Bump the python-packages group across 1 directory with 9 updates#171
Merged
MaxHalford merged 1 commit intomainfrom Feb 27, 2026
Merged
Bump the python-packages group across 1 directory with 9 updates#171MaxHalford merged 1 commit intomainfrom
MaxHalford merged 1 commit intomainfrom
Conversation
Bumps the python-packages group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [db-dtypes](https://github.com/googleapis/python-db-dtypes-pandas) | `1.4.4` | `1.5.0` | | [google-cloud-bigquery](https://github.com/googleapis/python-bigquery) | `3.40.0` | `3.40.1` | | [rich](https://github.com/Textualize/rich) | `14.3.1` | `14.3.2` | | [sqlglot](https://github.com/tobymao/sqlglot) | `28.6.0` | `28.10.1` | | [google-cloud-bigquery-storage](https://github.com/googleapis/google-cloud-python) | `2.36.0` | `2.36.1` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.20.3` | `3.24.2` | | [ipykernel](https://github.com/ipython/ipykernel) | `7.1.0` | `7.2.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.14` | `0.15.1` | Updates `db-dtypes` from 1.4.4 to 1.5.0 - [Release notes](https://github.com/googleapis/python-db-dtypes-pandas/releases) - [Changelog](https://github.com/googleapis/python-db-dtypes-pandas/blob/main/CHANGELOG.md) - [Commits](googleapis/python-db-dtypes-pandas@v1.4.4...v1.5.0) Updates `google-cloud-bigquery` from 3.40.0 to 3.40.1 - [Release notes](https://github.com/googleapis/python-bigquery/releases) - [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md) - [Commits](googleapis/python-bigquery@v3.40.0...v3.40.1) Updates `pandas` from 3.0.0 to 2.3.3 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.0...v2.3.3) Updates `rich` from 14.3.1 to 14.3.2 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.1...v14.3.2) Updates `sqlglot` from 28.6.0 to 28.10.1 - [Commits](tobymao/sqlglot@v28.6.0...v28.10.1) Updates `google-cloud-bigquery-storage` from 2.36.0 to 2.36.1 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-cloud-bigquery-storage-v2.36.0...google-cloud-bigquery-storage-v2.36.1) Updates `filelock` from 3.20.3 to 3.24.2 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.20.3...3.24.2) Updates `ipykernel` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/ipython/ipykernel/releases) - [Changelog](https://github.com/ipython/ipykernel/blob/main/CHANGELOG.md) - [Commits](ipython/ipykernel@v7.1.0...v7.2.0) Updates `ruff` from 0.14.14 to 0.15.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.14...0.15.1) --- updated-dependencies: - dependency-name: db-dtypes dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: google-cloud-bigquery dependency-version: 3.40.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pandas dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: rich dependency-version: 14.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: sqlglot dependency-version: 28.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: google-cloud-bigquery-storage dependency-version: 2.36.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: filelock dependency-version: 3.24.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ipykernel dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.15.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 2 files
Architecture diagram
sequenceDiagram
participant App as Application Code
participant BQ as BigQuery Client
participant BQAPI as BigQuery API (REST)
participant BQStore as BigQuery Storage API (gRPC)
participant Lock as Filelock (Local FS)
Note over App,Lock: Runtime Flow with Updated Python Dependencies
App->>BQ: query("SELECT ...")
BQ->>BQAPI: jobs.query
alt CHANGED: Server Hangs (v3.40.1)
BQAPI-->>BQ: No response / Timeout
BQ->>BQ: CHANGED: Improved timeout/retry logic respects hanging server
BQ->>BQAPI: Retry request
end
BQAPI-->>BQ: Query Job Result
Note over App,BQStore: Data Extraction Flow
App->>BQ: CHANGED: to_dataframe(timeout=N)
BQ->>BQStore: Open Read Session
loop Stream Data
BQStore-->>BQ: Arrow/Avro stream
end
BQ->>BQ: db-dtypes (v1.5.0): Map BQ types to Pandas
BQ-->>App: DataFrame
Note over App,Lock: Concurrency Control
App->>Lock: acquire()
alt CHANGED: v3.24.2 Logic
Lock->>Lock: CHANGED: Detect same-thread self-deadlock
Lock->>Lock: NEW: Detect and break stale locks (SoftFileLock)
end
Lock-->>App: Lock granted
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-packages group with 8 updates in the / directory:
1.4.41.5.03.40.03.40.114.3.114.3.228.6.028.10.12.36.02.36.13.20.33.24.27.1.07.2.00.14.140.15.1Updates
db-dtypesfrom 1.4.4 to 1.5.0Release notes
Sourced from db-dtypes's releases.
Changelog
Sourced from db-dtypes's changelog.
Commits
58dc6fdchore: librarian release pull request: 20251215T132415Z (#382)c164a47feat: Add support for Python 3.14 (#380)5163c1cchore(tests): run unit tests after merge (#378)86c0308chore(librarian): update sha to support librarian 1.0.0 (#376)bd5a4c7chore(librarian): onboard to librarian (#374)Updates
google-cloud-bigqueryfrom 3.40.0 to 3.40.1Release notes
Sourced from google-cloud-bigquery's releases.
Changelog
Sourced from google-cloud-bigquery's changelog.
Commits
e8184fachore: librarian release pull request: 20260212T105312Z (#2415)80ca3f5chore(deps): update dependency pyasn1 to v0.6.2 [security] (#2407)d5cc42bchore(deps): update dependency geopandas to v1.1.2 [security] (#2411)24d45d0fix: updates timeout/retry code to respect hanging server (#2408)7b8ceeachore(deps): update dependency urllib3 to v2.6.3 [security] (#2357)7322843docs: clarify that only jobs.query and jobs.getQueryResults are affec… (#2349)4f67ba2fix: add timeout parameter to to_dataframe and to_arrow met… (#2354)Updates
pandasfrom 3.0.0 to 2.3.3Commits
9c8bc3eRLS: 2.3.36aa788a[backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)b64f0df[backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...058eb2b[backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...2ca088d[backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...92bf98f[backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...e57c7d6Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)e0fe9a0Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...23a1085BUG: improve future warning for boolean operations with missaligned indexes (...6113696Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...Updates
richfrom 14.3.1 to 14.3.2Release notes
Sourced from rich's releases.
Changelog
Sourced from rich's changelog.
Commits
0752ff0Merge pull request #3953 from Textualize/zwj-fix54ae0cfsimplify07edb85refine31930ddfix test454fcfcstupid comment13f87a4Fix ZWJ and edge cases1d402e0fix datesUpdates
sqlglotfrom 28.6.0 to 28.10.1Commits
9b32722Fix: Support missing meta when updating position metadata for an expression (...686ab6afix(optimizer)!: Use replace instead of set for JSON dot access identifiers (...2292d0dfeat(optimizer)!: Move SINH, COSH, TANH to Base (#6954)cec0f27feat(optimizer)!: Annotate BITWISE OPERATORS for Presto/Trino (#6951)d01657afeat(optimizer)!: Annotate WIDTH_BUCKET(expr) for Presto/Trino (#6950)0e872dcfeat(optimizer)!: Annotate POSITION and STRPOS for Trino/Presto (#6948)713d22ffeat(optimizer)!: Annotate LENGTH, LEVENSHTEIN_DISTANCE for Presto/Trino (#6947)7989906feat(optimizer)!: Move ASINH, ACOSH, ATANH to Base (#6946)2326eaefeat(optimizer)!: Move ASIN, ACOS, ATAN to Base (#6945)852adecfeat(optimizer)!: MoveMD5(expr)to Base (#6944)Updates
google-cloud-bigquery-storagefrom 2.36.0 to 2.36.1Release notes
Sourced from google-cloud-bigquery-storage's releases.
Commits
0e4866echore: librarian release pull request: 20260212T081040Z (#15564)b483e92chore: librarian generate pull request: 20260211T172749Z (#15560)5371e8echore: librarian generate pull request: 20260211T082017Z (#15556)e04fc9cchore(migration): Migrate code from googleapis/python-runtimeconfig into pack...973729bclean upa6b40b3chore: librarian generate pull request: 20260210T165038Z (#15554)99a1284chore: librarian generate pull request: 20260210T151820Z (#15553)151eeaechore(migration): Migrate code from googleapis/python-test-utils into package...69d956efix build0b70fa8fix buildUpdates
filelockfrom 3.20.3 to 3.24.2Release notes
Sourced from filelock's releases.
... (truncated)
Changelog
Sourced from filelock's changelog.
... (truncated)
Commits
db3e05aRelease 3.24.2ab6b90e🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race (#491)98b4ee9🐛 fix(test): resolve flaky write non-starvation test (#490)ef15f6b📝 docs: restructure using Diataxis framework (#489)0b2f65bRelease 3.24.1abccdba🐛 fix(soft): resolve Windows deadlock and test race condition (#488)2de9380Release 3.24.0d429e18✨ feat(lock): add lifetime parameter for lock expiration (#68) (#486)6c75bf7✨ feat(lock): add cancel_check to acquire (#309) (#487)fa6a27b🐛 fix(api): detect same-thread self-deadlock (#481)Updates
ipykernelfrom 7.1.0 to 7.2.0Release notes
Sourced from ipykernel's releases.
... (truncated)
Changelog
Sourced from ipykernel's changelog.
... (truncated)
Commits
4b37e75Publish 7.2.01630c4fTemporarily revert "Test changing base method to async after (#1464)" (#1493)8086199Temporarily revert "Test changing base method to async after (#1464)"a2d47a2chore: update pre-commit hooks (#1472)06c9aeePublish 7.2.0a1220a3c6Made IOPubThread constructor backward compatible (#1492)dee781dUpdate pytest requirement from <9,>=7.0 to >=7.0,<10 in the actions group acr...56b2e29Update pytest requirement in the actions group across 1 directory13e17dfAdvertizes kernel protocol 5.5 (#1488)59f0c65Advertizes kernel protocol 5.5Updates
rufffrom 0.14.14 to 0.15.1Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
a2f11d2Prepare for 0.15.1 (#23253)d29628eRemove docker-run-action (#23254)8a04266[ty] Allow discovering dependencies in system Python environments (#22994)55d06c8Ensure pending suppression diagnostics are reported (#23242)d056a9f[isort] support for configurable import section heading comments (#23151)e22fa4f[ty] Fix method calls on subclasses ofAny(#23248)fa56c15[ty] Fix bound method access onNone(#23246)4fd07d0Make range suppression test snapshot actually useful (#23251)8c63bce[ty] Include conditional symbols (likedatetime.UTC) in auto-import in more...46be943Exclude WASM artifacts from GitHub releases (#23221)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by cubic
Update Python dependencies to current minor/patch versions and allow Ruff 0.15.x. This improves BigQuery timeout handling, fixes Rich rendering edge cases, resolves file lock races, and refreshes dev tooling.
Written for commit e9c21a1. Summary will update on new commits.