Skip to content

pip: bump the python-build-tools group across 1 directory with 4 updates - #108

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ci/python-build-tools-97a59b41d1
Open

pip: bump the python-build-tools group across 1 directory with 4 updates#108
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/ci/python-build-tools-97a59b41d1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-build-tools group with 4 updates in the /ci directory: pip, setuptools, pyparsing and pybind11-stubgen.

Updates pip from 26.2.1 to 26.2.2

Changelog

Sourced from pip's changelog.

26.2.2 (2026-10-20)

Vendored Libraries

  • Upgrade certifi to 2026.10.19
Commits

Updates setuptools from 84.0.0 to 84.2.1

Changelog

Sourced from setuptools's changelog.

v84.2.1

Bugfixes

  • Changed wheel tags and stable-ABI validation to use sysconfig data. (#5360)
  • Fixed unimportable extensions on free-threaded Python 3.13 and 3.14 when Extension.py_limited_api is enabled. These builds now use their version-specific extension suffix instead of using the unsupported .abi3t suffix. (#5363)

Improved Documentation

  • Replaced broken link to Python Eggs documentation with an archived version from the Wayback Machine. (#1929)

v84.2.0

Features

  • Added support for building abi3t extensions and abi3.abi3t wheels on Python 3.15 and newer. See :pep:803 and the Python 3.15 "What's New" entry <https://docs.python.org/3.15/whatsnew/3.15.html#pep-803-abi3t-stable-abi-for-free-threaded-builds>_ for more details. (#5193)
  • Updated vendored packaging version to 26.3, which adds support for the abi3t tag from :pep:803. (#5361)

Bugfixes

  • Use target sysconfig data for stable-ABI extension filenames. (#5351)

v84.1.0

Features

  • setuptools.archive_util now raises the new UnsafeMember exception when an archive member would be extracted outside of the extraction directory, where previously such a member was silently skipped. Aborting makes a malicious or malformed archive visible to the caller instead of yielding a quietly incomplete extraction, and matches the behavior of the standard

... (truncated)

Commits

Updates pyparsing from 3.3.2 to 3.3.3

Changelog

Sourced from pyparsing's changelog.

Version 3.3.3 - in development

  • Added support for Python 3.15.

  • Parse actions that return a tuple value for a named expression formerly saved just the first value of the tuple. Now they return the entire tuple. Partially fixes Issue #401, PR #640 submitted by Vincent Gao et AI.

  • Fixed CI unit test jobs selecting a tox environment with no test commands. The matrix and fallback now select py-unit, as diagnosed and proposed by glaziermag in issue #662; submitted by Neal Lin et AI.

  • Fixed Dict returning an empty nested ParseResults.as_dict() as [] instead of {}. Incorporates partial solution submitted in PR #635 submitted by Leo Ji.

    Additional fixes found as part of this work:

    • Removed vestigial unused ParseResults._modal attribute.

    • Fixed incidental bug when Dict tries to create a dict with a ParseResults value for a key (not hashable).

  • Fixed Word(..., max=n) raising instead of matching up to max characters when the character set contained whitespace - Word(nums, max=3) and Word(nums + " ", max=3) gave opposite results on the same input. Now both forms match up to max and leave the rest for the next parser. PR #646 submitted by Andrew Chen et AI.

  • Fixed QuotedString stripping whitespace that is part of a multi-character quote delimiter, e.g. the leading newline in QuotedString("\n;", multiline=True). The delimiter was silently collapsed to ";", so the newline was ignored when matching. QuotedString now only rejects quote_char/end_quote_char values that are empty or entirely whitespace, and preserves any surrounding whitespace that is part of a valid delimiter. Reported in issue #492.

  • Fixed pyparsing_common.as_datetime raising Invalid date/time: microsecond must be in 0..999999 for valid ISO-8601 timestamps whose fractional seconds round up to a full second (e.g. 2021-06-15T12:30:59.9999995, common in nanosecond-precision timestamps). The rounded microseconds are now added via timedelta so the value carries into the next second instead of overflowing the datetime microsecond argument. PR submitted by Andrew Chen et AI.

  • Fixed debug output corruption when a parsed line contains a carriage return or other control character. set_debug() printed the source line verbatim, so a stray \r returned the terminal cursor to column 0 and overwrote the "Match ... at loc" text. Control characters in the debug line are now shown escaped, and the marker caret stays aligned with the match location. Issue #496, reported by Matthew Rowles.

... (truncated)

Commits
  • d90d38b Update flit version and exclusion of generated railroad diagrams from source ...
  • 4220992 Updated CI to execute unit tests, PR #663; update test_unit.py to add test ca...
  • e266043 Reworked internal recursive implementations to use local stack vars or iterat...
  • See full diff in compare view

Updates pybind11-stubgen from 2.5.5 to 3.0.0

Release notes

Sourced from pybind11-stubgen's releases.

3.0.0

Maintainership has passed from @​sizmailov to @​ax3l, @​skarndev, and @​virtuald, and the repository has been transferred to the pybind11 organization. Many thanks to @​sizmailov for creating pybind11-stubgen and maintaining it over the years!

Breaking changes:

Changes:

  • ✨ Support generating stubs for multiple modules in a single CLI invocation (#292) by @​birgerbr
  • ✨ Add basic support for PEP 695 function type parameters in docstring signatures on Python 3.12+; class type parameters, variadics, and constraints are not supported (#291) by @​gentlegiantJGC
  • ✨ Preserve docstrings for static properties exposed as fields, with Python 3.12+ and pybind11 2.10.1+ (#308) by @​markuspi
  • 🐛 Order classes by dependencies rather than alphabetically, so base classes and class-body references appear before their dependents, including nested classes (#238) by @​ax3l, @​juelg, @​daltairwalter, @​skarndev, and @​sizmailov
  • 🐛 Fix nested qualified names in pybind11 docstring signatures (#280) by @​ax3l, @​gentlegiantJGC, @​sarlinpe, and @​skarndev
  • 🐛 Strip current-module prefixes from nested type annotations and correctly parse runtime generic annotations (#301) by @​ax3l
  • 🐛 Resolve hidden builtin types, such as mappingproxy, to their importable names in types (#278) by @​skarndev and @​ax3l
  • 🐛 Filter internal members of pybind11 native enums (#303) by @​ax3l
  • 🐛 Avoid RuntimeError: dictionary changed size during iteration when attribute access modifies a class dictionary (#310) by @​htruscott
  • 🐛 Make ordering of aliased and non-aliased imports deterministic (#293) by @​cjwatson
  • 🐛 Remove unstable memory addresses from additional object representations, including WeakKeyDictionary (#295) by @​ax3l
  • 🐛 Remove leading newlines from docstrings to avoid extra blank lines in generated stubs (#274) by @​gentlegiantJGC

Development:

Changelog

Sourced from pybind11-stubgen's changelog.

Version 3.0.0 (Sep 24, 2026)

Maintainership has passed from @​sizmailov to @​ax3l, @​skarndev, and @​virtuald, and the repository has been transferred to the pybind11 organization. Many thanks to @​sizmailov for creating pybind11-stubgen and maintaining it over the years!

Breaking changes:

Changes:

  • ✨ Support generating stubs for multiple modules in a single CLI invocation (#292) by @​birgerbr
  • ✨ Add basic support for PEP 695 function type parameters in docstring signatures on Python 3.12+; class type parameters, variadics, and constraints are not supported (#291) by @​gentlegiantJGC
  • ✨ Preserve docstrings for static properties exposed as fields, with Python 3.12+ and pybind11 2.10.1+ (#308) by @​markuspi
  • 🐛 Order classes by dependencies rather than alphabetically, so base classes and class-body references appear before their dependents, including nested classes (#238) by @​ax3l, @​juelg, @​daltairwalter, @​skarndev, and @​sizmailov
  • 🐛 Fix nested qualified names in pybind11 docstring signatures (#280) by @​ax3l, @​gentlegiantJGC, @​sarlinpe, and @​skarndev
  • 🐛 Strip current-module prefixes from nested type annotations and correctly parse runtime generic annotations (#301) by @​ax3l
  • 🐛 Resolve hidden builtin types, such as mappingproxy, to their importable names in types (#278) by @​skarndev and @​ax3l
  • 🐛 Filter internal members of pybind11 native enums (#303) by @​ax3l
  • 🐛 Avoid RuntimeError: dictionary changed size during iteration when attribute access modifies a class dictionary (#310) by @​htruscott
  • 🐛 Make ordering of aliased and non-aliased imports deterministic (#293) by @​cjwatson
  • 🐛 Remove unstable memory addresses from additional object representations, including WeakKeyDictionary (#295) by @​ax3l
  • 🐛 Remove leading newlines from docstrings to avoid extra blank lines in generated stubs (#274) by @​gentlegiantJGC

Development:

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
pip: bump the python-build-tools group across 1 directory with 4 updates
f1bd478 
Bumps the python-build-tools group with 4 updates in the /ci directory: [pip](https://github.com/pypa/pip), [setuptools](https://github.com/pypa/setuptools), [pyparsing](https://github.com/pyparsing/pyparsing) and [pybind11-stubgen](https://github.com/pybind/pybind11-stubgen).


Updates `pip` from 26.2.1 to 26.2.2
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.2.1...26.2.2)

Updates `setuptools` from 84.0.0 to 84.2.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v84.0.0...v84.2.1)

Updates `pyparsing` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.3.2...3.3.3)

Updates `pybind11-stubgen` from 2.5.5 to 3.0.0
- [Release notes](https://github.com/pybind/pybind11-stubgen/releases)
- [Changelog](https://github.com/pybind/pybind11-stubgen/blob/main/CHANGELOG.md)
- [Commits](pybind/pybind11-stubgen@v2.5.5...v3.0.0)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: 26.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-build-tools
- dependency-name: setuptools
  dependency-version: 84.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-build-tools
- dependency-name: pyparsing
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-build-tools
- dependency-name: pybind11-stubgen
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-build-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major python labels Oct 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file major python

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants