chore: Bump the ci group in /.github/workflows with 3 updates by dependabot[bot] · Pull Request #658 · MeltanoLabs/target-postgres

dependabot · 2026-08-01T09:42:43Z

Bumps the ci group in /.github/workflows with 3 updates: meltano, tox and tox-uv.

Updates meltano from 4.1.2 to 4.2.2

Release notes

v4.2.2 (2026-07-22)

🐛 Fixes

#10190 Prevent include_paths from escaping project root (#10182)

v4.2.1 (2026-06-16)

🐛 Fixes

#10106 Avoid swallowing PipelineWise plugin logs by setting the level for the root logger (#10104)

v4.2.0 (2026-04-10)

Docker Hub 🐋

PyPI 🐍

Highlights

This restores the latest* tags on Docker Hub, which inadvertently were reverted to use Meltano v3 with the v3.9.2 release and now run on v4 again.

Miscellaneous improvements to the State Backend interface.

✨ New

#9948 Create .gitignore automatically in the .meltano directory

#9946 Avoid setting a global UV_NO_CACHE=1 in the Docker image

#9901 Add CACHEDIR.TAG file automatically to .meltano directory

#9849 Show required setting indicators in meltano config list -- Thanks @mahangu!

#9843 Print stderr from extractor's discover call at default log level -- Thanks @mahangu!

#9822 Added StateStoreManager.migrate() interface which state backend implementations can override to provide a state migration mechanism

#9819 Make StateStoreManager a context manager with a default no-op .close() method

🐛 Fixes

#9949 Avoid emitting an Unknown setting ... warning when setting a nested "extra" setting like _metadata.*.replication-method

#9922 Do not swallow state backend persistence errors in BookmarkWriter -- Thanks @awohletz-pm!

#9921 Update the type annotation of retry_seconds in the state backend acquire_lock method to allow float values

#9877 Add warning when using ephemeral state ID in el/elt commands -- Thanks @stbiadmin!

#9858 Do not disable existing loggers when passing logging configuration to SDK-based plugins

#9825 Drop None values coming from .env -- Thanks @RamiNoodle733!

#9804 Make meltano state set --input-file ... work with click 8.1

⚙️ Under the Hood

#9936 Updated some plugin-related types

#9909 Centralize virtualenv management into a new VirtualEnvService and delegate to VenvBackend implementations

... (truncated)

Changelog

Sourced from meltano's changelog.

v4.2.2 (2026-07-22)

🐛 Fixes

#10190 Prevent include_paths from escaping project root (#10182)

v4.2.1 (2026-06-16)

🐛 Fixes

#10106 Avoid swallowing PipelineWise plugin logs by setting the level for the root logger (#10104)

v4.2.0 (2026-04-10)

✨ New

#9948 Create .gitignore automatically in the .meltano directory

#9946 Avoid setting a global UV_NO_CACHE=1 in the Docker image

#9901 Add CACHEDIR.TAG file automatically to .meltano directory

#9849 Show required setting indicators in meltano config list -- Thanks @mahangu!

#9843 Print stderr from extractor's discover call at default log level -- Thanks @mahangu!

#9822 Added StateStoreManager.migrate() interface which state backend implementations can override to provide a state migration mechanism

#9819 Make StateStoreManager a context manager with a default no-op .close() method

🐛 Fixes

#9949 Avoid emitting an Unknown setting ... warning when setting a nested "extra" setting like _metadata.*.replication-method

#9922 Do not swallow state backend persistence errors in BookmarkWriter -- Thanks @awohletz-pm!

#9921 Update the type annotation of retry_seconds in the state backend acquire_lock method to allow float values

#9877 Add warning when using ephemeral state ID in el/elt commands -- Thanks @stbiadmin!

#9858 Do not disable existing loggers when passing logging configuration to SDK-based plugins

#9825 Drop None values coming from .env -- Thanks @RamiNoodle733!

#9804 Make meltano state set --input-file ... work with click 8.1

⚙️ Under the Hood

#9936 Updated some plugin-related types

#9909 Centralize virtualenv management into a new VirtualEnvService and delegate to VenvBackend implementations

Move logging frame number to constants _FRAMES_DEBUG and _FRAMES_DEFAULT

#9883 Use ProjectDirsService in all remaining places

#9880 Ensure custom click.ParamType implementations correctly override their parent methods

#9879 Added reason keyword argument to PluginInstaller callable protocol

#9870 Add more type-annotations for SettingDefinition attributes

#9841 Use Project.dirs API in more places

#9840 Use the --clear flag of virtualenv and uv to recreate the venv instead of removing it preemptively

#9817 Bump Ruff to 0.15 and update code to the 2026 style guide

📚 Documentation Improvements

#9939 Fixed some broken links in the environments page

... (truncated)

Commits

83d3c7f chore: Release v4.2.2 (#10194)
bb27d68 fix(core): Prevent include_paths from escaping project root (#10182) (#10190)
c428796 chore: Update dev dependencies (#10189)
6622cd0 chore: Release v4.2.1 (#10108)
0fe650d fix(core): Avoid swallowing Pipelinewise plugin logs by setting the level for...
a1ed3d5 chore: Update integration tests
7429c9d chore: Update GitHub actions
ee550d1 chore: Release v4.2.0 (#9956)
408b702 ci: Bump the actions group with 2 updates (#9953)
25868c8 chore(deps-dev): Bump ty from 0.0.27 to 0.0.28 in the development-dependencie...
Additional commits viewable in compare view

Updates tox from 4.50.3 to 4.58.0

Release notes

Sourced from tox's releases.

v4.58.0

What's Changed

👷 ci: run the test matrix against Python 3.15 by @gaborbernat in tox-dev/tox#4001

Full Changelog: tox-dev/tox@4.57.2...4.58.0

v4.57.2

What's Changed

🐛 fix(session): fix package env failure cascade and state corruption by @gaborbernat in tox-dev/tox#3991

🐛 fix(pkg): repair editable fallback and sdist-wheel root handling by @gaborbernat in tox-dev/tox#3992

🐛 fix(pylock): install exactly what the lock file specifies by @gaborbernat in tox-dev/tox#3994

🐛 fix(cache): self-heal wrong-shape tox-info content by @gaborbernat in tox-dev/tox#3996

🐛 fix(config): rebuild loader chains per config set by @gaborbernat in tox-dev/tox#3993

🐛 fix(pip): stable rendering of set options in install cache by @gaborbernat in tox-dev/tox#3995

🐛 fix(pep723): honor metadata behind a BOM, fail cleanly on bad blocks by @gaborbernat in tox-dev/tox#3997

🐛 fix(run): honor the fail-fast contract, resilient teardown by @gaborbernat in tox-dev/tox#3999

🐛 fix(cli): honor tox c -o, clean devenv ALL error, correct provision pin by @gaborbernat in tox-dev/tox#3998

🐛 fix(ux): four run-edge polish fixes by @gaborbernat in tox-dev/tox#4000

Full Changelog: tox-dev/tox@4.57.1...4.57.2

v4.57.1

What's Changed

Run sequentially for run-parallel -p 0 instead of at CPU count by @chuenchen309 in tox-dev/tox#3989

Do not let a lone quote in a set_env value swallow the marker by @chuenchen309 in tox-dev/tox#3988

Full Changelog: tox-dev/tox@4.57.0...4.57.1

v4.57.0

What's Changed

💰 Surface the org itself in the FUNDING config by @webknjaz in tox-dev/tox#3979

Replace prettier with mdformat and yamlfmt by @gaborbernat in tox-dev/tox#3984

📦 build: use test dependency group in internal envs by @gaborbernat in tox-dev/tox#3985

✨ feat(python): match free-threaded and debug interpreter builds by @chuenchen309 in tox-dev/tox#3986

New Contributors

@chuenchen309 made their first contribution in tox-dev/tox#3986

Full Changelog: tox-dev/tox@4.56.4...4.57.0

... (truncated)

Changelog

Sourced from tox's changelog.

Miscellaneous internal changes - 4.58.0

Test against Python 3.15 (beta) in CI and declare its classifier - by :user:gaborbernat. (:issue:4001)

v4.57.2 (2026-07-21)

Bug fixes - 4.57.2

Fix package environment creation failures being misreported:

discard the partially registered configuration on failure, so the real error surfaces instead of a spurious duplicate configuration definition;

report the first creation failure in definition order, not a hash-random one;

build the PEP 517 frontend lazily, so tox c and tox l work when pyproject.toml cannot be read. (:issue:3987)

Fix state corruption in the environment creation machinery:

a failed run environment build no longer removes shared package environments other run environments still use;

a run environment registers with its package environment once, not twice with triple-counted usage;

circular depends reports the cycle as an error instead of a raw traceback;

Skip raised by a plugin for a package environment marks the run environment package-skipped instead of crashing with UnboundLocalError. (:issue:3991)

Fix two packaging regressions:

package = editable on a build backend without PEP-660 support now falls back to editable-legacy with a warning instead of crashing, also when the project metadata is static;

editable and wheel environments running after an sdist-wheel environment build from the project sources again, instead of a stale temporary copy that made source edits invisible. (:issue:3992)

An environment serving as both a run environment and a package environment now behaves predictably:

one defined through a [testenv:...]-style section and referenced by package_env inherits from pkgenv/env_pkg_base as documented, instead of silently keeping run environment defaults;

one listed in env_list while referenced as a package environment is reported as a configuration conflict up front, instead of failing late with cannot run packaging environment or silently disappearing from tox l. (:issue:3993)

pylock.toml installs now match the lock file:

a package locked once per Python range installs only the version matching the environment's interpreter;

packages locked to a local directory, VCS repository, or archive install from that source instead of resolving the name against the package index;

locked hashes are verified when every entry carries one;

changing a pip environment variable such as PIP_INDEX_URL reinstalls, as it already did for deps.

... (truncated)

Commits

69e1bdc release 4.58.0
ea8734e 👷 ci: run the test matrix against Python 3.15 (#4001)
2d8d5ae release 4.57.2
b74d78b 🐛 fix(ux): four run-edge polish fixes (#4000)
09dad3d 🐛 fix(cli): honor tox c -o, clean devenv ALL error, correct provision pin (#3...
fa6ec2b 🐛 fix(run): honor the fail-fast contract, resilient teardown (#3999)
b1b0159 🐛 fix(pep723): honor metadata behind a BOM, fail cleanly on bad blocks (#3997)
a111ec6 🐛 fix(pip): stable rendering of set options in install cache (#3995)
e969723 🐛 fix(config): rebuild loader chains per config set (#3993)
6a9b6a5 🐛 fix(cache): self-heal wrong-shape tox-info content (#3996)
Additional commits viewable in compare view

Updates tox-uv from 1.33.4 to 1.36.0

Release notes

Sourced from tox-uv's releases.

1.36.0

What's Changed

Fix flaky na-interpreter test for skip_missing_interpreters default by @gaborbernat in tox-dev/tox-uv#349

Replace prettier with mdformat and yamlfmt by @gaborbernat in tox-dev/tox-uv#356

👷 ci: add Python 3.15 to the test matrix by @gaborbernat in tox-dev/tox-uv#358

Full Changelog: tox-dev/tox-uv@1.35.2...1.36.0

1.35.2

What's Changed

Honor constraints opt for all packages by @stephenfin in tox-dev/tox-uv#332

🐛 fix(lock): honor --recreate in uv-venv-lock-runner by @gaborbernat in tox-dev/tox-uv#338

New Contributors

@stephenfin made their first contribution in tox-dev/tox-uv#332

Full Changelog: tox-dev/tox-uv@1.35.1...1.35.2

1.35.1

What's Changed

fix(lock-runner): respect UV_FROZEN env var and --frozen in uv_sync_flags by @alexholtz in tox-dev/tox-uv#327

New Contributors

@alexholtz made their first contribution in tox-dev/tox-uv#327

Full Changelog: tox-dev/tox-uv@1.35.0...1.35.1

1.35.0

What's Changed

Add machine and architecture handling to version spec by @griels in tox-dev/tox-uv#321

🐛 fix(installer): invalidate install cache on UV_* env var changes by @gaborbernat in tox-dev/tox-uv#325

New Contributors

@griels made their first contribution in tox-dev/tox-uv#321

Full Changelog: tox-dev/tox-uv@1.34.0...1.35.0

1.34.0

What's Changed

... (truncated)

Commits

6268ef9 👷 ci: add Python 3.15 to the test matrix (#358)
12edb70 [pre-commit.ci] pre-commit autoupdate (#357)
a6d24f8 Replace prettier with mdformat and yamlfmt (#356)
8bab275 build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#355)
75c7409 build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#354)
a4ef4f2 [pre-commit.ci] pre-commit autoupdate (#353)
16203a1 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#352)
af040e7 [pre-commit.ci] pre-commit autoupdate (#351)
1a09434 💰 Surface GitHub Sponsors + thanks.dev
9781bb7 [pre-commit.ci] pre-commit autoupdate (#350)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci group in /.github/workflows with 3 updates: [meltano](https://github.com/meltano/meltano), [tox](https://github.com/tox-dev/tox) and [tox-uv](https://github.com/tox-dev/tox-uv). Updates `meltano` from 4.1.2 to 4.2.2 - [Release notes](https://github.com/meltano/meltano/releases) - [Changelog](https://github.com/meltano/meltano/blob/main/CHANGELOG.md) - [Commits](meltano/meltano@v4.1.2...v4.2.2) Updates `tox` from 4.50.3 to 4.58.0 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.50.3...4.58.0) Updates `tox-uv` from 1.33.4 to 1.36.0 - [Release notes](https://github.com/tox-dev/tox-uv/releases) - [Commits](tox-dev/tox-uv@1.33.4...1.36.0) --- updated-dependencies: - dependency-name: meltano dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: tox dependency-version: 4.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: tox-uv dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026

dependabot Bot requested a review from edgarrmondragon as a code owner August 1, 2026 09:42

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026

edgarrmondragon added this pull request to the merge queue Aug 1, 2026

Merged via the queue into main with commit 6b61dd8 Aug 1, 2026
16 checks passed

edgarrmondragon deleted the dependabot/pip/dot-github/workflows/ci-ce4f132bd6 branch August 1, 2026 18:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: Bump the ci group in /.github/workflows with 3 updates - #658

chore: Bump the ci group in /.github/workflows with 3 updates#658
edgarrmondragon merged 1 commit into
mainfrom
dependabot/pip/dot-github/workflows/ci-ce4f132bd6

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

v4.2.2 (2026-07-22)

🐛 Fixes

v4.2.1 (2026-06-16)

🐛 Fixes

v4.2.0 (2026-04-10)

Highlights

✨ New

🐛 Fixes

⚙️ Under the Hood

v4.2.2 (2026-07-22)

🐛 Fixes

v4.2.1 (2026-06-16)

🐛 Fixes

v4.2.0 (2026-04-10)

✨ New

🐛 Fixes

⚙️ Under the Hood

📚 Documentation Improvements

v4.58.0

What's Changed

v4.57.2

What's Changed

v4.57.1

What's Changed

v4.57.0

What's Changed

New Contributors

Miscellaneous internal changes - 4.58.0

Bug fixes - 4.57.2

1.36.0

What's Changed

1.35.2

What's Changed

New Contributors

1.35.1

What's Changed

New Contributors

1.35.0

What's Changed

New Contributors

1.34.0

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant