Skip to content

Bump pybind11 from 3.0.2 to 3.0.3#10

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/pybind11-3.0.3
Open

Bump pybind11 from 3.0.2 to 3.0.3#10
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/pybind11-3.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps pybind11 from 3.0.2 to 3.0.3.

Release notes

Sourced from pybind11's releases.

Version 3.0.3

Bug fixes:

  • Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

  • Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

  • Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

  • Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

  • Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

  • Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

  • Fixed static_pointer_cast build failure with virtual inheritance in holder_caster_foreign_helpers.h. #6014

  • Fixed ambiguous factory template specialization that caused compilation failures with nvcc + GCC 14. #6011

  • Fixed crash in def_readwrite for non-smart-holder properties of smart-holder classes. #6008

  • Fixed memory leak for py::dynamic_attr() objects on Python 3.13+ by clearing managed __dict__ contents during deallocation. #5999

  • Fixed binding of noexcept and ref-qualified (&, &&) methods inherited from unregistered base classes. #5992

Internal:

  • Moved tomlkit dependency to the dev dependency group. #5990

  • Switched to newer public CPython APIs (PyType_GetFlags and public vectorcall APIs where available). #6005

Tests:

  • Made an async callback test deterministic by replacing fixed sleep with bounded waiting. #5986

CI:

... (truncated)

Changelog

Sourced from pybind11's changelog.

Version 3.0.3 (March 31, 2026)

Bug fixes:

  • Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

  • Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

  • Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

  • Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

  • Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

  • Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

  • Fixed static_pointer_cast build failure with virtual inheritance in holder_caster_foreign_helpers.h. #6014

  • Fixed ambiguous factory template specialization that caused compilation failures with nvcc + GCC 14. #6011

  • Fixed crash in def_readwrite for non-smart-holder properties of smart-holder classes. #6008

  • Fixed memory leak for py::dynamic_attr() objects on Python 3.13+ by clearing managed __dict__ contents during deallocation. #5999

  • Fixed binding of noexcept and ref-qualified (&, &&) methods inherited from unregistered base classes. #5992

Internal:

  • Moved tomlkit dependency to the dev dependency group. #5990

  • Switched to newer public CPython APIs (PyType_GetFlags and public vectorcall APIs where available). #6005

Tests:

  • Made an async callback test deterministic by replacing fixed sleep with bounded waiting. #5986

... (truncated)

Commits
  • 1b49908 docs: add v3.0.3 and v3.1.0 changelog updates. (#6023)
  • c066c76 fix: add missing PYBIND11_ALWAYS_INLINE macro for v3.0.3 backports
  • 76efcb3 Bump version from v3.0.2 → v3.0.3
  • 0f41635 chore(deps): bump pygments from 2.17.2 to 2.20.0 in /docs (#6024)
  • 54a4615 chore(deps): bump requests from 2.32.4 to 2.33.0 in /docs (#6013)
  • d12037c chore(deps): update pre-commit hooks (#6002)
  • 64eecc4 chore(deps): bump the actions group with 3 updates (#6000)
  • c0ea8fc Fix heap-buffer-overflow in pythonbuf with undersized buffers (#6019)
  • 8d621d6 fix: detect virtual inheritance in add_base to prevent pointer offset crash (...
  • b6a616e fix: strdup "self" arg in def_property_static, partially revert #6010 (gh...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 6, 2026
Bumps [pybind11](https://github.com/pybind/pybind11) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pybind/pybind11/releases)
- [Changelog](https://github.com/pybind/pybind11/blob/master/docs/changelog.md)
- [Commits](pybind/pybind11@v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: pybind11
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/pybind11-3.0.3 branch from 38aca44 to a8a134c Compare April 16, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants