Skip to content

Bump the python group with 2 updates - #605

Merged
honzajavorek merged 1 commit into
masterfrom
dependabot/pip/python-86a91f372c
Nov 9, 2026
Merged

Bump the python group with 2 updates#605
honzajavorek merged 1 commit into
masterfrom
dependabot/pip/python-86a91f372c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic and uv-build to permit the latest version.
Updates pydantic to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

  • Build wheels for GraalPy 3.13 by @​msimacek in #14136.

    The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

Fixes

  • Fix various issues about GC tracking in pydantic-core by @​Viicos in #13819
  • Include null in serialization JSON Schema for unless-none field serializers by @​Kropiunig in #13848
  • Fix RecursionError when copying or unpickling models with defer_build by @​Viicos in #14115
  • Remove dead default_factory check in unsupported Field() attribute by @​owtaylor in #14129
  • Disallow non string extra keys during validation by @​Viicos in #14135
  • Fix deeply nested data being reported as a cyclic reference by @​Viicos in #14164

New Contributors

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • ea492e0 Bump pydantic-core to v2.50.4
  • 4f4a33f Prepare release v2.14.3
  • dca067b Benchmark TypedDict schema generation across builds
  • a2d1f6c Skip annotation handler setup when annotations are empty
  • 3ae0a40 Construct builtin scalar union schemas directly
  • 358d36f Skip general schema dispatch for builtin scalars
  • 3cc701a Improve schema generation for fixed type handlers
  • 762db7e Remove redundant None check in union schema generation
  • c214986 Bump pytest-codspeed to v5.0.4
  • 038ee97 Bump typing-inspection to v0.4.5
  • Additional commits viewable in compare view

Updates uv-build to 0.13.7

Release notes

Sourced from uv-build's releases.

0.13.7

Release Notes

Released on 2026-11-03.

Preview features

  • Add --output-version to uv workspace metadata for requesting a specific schema version (#22958)
  • Report aliased OSV records as a single vulnerability in uv audit (#22990)

Bug fixes

  • Treat workspace member paths added by uv init or uv add as literals instead of glob patterns (#23008)
  • Prevent uv's Windows trampolines from closing handles they did not inherit (#22977)
  • Allow uvx to run tools with CPython builds whose versions contain local identifiers (#23013)
  • Generate valid module names when uv init creates packaged projects whose names start with a digit (#23022)
  • Preserve comments around existing inline dependency groups when uv add updates a group (#23017)
  • Allow uv remove with an empty inline tool.uv.sources table (#23012)

Documentation

  • Correct the cache-keys inline table example (#22984)

Install uv 0.13.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.13.7/uv-installer.ps1 | iex"

Download uv 0.13.7

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum
uv-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum

... (truncated)

Changelog

Sourced from uv-build's changelog.

0.13.7

Released on 2026-11-03.

Preview features

  • Add --output-version to uv workspace metadata for requesting a specific schema version (#22958)
  • Report aliased OSV records as a single vulnerability in uv audit (#22990)

Bug fixes

  • Treat workspace member paths added by uv init or uv add as literals instead of glob patterns (#23008)
  • Prevent uv's Windows trampolines from closing handles they did not inherit (#22977)
  • Allow uvx to run tools with CPython builds whose versions contain local identifiers (#23013)
  • Generate valid module names when uv init creates packaged projects whose names start with a digit (#23022)
  • Preserve comments around existing inline dependency groups when uv add updates a group (#23017)
  • Allow uv remove with an empty inline tool.uv.sources table (#23012)

Documentation

  • Correct the cache-keys inline table example (#22984)

0.13.6

Released on 2026-10-26.

Enhancements

  • Accept an empty UV_RUN_RECURSION_DEPTH as zero and report invalid values consistently (#22814)
  • Explain how to add project metadata when uv init finds a pyproject.toml without a [project] table (#22916)

Python

  • Add CPython 3.11.18, 3.12.16, 3.13.18, 3.14.10, and 3.15.2 (#22938)

Preview features

  • Detect NVIDIA GPU capabilities when selecting compatible wheel variants with wheel-variants (#22690)
  • Nest each module's owners in an object in uv workspace metadata output (#22638)
  • Report the unsupported properties required by an incompatible wheel variant (#22719)

Performance

  • Reduce peak memory use when resolving large workspaces (#22860, #22863, #22864, #22866, #22870)
  • Reduce peak memory use when locking or upgrading large projects (#22833, #22834)
  • Speed up redirected output from uv export and uv pip compile (#22840)
  • Reuse cached or active environments when running PEP 723 scripts without dependencies (#21458)
  • Reduce parsing overhead for build dependency and build backend settings (#22848, #22871, #22879, #22884)
  • Reduce parsing overhead for project sources and workspace references (#22880, #22883)
  • Reduce parsing overhead for cache, exclusion, cutoff, and preview settings (#22876, #22877, #22878, #22887)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python group with 2 updates
befc8b7 
Updates the requirements on [pydantic](https://github.com/pydantic/pydantic) and [uv-build](https://github.com/astral-sh/uv) to permit the latest version.

Updates `pydantic` to 2.14.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.2...v2.14.3)

Updates `uv-build` to 0.13.7
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.13.6...0.13.7)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.14.3
  dependency-type: direct:production
  dependency-group: python
- dependency-name: uv-build
  dependency-version: 0.13.7
  dependency-type: direct:development
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 9, 2026
@honzajavorek
honzajavorek merged commit 75bd21e into master Nov 9, 2026
3 checks passed
@honzajavorek
honzajavorek deleted the dependabot/pip/python-86a91f372c branch November 9, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@honzajavorek