Repository navigation
ci(deps): bump pandera from 0.32.0 to 0.32.1 in /constraints - #1487
Open
dependabot[bot] wants to merge 5 commits into
Open
dependabot[bot] wants to merge 5 commits into
dependabot[bot] wants to merge 5 commits into
Conversation
Bumps [pandera](https://github.com/pandera-dev/pandera) from 0.32.0 to 0.32.1. - [Release notes](https://github.com/pandera-dev/pandera/releases) - [Commits](unionai-oss/pandera@v0.32.0...v0.32.1) --- updated-dependencies: - dependency-name: pandera dependency-version: 0.32.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Regenerate requirements.lock, requirements-dev.lock, and requirements-scan.lock using each file's own recorded pip-compile header command, so the pandera==0.32.1 pin in constraints/security.txt (bumped by dependabot in this PR) no longer contradicts the stale pandera==0.32.0 pin baked into the locks. Fixes the D8 constraint/lock-divergence gate (constraints-lock-sync), which correctly caught the drift and fail-closed. requirements-dev.lock also picks up unrelated transitive churn from pyproject.toml dev-extra additions that predate this PR (cyclonedx-bom, jsonschema[format-nongpl], etc.) since the lock was stale independent of pandera. The two manually-pinned entries that pip-compile cannot auto-emit from pyproject.toml alone (pot, from the neuro_advanced extra; pytest-timeout, declared only in requirements-dev.txt) are re-added at their prior pinned versions (both still latest on PyPI), preserving the precedent set in commit 364e538 (#1311). Verified: tools/deps/validate_dependency_truth.py --exit-on-drift now reports zero D8 drift (was 3, all pandera). D1 (5) and D6 (1) are unchanged pre-existing noise, confirmed via before/after diff. `pip install --dry-run -c constraints/security.txt -r <lock>` resolves cleanly for all three locks with no ResolutionImpossible. Do NOT use `make deps-update` — its recipe is drifted (wrong input files, --strip-extras mismatch) and will corrupt the lock package set. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
# Conflicts: # requirements-scan.lock
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps pandera from 0.32.0 to 0.32.1.
Release notes
Sourced from pandera's releases.
Commits
e649b0dfix: preserve xarray regex DataVar schemas across validation (#2393)7f415f4fix: handle missing regex matches in pyspark models (#2394)7e437f8docs: document multiple inheritance of DataFrameModel mixins (#986) (#2392)127118fSupport pydantic aliases in dataframe schemas (#2381)fcca3bffix: avoid strategy truthiness checks (#2382)cb18365Fix pandas schema validation thread-safety (#2383)2caf90efix: register builtin checks in polars-only install (#2387) (#2389)a088253ci: make codecov upload failures non-blocking (#2385)ea2f7ebci: add codecov carryforward flags (#2370)de5cd77fix: isolate config context per execution context (#2380)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)