2b0d210[ty] Centralize matched argument relations (#27705)a9130f3[pyupgrade] Add rule to replacewhile 1withwhile True(while-one, `...c64c7d6[ty] Model try exception flow with operation checkpoints (#27471)9dea5ef[ty] Avoid deriving sequents for typevars with concrete bounds (#27587)9798e88[ty] Preserve enum exhaustiveness with custom missing methods (#27700)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions