Skip to content

Bump the python-packages group across 1 directory with 10 updates - #205

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-packages-5ceafb4da1
Open

Bump the python-packages group across 1 directory with 10 updates#205
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-packages-5ceafb4da1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 10 updates in the / directory:

Package From To
db-dtypes 1.7.0 1.7.1
duckdb 1.5.4 1.5.5
gitpython 3.1.50 3.1.57
google-cloud-bigquery 3.42.1 3.42.2
pandas 3.0.3 3.0.5
sqlglot 30.12.0 30.14.0
filelock 3.29.4 3.32.0
prek 0.4.5 0.4.11
ruff 0.15.20 0.16.0
ty 0.0.55 0.0.64

Updates db-dtypes from 1.7.0 to 1.7.1

Release notes

Sourced from db-dtypes's releases.

db-dtypes: v1.7.1

1.7.1 (2026-07-07)

Bug Fixes

  • avoid deprecated unitless operations for NumPy 2.5 compatibility (#17589) (d0b2abc)
Commits
  • fc6b861 chore: release main (#17600)
  • 9638879 feat: update googleapis and regenerate (#17635)
  • 6a49390 chore: update goldens (#17632)
  • 32862f0 docs(logging): fix StructuredLogHandler docstring parameter name (#17625)
  • d68c11d chore(deps): Bump Pillow version constraint in google-cloud-documentai-toolbo...
  • adf7d27 test(spanner): await database calls in async snippets (#17627)
  • 247e2ad refactor(auth): replace pyOpenSSL with standard ssl and cryptography (#16976)
  • fd0e4b6 chore(spanner): remove unused asyncio import in samples (#17620)
  • f538ad8 fix(auth): handle PermissionError on workload certificates to avoid startup h...
  • 0f4bfed fix: bump gdal from 3.13.0 to 3.13.1 in /packages/bigframes (#17609)
  • Additional commits viewable in compare view

Updates duckdb from 1.5.4 to 1.5.5

Release notes

Sourced from duckdb's releases.

v1.5.5 Bugfix Release

See DuckDB's changelog for all changes in DuckDB.

What's Changed in DuckDB-Python

Commits

Updates gitpython from 3.1.50 to 3.1.57

Release notes

Sourced from gitpython's releases.

3.1.57 - Security and Fixes

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

3.1.56 - SECURITY

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

3.1.55 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

3.1.54 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

... (truncated)

Commits
  • ccbd573 prepare for new release
  • d1a631d Merge pull request #2193 from gitpython-developers/more-unsafe-options
  • ab33e33 Merge pull request #2194 from gitpython-developers/fix-basedpyright
  • 52199b3 address review comments
  • 60dec71 Adopt basedpyright with a legacy baseline
  • 7a4f5dc Block unsafe archive additions and bundle URI
  • 3af0c25 Block unsafe checkout-index and tag file options
  • fb5d584 Merge pull request #2187 from pick7/codex/remote-progress-return-type
  • 951cc44 Merge pull request #2188 from pick7/codex/redact-http-extraheader
  • 2e5b13f Merge pull request #2189 from pick7/codex/output-stream-timeout
  • Additional commits viewable in compare view

Updates google-cloud-bigquery from 3.42.1 to 3.42.2

Commits

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates sqlglot from 30.12.0 to 30.14.0

Commits
  • 29c651b Chore: retrigger v30.14.0 release
  • b9fd4c9 Fix(typing): on_qualify expects a Table argument
  • ebf3dd8 Sync w/ integration tests
  • 2aae7f7 feat(postgres)!: preserve x IS NOT NULL instead of normalizing to NOT x IS NU...
  • ba0bff3 fix(jsonpath): preserve falsey union members (#7957)
  • 296d8b0 Chore: polish README file (#7947)
  • 33de21f feat(optimizer)!: annotate regexpsubstr for mysql (#7946)
  • 26078eb feat(optimizer)!: annotate unhex for mysql (#7944)
  • 166cd4d feat(optimizer)!: annotate substringindex for mysql (#7945)
  • 6bb78c9 Feat(snowflake): add support for input => select ... kwarg syntax
  • Additional commits viewable in compare view

Updates filelock from 3.29.4 to 3.32.0

Release notes

Sourced from filelock's releases.

3.32.0

What's Changed

Full Changelog: tox-dev/filelock@3.31.2...3.32.0

3.31.2

What's Changed

Full Changelog: tox-dev/filelock@3.31.1...3.31.2

3.31.1

What's Changed

Full Changelog: tox-dev/filelock@3.31.0...3.31.1

3.31.0

What's Changed

Full Changelog: tox-dev/filelock@3.30.3...3.31.0

3.30.3

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.30.2...3.30.3

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.1 (2026-07-26)

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

3.32.0 (2026-07-21)

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685
  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685

3.31.2 (2026-07-21)

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their behavior. :pr:681

3.31.1 (2026-07-20)

  • A SoftFileLease acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:680

3.31.0 (2026-07-18)

  • Support Termux/Android, whose CPython ships without os.link and reports sys.platform == "android". import filelock and both FileLock and SoftFileLock now work there, StrictSoftFileLock reports its missing hard-link support only when acquired, and process liveness reads /proc on Android instead of PID-only checks. :pr:678
  • StrictSoftFileLock no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no

... (truncated)

Commits
  • 76525e6 Release 3.32.0
  • 9824d15 🐛 fix(packaging): let an unpacked sdist run the test suite (#685)
  • f6c41e9 👷 ci: add Python 3.15 to the test matrix (#683)
  • caeb1c9 Release 3.31.2
  • 60eda0f 🐛 fix(strict): tolerate an errno without ENOTSUP (#681)
  • c1b2e6f Release 3.31.1
  • 9fd7de5 scope a lease's claim to the context that acquired it (#680)
  • 2b3ad2c ♻️ refactor(coverage): key exclusions on probed capability (#679)
  • 3b66fdc Release 3.31.0
  • 166b2b5 ✨ feat(platform): support Termux/Android (#678)
  • Additional commits viewable in compare view

Updates prek from 0.4.5 to 0.4.11

Release notes

Sourced from prek's releases.

0.4.11

Release Notes

Released on 2026-07-25.

Highlights

  • This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

  • prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

  • Hook priorities now support reusable aliases:

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]

    This makes parallel scheduling easier to read and maintain.

Enhancements

  • Add deny-pattern and require-pattern builtin hooks (#2359)
  • Support --glob patterns in prek run (#2381)
  • Support reusable aliases for hook priorities (#2331)
  • Implement requirements-txt-fixer as a builtin hook (#2390)
  • Improve user-facing warnings and errors (#2380)
  • Install Node hooks through git url (#2394)

Performance

  • Reduce blocking-pool overhead in file hooks (#2384)
  • Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.11

Released on 2026-07-25.

Highlights

  • This release adds two new builtin hooks, deny-pattern and require-pattern, as native alternatives for pygrep use cases. deny-pattern fails when a configured pattern is found, while require-pattern ensures every selected file contains a match. By matching natively without spawning a Python subprocess, they run over 4x faster than pygrep in benchmarks. Note that they use Rust regex syntax, which does not support look-around features such as negative lookbehind.

  • prek run now supports --glob <PATTERN> to run hooks on tracked files matching a glob. It can be repeated or combined with --files and --directory.

  • Hook priorities now support reusable aliases:

    [priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]

    This makes parallel scheduling easier to read and maintain.

Enhancements

  • Add deny-pattern and require-pattern builtin hooks (#2359)
  • Support --glob patterns in prek run (#2381)
  • Support reusable aliases for hook priorities (#2331)
  • Implement requirements-txt-fixer as a builtin hook (#2390)
  • Improve user-facing warnings and errors (#2380)
  • Install Node hooks through git url (#2394)

Performance

  • Reduce blocking-pool overhead in file hooks (#2384)
  • Speed up mixed-line-ending scans with memchr2 (#2391)

Bug fixes

... (truncated)

Commits

Updates ruff from 0.15.20 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (E) and pyflakes (F) rules have been removed from the default set: E401, E402, E701, E702, E703, E711, E712, E713, E714, E721, E731, E741, E742, E743, F403, F405, F406, and F722.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    

    • 






... (truncated)





Commits

    

  • a2635fd Bump 0.16.0 (#27136)
    • 

  • 3433449 [ty] Reuse full call diagnostics for implicit setter calls (#27115)
    • 

  • 2240070 Reflect ruff: ignore and --add-ignore stabilization in documentation (#27...
    • 

  • 17ef711 Stabilize --add-ignore (#27125)
    • 

  • ef912bb Add newly stabilized rules to defaults (#27055)
    • 

  • b30f040 Stabilize new default rules (#27035)
    • 

  • bcd70c5 Exclude Markdown files from format-dev runs (#27052)
    • 

  • 87e51e2 Fix format --check spans for syntax errors (#27045)
    • 

  • afe2723 [flake8-gettext] Stabilize qualified-name and built-in binding resolution (...
    • 

  • a9702d8 [flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)
    • 

  • Additional commits viewable in compare view
    • 







Updates ty from 0.0.55 to 0.0.64



Release notes

Sourced from ty's releases.




0.0.64


Release Notes


Released on 2026-07-27.


Bug fixes


    

  • Fix identity narrowing for NewTypes (#26439)
    • 

  • Make reachability analysis idempotent (#27163)
    • 



LSP server


    

  • Fix ParamSpec declaration hover and type navigation (#27183)
    • 

  • Implement LSP textDocument/implementation request (#25410)
    • 

  • Introduce shared primitives for parsing backticks in docstrings (#26928)
    • 

  • Render NumPy docstrings as structured Markdown (#25925)
    • 



CLI


    

  • Add --exclude-scripts and --include-scripts (#27169)
    • 

  • Discover uv workspace roots (#25551)
    • 



Diagnostics


    

  • Add a lint rule for combined abstract and final decorators (#26932)
    • 

  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
    • 

  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
    • 

  • Reuse full call diagnostics for implicit setter calls (#27115)
    • 



Configuration


    

  • Allow unresolved unused venv home paths (#27162)
    • 

  • Simplify script metadata query (#27121)
    • 



Core type checking


    

  • Decorate only overload implementation signatures (#27147)
    • 

  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
    • 

  • Improve identity comparison inference for singleton types (#27126)
    • 

  • Improve tuple membership and rich comparison inference (#27164)
    • 

  • Model walrus bindings from comprehensions (#26466)
    • 

  • Narrow tagged unions using identity comparisons (#27130)
    • 

  • Preserve Self in __new__ calls (#27003)
    • 

  • Preserve receiver constraints when binding overloaded methods (#27038)
    • 

  • Support generic manual PEP 695 type aliases (#27083)
    • 

  • Treat bivariance as covariant (#24319)
    • 



Performance


    

  • Avoid cycles when resolving ModuleType globals (#27182)
    • 






... (truncated)





Changelog

Sourced from ty's changelog.




0.0.64


Released on 2026-07-27.


Bug fixes


    

  • Fix identity narrowing for NewTypes (#26439)
    • 

  • Make reachability analysis idempotent (#27163)
    • 



LSP server


    

  • Fix ParamSpec declaration hover and type navigation (#27183)
    • 

  • Implement LSP textDocument/implementation request (#25410)
    • 

  • Introduce shared primitives for parsing backticks in docstrings (#26928)
    • 

  • Render NumPy docstrings as structured Markdown (#25925)
    • 



CLI


    

  • Add --exclude-scripts and --include-scripts (#27169)
    • 

  • Discover uv workspace roots (#25551)
    • 



Diagnostics


    

  • Add a lint rule for combined abstract and final decorators (#26932)
    • 

  • Change --add-ignore to add space after the colon for ty: ignore (#27120)
    • 

  • Fix missing-override-decorator suggestion before Python 3.12 (#27166)
    • 

  • Reuse full call diagnostics for implicit setter calls (#27115)
    • 



Configuration


    

  • Allow unresolved unused venv home paths (#27162)
    • 

  • Simplify script metadata query (#27121)
    • 



Core type checking


    

  • Decorate only overload implementation signatures (#27147)
    • 

  • Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
    • 

  • Improve identity comparison inference for singleton types (#27126)
    • 

  • Improve tuple membership and rich comparison inference (#27164)
    • 

  • Model walrus bindings from comprehensions (#26466)
    • 

  • Narrow tagged unions using identity comparisons (#27130)
    • 

  • Preserve Self in __new__ calls (#27003)
    • 

  • Preserve receiver constraints when binding overloaded methods (#27038)
    • 

  • Support generic manual PEP 695 type aliases (#27083)
    • 

  • Treat bivariance as covariant (#24319)
    • 



Performance


    

  • Avoid cycles when resolving ModuleType globals (#27182)
    • 

  • Avoid expanding optional enum comparisons (#27105)
    • 






... (truncated)





Commits






Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    • 








Summary by cubic


Update Python dependencies for stability, security, and compatibility. Notably adopts ruff 0.16.0 (expanded default rules) and updates the dev constraint to ruff>=0.1,<0.17.


    

  • 

    Dependencies
    

      

    • Data/analytics: pandas 3.0.5, duckdb 1.5.5, db-dtypes 1.7.1, google-cloud-bigquery 3.42.2, sqlglot 30.14.0.
      • 

    • Tooling/libs: ruff 0.16.0, ty 0.0.64, prek 0.4.11, filelock 3.32.0, gitpython 3.1.57.
      • 

    

    • 

  • 

    Migration
    

      

    • ruff 0.16.0 enables many more rules by default; expect new lint findings. Update your ruff config (enable/disable rules as needed) or pin ignores to keep CI green.
      • 

    • ruff may format Python code blocks in Markdown by default; adjust settings if undesired.
      • 

    

    • 



Written for commit d1e4f8b. Summary will update on new commits.


Review in cubic


    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          Bump the python-packages group across 1 directory with 10 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          d1e4f8b
        
      

    

  

    

      
Bumps the python-packages group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [db-dtypes](https://github.com/googleapis/google-cloud-python) | `1.7.0` | `1.7.1` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.4` | `1.5.5` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.50` | `3.1.57` |
| [google-cloud-bigquery](https://github.com/googleapis/python-bigquery) | `3.42.1` | `3.42.2` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.3` | `3.0.5` |
| [sqlglot](https://github.com/tobymao/sqlglot) | `30.12.0` | `30.14.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.4` | `3.32.0` |
| [prek](https://github.com/j178/prek) | `0.4.5` | `0.4.11` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.55` | `0.0.64` |



Updates `db-dtypes` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@db-dtypes-v1.7.0...db-dtypes-v1.7.1)

Updates `duckdb` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.4...v1.5.5)

Updates `gitpython` from 3.1.50 to 3.1.57
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.57)

Updates `google-cloud-bigquery` from 3.42.1 to 3.42.2
- [Release notes](https://github.com/googleapis/python-bigquery/releases)
- [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/python-bigquery/commits)

Updates `pandas` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

Updates `sqlglot` from 30.12.0 to 30.14.0
- [Commits](tobymao/sqlglot@v30.12.0...v30.14.0)

Updates `filelock` from 3.29.4 to 3.32.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.4...3.32.0)

Updates `prek` from 0.4.5 to 0.4.11
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.4.5...v0.4.11)

Updates `ruff` from 0.15.20 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.0)

Updates `ty` from 0.0.55 to 0.0.64
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.55...0.0.64)

---
updated-dependencies:
- dependency-name: db-dtypes
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: duckdb
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: gitpython
  dependency-version: 3.1.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: google-cloud-bigquery
  dependency-version: 3.42.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: sqlglot
  dependency-version: 30.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: filelock
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: prek
  dependency-version: 0.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ty
  dependency-version: 0.0.64
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  python:uv

  Pull requests that update python:uv code

  labels


      Jul 28, 2026

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews





  




    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    python:uv

  Pull requests that update python:uv code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants