Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 4 updates - #6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-f74e3ffa79
Open

chore(deps): bump the python-dependencies group across 1 directory with 4 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-f74e3ffa79

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 4 updates in the / directory: pydantic, lxml, rapidfuzz and spacy.

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates lxml from 6.1.1 to 6.1.2

Changelog

Sourced from lxml's changelog.

6.1.2 (2026-08-18)

  • GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

  • Some minor corrections for error handling cases.

Other changes

  • Built with Cython 3.2.9.
Commits
  • f2874e9 Update release date.
  • 687a295 Build: Exclude Py3.8 from windows-arm builds.
  • acadc56 Build: Remove outdated build target.
  • 59f93eb Build: Split old-Linux and other-Py3.8 builds.
  • 923df83 Build: Fix manylinux2014 build.
  • 975cc83 Build: Fix Px3.8 build setup.
  • 09e5d3e Build: Fix cibuildwheel version.
  • 998cf50 Build: Build Py3.8 wheels only once, not in every build job.
  • 5567037 Build: Exclude Py3.15 from 32bit builds.
  • 904db40 Build: Update cibuildwheel to include Py3.15.
  • Additional commits viewable in compare view

Updates rapidfuzz from 3.14.5 to 3.14.6

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.6

Fixed

  • fix some divergences in the pure Python fallback
  • fix compatibility with new Cython versions
  • fixed potential out of bound access inside Editops.remove_subsequence
  • fixed handling python fallback implementation of Editops.remove_subsequence

Removed

  • dropped support for Python 3.10
  • dropped wheels for experimental Python 3.13 free threaded
Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.6] - 2026-08-30 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix some divergences in the pure Python fallback
* fix compatibility with new Cython versions
* fixed potential out of bound access inside Editops.remove_subsequence
* fixed handling python fallback implementation of Editops.remove_subsequence

Removed

  • dropped support for Python 3.10
  • dropped wheels for experimental Python 3.13 free threaded

[3.14.5] - 2026-04-07 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix release ci attempting to upload a pyodide wheel

[3.14.4] - 2026-04-06 ^^^^^^^^^^^^^^^^^^^^^ Added

  • add risc64 wheels
  • add support for taskflow 4.0.0

Changed

* upgrade to ``Cython==3.2.4``.

Fixed

* fix type hints for extractOne when no score_cutoff is provided

[3.14.3] - 2025-11-01
^^^^^^^^^^^^^^^^^^^^^
Fixed

  • add missing pypy and freethreaded linux wheels

Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremely long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits
  • d1b4a18 fix cython call
  • f7be71b fix typo
  • 3199c87 fix version tag
  • 7b57e51 update date
  • 15e68d7 update rapidfuzz-cpp
  • b637f9f don't hand out references to internal elements
  • 868a451 fix Editops.remove_subsequence
  • 83b8b84 fix compatibility with new Cython versions
  • 24f2ac5 Bump pypa/cibuildwheel from 4.1.1 to 4.2.0 in the github-actions group
  • 03a5137 Bump pypa/gh-action-pypi-publish in the github-actions group
  • Additional commits viewable in compare view

Updates spacy from 3.8.15 to 3.8.16

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 4 updates

Bumps the python-dependencies group with 4 updates in the / directory: [pydantic](https://github.com/pydantic/pydantic), [lxml](https://github.com/lxml/lxml), [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) and [spacy](https://github.com/explosion/spaCy).


Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `lxml` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `rapidfuzz` from 3.14.5 to 3.14.6
- [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases)
- [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst)
- [Commits](rapidfuzz/RapidFuzz@v3.14.5...v3.14.6)

Updates `spacy` from 3.8.15 to 3.8.16
- [Release notes](https://github.com/explosion/spaCy/releases)
- [Changelog](https://github.com/explosion/spaCy/blob/master/RELEASE_NOTES.md)
- [Commits](explosion/spaCy@release-v3.8.15...release-v3.8.16)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: rapidfuzz
  dependency-version: 3.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: spacy
  dependency-version: 3.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants