chore(deps): update all dependencies#17162
Conversation
trusted-contributions-gcf
Bot
added
the
kokoro:force-run
yoshi-kokoro
removed
the
kokoro:force-run
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies across multiple packages, including bigframes, rules_cc, google-auth, requests, and pandas. A compatibility issue was identified in the BigQuery Storage sample requirements, where the version marker for pandas 3.0.3 needs to be updated to Python 3.10 or higher to prevent installation failures on Python 3.9.
| pandas===1.3.5; python_version == '3.7' | ||
| pandas===2.0.3; python_version == '3.8' | ||
| pandas==2.3.3; python_version >= '3.9' | ||
| pandas==3.0.3; python_version >= '3.9' |
There was a problem hiding this comment.
Pandas 3.0.0 and later versions require Python 3.10 or higher. The current environment marker python_version >= '3.9' will cause installation failures on Python 3.9. Since other dependencies updated in this pull request (such as google-cloud-core v2.6.0) are also dropping support for Python 3.9, this marker should be updated to reflect the new minimum requirement.
pandas==3.0.3; python_version >= '3.10'
renovate-bot
force-pushed
the
renovate/all
branch
from
50ff337 to
2129206
Compare
trusted-contributions-gcf
Bot
added
the
kokoro:force-run
yoshi-kokoro
removed
the
kokoro:force-run
2 participants
This PR contains the following updates:
v4→v6v5→v6==2.39.0→==2.40.0==7.1.1→==7.1.2==8.3.3→==8.4.0v3→v4==2.50.0→==2.53.0==2.52.0→==2.53.0==2.5.1→==2.6.0==3.65.0→==3.66.0==1.74.0→==1.75.0==3.13→==3.15==3.14→==3.15==2.3.3→==3.0.3==1.27.2→==1.28.03.10→3.143.12→3.14==2.33.1→==2.34.2==0.15.12→==0.15.130.1.1→0.2.18==21.3.1→==21.3.3Release Notes
actions/checkout (actions/checkout)
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
v4.3.1Compare Source
What's Changed
Full Changelog: actions/checkout@v4...v4.3.1
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in #1941isGhesby @jww3 in #1946v4.2.1Compare Source
v4.2.0Compare Source
v4.1.7Compare Source
v4.1.6Compare Source
v4.1.5Compare Source
user.emailto be41898282+github-actions[bot]@​users.noreply.github.comby @cory-miller in #1707v4.1.4Compare Source
extensions.worktreeConfigwhen disablingsparse-checkoutby @jww3 in #1692v4.1.3Compare Source
sparse-checkoutby @jww3 in #1656actions/checkoutversion inupdate-main-version.ymlby @jww3 in #1650v4.1.2Compare Source
sparse-checkoutoption is not present @dscho in #1598v4.1.1Compare Source
v4.1.0Compare Source
actions/setup-python (actions/setup-python)
v6.2.0Compare Source
v6.1.0Compare Source
What's Changed
Enhancements:
pip-installinput by @gowridurgad in #1201Dependency and Documentation updates:
allow-prereleasesby @yarikoptic in #979New Contributors
Full Changelog: actions/setup-python@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
pip-versionby @priyagupta108 in #1129Bug fixes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v6.0.0
v6Compare Source
v5.6.0Compare Source
What's Changed
Full Changelog: actions/setup-python@v5...v5.6.0
v5.5.0Compare Source
What's Changed
Enhancements:
Bug fixes:
This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v5.5.0
v5.4.0Compare Source
What's Changed
Enhancements:
Documentation changes:
Dependency updates:
undicifrom 5.28.4 to 5.28.5 by @dependabot in #1012urllib3from 1.25.9 to 1.26.19 in /tests/data by @dependabot in #895actions/publish-immutable-actionfrom 0.0.3 to 0.0.4 by @dependabot in #1014@actions/http-clientfrom 2.2.1 to 2.2.3 by @dependabot in #1020requestsfrom 2.24.0 to 2.32.2 in /tests/data by @dependabot in #1019@actions/cacheto^4.0.0by @priyagupta108 in #1007New Contributors
Full Changelog: actions/setup-python@v5...v5.4.0
v5.3.0Compare Source
What's Changed
Bug Fixes:
isGheslogic by @jww3 in #963Enhancements:
New Contributors
Full Changelog: actions/setup-python@v5...v5.3.0
v5.2.0Compare Source
What's Changed
Bug fixes:
.zipextension to Windows package downloads forExpand-ArchiveCompatibility by @priyagupta108 in #916This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Documentation changes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v5.2.0
v5.1.1Compare Source
What's Changed
Bug fixes:
This update ensures compatibility and optimal performance of workflows on the latest macOS version.
Documentation changes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v5.1.1
v5.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-python@v5.0.0...v5.1.0
googleapis/google-cloud-python (bigframes)
v2.40.0Compare Source
Documentation
Features
hparam_rangeandhparam_candidatestobigframes.bigquery.create_model(#16640) (ca47835ce0e381c0833545ca1cf7734c3c34ceb5)Bug Fixes
copyargument warning into_pandas(#16917) (fe5245b8f20dd94231e72e2572609e029ee137c7)tkem/cachetools (cachetools)
v7.1.2Compare Source
===================
Minor type stub improvements.
Minor documentation improvements.
Modernize build environment.
pallets/click (click)
v8.4.0Compare Source
Unreleased
:class:
ParamTypetyping improvements. :pr:3371ParamTypeis now a generic abstract base class,parameterized by its converted value type.
~ParamType.convertreturn types are narrowed on allconcrete types (
strfor :class:STRING,intfor:class:
INT, etc.).~ParamType.to_info_dictreturns specific:class:
~typing.TypedDictsubclasses instead ofdict[str, Any].CompositeParamTypeand the number-range base are nowgeneric with abstract methods.
Refactor
convert_typeto extract type inference into a private_guess_typehelper, and add :func:typing.overloadsignatures.:pr:
3372:class:
Parametertyping improvements. :pr:2805Parameteris now an abstract base class, making explicitthat it cannot be instantiated directly.
Parameter.nameis nowstrinstead ofstr | None.When
expose_value=False, the name is set to""insteadof
None.ctxparameter of :meth:Parameter.get_error_hintis nowtyped as
Context | None, matching the runtime behavior.Split string values from
default_mapfor parameters withnargs > 1or :class:
Tupletype, matching environment variable behavior.:issue:
2745:pr:3364Auto-detect
type=UNPROCESSEDforflag_valueof non-basic types(not
str,int,float, orbool), so programmer-providedPython objects like classes and enum members are passed through unchanged
instead of being stringified. Previously
type=click.UNPROCESSEDhadto be set explicitly. :issue:
2012:pr:3363The error hint now uses :meth:
Command.get_help_option_namesto picknon-shadowed help option names, so
Try '... -h'no longer points to asubcommand option that shadows
-h. All surviving names are shown(
-h/--help). :issue:2790:pr:3208Fix readline functionality on non-Windows platforms. Prompt text is now
passed directly to readline instead of being printed separately, allowing
proper backspace, line editing, and line wrapping behavior. :issue:
2968:pr:
2969Use :func:
os.startfileon Windows to open URLs in :func:open_url,replacing the
startbuilt-in which cannot be invoked withoutshell=True. :issue:3164:pr:3186Fix Fish shell completion errors when option help text contains newlines.
:issue:
3043:pr:3126Add :class:
NoSuchCommandexception with suggestions for misspelledcommands. :issue:
3107:pr:3228Use :class:
ValueErrormessage when conversion in :class:FuncParamTypewouldfail. :issue:
3105:pr:3211Add
click.get_pager_filefor file-like access to an outputpager. :pr:
1572:pr:3405:class:
~click.formatting.TextWrapperand:func:
~click.formatting.wrap_textnow measure line width in visiblecharacters, ignoring ANSI escape sequences. :pr:
3420Fix :meth:
HelpFormatter.write_usageemitting only a blank line whencalled without
args. The usage prefix and program name are nowwritten even when no arguments follow, and the trailing separator
space is stripped so the line ends at the program name.
:issue:
3360:pr:3434Show custom error messages from types when :func:
promptwithhide_input=Truefails validation, instead of always showing ageneric message. Built-in type messages mask the input value.
:issue:
2809:pr:3256Add
captureparameter to :class:CliRunnerwith two modes:sys(default) and
fd.fdredirects file descriptors1and2via :func:
os.dup2so output that bypassessys.stdout(stale streamreferences, C extensions, subprocesses,
faulthandler) is capturedwith proper isolation. :issue:
854:issue:2412:issue:2468:issue:
2497:issue:2761:issue:2827:issue:2865Revert the
8.3.3change that exposed the original file descriptorvia
fileno()on the redirectedCliRunnerstreams in the defaultcapture mode.
os.dup2(w, sys.stdout.fileno())calls inside a CLI nolonger mutate the host runner's stdout, which broke Pytest's
fd-levelcapture teardown. C-level consumers that need a real
fdshould usecapture="fd". :issue:3384:pr:3391Mark additional built-in strings with
gettext()to extend translationcoverage. :pr:
2902Fix feature switch groups (several
flag_valueoptions sharing oneparameter name) silently dropping an explicit
defaultwhen a siblingoption without an explicit default was declared first. Arbitration is now
source-aware: a more explicit :class:
ParameterSourcealways wins, andwithin
ParameterSource.DEFAULT, an option that received an explicitdefault=keyword wins over a sibling whose default was auto-derived.The 8.3.x first-wins fallback for remaining ties was reverted to the
pre-8.3.x last-wins fallback. :issue:
3403:pr:3404Fix missing space between option help text and the
(DEPRECATED)label, and localize the option label so it matches the command label.
The label and the
DeprecationWarningreason suffix are now producedby shared helpers. :pr:
3423Document short option stacking (
-abcis parsed as-a -b -c) andclarify that multi-character short option names are not supported.
:issue:
2779:pr:3431dorny/paths-filter (dorny/paths-filter)
v4.0.1Compare Source
What's Changed
New Contributors
Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1
v4.0.0Compare Source
v4Compare Source
v3.0.3Compare Source
v3.0.2Compare Source
v3.0.1Compare Source
googleapis/google-cloud-python (google-cloud-core)
v2.6.0: google-cloud-core: v2.6.0Compare Source
Bug Fixes
kjd/idna (idna)
v3.15Compare Source
check_label,short-circuiting contextual-rule processing for oversized input
while staying compatible with UTS 46 usage.
frozensets (avoiding per-codepoint list construction), simplify
length checks, and reuse the shared
_unicode_dots_refromidna.corein the codec module.raise ... from errfor proper exception chaining andswitch internal string formatting to f-strings.
flit_core4.x in the build backend.pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
to Python 3.14.
initial GHSA identifier.
Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.
v3.14Compare Source
time by rejecting oversize inputs up-front. Closes a bypass
of the CVE-2024-3651 mitigation. [CVE-2026-45409]
Thanks to Stan Ulbrych for reporting the issue.
pandas-dev/pandas (pandas)
v3.0.3: pandas 3.0.3Compare Source
We are pleased to a
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.