Skip to content

build(deps): bump the python-runtime group across 1 directory with 4 updates#55

Merged
Jamie-BitFlight merged 1 commit intomainfrom
dependabot/uv/python-runtime-4f1f9d644f
Apr 29, 2026
Merged

build(deps): bump the python-runtime group across 1 directory with 4 updates#55
Jamie-BitFlight merged 1 commit intomainfrom
dependabot/uv/python-runtime-4f1f9d644f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the python-runtime group with 4 updates in the / directory: gitpython, msgspec, pydantic and typer.

Updates gitpython from 3.1.46 to 3.1.47

Release notes

Sourced from gitpython's releases.

3.1.47 - with security fixes

Advisories

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.46...3.1.47

Commits
  • 4199cb8 bump version to 3.1.47
  • 0f68db0 Merge pull request #2131 from WesR/main
  • 43d92de git.cmd: harden unsafe option canonicalization and isolate push test cases
  • 9aed7cf linter fix
  • 1421958 Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4
  • da54523 Merge pull request #2130 from gitpython-developers/fix-multi-options
  • c9a2678 Make sure that multi-options are checked after splitting them with shlex
  • 75e6c6b Merge pull request #2126 from ngie-eign/fix-execute-with_stdout-no-issues
  • 6fc4742 test_avoids_changing...: don't leave test artifacts behind
  • d966a0d git.cmd.Git.execute(..): fix with_stdout=False
  • Additional commits viewable in compare view

Updates msgspec from 0.20.0 to 0.21.1

Release notes

Sourced from msgspec's releases.

Version 0.21.1

  • Fix ValidationError and DecodeError raised in dec_hook being incorrectly wrapped in another ValidationError (#1013).
  • Fix a potential NULL dereference in structmeta_get_module_ns (#1016).
  • Fix a reference leak in ms_passes_big_int_constraints (#1017).
  • Fix missing ref_template parameter in msgspec.json.schema type stub (#1002).
  • Clarify order='deterministic' encoder docstrings (#1011).
  • Add a porting guide for users migrating from orjson (#1007).

Version 0.21.0

  • Fix a segfault on Python 3.13+ that could occur when creating structs that contained a __dict__, instead of only using __slots__ (#960).
  • Improve type annotations for msgspec.UNSET (#975).
  • Fix hashing of decoded tuples on Python 3.14 (#980).
  • Add ref_template arg to msgspec.json.schema (#983).
  • Add missing libm linkage to some architectures (#993).
  • Fix memory leak when decoding sets (#991).
  • Add uniqueItems annotation to set/frozenset JSON schemas (#984).
  • BREAKING: Call __post_init__ from msgspec.structs.replace/copy.replace (#1000).
Changelog

Sourced from msgspec's changelog.

Version 0.21.1 (2026-04-13)

  • Fix ValidationError and DecodeError raised in dec_hook being incorrectly wrapped in another ValidationError ({pr}1013).
  • Fix a potential NULL dereference in structmeta_get_module_ns ({pr}1016).
  • Fix a reference leak in ms_passes_big_int_constraints ({pr}1017).
  • Fix missing ref_template parameter in msgspec.json.schema type stub ({pr}1002).
  • Clarify order='deterministic' encoder docstrings ({pr}1011).
  • Add a porting guide for users migrating from orjson ({pr}1007).

Version 0.21.0 (2026-04-08)

  • Fix a segfault on Python 3.13+ that could occur when creating structs that contained a __dict__, instead of only using __slots__ ({pr}960).
  • Improve type annotations for msgspec.UNSET ({pr}975).
  • Fix hashing of decoded tuples on Python 3.14 ({pr}980).
  • Add ref_template arg to msgspec.json.schema ({pr}983).
  • Add missing libm linkage to some architectures ({pr}993).
  • Fix memory leak when decoding sets ({pr}991).
  • Add uniqueItems annotation to set/frozenset JSON schemas ({pr}984).
  • BREAKING: Call __post_init__ from msgspec.structs.replace/copy.replace ({pr}1000).
Commits
  • 10c9ac4 Add changelog for 0.21.1 (#1020)
  • 0e29058 Add porting guide for users coming from orjson (#1007)
  • 88ce26d fix reference leak in ms_passes_big_int_constraints (#1017)
  • bcb7a2b fix NULL check in structmeta_get_module_ns (#1016)
  • 42f9184 Fix logo in README for dark and light modes (#969)
  • 4ce20fa fix wrapping ValidationError and DecodeError in ValidationError in `dec...
  • 20cc59d Clarify wording of order='deterministic' in encoder docstrings (#1011)
  • 08edcff Update Pydantic doc links to new site structure (#1008)
  • 4024c90 Add ref_tempalte to json.pyi (#1002)
  • f99dca7 Update changelog for release 0.21.0 (#1001)
  • Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.3

Release notes

Sourced from pydantic's releases.

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

Packaging

  • Add zizmor for GitHub Actions workflow linting by @​Viicos in #13039
  • Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #13064

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

  • Allow default factories of private attributes to take validated model data by @​Viicos in #13013

Changes

... (truncated)

Commits
  • 9e9a111 Fix backported test
  • 1ec8c6a Prepare release v2.13.3
  • fb4f204 Handle AttributeError subclasses with from_attributes
  • ca3ddd1 Prepare release v2.13.2
  • 000e823 Fix ValidationInfo.field_name missing with model_validate_json()
  • d45d8be Prepare release 2.13.1
  • 54aca60 Fix ValidationInfo.data missing with model_validate_json()
  • 46bf4fa Fix Pydantic release workflow (#13067)
  • 1b359ed Prepare release v2.13.0 (#13065)
  • b1bf194 Fix model equality when using runtime extra configuration (#13062)
  • Additional commits viewable in compare view

Updates typer from 0.24.1 to 0.25.0

Release notes

Sourced from typer's releases.

0.25.0

Features

  • 🚸 Don't truncate code lines in traceback when formatted with Rich. PR #1695 by @​YuriiMotov.

0.24.2

Fixes

  • 🐛 Ensure that typer.launch forwards correctly when launching a file. PR #1708 by @​svlandeg.

Refactors

Docs

Internal

... (truncated)

Changelog

Sourced from typer's changelog.

0.25.0 (2026-04-26)

Features

  • 🚸 Don't truncate code lines in traceback when formatted with Rich. PR #1695 by @​YuriiMotov.

0.24.2 (2026-04-22)

Fixes

  • 🐛 Ensure that typer.launch forwards correctly when launching a file. PR #1708 by @​svlandeg.

Refactors

Docs

Internal

... (truncated)

Commits
  • 959845e 🔖 Release version 0.25.0
  • 5e1fcfb 📝 Update release notes
  • dfb21ad 🚸 Don't truncate code lines in traceback when formatted with Rich (#1695)
  • c9554ec 🔖 Release version 0.24.2
  • 98f27ca 📝 Update release notes
  • 31b468b 🐛 Ensure that typer.launch forwards correctly when launching a file (#1708)
  • f0a6ee8 📝 Update release notes
  • 5382d24 ⬆ Bump mypy from 1.20.1 to 1.20.2 (#1715)
  • 6f15177 📝 Update release notes
  • 8572894 ⬆ Bump prek from 0.3.9 to 0.3.10 (#1716)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the python-runtime group with 4 updates in the / directory: [gitpython](https://github.com/gitpython-developers/GitPython), [msgspec](https://github.com/jcrist/msgspec), [pydantic](https://github.com/pydantic/pydantic) and [typer](https://github.com/fastapi/typer).


Updates `gitpython` from 3.1.46 to 3.1.47
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.46...3.1.47)

Updates `msgspec` from 0.20.0 to 0.21.1
- [Release notes](https://github.com/jcrist/msgspec/releases)
- [Changelog](https://github.com/jcrist/msgspec/blob/main/docs/changelog.md)
- [Commits](jcrist/msgspec@0.20.0...0.21.1)

Updates `pydantic` from 2.12.5 to 2.13.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.3)

Updates `typer` from 0.24.1 to 0.25.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.24.1...0.25.0)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: msgspec
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: pydantic
  dependency-version: 2.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: typer
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 27, 2026
@github-actions
Copy link
Copy Markdown

📊 Test Coverage Report

Coverage: 82.81%

📥 Coverage XML available as artifact: coverage-xml

@github-actions
Copy link
Copy Markdown

Benchmark Results

No regressions — threshold: 30%

scan-clean

Metric Base Compare Change
files_per_second 66.8 files/s 66.3 files/s ➡️ -0.7%
scan_max_ms 15592.5 ms 15233.2 ms ✅ -2.3%
scan_mean_ms 14989.2 ms 15098.0 ms ➡️ +0.7%
scan_min_ms 14656.6 ms 14950.4 ms ➡️ +2.0%

scan-violations

Metric Base Compare Change
files_per_second 82.8 files/s 82.7 files/s ➡️ -0.0%
scan_max_ms 2477.1 ms 2505.3 ms ➡️ +1.1%
scan_mean_ms 2428.3 ms 2429.1 ms ➡️ +0.0%
scan_min_ms 2375.3 ms 2358.2 ms ✅ -0.7%

fix-violations

Metric Base Compare Change
fix_files_per_second 87.5 files/s 87.2 files/s ➡️ -0.4%
fix_max_ms 2314.9 ms 2332.6 ms ➡️ +0.8%
fix_mean_ms 2296.5 ms 2305.3 ms ➡️ +0.4%
fix_min_ms 2279.4 ms 2268.6 ms ✅ -0.5%

cpu

Metric Base Compare Change
cpu_clean_mean_ms 0.6 ms 0.6 ms ➡️ +0.0%
cpu_fix_mean_ms 2.0 ms 2.0 ms ➡️ +0.7%
cpu_violations_mean_ms 0.8 ms 0.8 ms ✅ -1.8%

View benchmark history

Updated 2026-04-27 06:41 UTC

@Jamie-BitFlight Jamie-BitFlight merged commit 6c73ef5 into main Apr 29, 2026
12 checks passed
@dependabot dependabot Bot deleted the dependabot/uv/python-runtime-4f1f9d644f branch April 29, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant