Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

Bumps the minor-and-patch group with 7 updates:

Package From To
pystac 1.13.0 1.14.0
mypy 1.17.1 1.18.1
sphinx-click 6.0.0 6.1.0
xdoctest 1.2.0 1.3.0
numpy 2.3.2 2.3.3
pycparser 2.22 2.23
starlette 0.47.3 0.48.0

Updates pystac from 1.13.0 to 1.14.0

Release notes

Sourced from pystac's releases.

v1.14.0

What's Changed

Full Changelog: stac-utils/pystac@v1.13.0...v1.14.0

Changelog

Sourced from pystac's changelog.

[v1.14.0] - 2025-09-11

Added

  • Added to pystac.MediaType values VND_APACHE_PARQUET and VND_ZARR with the current standard media type value for these types and new media types COPC and VND_PMTILES (#1554)

Changed

  • Pass "User-Agent": "pystac/3.13.0" in request headers to work around urllib's default "User-Agent" being blocked by readthedocs (#1576)
  • Include a plain text repr in notebooks so untrusted notebooks look better (#1577)

Fixed

  • More permissive collection extent deserialization (#1559)
  • Type of proj:code setter (#1560)
  • Use urllib3 to fix parsing non-ascii in urls (#1566)
  • Some return types and other mypy nits (#1569)
Commits

Updates mypy from 1.17.1 to 1.18.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.18

We’ve just uploaded mypy 1.18 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Mypy Performance Improvements

Mypy 1.18 includes numerous performance improvements, resulting in about 40% speedup compared to 1.17 when type checking mypy itself. In extreme cases, the improvement can be 10x or higher. The list below is an overview of the various mypy optimizations. Many mypyc improvements (discussed in a separate section below) also improve performance.

Type caching optimizations have a small risk of causing regressions. When reporting issues with unexpected inferred types, please also check if --disable-expression-cache will work around the issue, as it turns off some of these optimizations.

  • Improve self check performance by 1.8% (Jukka Lehtosalo, PR 19768, 19769, 19770)
  • Optimize fixed-format deserialization (Ivan Levkivskyi, PR 19765)
  • Use macros to optimize fixed-format deserialization (Ivan Levkivskyi, PR 19757)
  • Two additional micro‑optimizations (Ivan Levkivskyi, PR 19627)
  • Another set of micro‑optimizations (Ivan Levkivskyi, PR 19633)
  • Cache common types (Ivan Levkivskyi, PR 19621)
  • Skip more method bodies in third‑party libraries for speed (Ivan Levkivskyi, PR 19586)
  • Simplify the representation of callable types (Ivan Levkivskyi, PR 19580)
  • Add cache for types of some expressions (Ivan Levkivskyi, PR 19505)
  • Use cache for dictionary expressions (Ivan Levkivskyi, PR 19536)
  • Use cache for binary operations (Ivan Levkivskyi, PR 19523)
  • Cache types of type objects (Ivan Levkivskyi, PR 19514)
  • Avoid duplicate work when checking boolean operations (Ivan Levkivskyi, PR 19515)
  • Optimize generic inference passes (Ivan Levkivskyi, PR 19501)
  • Speed up the default plugin (Jukka Lehtosalo, PRs 19385 and 19462)
  • Remove nested imports from the default plugin (Ivan Levkivskyi, PR 19388)
  • Micro‑optimize type expansion (Jukka Lehtosalo, PR 19461)
  • Micro‑optimize type indirection (Jukka Lehtosalo, PR 19460)
  • Micro‑optimize the plugin framework (Jukka Lehtosalo, PR 19464)
  • Avoid temporary set creation in subtype checking (Jukka Lehtosalo, PR 19463)
  • Subtype checking micro‑optimization (Jukka Lehtosalo, PR 19384)
  • Return early where possible in subtype check (Stanislav Terliakov, PR 19400)
  • Deduplicate some types before joining (Stanislav Terliakov, PR 19409)
  • Speed up type checking by caching argument inference context (Jukka Lehtosalo, PR 19323)

... (truncated)

Commits

Updates sphinx-click from 6.0.0 to 6.1.0

Commits
  • 58473a8 Migrate to trusted publishing
  • 0d4f938 Drop support for Python < 3.10, add Python 3.13
  • 073353a Migrate setuptools, mypy configuration to pyproject.toml
  • 83a5a17 Prefer Group over MultiCommand
  • d9705e8 Bump actions versions
  • a94049a pre-commit: Bump versions
  • dc11fe1 pre-commit: Migrate to ruff
  • c999be2 pre-commit: Bump versions
  • See full diff in compare view

Updates xdoctest from 1.2.0 to 1.3.0

Release notes

Sourced from xdoctest's releases.

Version 1.3.0

Added

  • New ASYNC basic directive to hold the asyncio event loop in any section of code. Useful for multitasking tests.
  • Support for 3.14

Changed

  • Removed 16806_WORKAROUND as it is not longer needed for Python 3.8+
  • Removed deprecated --xdoc-force-dynamic and --allow-xdoc-dynamic flags
  • Improved speed (~6x) of doctest collection when running in pytest
  • Uses pytest plugin system to disable stdlib doctest instead of monkey patching.

Fixed

  • Fixed incorrect return type in docstrings
  • The doctest parser no longer expand tabs to spaces

What's Changed

New Contributors

Full Changelog: Erotemic/xdoctest@v1.2.0...refs/heads/release

Changelog

Sourced from xdoctest's changelog.

Version 1.3.0 - Unreleased

Added

  • New ASYNC basic directive to hold the asyncio event loop in any section of code. Useful for multitasking tests.

Changed

  • Removed 16806_WORKAROUND as it is not longer needed for Python 3.8+
  • Removed deprecated --xdoc-force-dynamic and --allow-xdoc-dynamic flags
  • Improved speed (~6x) of doctest collection when running in pytest
  • Uses pytest plugin system to disable stdlib doctest instead of monkey patching.

Fixed

  • Fixed incorrect return type in docstrings
  • The doctest parser no longer expand tabs to spaces
Commits

Updates numpy from 2.3.2 to 2.3.3

Release notes

Sourced from numpy's releases.

2.3.3 (Sep 9, 2025)

NumPy 2.3.3 Release Notes

The NumPy 2.3.3 release is a patch release split between a number of maintenance updates and bug fixes. This release supports Python versions 3.11-3.14. Note that the 3.14.0 final is currently expected in Oct, 2025. This release is based on 3.14.0rc2.

Contributors

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Aleksandr A. Voyt +
  • Bernard Roesler +
  • Charles Harris
  • Hunter Hogan +
  • Joren Hammudoglu
  • Maanas Arora
  • Matti Picus
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sanjay Kumar Sakamuri Kamalakar +
  • Tobias Markus +
  • Warren Weckesser
  • Zebreus +

Pull requests merged

A total of 23 pull requests were merged for this release.

  • #29440: MAINT: Prepare 2.3.x for further development.
  • #29446: BUG: Fix test_configtool_pkgconfigdir to resolve PKG_CONFIG_DIR...
  • #29447: BLD: allow targeting webassembly without emscripten
  • #29460: MAINT: Backport write_release.py
  • #29473: MAINT: Bump pypa/cibuildwheel from 3.1.0 to 3.1.2
  • #29500: BUG: Always return a real dtype from linalg.cond (gh-18304) (#29333)
  • #29501: MAINT: Add .file entry to all .s SVML files
  • #29556: BUG: Casting from one timedelta64 to another didn't handle NAT.
  • #29562: BLD: update vendored Meson to 1.8.3 [wheel build]
  • #29563: BUG: Fix metadata not roundtripping when pickling datetime (#29555)
  • #29587: TST: update link and version for Intel SDE download
  • #29593: TYP: add sorted kwarg to unique
  • #29672: MAINT: Update pythoncapi-compat from main.
  • #29673: MAINT: Update cibuildwheel.
  • #29674: MAINT: Fix typo in wheels.yml
  • #29683: BUG, BLD: Correct regex for ppc64 VSX3/VSX4 feature detection
  • #29684: TYP: ndarray.fill() takes no keyword arguments
  • #29685: BUG: avoid thread-unsafe refcount check in temp elision
  • #29687: CI: replace comment-hider action in mypy_primer workflow

... (truncated)

Commits
  • f2a77a7 Merge pull request #29702 from charris/prepare-2.3.3
  • 8641006 REL: Prepare for the NumPy 2.3.3 release [wheel build]
  • f024265 Merge pull request #29701 from charris/backport-29697
  • 84f2eed Merge pull request #29700 from charris/backport-29695
  • 7cacdbf Update VXE and VXE2 detection regex patterns
  • 028c469 TYP: appease ruff
  • 4b80666 TYP: fix np.bool method declarations
  • f2a6b75 Merge pull request #29691 from charris/backport-29665
  • a707cbf Merge pull request #29689 from charris/backport-29662
  • 3d66056 BUG: use correct input dtype in flatiter assignment
  • Additional commits viewable in compare view

Updates pycparser from 2.22 to 2.23

Release notes

Sourced from pycparser's releases.

release_v2.23

What's Changed

New Contributors

Full Changelog: eliben/pycparser@release_v2.22...release_v2.23

Commits

Updates starlette from 0.47.3 to 0.48.0

Release notes

Sourced from starlette's releases.

Version 0.48.0

Added

  • Add official Python 3.14 support #3013.

Changed


New Contributors

Full Changelog: Kludex/starlette@0.47.3...0.48.0

Changelog

Sourced from starlette's changelog.

0.48.0 (September 13, 2025)

Added

  • Add official Python 3.14 support #3013.

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [pystac](https://github.com/stac-utils/pystac) | `1.13.0` | `1.14.0` |
| [mypy](https://github.com/python/mypy) | `1.17.1` | `1.18.1` |
| [sphinx-click](https://github.com/click-contrib/sphinx-click) | `6.0.0` | `6.1.0` |
| [xdoctest](https://github.com/Erotemic/xdoctest) | `1.2.0` | `1.3.0` |
| [numpy](https://github.com/numpy/numpy) | `2.3.2` | `2.3.3` |
| [pycparser](https://github.com/eliben/pycparser) | `2.22` | `2.23` |
| [starlette](https://github.com/Kludex/starlette) | `0.47.3` | `0.48.0` |


Updates `pystac` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/stac-utils/pystac/releases)
- [Changelog](https://github.com/stac-utils/pystac/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac@v1.13.0...v1.14.0)

Updates `mypy` from 1.17.1 to 1.18.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.1...v1.18.1)

Updates `sphinx-click` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/click-contrib/sphinx-click/releases)
- [Commits](click-contrib/sphinx-click@6.0.0...6.1.0)

Updates `xdoctest` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/Erotemic/xdoctest/releases)
- [Changelog](https://github.com/Erotemic/xdoctest/blob/main/CHANGELOG.md)
- [Commits](Erotemic/xdoctest@v1.2.0...v1.3.0)

Updates `numpy` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.3.2...v2.3.3)

Updates `pycparser` from 2.22 to 2.23
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Changelog](https://github.com/eliben/pycparser/blob/main/CHANGES)
- [Commits](eliben/pycparser@release_v2.22...release_v2.23)

Updates `starlette` from 0.47.3 to 0.48.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.47.3...0.48.0)

---
updated-dependencies:
- dependency-name: pystac
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mypy
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sphinx-click
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xdoctest
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: numpy
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pycparser
  dependency-version: '2.23'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 0.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 15, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 22, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 22, 2025
@dependabot dependabot bot deleted the dependabot/pip/minor-and-patch-9921a518ab branch September 22, 2025 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants