Skip to content

Bump deepdiff from 9.0.0 to 9.1.0#748

Merged
waltsims merged 1 commit into
masterfrom
dependabot/pip/deepdiff-9.1.0
May 21, 2026
Merged

Bump deepdiff from 9.0.0 to 9.1.0#748
waltsims merged 1 commit into
masterfrom
dependabot/pip/deepdiff-9.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps deepdiff from 9.0.0 to 9.1.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

This PR bumps deepdiff from 9.0.0 to 9.1.0 in pyproject.toml. The new release is a patch-level update containing several bug fixes and a notable security hardening in the Delta component.

  • Security fix: Delta's check_elem() now raises immediately on dunder-attribute traversal attempts instead of routing through _raise_or_log(), and full-path preflight validation was added so malicious dunder paths can no longer be silently skipped via the set_item_added code path.
  • Bug fixes: Corrects nested NamedTuple set/frozenset Delta updates dropping the outer container, tuple Deltas silently no-oping for insert/delete-only changes, Delta mutations of internal diff data, and a crash when sorting paths with complex dictionary keys.

Confidence Score: 5/5

Safe to merge — single-line version bump with no behavioral changes to the project itself.

The only change is pinning deepdiff to 9.1.0, which brings a security hardening and several Delta bug fixes with no breaking API changes. The update follows the project's established exact-version pinning convention and poses no regression risk to k-wave-python's own code.

No files require special attention.

Important Files Changed

Filename Overview
pyproject.toml Bumps deepdiff from 9.0.0 to 9.1.0; single-line change, consistent with the project's exact-version pinning pattern.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[pyproject.toml] --> B["deepdiff==9.0.0 → 9.1.0"]
    B --> C[Security: dunder-attribute traversal fix in Delta]
    B --> D[Bug fix: NamedTuple set/frozenset Delta]
    B --> E[Bug fix: tuple Delta insert/delete opcodes]
    B --> F[Bug fix: Delta internal diff data mutation]
    B --> G[Bug fix: path sort crash on complex dict keys]
Loading

Reviews (1): Last reviewed commit: "Bump deepdiff from 9.0.0 to 9.1.0" | Re-trigger Greptile

Bumps [deepdiff](https://github.com/qlustered/deepdiff) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/qlustered/deepdiff/releases)
- [Changelog](https://github.com/qlustered/deepdiff/blob/master/CHANGELOG.md)
- [Commits](https://github.com/qlustered/deepdiff/commits)

---
updated-dependencies:
- dependency-name: deepdiff
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 19, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 19, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.57%. Comparing base (d500015) to head (f73cf00).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #748   +/-   ##
=======================================
  Coverage   75.57%   75.57%           
=======================================
  Files          57       57           
  Lines        8195     8195           
  Branches     1600     1600           
=======================================
  Hits         6193     6193           
  Misses       1381     1381           
  Partials      621      621           
Flag Coverage Δ
3.10 75.53% <ø> (ø)
3.11 75.53% <ø> (ø)
3.12 75.53% <ø> (ø)
3.13 75.53% <ø> (ø)
macos-latest 75.47% <ø> (ø)
ubuntu-latest 75.47% <ø> (ø)
windows-latest 75.31% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@waltsims waltsims merged commit 66c256d into master May 21, 2026
153 checks passed
@waltsims waltsims deleted the dependabot/pip/deepdiff-9.1.0 branch May 21, 2026 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant