An open index of dependabot pull requests across open source projects.

build(deps): bump the minor-and-patch group with 7 updates

Closed
Number: #703
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 15, 2025 at 01:41 PM UTC
(about 2 months ago)
Updated: September 22, 2025 at 12:14 PM UTC
(about 1 month ago)
Closed: September 22, 2025 at 12:14 PM UTC
(about 1 month ago)
Time to Close: 7 days
Labels:
dependencies python
Description:

Bumps the minor-and-patch group with 7 updates:

Package From To
pystac 1.13.0 1.14.0
mypy 1.17.1 1.18.1
sphinx-click 6.0.0 6.1.0
xdoctest 1.2.0 1.3.0
numpy 2.3.2 2.3.3
pycparser 2.22 2.23
starlette 0.47.3 0.48.0

Updates pystac from 1.13.0 to 1.14.0

Release notes

Sourced from pystac's releases.

v1.14.0

What's Changed

Full Changelog: https://github.com/stac-utils/pystac/compare/v1.13.0...v1.14.0

Changelog

Sourced from pystac's changelog.

[v1.14.0] - 2025-09-11

Added

  • Added to pystac.MediaType values VND_APACHE_PARQUET and VND_ZARR with the current standard media type value for these types and new media types COPC and VND_PMTILES (#1554)

Changed

  • Pass "User-Agent": "pystac/3.13.0" in request headers to work around urllib's default "User-Agent" being blocked by readthedocs (#1576)
  • Include a plain text repr in notebooks so untrusted notebooks look better (#1577)

Fixed

  • More permissive collection extent deserialization (#1559)
  • Type of proj:code setter (#1560)
  • Use urllib3 to fix parsing non-ascii in urls (#1566)
  • Some return types and other mypy nits (#1569)
Commits

Updates mypy from 1.17.1 to 1.18.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.18

We’ve just uploaded mypy 1.18 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Mypy Performance Improvements

Mypy 1.18 includes numerous performance improvements, resulting in about 40% speedup compared to 1.17 when type checking mypy itself. In extreme cases, the improvement can be 10x or higher. The list below is an overview of the various mypy optimizations. Many mypyc improvements (discussed in a separate section below) also improve performance.

Type caching optimizations have a small risk of causing regressions. When reporting issues with unexpected inferred types, please also check if --disable-expression-cache will work around the issue, as it turns off some of these optimizations.

  • Improve self check performance by 1.8% (Jukka Lehtosalo, PR 19768, 19769, 19770)
  • Optimize fixed-format deserialization (Ivan Levkivskyi, PR 19765)
  • Use macros to optimize fixed-format deserialization (Ivan Levkivskyi, PR 19757)
  • Two additional micro‑optimizations (Ivan Levkivskyi, PR 19627)
  • Another set of micro‑optimizations (Ivan Levkivskyi, PR 19633)
  • Cache common types (Ivan Levkivskyi, PR 19621)
  • Skip more method bodies in third‑party libraries for speed (Ivan Levkivskyi, PR 19586)
  • Simplify the representation of callable types (Ivan Levkivskyi, PR 19580)
  • Add cache for types of some expressions (Ivan Levkivskyi, PR 19505)
  • Use cache for dictionary expressions (Ivan Levkivskyi, PR 19536)
  • Use cache for binary operations (Ivan Levkivskyi, PR 19523)
  • Cache types of type objects (Ivan Levkivskyi, PR 19514)
  • Avoid duplicate work when checking boolean operations (Ivan Levkivskyi, PR 19515)
  • Optimize generic inference passes (Ivan Levkivskyi, PR 19501)
  • Speed up the default plugin (Jukka Lehtosalo, PRs 19385 and 19462)
  • Remove nested imports from the default plugin (Ivan Levkivskyi, PR 19388)
  • Micro‑optimize type expansion (Jukka Lehtosalo, PR 19461)
  • Micro‑optimize type indirection (Jukka Lehtosalo, PR 19460)
  • Micro‑optimize the plugin framework (Jukka Lehtosalo, PR 19464)
  • Avoid temporary set creation in subtype checking (Jukka Lehtosalo, PR 19463)
  • Subtype checking micro‑optimization (Jukka Lehtosalo, PR 19384)
  • Return early where possible in subtype check (Stanislav Terliakov, PR 19400)
  • Deduplicate some types before joining (Stanislav Terliakov, PR 19409)
  • Speed up type checking by caching argument inference context (Jukka Lehtosalo, PR 19323)

... (truncated)

Commits

Updates sphinx-click from 6.0.0 to 6.1.0

Commits
  • 58473a8 Migrate to trusted publishing
  • 0d4f938 Drop support for Python < 3.10, add Python 3.13
  • 073353a Migrate setuptools, mypy configuration to pyproject.toml
  • 83a5a17 Prefer Group over MultiCommand
  • d9705e8 Bump actions versions
  • a94049a pre-commit: Bump versions
  • dc11fe1 pre-commit: Migrate to ruff
  • c999be2 pre-commit: Bump versions
  • See full diff in compare view

Updates xdoctest from 1.2.0 to 1.3.0

Release notes

Sourced from xdoctest's releases.

Version 1.3.0

Added

  • New ASYNC basic directive to hold the asyncio event loop in any section of code. Useful for multitasking tests.
  • Support for 3.14

Changed

  • Removed 16806_WORKAROUND as it is not longer needed for Python 3.8+
  • Removed deprecated --xdoc-force-dynamic and --allow-xdoc-dynamic flags
  • Improved speed (~6x) of doctest collection when running in pytest
  • Uses pytest plugin system to disable stdlib doctest instead of monkey patching.

Fixed

  • Fixed incorrect return type in docstrings
  • The doctest parser no longer expand tabs to spaces

What's Changed

New Contributors

Full Changelog: https://github.com/Erotemic/xdoctest/compare/v1.2.0...refs/heads/release

Changelog

Sourced from xdoctest's changelog.

Version 1.3.0 - Unreleased

Added

  • New ASYNC basic directive to hold the asyncio event loop in any section of code. Useful for multitasking tests.

Changed

  • Removed 16806_WORKAROUND as it is not longer needed for Python 3.8+
  • Removed deprecated --xdoc-force-dynamic and --allow-xdoc-dynamic flags
  • Improved speed (~6x) of doctest collection when running in pytest
  • Uses pytest plugin system to disable stdlib doctest instead of monkey patching.

Fixed

  • Fixed incorrect return type in docstrings
  • The doctest parser no longer expand tabs to spaces
Commits

Updates numpy from 2.3.2 to 2.3.3

Release notes

Sourced from numpy's releases.

2.3.3 (Sep 9, 2025)

NumPy 2.3.3 Release Notes

The NumPy 2.3.3 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. Note that the 3.14.0 final is currently expected in Oct, 2025. This release is based on 3.14.0rc2.

Contributors

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Aleksandr A. Voyt +
  • Bernard Roesler +
  • Charles Harris
  • Hunter Hogan +
  • Joren Hammudoglu
  • Maanas Arora
  • Matti Picus
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sanjay Kumar Sakamuri Kamalakar +
  • Tobias Markus +
  • Warren Weckesser
  • Zebreus +

Pull requests merged

A total of 23 pull requests were merged for this release.

  • #29440: MAINT: Prepare 2.3.x for further development.
  • #29446: BUG: Fix test_configtool_pkgconfigdir to resolve PKG_CONFIG_DIR...
  • #29447: BLD: allow targeting webassembly without emscripten
  • #29460: MAINT: Backport write_release.py
  • #29473: MAINT: Bump pypa/cibuildwheel from 3.1.0 to 3.1.2
  • #29500: BUG: Always return a real dtype from linalg.cond (gh-18304) (#29333)
  • #29501: MAINT: Add .file entry to all .s SVML files
  • #29556: BUG: Casting from one timedelta64 to another didn't handle NAT.
  • #29562: BLD: update vendored Meson to 1.8.3 [wheel build]
  • #29563: BUG: Fix metadata not roundtripping when pickling datetime (#29555)
  • #29587: TST: update link and version for Intel SDE download
  • #29593: TYP: add sorted kwarg to unique
  • #29672: MAINT: Update pythoncapi-compat from main.
  • #29673: MAINT: Update cibuildwheel.
  • #29674: MAINT: Fix typo in wheels.yml
  • #29683: BUG, BLD: Correct regex for ppc64 VSX3/VSX4 feature detection
  • #29684: TYP: ndarray.fill() takes no keyword arguments
  • #29685: BUG: avoid thread-unsafe refcount check in temp elision
  • #29687: CI: replace comment-hider action in mypy_primer workflow

... (truncated)

Commits
  • f2a77a7 Merge pull request #29702 from charris/prepare-2.3.3
  • 8641006 REL: Prepare for the NumPy 2.3.3 release [wheel build]
  • f024265 Merge pull request #29701 from charris/backport-29697
  • 84f2eed Merge pull request #29700 from charris/backport-29695
  • 7cacdbf Update VXE and VXE2 detection regex patterns
  • 028c469 TYP: appease ruff
  • 4b80666 TYP: fix np.bool method declarations
  • f2a6b75 Merge pull request #29691 from charris/backport-29665
  • a707cbf Merge pull request #29689 from charris/backport-29662
  • 3d66056 BUG: use correct input dtype in flatiter assignment
  • Additional commits viewable in compare view

Updates pycparser from 2.22 to 2.23

Release notes

Sourced from pycparser's releases.

release_v2.23

What's Changed

New Contributors

Full Changelog: https://github.com/eliben/pycparser/compare/release_v2.22...release_v2.23

Commits

Updates starlette from 0.47.3 to 0.48.0

Release notes

Sourced from starlette's releases.

Version 0.48.0

Added

  • Add official Python 3.14 support #3013.

Changed


New Contributors

Full Changelog: https://github.com/Kludex/starlette/compare/0.47.3...0.48.0

Changelog

Sourced from starlette's changelog.

0.48.0 (September 13, 2025)

Added

  • Add official Python 3.14 support #3013.

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+141
Deletions:
-140
Package Dependencies
Package:
mypy
Ecosystem:
pip
Version Change:
1.17.1 → 1.18.1
Update Type:
Minor
Package:
numpy
Ecosystem:
pip
Version Change:
2.3.2 → 2.3.3
Update Type:
Patch
Package:
starlette
Ecosystem:
pip
Version Change:
0.47.3 → 0.48.0
Update Type:
Minor
Ecosystem:
pip
Version Change:
6.0.0 → 6.1.0
Update Type:
Minor
Package:
pycparser
Ecosystem:
pip
Version Change:
2.22 → 2.23
Package:
xdoctest
Ecosystem:
pip
Version Change:
1.2.0 → 1.3.0
Update Type:
Minor
Package:
pystac
Ecosystem:
pip
Version Change:
1.13.0 → 1.14.0
Update Type:
Minor
Technical Details
ID: 8191124
UUID: 2829331209
Node ID: PR_kwDOFf5Hus6opCsJ
Host: GitHub
Repository: stac-utils/stac-api-validator
Mergeable: Yes
Merge State: Clean