From 5ca48bff6fc9a5cebe79f9aa1c2bcb0eff770899 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Oct 2025 11:13:02 +0000 Subject: [PATCH 1/3] Bump iniconfig from 2.1.0 to 2.3.0 (#11690) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [iniconfig](https://github.com/pytest-dev/iniconfig) from 2.1.0 to 2.3.0.
Release notes

Sourced from iniconfig's releases.

Version 2.3.0

What's Changed

Full Changelog: https://github.com/pytest-dev/iniconfig/compare/v2.2.0...v2.3.0

Version 2.2.0

No release notes provided.

Changelog

Sourced from iniconfig's changelog.

2.3.0

2.2.0

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=iniconfig&package-manager=pip&previous-version=2.1.0&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 2f5c4402804..55c63397227 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -92,7 +92,7 @@ idna==3.6 # yarl imagesize==1.4.1 # via sphinx -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.7.2 ; python_version < "3.14" # via diff --git a/requirements/dev.txt b/requirements/dev.txt index f77ac5f273c..207460cf4d6 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -90,7 +90,7 @@ idna==3.6 # yarl imagesize==1.4.1 # via sphinx -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.7.2 ; python_version < "3.14" # via diff --git a/requirements/lint.txt b/requirements/lint.txt index ab8dfc02bb4..bcc8087e75a 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -39,7 +39,7 @@ identify==2.6.15 # via pre-commit idna==3.7 # via trustme -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.7.2 # via -r requirements/lint.in diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 3ce08ae3eff..4275f8de7ec 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -30,7 +30,7 @@ freezegun==1.5.5 # via -r requirements/test-common.in idna==3.10 # via trustme -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" # via -r requirements/test-common.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 6e0f50ccf57..333bc521a17 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -51,7 +51,7 @@ idna==3.10 # via # trustme # yarl -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" # via -r requirements/test-common.in diff --git a/requirements/test.txt b/requirements/test.txt index 76c5888f529..8923c5db2d5 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -51,7 +51,7 @@ idna==3.6 # via # trustme # yarl -iniconfig==2.1.0 +iniconfig==2.3.0 # via pytest isal==1.7.2 ; python_version < "3.14" # via -r requirements/test-common.in From a0eb8f6ee23800fd7869201ff66ee1928bfc160b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Oct 2025 11:25:42 +0000 Subject: [PATCH 2/3] Bump cython from 3.1.4 to 3.1.5 (#11691) Bumps [cython](https://github.com/cython/cython) from 3.1.4 to 3.1.5.
Release notes

Sourced from cython's releases.

3.1.5 (2025-10-19)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Changelog

Sourced from cython's changelog.

3.1.5 (2025-10-20)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cython&package-manager=pip&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/cython.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 55c63397227..447891e9b2c 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -59,7 +59,7 @@ coverage==7.11.0 # pytest-cov cryptography==46.0.3 # via trustme -cython==3.1.4 +cython==3.1.5 # via -r requirements/cython.in distlib==0.4.0 # via virtualenv diff --git a/requirements/cython.txt b/requirements/cython.txt index 9f3e87f8ea7..7d87371c03d 100644 --- a/requirements/cython.txt +++ b/requirements/cython.txt @@ -4,7 +4,7 @@ # # pip-compile --allow-unsafe --output-file=requirements/cython.txt --resolver=backtracking --strip-extras requirements/cython.in # -cython==3.1.4 +cython==3.1.5 # via -r requirements/cython.in multidict==6.7.0 # via -r requirements/multidict.in From 0a840daecb59264a37421e7ba37810f4d6ffc931 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Oct 2025 12:40:10 +0000 Subject: [PATCH 3/3] Bump pydantic from 2.12.2 to 2.12.3 (#11695) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.12.2 to 2.12.3.
Release notes

Sourced from pydantic's releases.

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also adds back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

Full Changelog: https://github.com/pydantic/pydantic/compare/v2.12.2...v2.12.3

Changelog

Sourced from pydantic's changelog.

v2.12.3 (2025-10-17)

GitHub release

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also add back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

Commits
  • 1a8850d Prepare release 2.12.3
  • 09dbcf2 Add FieldInfo.asdict() method, improve documentation around FieldInfo
  • 5da4331 Improve documentation about serialize as any behavior
  • 9c86324 Raise a warning when an invalid after model validator function signature is r...
  • 36a73c6 Update pydantic-extra-types dependency to version >=2.10.6
  • See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic&package-manager=pip&previous-version=2.12.2&new-version=2.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 447891e9b2c..7ee71586ed1 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -154,7 +154,7 @@ pycares==4.11.0 # via aiodns pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic diff --git a/requirements/dev.txt b/requirements/dev.txt index 207460cf4d6..3c9d53d31e8 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -151,7 +151,7 @@ pycares==4.11.0 # via aiodns pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic diff --git a/requirements/lint.txt b/requirements/lint.txt index bcc8087e75a..dfffa164601 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -69,7 +69,7 @@ pycares==4.11.0 # via aiodns pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 4275f8de7ec..3585f1af52a 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -56,7 +56,7 @@ proxy-py==2.4.10 # via -r requirements/test-common.in pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 333bc521a17..604f752905b 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -89,7 +89,7 @@ pycares==4.11.0 # via aiodns pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic diff --git a/requirements/test.txt b/requirements/test.txt index 8923c5db2d5..2f27fcad6a6 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -89,7 +89,7 @@ pycares==4.11.0 # via aiodns pycparser==2.23 # via cffi -pydantic==2.12.2 +pydantic==2.12.3 # via python-on-whales pydantic-core==2.41.4 # via pydantic