Skip to content

chore(deps): bump the python group across 1 directory with 6 updates - #145

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-6f0b951c0f
Closed

chore(deps): bump the python group across 1 directory with 6 updates#145
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-6f0b951c0f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 6 updates in the / directory:

Package From To
mlflow 3.16.1 3.17.0
pandera 0.34.0 0.34.1
pydantic 2.13.5 2.14.0
shap 0.49.1 0.52.0
lefthook 2.1.17 2.2.1
ty 0.0.84 0.0.85

Updates mlflow from 3.16.1 to 3.17.0

Release notes

Sourced from mlflow's releases.

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

Bug fixes:

  • [Evaluation] Use the baseline's magnitude in min_relative_change checks (#26252, @​mavericksea-ai)
  • [UI] Support wrapped MCP registry server definitions (#25764, @​mprahl)
  • [Tracing / Tracking] Fix decimal metric sums and reduce SQL trace query and rollup overhead (#26369, @​HumairAK)

... (truncated)

Changelog

Sourced from mlflow's changelog.

3.17.0 (2026-10-06)

MLflow 3.17.0 includes several major features and improvements.

Major New Features

Database upgrade: SQL-backed servers require a coordinated schema upgrade with all writers stopped and a restorable backup, even when daily rollups remain disabled. Run mlflow db upgrade <database-url> before restarting all replicas on the new MLflow version. Mixed-version rolling upgrades are not supported. Follow the database upgrade instructions.

Other Assorted Features & Improvements:

Bug fixes:

... (truncated)

Commits

Updates pandera from 0.34.0 to 0.34.1

Release notes

Sourced from pandera's releases.

v0.34.1

What's Changed

Full Changelog: unionai-oss/pandera@v0.34.0...v0.34.1

Commits

Updates pydantic from 2.13.5 to 2.14.0

Release notes

Sourced from pydantic's releases.

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

Full Changelog: pydantic/pydantic@v2.13.0...v2.14.0

v2.14.0b2 2026-09-09

What's Changed

This pre-release adds full support for Python 3.15 specific features, such as support for frozendict, making use of TypeForm and stabilizing the MISSING sentinel type.

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

v2.14.0b2 (2026-09-09)

GitHub release

... (truncated)

Commits

Updates shap from 0.49.1 to 0.52.0

Release notes

Sourced from shap's releases.

v0.52.0

What's Changed

Highlights

  • Native bindings rewritten with nanobind, and the build system migrated from setup.py to scikit-build-core + CMake. The Cython _kernel_lib.pyx and the existing _cext / _cext_gpu modules are now built as nanobind extensions, and MANIFEST.in / setup.py have been removed in favor of a pyproject.toml-driven build. (#4366, by @​CloseChoice and @​daidahao and @​claude)
  • Minimum dependency versions raised to follow SPEC 0. (#4310, by @​CloseChoice)

Enhancements

Bug Fixes

  • Improve GPU TreeExplainer parity: preserve XGBoost default/missing child routing so NaN values follow the same branch as the source model, preserve vector-valued XGBoost base_score values (fixing multiclass additivity offsets), and tighten categorical handling so sklearn models with enable_categorical=True raise the existing unsupported-categorical error even when the booster does not expose feature_types. (#4997, by @​RAMitchell)
  • TreeExplainer no longer crashes with pandas nullable dtypes. (#4298, by @​tudstudent)
  • Fix NameError when with_binary=False and with_cuda=True by initializing compile_args. (#4322, by @​mohityadav8)
  • Text plot colors render correctly by converting NumPy types to float. (#4332, by @​Saloni-0465)
  • Assign the result of np.flipud so it is no longer a no-op in AdditiveForceArrayVisualizer. (#4343, by @​Mahaveerjain-18)
  • Use isinstance() instead of is for type checks. (#4373, by @​divyam-jha123)
  • Record 'sample' in Explanation.op_history instead of '__getitem__'. (#4376, by @​tarun-227)
  • Move the unreachable large-dataset warning into the interventional branch. (#4392, by @​Mahaveerjain-18)
  • Fix "structure of inputs doesn't match the expected structure". (#4410, by @​shaivimalik)
  • Fix the return value from is_color_map() in plots/_beeswarm.py. (#4421, by @​maniktyagi04)
  • Suppress the UserWarning when LGBMRegressor was fitted with feature names. (#4422, by @​shaivimalik)

... (truncated)

Commits
  • 8461059 FIX: Improve GPU TreeExplainer parity (#4997)
  • 8549e6b fix: use isinstance() instead of type() is tuple checks (#4508)
  • 3be7001 remove webpack dependency for sickness scores (#5018)
  • 6e9f9b8 build(deps): bump qs and express in /javascript (#5015)
  • 9be5435 build(deps): bump idna from 3.11 to 3.15 in /docs (#5007)
  • 52dd763 pin torch to <=2.11.0 in pyproject.toml (#5017)
  • d8f2e76 build(deps-dev): bump webpack-dev-server in /javascript (#5009)
  • ac6e677 build(deps-dev): bump @​babel/plugin-transform-modules-systemjs (#4991)
  • 679b2ee FIX: warn when covariance matrix is singular in LinearExplainer (#4471)
  • ce4abd7 build(deps): bump mistune from 3.2.0 to 3.2.1 (#4990)
  • Additional commits viewable in compare view

Updates lefthook from 2.1.17 to 2.2.1

Release notes

Sourced from lefthook's releases.

v2.2.1

Changelog

  • 6dd11f61f54595935746f9e0814c16844fc6d31b feat: support php composer (#1583)
  • c702ccf154bb180107ba5f790518c161d9ce111d fix: generate different patch names when in a worktree (#1582)
  • 486fdd317d29f815821ce2450d42e3a49b066eb0 refactor: cache paths in wrapper (#1570)

v2.2.0

Changelog

  • 46c65b3871dd96c81624f413b24b3d273b41a4e5 deps: October 2026 (#1571)
  • 37f17131b605cf0f64c29252ebfe94610368f769 fix: don't write an install-time lefthook path into AI hook configs (#1544)
  • cc9969c2e2198aafff8accc63ee1aee30e9a2aa4 fix: ignore trailing NUL in --files-from-stdin (#1574)
  • 57fee374b70c18e17ada20e09a336142d6d8899f fix: pass --output path to git diff as a single argument (#1581)
Changelog

Sourced from lefthook's changelog.

2.2.1

2.2.0

2.1.7

2.1.16

2.1.15

2.1.13/2.1.14 (2026-09-14)

2.1.12 (2026-08-28)

... (truncated)

Commits
  • 60c1ddd 2.2.1: support concurrent work in worktrees and release PHP package
  • 6dd11f6 feat: support php composer (#1583)
  • c702ccf fix: generate different patch names when in a worktree (#1582)
  • 486fdd3 refactor: cache paths in wrapper (#1570)
  • 125cd28 2.2.0: new Go version and git worktree fixes
  • 37f1713 fix: don't write an install-time lefthook path into AI hook configs (#1544)
  • 0bd7388 docs: publish JSON schema at lefthook.dev/schema.json (#1579)
  • 57fee37 fix: pass --output path to git diff as a single argument (#1581)
  • cc9969c fix: ignore trailing NUL in --files-from-stdin (#1574)
  • 46c65b3 deps: October 2026 (#1571)
  • See full diff in compare view

Updates ty from 0.0.84 to 0.0.85

Release notes

Sourced from ty's releases.

0.0.85

Release Notes

Released on 2026-10-06.

Preview features

  • Refresh uv project metadata when uv files change (#28529)

Bug fixes

  • Avoid recursive lambda class decorator panics (#28984)
  • Compare observable notebook state for equality (#28874)
  • Detect recursive alias cycles through intersections (#28916)
  • Fix anchoring of include and exclude patterns after the project's root changed (#28995)
  • Fix stack overflow when inferring dynamic class metaclasses (#28917)
  • Normalize recursive dataclass transform metadata (#28920)
  • Normalize recursive TypedDicts during cycle recovery (#28918)
  • Preserve cycle markers in ParamSpec specialization (#29024)

CLI

  • Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

  • Add namespace package support to import completions. (#28202)
  • Avoid stale I/O diagnostics when closing deleted files (#28988)
  • Contain rendered code within Markdown fences (#28869)
  • Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

  • Add opt-in truthiness-test-of-none-union rule (#28889)
  • Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
  • Bound nested callable signature display (#29049)
  • Explain outdated uv versions in metadata errors (#28959)
  • Improve display of string literal types that include unicode characters or double quotes (#29089)
  • Improve uv metadata diagnostics (#28990)
  • Preserve constrained type-variable failure diagnostics (#28768)
  • Preserve generic inference errors during diagnostic recovery (#28811)
  • Report deprecated overloads in decorator applications (#28999)

Core type checking

  • Bound methods without a receiver are not callable (#28981)
    • Description has been truncated

@dependabot
chore(deps): bump the python group across 1 directory with 6 updates
c6ad722 
Bumps the python group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mlflow](https://github.com/mlflow/mlflow) | `3.16.1` | `3.17.0` |
| [pandera](https://github.com/pandera-dev/pandera) | `0.34.0` | `0.34.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.0` |
| [shap](https://github.com/shap/shap) | `0.49.1` | `0.52.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.17` | `2.2.1` |
| [ty](https://github.com/astral-sh/ty) | `0.0.84` | `0.0.85` |



Updates `mlflow` from 3.16.1 to 3.17.0
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v3.16.1...v3.17.0)

Updates `pandera` from 0.34.0 to 0.34.1
- [Release notes](https://github.com/pandera-dev/pandera/releases)
- [Commits](unionai-oss/pandera@v0.34.0...v0.34.1)

Updates `pydantic` from 2.13.5 to 2.14.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.0)

Updates `shap` from 0.49.1 to 0.52.0
- [Release notes](https://github.com/shap/shap/releases)
- [Changelog](https://github.com/shap/shap/blob/main/docs/release_notes.rst)
- [Commits](shap/shap@v0.49.1...v0.52.0)

Updates `lefthook` from 2.1.17 to 2.2.1
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.17...v2.2.1)

Updates `ty` from 0.0.84 to 0.0.85
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.84...0.0.85)

---
updated-dependencies:
- dependency-name: mlflow
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pandera
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: shap
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: lefthook
  dependency-version: 2.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ty
  dependency-version: 0.0.85
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-6f0b951c0f branch October 12, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants