Skip to content

chore(deps): bump the python-packaging group with 24 updates - #734

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packaging-04ccdba4fe
Open

chore(deps): bump the python-packaging group with 24 updates#734
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packaging-04ccdba4fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-packaging group with 24 updates:

Package From To
certifi 2026.6.17 2026.7.22
polars 1.42.1 1.44.1
pytz 2026.2 2026.3.post1
temporalio 1.30.0 1.32.0
duckdb 1.5.4 1.5.5
statsmodels 0.14.6 0.15.0
coverage 7.15.2 7.15.4
hypothesis 6.152.7 6.165.10
commitizen 4.16.5 4.18.0
mypy 2.3.0 2.3.1
pre-commit 4.6.1 4.6.2
ruff 0.16.0 0.16.5
types-pyyaml 6.0.12.20260724 6.0.12.20260815
build 1.5.0 1.6.0
setuptools 83.0.0 84.0.0
twine 6.2.0 7.0.0
wheel 0.47.0 0.48.0
charset-normalizer 3.4.9 3.5.1
idna 3.18 3.19
packaging 26.2 26.3
polars-runtime-32 1.42.1 1.44.1
protobuf 7.35.1 7.36.0
pygments 2.20.0 2.21.0
types-protobuf 7.34.1.20260518 7.35.1.20260827

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates polars from 1.42.1 to 1.44.1

Release notes

Sourced from polars's releases.

Python Polars 1.44.1

Thank you to all our contributors for making this release possible! @​Kevin-Patyk, @​henrytsanford, @​jonasdedden, @​orlp and @​ritchie46

Python Polars 1.44.0

⚠️ Deprecations

  • Deprecate rechunk parameter for all read/scan functions (#28063)
  • Deprecate Expr.rechunk() (#28692)
  • Deprecate struct.rename_fields() with an incorrect number of fields (#28672)

🚀 Performance improvements

  • Add private env var toggle for HTTP rate limit (#28882)
  • Relax default CloudRetryConfig for rate limit stability (#28885)
  • Elide generic cross join on subquery decorrelation in equality predicates (#28876)
  • cache CTE's in SQL layer (#28864)
  • Allow CSPE if manual caches are set (#28859)
  • Lower unqualified join predicates to inner joins in SQL (#28854)
  • Rechunk mask for DataFrame filter (#28762)
  • Improve performance of when/then/otherwise by masking out unevaluated elements (#28498)
  • Drop unused projections in filter on streaming engine (#28713)
  • Retain Parquet Partial metadata on filter (#28737)

✨ Enhancements

  • Support integer fixed-array dot products (#28829)
  • SQL correlated in (#28927)
  • Support more join_types in join_where (#28880)
  • Support Iceberg schema evolution (#28794)
  • SQL conformance (#28494)
  • Introduce RemoteEngine and a common base class for all engines (#28800)
  • Support Iceberg table with V3 deletion vectors in native scan_iceberg (#28772)
  • Support Iceberg snapshot properties (#28793)
  • Expose sinked_paths_callback on sink_parquet as unstable parameter (#28814)
  • Add infer_schema_files to CSV inference hint (#28809)
  • Add native fixed-array dot (#28504)
  • Export query metrics to polars_cloud (#28757)
  • Support Iceberg object storage paths (#28634)
  • More CSEE simplification (#28731)
  • Improve error in Series constructor with name in context (#28743)
  • Add adaptive HTTP rate-limiter for cloud IO (#28591)
  • Add struct.drop() (#28666)
  • Improve error message when CSV name de-duplication fails (#28658)
  • Always keep first metadata per source for Parquet (#28661)
  • Improve plan-time row estimates for multi-file parquet scans (#28380)
  • Expose array and plugin function views in Python visitor (#28635)

... (truncated)

Commits
  • e4ae5ea Python Polars 1.44.1 (#28971)
  • 8414c89 fix: Incorrect broadcasting in when/then/otherwise (#28970)
  • 9c17bbf fix: Handle Parquet data page with concatenated gzip members (#28808)
  • 03dfd26 fix(python): Type collect_batches as _CollectBatches, not `Iterator[DataF...
  • 507e8a0 fix: Resolve dtype inconsistency for pl.Unknown in literals and casts (#28830)
  • 4623316 fix: Incorrect when/then/otherwise with non-scalar null mask (#28946)
  • 6f46eb2 build: Disable Numa on python release (#28934)
  • d14231a feat: Support integer fixed-array dot products (#28829)
  • 9ae4e57 Python Polars 1.44.0 (#28923)
  • ad15cd4 fix: SQL handle quantified comparisons against a subquery (#28929)
  • Additional commits viewable in compare view

Updates pytz from 2026.2 to 2026.3.post1

Commits
  • 661bca9 Bump version numbers to 2026.3.post1 for python2 fix
  • 1e31a16 Log python version running tests, force python2
  • b3ca7c3 Unix line endings
  • b55039a Replace non-ASCII character in comment to fix build with Python 2
  • 5420ee2 Replace non-ASCII character in comment
  • 2c139e8 Merge branch 'fix/localize-overflow-at-datetime-extremes' of https://github.c...
  • c843864 Run zdump tests quietly
  • 518500c Reduce noise when collecting zdump info dumps
  • 081f935 Merge branch 'kytta-fix-dst' into 2026c
  • 8c9d69b Merge branch 'master' into 2026c
  • Additional commits viewable in compare view

Updates temporalio from 1.30.0 to 1.32.0

Release notes

Sourced from temporalio's releases.

1.32.0

Notable Changes

Added

  • Added temporalio.converter.create_payload_validation_error to create the non-retryable application error used when a converted payload fails validation.

  • Added experimental temporalio.contrib.opentelemetry.ReplaySafeMeterProvider and ReplaySafeLoggerProvider (and exported ReplaySafeTracerProvider): wrap an OpenTelemetry provider so metrics and log events recorded from workflow code (e.g. by Google ADK) are not duplicated on replay. GoogleAdkPlugin warns when a global OTel provider is not replay-safe.

  • Added LoggingConfig.format to select compact, pretty, or newline-delimited JSON output for Core logs written to the console.

  • Added the Runtime(disable_environment_info=...) option to control whether runtime, hosting, and platform information is included in worker heartbeats.

  • temporalio.workflow.uuid7() generates a determinism-safe, time-sortable UUIDv7 (RFC 9562) from workflow time and the workflow's deterministic random generator, complementing the existing workflow.uuid4() (#1450). The workflow sandbox now also restricts the non-deterministic uuid.uuid7() added to the standard library in Python 3.14, matching the existing uuid.uuid1()/uuid.uuid4() restrictions.

  • Experimental: TemporalOperationHandler can now use Standalone Activities as asynchronous Nexus Operation backing executions through TemporalNexusClient.start_activity.

  • Experimental: temporalio.contrib.openai_agents.temporal_worker_env_ref names an environment variable the worker reads for a hosted tool credential, keeping it out of workflow history.

  • Experimental: temporalio.contrib.openai_agents.TemporalWorkerEnvValue names an environment variable the worker reads for a sandbox environment value, keeping it out of workflow history.

  • Experimental: OpenAIAgentsPlugin(resolvable_worker_env_vars=...) allowlists the environment variable names a worker will read.

  • Experimental: temporalio.contrib.openai_agents.AllowAllWorkerEnvVars allowlists every environment variable name on the worker.

Changed

  • The opentelemetry and lambda-worker-otel extras now require opentelemetry-api/opentelemetry-sdk >= 1.26, matching what temporalio.contrib.opentelemetry already required in practice.
  • temporalio.contrib.pydantic converters now reuse Pydantic type adapters for repeated type hints instead of rebuilding their schemas for every payload, greatly speeding up decode of non-model hints such as discriminated unions (#1695). Up to 1024 type adapters are cached per converter instance by default, with least-recently-used eviction. To change the bound, pass max_cached_type_adapters to PydanticPayloadConverter (or PydanticJSONPlainPayloadConverter) from a nullary subclass used as the DataConverter.payload_converter_class; None makes the cache

... (truncated)

Changelog

Sourced from temporalio's changelog.

[1.32.0] - 2026-08-24

Added

  • Added temporalio.converter.create_payload_validation_error to create the non-retryable application error used when a converted payload fails validation.

  • Added experimental temporalio.contrib.opentelemetry.ReplaySafeMeterProvider and ReplaySafeLoggerProvider (and exported ReplaySafeTracerProvider): wrap an OpenTelemetry provider so metrics and log events recorded from workflow code (e.g. by Google ADK) are not duplicated on replay. GoogleAdkPlugin warns when a global OTel provider is not replay-safe.

  • Added LoggingConfig.format to select compact, pretty, or newline-delimited JSON output for Core logs written to the console.

  • Added the Runtime(disable_environment_info=...) option to control whether runtime, hosting, and platform information is included in worker heartbeats.

  • temporalio.workflow.uuid7() generates a determinism-safe, time-sortable UUIDv7 (RFC 9562) from workflow time and the workflow's deterministic random generator, complementing the existing workflow.uuid4() (#1450). The workflow sandbox now also restricts the non-deterministic uuid.uuid7() added to the standard library in Python 3.14, matching the existing uuid.uuid1()/uuid.uuid4() restrictions.

  • Experimental: TemporalOperationHandler can now use Standalone Activities as asynchronous Nexus Operation backing executions through TemporalNexusClient.start_activity.

  • Experimental: temporalio.contrib.openai_agents.temporal_worker_env_ref names an environment variable the worker reads for a hosted tool credential, keeping it out of workflow history.

  • Experimental: temporalio.contrib.openai_agents.TemporalWorkerEnvValue names an environment variable the worker reads for a sandbox environment value, keeping it out of workflow history.

  • Experimental: OpenAIAgentsPlugin(resolvable_worker_env_vars=...) allowlists the environment variable names a worker will read.

  • Experimental: temporalio.contrib.openai_agents.AllowAllWorkerEnvVars allowlists every environment variable name on the worker.

  • Added Nexus operation link propagation for Workflow Queries issued from operation handlers. The queried Workflow link returned by the server is attached to the caller's Nexus operation event.

Changed

  • The opentelemetry and lambda-worker-otel extras now require opentelemetry-api/opentelemetry-sdk >= 1.26, matching what temporalio.contrib.opentelemetry already required in practice.
  • temporalio.contrib.pydantic converters now reuse Pydantic type adapters for repeated type hints instead of rebuilding their schemas for every payload, greatly speeding up decode of non-model hints such as discriminated unions (#1695). Up to 1024 type adapters are cached per converter instance by default, with least-recently-used eviction. To change the bound, pass max_cached_type_adapters to PydanticPayloadConverter (or PydanticJSONPlainPayloadConverter) from a nullary subclass used as the

... (truncated)

Commits

Updates duckdb from 1.5.4 to 1.5.5

Release notes

Sourced from duckdb's releases.

v1.5.5 Bugfix Release

See DuckDB's changelog for all changes in DuckDB.

What's Changed in DuckDB-Python

Commits

Updates statsmodels from 0.14.6 to 0.15.0

Release notes

Sourced from statsmodels's releases.

Release 0.15.0

The statsmodels developers are happy to announce the release of 0.15.0. 358 issues were closed in this release and 655 pull requests were merged. Major new features include:

  • Standardized on rng for controlling randomness across the package (SPEC 007), replacing seed/random_state
  • Functions with variable-length tuple returns now return documented NamedTuple results instead
  • A new abstracted formula engine that supports both patsy and formulaic as the backend
  • Support for Polars DataFrames and Series as model input
  • Switched the build backend from setuptools to meson-python
  • New robust estimators: CovDetMCD, CovDetS, CovDetMM, and RLMDetSMM
  • New tests: Diebold-Mariano, Pesaran-Timmermann, Jonckheere-Terpstra, Leybourne-McCabe, and a delete-k block jackknife estimator
  • The Hamilton filter, local false discovery rate correction, and an L1-penalized GLM solver
  • HurdleCountModel gained fit_regularized, and MICEData is now iterable

This release also raises the minimum supported versions of NumPy, SciPy, and pandas, and tightens input validation for many string-valued options across the package (invalid values that previously failed silently or with a confusing error now raise a clear ValueError). A handful of long-standing bugs in seldom-exercised code paths were also corrected as part of a systematic coverage audit this cycle, some of which change numerical output for affected models. See the release notes for the complete list of enhancements, breaking changes, and bug fixes.

Commits
  • 278ff99 Merge pull request #10211 from bashtage/update-release-note
  • ab3f3bc DOC: Final release note
  • 9307ef1 Merge pull request #8712 from bdpedigo/nobs-style
  • 463e5c5 Merge pull request #10210 from Panzerkampfwagen-del/mice-data-iterable
  • cc734d8 Merge branch 'main' into mice-data-iterable
  • 2912b84 Merge pull request #10209 from Panzerkampfwagen-del/var-df-model-docstring
  • 279b9f4 ENH: make MICEData iterable, yielding successive imputed datasets
  • ce7f2c0 DOC: clarify VARResults.df_model counts parameters per equation
  • d1e1875 Merge pull request #10205 from bashtage/fix-hurdle-and-l1-cov
  • bb385fb Merge pull request #10208 from bashtage/update-release-note
  • Additional commits viewable in compare view

Updates coverage from 7.15.2 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

  • Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits
  • 4c0e7ff docs: sample HTML for 7.15.4
  • db4cc32 docs: prep for 7.15.4
  • c33085c style: start gradual move to ruff 0.16
  • 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
  • b64d53d build: make 3.15 wheels
  • 53792ab build: show the python version for kits
  • f6b03c7 chore: make upgrade_one package=cibuildwheel
  • d9b660a chore: make upgrade
  • b128a31 docs: oops, move this entry to the correct place
  • a7a2c15 fix: escape filename urls in html report href attributes (#2227)
  • Additional commits viewable in compare view

Updates hypothesis from 6.152.7 to 6.165.10

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.152.9

This release substantially improves our internal distribution for generating integers. This release has the most visible effect on "integers()", but may incidentally improve other strategies which draw integers internally.

Our integers distribution had two problems. First, it had jagged discontinuities at certain values where we switched sampling approaches. Second, it used a different distribution for bounded and unbounded ranges, which resulted in "st.integers()" and "st.integers(-264, 264)" producing very different distributions despite being semantically similar.

We now use a smooth distribution for both "st.integers()" and "st.integers(a, b)", which fixes both of these issues. This should substantially improve our testing power in certain cases.

The only way this release should be user-visible is that it finds more bugs! If this release is user-visible in other ways - for example, because it is slower, or produces a worse distribution in some cases - please open an issue.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.152.8

This release drops support for end-of-life Django 4.2.

The canonical version of these notes (with links) is on readthedocs.

Commits
  • 6384dee Bump hypothesis version to 6.165.10 and update changelog
  • c7ca59d Merge pull request #4864 from dgutson/claude-stateful-and-example
  • 3fc38f1 claude: teach /hypothesis about stateful tests and @​example
  • 16f24b7 Merge pull request #4862 from Zac-HD/claude/upstream-regex-issues-fkke9q
  • 48ce446 Bump hypothesis version to 6.165.9 and update changelog
  • d559a69 Merge pull request #4860 from Liam-DeVoe/optimize-single-branch-one-of
  • 3a19d89 fix context flag restoration
  • 2408c99 drop unecessary empty check
  • 3f94912 Clarify re.ASCII wording in changelog entry
  • 9d0a9a8 Fix from_regex handling of negative classes, re.ASCII, and zero-min repeats
  • Additional commits viewable in compare view

Updates commitizen from 4.16.5 to 4.18.0

Release notes

Sourced from commitizen's releases.

v4.18.0 (2026-08-19)

Feat

  • commit: add a tag(--body-length-limit) and a function for command commit (#1849)

v4.17.1 (2026-08-17)

Fix

  • init: skip hook question when no installer is present
  • init: use prek when installing hooks if pre-commit is missing

v4.17.0 (2026-07-29)

Feat

  • cmd/version: add support for --next USE_GIT_COMMITS

Fix

  • robuster agents
  • version: remove next from exclusive group
  • bump: use correct type for calling changelog
Changelog

Sourced from commitizen's changelog.

v4.18.0 (2026-08-19)

Feat

  • commit: add a tag(--body-length-limit) and a function for command commit (#1849)

v4.17.1 (2026-08-17)

Fix

  • init: skip hook question when no installer is present
  • init: use prek when installing hooks if pre-commit is missing

v4.17.0 (2026-07-29)

Feat

  • cmd/version: add support for --next USE_GIT_COMMITS

Fix

  • robuster agents
  • version: remove next from exclusive group
  • bump: use correct type for calling changelog
Commits
  • d910b66 bump: version 4.17.1 → 4.18.0
  • 363508d feat(commit): add a tag(--body-length-limit) and a function for command commi...
  • 88c25e3 docs(cli/screenshots): update CLI screenshots
  • a82e8fb bump: version 4.17.0 → 4.17.1
  • 292b089 test(init): cover installer missing at install time
  • e3b8cdb fix(init): skip hook question when no installer is present
  • 4ded98b fix(init): use prek when installing hooks if pre-commit is missing
  • 8296fde build(deps): bump pymdown-extensions from 11.0 to 11.0.1 (#2059)
  • 0bf2a05 build(deps): bump gitpython from 3.1.57 to 3.1.58 (#2058)
  • b66582e build(deps): bump gitpython from 3.1.54 to 3.1.57 (#2050)
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Commits

Updates ruff from 0.16.0 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates types-pyyaml from 6.0.12.20260724 to 6.0.12.20260815

Commits

Updates build from 1.5.0 to 1.6.0

Release notes

Sourced from build's releases.

1.6.0

What's Changed

@dependabot
chore(deps): bump the python-packaging group with 24 updates
bb17019 
Bumps the python-packaging group with 24 updates:

| Package | From | To |
| --- | --- | --- |
| [certifi](https://github.com/certifi/python-certifi) | `2026.6.17` | `2026.7.22` |
| [polars](https://github.com/pola-rs/polars) | `1.42.1` | `1.44.1` |
| [pytz](https://github.com/stub42/pytz) | `2026.2` | `2026.3.post1` |
| [temporalio](https://github.com/temporalio/sdk-python) | `1.30.0` | `1.32.0` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.4` | `1.5.5` |
| [statsmodels](https://github.com/statsmodels/statsmodels) | `0.14.6` | `0.15.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.2` | `7.15.4` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.152.7` | `6.165.10` |
| [commitizen](https://github.com/commitizen-tools/commitizen) | `4.16.5` | `4.18.0` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.0` | `0.16.5` |
| [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260724` | `6.0.12.20260815` |
| [build](https://github.com/pypa/build) | `1.5.0` | `1.6.0` |
| [setuptools](https://github.com/pypa/setuptools) | `83.0.0` | `84.0.0` |
| [twine](https://github.com/pypa/twine) | `6.2.0` | `7.0.0` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.9` | `3.5.1` |
| [idna](https://github.com/kjd/idna) | `3.18` | `3.19` |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [polars-runtime-32](https://github.com/pola-rs/polars) | `1.42.1` | `1.44.1` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `7.35.1` | `7.36.0` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |
| [types-protobuf](https://github.com/python/typeshed) | `7.34.1.20260518` | `7.35.1.20260827` |


Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `polars` from 1.42.1 to 1.44.1
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.42.1...py-1.44.1)

Updates `pytz` from 2026.2 to 2026.3.post1
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2026.2...release_2026.3.post1)

Updates `temporalio` from 1.30.0 to 1.32.0
- [Release notes](https://github.com/temporalio/sdk-python/releases)
- [Changelog](https://github.com/temporalio/sdk-python/blob/main/CHANGELOG.md)
- [Commits](temporalio/sdk-python@1.30.0...1.32.0)

Updates `duckdb` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.4...v1.5.5)

Updates `statsmodels` from 0.14.6 to 0.15.0
- [Release notes](https://github.com/statsmodels/statsmodels/releases)
- [Changelog](https://github.com/statsmodels/statsmodels/blob/main/CHANGES.md)
- [Commits](statsmodels/statsmodels@v0.14.6...v0.15.0)

Updates `coverage` from 7.15.2 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.2...7.15.4)

Updates `hypothesis` from 6.152.7 to 6.165.10
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.152.7...v6.165.10)

Updates `commitizen` from 4.16.5 to 4.18.0
- [Release notes](https://github.com/commitizen-tools/commitizen/releases)
- [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md)
- [Commits](commitizen-tools/commitizen@v4.16.5...v4.18.0)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `ruff` from 0.16.0 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.0...0.16.5)

Updates `types-pyyaml` from 6.0.12.20260724 to 6.0.12.20260815
- [Commits](https://github.com/python/typeshed/commits)

Updates `build` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.5.0...1.6.0)

Updates `setuptools` from 83.0.0 to 84.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v83.0.0...v84.0.0)

Updates `twine` from 6.2.0 to 7.0.0
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@6.2.0...7.0.0)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

Updates `charset-normalizer` from 3.4.9 to 3.5.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.9...3.5.1)

Updates `idna` from 3.18 to 3.19
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.18...v3.19)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `polars-runtime-32` from 1.42.1 to 1.44.1
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](pola-rs/polars@py-1.42.1...py-1.44.1)

Updates `protobuf` from 7.35.1 to 7.36.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.20.0...2.21.0)

Updates `types-protobuf` from 7.34.1.20260518 to 7.35.1.20260827
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: polars
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: pytz
  dependency-version: 2026.3.post1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: temporalio
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: duckdb
  dependency-version: 1.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: statsmodels
  dependency-version: 0.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: hypothesis
  dependency-version: 6.165.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: commitizen
  dependency-version: 4.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260815
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packaging
- dependency-name: build
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: setuptools
  dependency-version: 84.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packaging
- dependency-name: twine
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-packaging
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: charset-normalizer
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: idna
  dependency-version: '3.19'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: polars-runtime-32
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: protobuf
  dependency-version: 7.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
- dependency-name: types-protobuf
  dependency-version: 7.35.1.20260827
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packaging
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the modern-tooling Modern tooling, CI, release, coverage, and packaging hygiene label Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

modern-tooling Modern tooling, CI, release, coverage, and packaging hygiene

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants