Repository navigation
build(deps): bump the python-minor-and-patch group with 9 updates - #19
Open
dependabot[bot] wants to merge 4 commits into
Open
dependabot[bot] wants to merge 4 commits into
dependabot[bot] wants to merge 4 commits into
Conversation
Bumps the python-minor-and-patch group with 9 updates: | Package | From | To | | --- | --- | --- | | [grpcio](https://github.com/grpc/grpc) | `1.78.0` | `1.85.1` | | [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.75.3` | `1.76.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.2.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.1.post1` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.14` | `0.17.3` | | [ty](https://github.com/astral-sh/ty) | `0.0.94` | `0.0.95` | | [grpcio-tools](https://github.com/grpc/grpc) | `1.78.0` | `1.85.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | Updates `grpcio` from 1.78.0 to 1.85.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.78.0...v1.85.1) Updates `googleapis-common-protos` from 1.75.3 to 1.76.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.75.3...googleapis-common-protos-v1.76.0) Updates `pytest` from 9.0.3 to 9.2.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.2.0) Updates `pytest-asyncio` from 1.3.0 to 1.4.1.post1 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.1.post1) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `ruff` from 0.14.14 to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.14...0.17.3) Updates `ty` from 0.0.94 to 0.0.95 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.94...0.0.95) Updates `grpcio-tools` from 1.78.0 to 1.85.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.78.0...v1.85.1) Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.85.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: googleapis-common-protos dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pytest dependency-version: 9.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pytest-asyncio dependency-version: 1.4.1.post1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: ruff dependency-version: 0.17.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: ty dependency-version: 0.0.95 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: grpcio-tools dependency-version: 1.85.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
SDAChess
previously approved these changes
Nov 9, 2026
This was referenced Nov 9, 2026
Regenerating with 1.85.1 stamps grpcio>=1.85.1 and protobuf 7.35.1 into the committed stubs. Keep the generator at 1.78.0 and ignore minor and major updates for it. See #24. Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>
The committed stubs call ValidateProtobufRuntimeVersion with 6.31.1, so they fail at import on older protobuf releases. See #24. Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>
pimlock
approved these changes
Nov 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes from the original Dependabot bump
This PR no longer includes the
grpcio-tools1.78.0 to 1.85.1 update, so it now bumps 8 of the 9 packages in the table below.grpcio-toolsstamps its own versions into the committed stubs insrc/openshell/_proto. Regenerating with 1.85.1 makes the stubs requiregrpcio>=1.85.1and protobuf 7.35.1 or newer at import. That breaks protobuf 6.x users and the declaredgrpciofloor. The originalproto:checkfailure was these stale stubs.uv.lock:grpcio-toolsstays at 1.78.0, soprotobufresolves to 6.33.6 instead of 7.36.2. The stubs are unchanged andproto:checkpasses..github/dependabot.yml: ignore minor and majorgrpcio-toolsupdates. Patch updates are still allowed.pyproject.toml: raiseprotobuf>=4.25to>=6.31.1, which is what the committed stubs already require at import.main: the branch was based on an oldermain.Raising the
grpcioandprotobuffloors, moving the generator to the protobuf 7 line, and lifting the ignore are tracked in #24 for 0.2.0.Original Dependabot description
Bumps the python-minor-and-patch group with 9 updates:
1.78.01.85.11.75.31.76.09.0.39.2.01.3.01.4.1.post17.0.07.1.00.14.140.17.30.0.940.0.951.78.01.85.16.0.26.0.3Updates
grpciofrom 1.78.0 to 1.85.1Release notes
Sourced from grpcio's releases.
... (truncated)
Commits
558b7e3[Backport][v1.85.x][export] host/:authority handling in the HPACK parser (#4...54b5cf6[Release] Bump version to 1.85.1 (on v1.85.x branch) (#43788)fc9be67[Backport][v1.85.x][export] Internal change (#43783)a83eb27update g stands for correctlycc92f57[Release] Bump version to 1.85.0 (on v1.85.x branch) (#43729)7f3e5d4[Backport][v1.85.x][security] Update gRPC repo roots. (#43717)08689a5[Backport][v1.85.x][CI][macOS] Add retries to git and pip for flaky macOS job...cc11ee7[Backport][v1.85.x][export] Validate EDS locality priority against number of ...0e02b12[Release] Bump version to 1.85.0-pre1 (on v1.85.x branch) (#43591)e124571[Release] Bump core version to 58.0.0 for upcoming release (#43582)Updates
googleapis-common-protosfrom 1.75.3 to 1.76.0Release notes
Sourced from googleapis-common-protos's releases.
Commits
82b0565chore: release main (#18711)ab29d5fchore(main): release google-cloud-bigtable 2.50.2 (#18817)157efe4feat(bigquery): add column data policies to SchemaField (#18710)ea7299ffix: validate Host header in graph_server request handlers (#17932)b14c2e5docs(bigquery-storage): mark ReadRows arrow serialization as beta (#18802)3ccf5acfix(bigquery): keep the Arrow schema for empty results (#18655)8ac01b9feat(bigquery): read Arrow results from explicit destinations (#18654)6eab34efeat(bigquery-storage): add context manager to ReadRowsStream (#18781)31d9365feat(bigquery-storage): send gRPC keepalive pings by default (#18792)89cbc50feat(bigquery): share one BigQuery Storage client per Client (#18652)Updates
pytestfrom 9.0.3 to 9.2.0Release notes
Sourced from pytest's releases.
... (truncated)
Commits
ae1d0ffPrepare release version 9.2.0143ce31pre-commit: exclude codespell on generated release announcements532dc5ftox: add attrs dependency to regen, needed in reportingdemo.rsta7b2446Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91679d09c[pre-commit.ci] pre-commit autoupdate (#15266)41d12cddocs: clarify typing for yield fixturesb9022baMerge pull request #15182 from 1871698/docs/improve-getting-started-description16f87a7docs: improve getting-started.rst test execution description082ed70Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6ae37a01Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4Updates
pytest-asynciofrom 1.3.0 to 1.4.1.post1Release notes
Sourced from pytest-asyncio's releases.
... (truncated)
Commits
e420349Bump mypy pre-commit hook to v2.4.0 (#1601)16a1ba4chore: Prepare release of v1.4.1.post1.7087e7fbuild: drop pytest upper bound (#1605) (#1606)6af7f5cchore: Prepare release of v1.4.1.32ccf64Support 3.15 (#1588)9830071Build(deps): Bump certifi from 2026.6.17 to 2026.10.19 (#1590)0238023Build(deps): Bump virtualenv from 21.7.13 to 21.14.13 (#1589)93893ecBuild(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (#1583)f287e5eBuild(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#1581)b71da4fBuild(deps-dev): Bump hypothesis from 6.168.3 to 6.168.5 (#1582)Updates
pytest-covfrom 7.0.0 to 7.1.0Changelog
Sourced from pytest-cov's changelog.
Commits
66c8a52Bump version: 7.0.0 → 7.1.0f707662Make the examples use pypy 3.11.6049a78Make context test use the old ctracer (seems the new sysmon tracer behaves di...8ebf20bUpdate changelog.861d30eRemove the backup context manager - shouldn't be needed since coverage 5.0, ...fd4c956Pass the precision on the nulled total (seems that there's some caching goion...78c9c4eOnly run the 3.9 on older deps.4849a92Punctuation.197c35eUpdate changelog and hopefully I don't forget to publish release again :))14dc1c9Update examples to use 3.11 and make the adhoc layout example look a bit more...Updates
rufffrom 0.14.14 to 0.17.3Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
ba65abfBump version to 0.17.3 (#29745)fb2f921[ty] Fix narrowing of strings and integers compared with enum members (#29743)d181287[ty] Index nominal union alternatives (#29196)07872ad[ty] Preserve string literals in comparisons withLiteralString(#29741)95888b2[ty] Preserve narrowing after guarded match subject captures (#29558)3c8166b[ty] Fix hang when negating recursive unions of instance types (#29652)3fd20e0[ty] Preserve generic callback specializations during return refinement (#29667)2f0a29e[ty] Record predicate truthiness alongside expression inference (#29706)60f104a[ty] Honor@overrideon overload implementations in stubs (#29470)207ec3a[ty] Add diagnostic baseline support (#27636)Updates
tyfrom 0.0.94 to 0.0.95Release notes
Sourced from ty's releases.
... (truncated)
Changelog
Sourced from ty's changelog.
Commits
48c5ea1Bump version to 0.0.95 (#4870)13ef399Speed up releases by using larger runners for all Windows builds (#4805)Updates
grpcio-toolsfrom 1.78.0 to 1.85.1Release notes
Sourced from grpcio-tools's releases.
... (truncated)
Commits
54b5cf6[Release] Bump version to 1.85.1 (on v1.85.x branch) (#43788)cc92f57[Release] Bump version to 1.85.0 (on v1.85.x branch) (#43729)0e02b12[Release] Bump version to 1.85.0-pre1 (on v1.85.x branch) (#43591)87963e1[Python] Update Cython to 3.2.8 (#43399)4ca55d0[CI] Roll forward absl@20260526.0 (#43478)38acf50[Build] Disambiguate protobuf_version in templates (#43433)31119f1[CI] Rollback absl and fix-forward attempts due to test breakages. (#43443)c7a98ed[Core] Upgrade abseil to 20260526.0 (#42802)6e5ac36[Python] Unpin Cython dependency for source builds (#43378)5d800b3Revert "[Python] Revert Python 3.15 changes due to sanity failure (#43293)" (...Updates
pyyamlfrom 6.0.2 to 6.0.3Release notes
Sourced from pyyaml's releases.
Changelog
Sourced from pyyaml's changelog.
Commits
49790e7Release 6.0.3 (#889)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions