Skip to content

Bump the python group with 2 updates - #585

Merged
honzajavorek merged 1 commit into
masterfrom
dependabot/pip/python-8f5be225f9
Oct 19, 2026
Merged

honzajavorek merged 1 commit into
masterfrom
dependabot/pip/python-8f5be225f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic and uv-build to permit the latest version.
Updates pydantic to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • See full diff in compare view

Updates uv-build to 0.13.1

Release notes

Sourced from uv-build's releases.

0.13.1

Release Notes

Released on 2026-10-14.

Enhancements

  • Ignore Requires-Python upper bounds in uv pip check and uv pip install --strict, consistent with resolution (#22500)
  • Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (#22463)
  • Report missing trusted hashes in resolution errors (#22241)

Python

  • Add CPython 3.16.0a1 (#22527)

Preview features

  • Allow uv tool upgrade to upgrade installed tools when tool-install-locks is enabled (#22498)
  • Add preliminary support for parsing PEP 825 variant labels in wheel filenames with wheel-variants (#22039)

Performance

Bug fixes

  • Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (#22495)
  • Restore support for source distributions containing hard links or full-length tar user or group names (#22516, #22522)
  • Preserve device files and FIFOs used as uv pip compile or uv export output destinations (#22496)
  • Fix sys._base_executable detection for environments created from symlinked interpreters (#22520)
  • Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (#22399, #22402, #22403)
  • Serialize concurrent project commands that reach the same environment through real and symlinked paths (#22390)
  • Prevent installs, syncs, and environment creation from failing when they race with uv cache clean (#22387)
  • Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (#22391)
  • Persist changed upgrade settings even when uv tool upgrade leaves the tool version unchanged (#22499)
  • Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (#22464)

Documentation

  • Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (#22424)
  • Fix the .netrc format documentation link (#22514)

Other changes

  • Publish Python 3.15-based uv Docker images under stable tags (#22503)

Install uv 0.13.1

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.13.1

Released on 2026-10-14.

Enhancements

  • Ignore Requires-Python upper bounds in uv pip check and uv pip install --strict, consistent with resolution (#22500)
  • Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (#22463)
  • Report missing trusted hashes in resolution errors (#22241)

Python

  • Add CPython 3.16.0a1 (#22527)

Preview features

  • Allow uv tool upgrade to upgrade installed tools when tool-install-locks is enabled (#22498)
  • Add preliminary support for parsing PEP 825 variant labels in wheel filenames with wheel-variants (#22039)

Performance

Bug fixes

  • Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (#22495)
  • Restore support for source distributions containing hard links or full-length tar user or group names (#22516, #22522)
  • Preserve device files and FIFOs used as uv pip compile or uv export output destinations (#22496)
  • Fix sys._base_executable detection for environments created from symlinked interpreters (#22520)
  • Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (#22399, #22402, #22403)
  • Serialize concurrent project commands that reach the same environment through real and symlinked paths (#22390)
  • Prevent installs, syncs, and environment creation from failing when they race with uv cache clean (#22387)
  • Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (#22391)
  • Persist changed upgrade settings even when uv tool upgrade leaves the tool version unchanged (#22499)
  • Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (#22464)

Documentation

  • Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (#22424)
  • Fix the .netrc format documentation link (#22514)

Other changes

  • Publish Python 3.15-based uv Docker images under stable tags (#22503)

0.13.0

Released on 2026-10-09.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [pydantic](https://github.com/pydantic/pydantic) and [uv-build](https://github.com/astral-sh/uv) to permit the latest version.

Updates `pydantic` to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.0...v2.14.1)

Updates `uv-build` to 0.13.1
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.13.0...0.13.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  dependency-group: python
- dependency-name: uv-build
  dependency-version: 0.13.1
  dependency-type: direct:development
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 19, 2026
@honzajavorek
honzajavorek merged commit a553786 into master Oct 19, 2026
3 checks passed
@honzajavorek
honzajavorek deleted the dependabot/pip/python-8f5be225f9 branch October 19, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant