Skip to content

Update python-ulid requirement from <=3.1.0,>=1.0.3 to >=1.0.3,<=4.0.1 - #856

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-ulid-gte-1.0.3-and-lte-4.0.1
Open

Update python-ulid requirement from <=3.1.0,>=1.0.3 to >=1.0.3,<=4.0.1#856
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-ulid-gte-1.0.3-and-lte-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on python-ulid to permit the latest version.

Release notes

Sourced from python-ulid's releases.

4.0.1

Changed

  • Renamed ULID.from_uuidv7 to ULID.from_uuid7 for naming symmetry with ULID.to_uuid7, correcting an inconsistency introduced in 3.2.0.

⚠️ If you adopted 3.2.0 or 4.0.0: update calls from ULID.from_uuidv7(...) to ULID.from_uuid7(...). This is the only change in this release.

For the full 4.0.0 feature set (the new ULIDGenerator, monotonicity policies, and default_generator), see the 4.0.0 release.

Full changelog: mdomke/python-ulid@4.0.0...4.0.1

Changelog

Sourced from python-ulid's changelog.

4.0.1_ - 2026-07-20

Changed

* Renamed ``ULID.from_uuidv7`` to :meth:`.ULID.from_uuid7` for naming symmetry with
  :meth:`.ULID.to_uuid7`, correcting an inconsistency introduced in 3.2.0.

4.0.0_ - 2026-07-20

.. warning::

Breaking change: the ValueProvider class and the ULID.provider class attribute
have been removed. ULID generation is now handled by the new :class:.ULIDGenerator together
with pluggable monotonicity policies. To customize generation, construct a
:class:.ULIDGenerator (optionally with a custom clock, randomness source, or policy) and
either call its generate() method or assign it to ulid.default_generator.

Added

* Added a public :class:`.ULIDGenerator` class that encapsulates ULID generation and can be
  configured with a custom clock, randomness source, and monotonicity policy.
* Added pluggable monotonicity policies: :class:`.StrictMonotonicPolicy` (the default),
  :class:`.LaxMonotonicPolicy` and :class:`.PureRandomPolicy`, together with the
  :class:`.MonotonicityPolicy` protocol and the :class:`.BaseMonotonicPolicy` base class for
  implementing custom policies.
* Added a module-level ``ulid.default_generator`` that can be reassigned to route ``ULID()`` and
  the ``ULID.from_*`` constructors through a custom :class:`.ULIDGenerator`.

Removed
</code></pre>
<ul>
<li>Removed the <code>ValueProvider</code> class and the <code>ULID.provider</code> attribute in favour of
:class:<code>.ULIDGenerator</code> and the monotonicity policies. Code that replaced <code>ULID.provider</code> or
subclassed <code>ValueProvider</code> must migrate to a custom :class:<code>.ULIDGenerator</code> assigned to
<code>ulid.default_generator</code>.</li>
<li>Removed the internal <code>validate_type</code> decorator. The <code>ULID.from_</code> constructors still raise
<code>TypeError</code> for arguments of the wrong type, so runtime behaviour is unchanged.</li>
</ul>
<h2><code>3.2.1</code>_ - 2026-07-17</h2>
<p>Fixed</p>
<pre><code>
Corrected the build and publish pipeline and the generated source distribution. This release
contains no changes to the library code.

3.2.0_ - 2026-07-17

Added
</code></pre>
<ul>
<li>Added transparent bidirectional UUIDv7 conversion methods (<code>ULID.to_uuid7</code> and</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/mdomke/python-ulid/commit/c8e418c3da4e42b842e200e3e75cf34575a4033c&quot;&gt;&lt;code&gt;c8e418c&lt;/code&gt;&lt;/a> fix(core): rename from_uuidv7 to from_uuid7 for symmetry with to_uuid7</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/aa8b06b3946427475e8f1c842fe8cac23fba82b3&quot;&gt;&lt;code&gt;aa8b06b&lt;/code&gt;&lt;/a> Decouple generator state (<a href="https://redirect.github.com/mdomke/python-ulid/issues/65&quot;&gt;#65&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/mdomke/python-ulid/commit/7a31bbda7a874320a7ad40b10063531a67259e52&quot;&gt;&lt;code&gt;7a31bbd&lt;/code&gt;&lt;/a> Improve contribution guide</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/4c35bd2f0c01256b701a6ec3ae7fc1dfe6cae336&quot;&gt;&lt;code&gt;4c35bd2&lt;/code&gt;&lt;/a> chore: Add missing build step to publish job</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/7226f712e9a6496fb57f52aa1912a7145eadd713&quot;&gt;&lt;code&gt;7226f71&lt;/code&gt;&lt;/a> chore: Use pinned commit for codecov as well</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/84ecd54ab0f081aaf28bc6c7d89476595d12cdbf&quot;&gt;&lt;code&gt;84ecd54&lt;/code&gt;&lt;/a> chore: Use commit SHA pin for external actions</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/3f04e7f8cf5d5d2ea5071ac8f0a94fb4e7e31841&quot;&gt;&lt;code&gt;3f04e7f&lt;/code&gt;&lt;/a> chore: Update CHANGELOG with latest changes</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/8ee65f6c57864a3cd2a27a932b22a5acc10bf09c&quot;&gt;&lt;code&gt;8ee65f6&lt;/code&gt;&lt;/a> Depend on typing-extensions for Python&lt;3.11; avoid it otherwise (<a href="https://redirect.github.com/mdomke/python-ulid/issues/50&quot;&gt;#50&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/mdomke/python-ulid/commit/9b592d2b1f02efa48c930d8018907c1f7b462750&quot;&gt;&lt;code&gt;9b592d2&lt;/code&gt;&lt;/a> Add changelog for 3.2.0 release</li>
<li><a href="https://github.com/mdomke/python-ulid/commit/a1ef2750357c5d9959b61cac454545259982dc5f&quot;&gt;&lt;code&gt;a1ef275&lt;/code&gt;&lt;/a> Add --uuid7 option to ulid show command</li>
<li>Additional commits viewable in <a href="https://github.com/mdomke/python-ulid/compare/1.0.3...4.0.1&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[!NOTE]
Low Risk
Single-line dependency constraint change; in-repo ULID usage is limited to ULID() construction with no 4.0 breaking APIs referenced.

Overview
Raises the allowed python-ulid version in pyproject.toml from <=3.1.0 to <=4.0.1, so installs can resolve 3.x and 4.x releases.

This library only uses ULID() for default primary keys (UlidPrimaryKey); it does not reference removed 4.0 APIs such as ValueProvider or ULID.provider, so the constraint change is mainly a packaging/compatibility update for downstream environments.

Reviewed by Cursor Bugbot for commit d882929573b80971ddadb10d4b89c32f0ee021ae. Bugbot is set up for automated code reviews on this repo. Configure here.

Updates the requirements on [python-ulid](https://github.com/mdomke/python-ulid) to permit the latest version.
- [Release notes](https://github.com/mdomke/python-ulid/releases)
- [Changelog](https://github.com/mdomke/python-ulid/blob/main/CHANGELOG.rst)
- [Commits](mdomke/python-ulid@1.0.3...4.0.1)

---
updated-dependencies:
- dependency-name: python-ulid
  dependency-version: 4.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants