deps(core-py): bump the all group across 1 directory with 3 updates by dependabot[bot] · Pull Request #2670 · Canner/WrenAI

dependabot · 2026-08-14T11:24:09Z

Bumps the all group with 3 updates in the /core/wren-core-py directory: maturin, pyarrow and ruff.

Updates maturin from 1.9.4 to 1.15.0

Release notes

v1.15.0

What's Changed

set UV_PYTHON when running maturin develop with uv by @davidhewitt in PyO3/maturin#3236

Set UID and GID headers in pax by @konstin in PyO3/maturin#3241

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3238

Replace unguarded panics with explicit errors on fallible input by @messense in PyO3/maturin#3242

Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback by @messense in PyO3/maturin#3244

docs: add pdfcrate and quebec to examples by @ratazzi in PyO3/maturin#3245

Fix abi3t PyModExport entrypoint check by @messense in PyO3/maturin#3246

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3247

fix maturin build --pgo -i <version> with uv install by @davidhewitt in PyO3/maturin#3237

refactor: apply some mechanical cleanups by @messense in PyO3/maturin#3250

refactor: BuildOrchestrator pipeline deduplication by @messense in PyO3/maturin#3251

refactor: improve context and environment hygiene by @messense in PyO3/maturin#3252

fix(ci): honor ~= and ==X.* in requires-python for generate-ci by @teddytennant in PyO3/maturin#3249

refactor: type cleanup for options, tags, and wheel metadata by @messense in PyO3/maturin#3253

refactor: InstallDest, single BridgeModel, and ui output facade by @messense in PyO3/maturin#3254

Don’t specify generate-import-lib for PyO3 0.29 by @musicinmybrain in PyO3/maturin#3258

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3259

ci: fix clippy errors on rust 1.97 by @davidhewitt in PyO3/maturin#3263

refactor build so that pgo is part of normal pathway by @davidhewitt in PyO3/maturin#3257

fix: verify bindings detection with cargo tree in workspaces by @messense in PyO3/maturin#3264

fix: harden cargo tree verification of bindings detection by @messense in PyO3/maturin#3266

ci: cut test wall time without losing coverage by @messense in PyO3/maturin#3267

test: share cargo target dirs per fixture family by @messense in PyO3/maturin#3268

ci: cut fixed setup overhead in test jobs by @messense in PyO3/maturin#3269

feat: support --pgo for maturin develop by @messense in PyO3/maturin#3270

feat: support MATURIN_PGO env var to activate --pgo by @messense in PyO3/maturin#3271

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3272

feat: type the bindings input with a single-source-of-truth enum by @messense in PyO3/maturin#3273

Don't force export of the PyInit_{module_name} in UniFfi mode by @badboy in PyO3/maturin#3275

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3279

switch musllinux images to musllinux_1_2 as musllinux_1_1 is EOL by @Joshix-1 in PyO3/maturin#3280

fix(generate-stubs): write stubs into the module's package directory by @jonasdedden in PyO3/maturin#3282

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3286

Fix group not cwd by @kraktus in PyO3/maturin#3284

docs: document missing [tool.maturin] config fields by @teddytennant in PyO3/maturin#3287

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3288

docs: fix cross compiling heading level by @BD103 in PyO3/maturin#3290

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyO3/maturin#3292

Release v1.15.0 by @messense in PyO3/maturin#3294

New Contributors

@ratazzi made their first contribution in PyO3/maturin#3245

@teddytennant made their first contribution in PyO3/maturin#3249

@jonasdedden made their first contribution in PyO3/maturin#3282

@kraktus made their first contribution in PyO3/maturin#3284

@BD103 made their first contribution in PyO3/maturin#3290

Full Changelog: PyO3/maturin@v1.14.1...v1.15.0

... (truncated)

Changelog

Sourced from maturin's changelog.

1.15.0

Set UV_PYTHON when running maturin develop with uv (#3236)

Set UID and GID headers in pax (#3241)

Replace unguarded panics with explicit errors on fallible input (#3242)

Harden PEP 517 build-wheel and fix unreachable OIDC 404 fallback (#3244)

Fix abi3t PyModExport entrypoint check (#3246)

Fix maturin build --pgo -i <version> with uv install (#3237)

Refactor: apply some mechanical cleanups (#3250)

Refactor: BuildOrchestrator pipeline deduplication (#3251)

Refactor: improve context and environment hygiene (#3252)

Fix(ci): honor ~= and ==X.* in requires-python for generate-ci (#3249)

Refactor: type cleanup for options, tags, and wheel metadata (#3253)

Refactor: InstallDest, single BridgeModel, and ui output facade (#3254)

Don’t specify generate-import-lib for PyO3 0.29 (#3258)

Refactor build so that pgo is part of normal pathway (#3257)

Fix: verify bindings detection with cargo tree in workspaces (#3264)

Fix: harden cargo tree verification of bindings detection (#3266)

Feat: support --pgo for maturin develop (#3270)

Feat: support MATURIN_PGO env var to activate --pgo (#3271)

Docs: correct crate feature documentation; remove stale clippy allow

Fix: deduplicate SBOM includes across full merged list, preserving first-seen order

Feat: type the bindings input with a single-source-of-truth enum (#3273)

Don't force export of the PyInit_{module_name} in UniFfi mode (#3275)

Switch musllinux images to musllinux_1_2 as musllinux_1_1 is EOL (#3280)

Fix(generate-stubs): write stubs into the module's package directory (#3282)

Fix group not cwd (#3284)

Docs: document missing [tool.maturin] config fields (#3287)

Update cargo-zigbuild & cargo-xwin to 0.23.1

1.14.1

Bump uraimo/run-on-arch-action to v3 to fix pytest job (#3221)

Fix platform tag logic to generate the same as cpython on AIX (#3220)

Bump pyo3-introspection (#3227)

Upgrade cargo-zigbuild & cargo-xwin (#3228)

Fix issues around crates enabling abi3 and abi3t features (#3226)

Add PEP 740 publish attestations to PyPI releases (#3230)

Set PYO3_PYTHON to run scripts for stable ABI builds (#3233)

Fix shell quoting in CI scripts (#3231)

1.14.0

Support parent-relative pyproject metadata in sdists (#3182)

Update PyPI platform tag validation (#3187)

Maint: update setup emsdk action in generate-ci (#3194)

Fix: only shim bin wheels during auditwheel repair (#3197)

Fix: avoid editable ELF truncation from stale hardlinks (#3199)

Fix Pyodide Emscripten platform tags (#3191)

Use pax instead of GNU headers for tar (#3203)

... (truncated)

Commits

479658a Release v1.15.0 (#3294)
dd7b95d [pre-commit.ci] pre-commit autoupdate (#3292)
35e9a4d docs: fix cross compiling heading level (#3290)
181c0b5 Update cargo-zigbuild & cargo-xwin to 0.23.1
a6743cd [pre-commit.ci] pre-commit autoupdate (#3288)
15c064a docs: document missing [tool.maturin] config fields (#3287)
c30aa84 Fix group not cwd (#3284)
704b73b Fix ruff check for ruff 0.16
d81b8ce [pre-commit.ci] pre-commit autoupdate (#3286)
cf57dff fix(generate-stubs): write stubs into the module's package directory (#3282)
Additional commits viewable in compare view

Updates pyarrow from 25.0.0 to 26.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 26.0.0

Release Notes URL: https://arrow.apache.org/release/26.0.0.html

Apache Arrow 26.0.0 RC0

Release Notes: Release Candidate: 26.0.0 RC0

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Commits

4461671 MINOR: [Release] Update versions for 26.0.0
9d03a26 MINOR: [Release] Update .deb/.rpm changelogs for 26.0.0
5ce3c95 MINOR: [Release] Update CHANGELOG.md for 26.0.0
28e6c67 GH-51687: [C++] Skipt tests that require threads if ARROW_ENABLE_THREADING=OF...
12409f8 GH-51682: [CI][C++] Add liburiparser-dev to system dependency image (#51683)
1deceed GH-51675: [Python][Packaging] Apply upstream fix to UriParser from vcpkg and ...
cca44b5 GH-51638: [CI][C++][Parquet] Update expected JSON output in parquet-reader-te...
5183e21 GH-46901: [C++][Compute] Add remainder and modulo kernels (#48914)
f0d043c MINOR: [Docs][C++] Fix doxygenfile path for arrow/flight/transport.h (#51677)
17be9c7 GH-51652: [Python] Add NumPy StringDType to Arrow conversion (#51157)
Additional commits viewable in compare view

Updates ruff from 0.13.1 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"
Download ruff 0.17.3

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)

Specialize ASCII identifier lexing (#29503)

Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

@itsvedantkumar

@charliermarsh

@anishgirianish

0.17.2

Released on 2026-10-22.

Preview features

[complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)

[pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)

[pylint] Avoid false positive on starred elements (PLE0643) (#29483)

[pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)

[pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

Avoid intermediate names in lint name resolution (#29506)

Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)

Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

ba65abf Bump version to 0.17.3 (#29745)
fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
d181287 [ty] Index nominal union alternatives (#29196)
07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
60f104a [ty] Honor @override on overload implementations in stubs (#29470)
207ec3a [ty] Add diagnostic baseline support (#27636)
Additional commits viewable in compare view

coderabbitai · 2026-09-11T11:24:33Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Repository UI
Review profile: CHILL
Plan: Advanced
Run ID: 322fd9d1-df47-44a4-a30f-edff919fc67d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Bumps the all group with 3 updates in the /core/wren-core-py directory: [maturin](https://github.com/pyo3/maturin), [pyarrow](https://github.com/apache/arrow) and [ruff](https://github.com/astral-sh/ruff). Updates `maturin` from 1.9.4 to 1.15.0 - [Release notes](https://github.com/pyo3/maturin/releases) - [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md) - [Commits](PyO3/maturin@v1.9.4...v1.15.0) Updates `pyarrow` from 25.0.0 to 26.0.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-25.0.0...apache-arrow-26.0.0) Updates `ruff` from 0.13.1 to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.13.1...0.17.3) --- updated-dependencies: - dependency-name: maturin dependency-version: 1.14.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: pyarrow dependency-version: 25.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: ruff dependency-version: 0.16.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added core dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 14, 2026

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 24138d0 to 3ddf82b Compare August 21, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 3ddf82b to 4fa6fbf Compare August 28, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 4fa6fbf to 04dab1d Compare September 4, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 04dab1d to 60f8dec Compare September 11, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch 2 times, most recently from ee78c4a to c566f9c Compare September 25, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from c566f9c to c074191 Compare October 2, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch 2 times, most recently from 2702586 to dfb1df8 Compare October 16, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from dfb1df8 to 5779082 Compare October 23, 2026 11:24

dependabot Bot force-pushed the dependabot/pip/core/wren-core-py/all-0c6fa91aac branch from 5779082 to c427bba Compare October 30, 2026 11:24

Navigation Menu

Repository navigation

deps(core-py): bump the all group across 1 directory with 3 updates - #2670

deps(core-py): bump the all group across 1 directory with 3 updates#2670
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/core/wren-core-py/all-0c6fa91aac

dependabot Bot commented on behalf of github Aug 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 11, 2026 •

edited

Loading

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

Conversation

dependabot Bot commented on behalf of github Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.15.0

What's Changed

New Contributors

1.15.0

1.14.1

1.14.0

Apache Arrow 26.0.0

Apache Arrow 26.0.0 RC0

Apache Arrow 25.0.1

Apache Arrow 25.0.1 RC1

0.17.3

Release Notes

Preview features

Bug fixes

Performance

Documentation

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.17.3

0.17.3

Preview features

Bug fixes

Performance

Documentation

Contributors

0.17.2

Preview features

Bug fixes

Performance

Uh oh!

coderabbitai Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 14, 2026 •

edited

Loading

coderabbitai Bot commented Sep 11, 2026 •

edited

Loading