An open index of dependabot pull requests across open source projects.

chore(deps-dev): bump cython from 3.1.4 to 3.1.6

Open
Number: #1632
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: October 27, 2025 at 04:19 AM UTC
(16 days ago)
Updated: October 27, 2025 at 04:24 AM UTC
(16 days ago)
Labels:
dependencies python
Description:

Bumps cython from 3.1.4 to 3.1.6.

Release notes

Sourced from cython's releases.

3.1.6

No release notes provided.

3.1.5 (2025-10-19)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Changelog

Sourced from cython's changelog.

3.1.6 (2025-10-23)

Bugs fixed

  • Unicode characters formatted from C integers with f"{value:c}" could result in invalid Python string objects since Cython 3.1.0. (Github issue :issue:7240)

  • cythonize (program and function) now uses concurrent.futures.ProcessPoolExecutor instead of multiprocessing.Pool to fix a hang on build failures in parallel builds. A possible work-around is to disable parallel builds. Patch by Sviatoslav Sydorenko. (Github issue :issue:7183)

3.1.5 (2025-10-20)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Commits
  • b40c676 Prepare release of 3.1.6.
  • 2c00332 Build: Clear "license-files" option in setup metadata due to
  • 6d0b9bd Build: Use twine to check the wheels before uploading them.
  • fecd0e5 Silence a C coercion warning in a test.
  • 2a68bbc Avoid back-and-forth between signed and unsigned index types in C array conve...
  • 1824975 Silence a C compiler warning about implicit signed/unsigned conversion.
  • a583bc3 Disable parallelism in cythonize command/function on spawn (GH-7183)
  • 2ee0bc1 Update changelog.
  • b0f7b40 Fix f-string joining when non-ASCII "{intvalue:c}" character formats are invo...
  • 67351ba Adapt release date of 3.1.5 to PyPI release time.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
cython
Ecosystem:
pip
Version Change:
3.1.4 → 3.1.6
Update Type:
Patch
Technical Details
ID: 10558319
UUID: 3554986038
Node ID: PR_kwDOAUjOu86vy_r3
Host: GitHub
Repository: python-zeroconf/python-zeroconf