Skip to content

Bump the python-packages group across 1 directory with 11 updates#176

Merged
MaxHalford merged 1 commit intomainfrom
dependabot/uv/python-packages-3de883c204
Mar 31, 2026
Merged

Bump the python-packages group across 1 directory with 11 updates#176
MaxHalford merged 1 commit intomainfrom
dependabot/uv/python-packages-3de883c204

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2026

Bumps the python-packages group with 10 updates in the / directory:

Package From To
db-dtypes 1.4.4 1.5.1
duckdb 1.4.4 1.5.1
google-cloud-bigquery 3.40.1 3.41.0
sqlglot 29.0.1 30.1.0
google-cloud-bigquery-storage 2.36.2 2.37.0
requests 2.32.5 2.33.1
filelock 3.25.0 3.25.2
prek 0.3.5 0.3.8
ruff 0.15.4 0.15.8
ty 0.0.21 0.0.26

Updates db-dtypes from 1.4.4 to 1.5.1

Release notes

Sourced from db-dtypes's releases.

google-cloud-compute-v1beta: v0.10.0

v0.10.0 (2026-03-26)

Changelog

Sourced from db-dtypes's changelog.

Changelog

PyPI History

3.2.4 (2025-10-22)

Bug Fixes

  • Add support for formatting broken argspec entities (#420) (baf4389)

3.2.3 (2025-03-19)

Bug Fixes

  • Update summary overview entry to deduplicate (#413) (0c714a8)

3.2.2 (2024-09-06)

Bug Fixes

  • Ignore disambiguation for repeated entries (#390) (917c89b)
  • Retrieve keyword arguments for docstrings (#389) (bb6898e)

3.2.1 (2024-05-07)

Bug Fixes

  • Build Markdown relative to input directory (#380) (2a4b9fe)
  • Format enum data into table format (#376) (abc9667)

3.2.0 (2024-05-02)

Features

Documentation

3.1.0 (2024-04-01)

... (truncated)

Commits
  • 4e80530 chore: create a release (#16193)
  • ab44f7e chore(deps): update dependency requests to v2.33.0 [security] (#16464)
  • 943a979 chore(migration): Migrate code from googleapis/sphinx-docfx-yaml into package...
  • e3731d5 Merge branch 'main' into migration.gapic-generator-python.migration.2026-03-2...
  • 7a05a34 chore: create a release (#16191)
  • c23b067 fix typo
  • c174901 add placeholder for system test nox session
  • 0f19d85 chore: fix missing heading in changelog (#16189)
  • a16755d chore: librarian onboard pull request: 20260323T111101Z (#16141)
  • 9694ce9 chore: librarian onboard pull request: 20260323T114549Z (#16143)
  • Additional commits viewable in compare view

Updates duckdb from 1.4.4 to 1.5.1

Release notes

Sourced from duckdb's releases.

v1.5.1 Bugfix Release

DuckDB core v1.5.1 Changelog: duckdb/duckdb@v1.5.0...v1.5.1

What's Changed

  • Re-added basic support for the GEOMETRY type

DuckDB Python 1.5.0 "Variegata"

This is the 1.5.0 release of DuckDB's Python bindings. For a list of changes in DuckDB core, have a look at the DuckDB release notes and the blogpost.

Breaking Changes

  • Dropped Python 3.9 support. The minimum supported version is now Python 3.10.
  • Removed deprecated duckdb.typing and duckdb.functional modules. These were deprecated in 1.4.0. Use duckdb.sqltypes and duckdb.func instead.
  • Renamed column parameter to expression in relational API functions (e.g., min, max, sum, mean, etc.) to better reflect that these accept expressions, not just column names.
  • Deprecated fetch_arrow_table() and fetch_record_batch() on connections and relations. Use the new to_arrow_table() and to_arrow_reader() methods instead.

New Features

  • Polars LazyFrame projection and filter pushdown. DuckDB can now push down projections and filters when scanning Polars LazyFrames, including support for cast nodes and unstrict casts.
  • Polars Int128 / UInt128 support.
  • VARIANT type support — Python conversion, NumPy array wrapping, and type stubs.
  • TIME_NS type support — nanosecond-precision time values across Python, NumPy, and Spark type systems.
  • Profiling API — new get_profiling_info() and get_profiling_json() methods on connections, plus a refactored query_graph module with improved HTML visualization (dark mode, expandable phases, depth).
  • to_arrow_table() and to_arrow_reader() — new methods on connections and relations as the preferred Arrow export API.

Performance

  • __arrow_c_stream__ on relations — relations now export via the Arrow PyCapsule interface using PhysicalArrowCollector for zero-copy streaming.
  • Unified Arrow stream scanning via __arrow_c_stream__, with filter pushdown only when pyarrow is present.
  • Arrow schema caching to avoid repeated lookups during scanning.
  • Arrow object type caching to avoid repeated detection.
  • Empty params treated as None for .sql() — avoids unnecessary parameter binding overhead.
  • Simplified GIL management for FetchRow.

Bug Fixes

  • Fixed Python object leak in scalar UDFsPyObject_CallObject return values are now properly stolen to avoid reference count leaks.
  • Fixed reference cycle between connections and relations that could prevent garbage collection.
  • Relations now hold a reference to their connection, preventing premature connection closure.
  • Fixed fsspec race condition in the Python filesystem implementation.
  • Fixed numeric conversion logic — improved handling of large integers (fallback to VARCHAR) and UNION types.
  • pyarrow.dataset import is now optional — no longer fails if pyarrow is installed without the dataset module.
  • Thrown a reasonable error when an Arrow array stream has already been consumed.

Build & Packaging

  • jemalloc enabled on Linux x86_64 only (aligned with DuckDB core), removed as a separately bundled extension.
  • MSVC runtime linked statically on Windows — eliminates the VS2019 workaround from duckdb/duckdb#17991.
Commits

Updates google-cloud-bigquery from 3.40.1 to 3.41.0

Changelog

Sourced from google-cloud-bigquery's changelog.

Changelog

PyPI History

Commits

Updates pandas from 3.0.1 to 2.3.3

Commits
  • 9c8bc3e RLS: 2.3.3
  • 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
  • b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
  • 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
  • 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
  • 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
  • e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
  • e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
  • 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
  • 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
  • Additional commits viewable in compare view

Updates sqlglot from 29.0.1 to 30.1.0

Commits
  • 8726250 Use DType arguments instead of strings in most DataType.build call sites
  • 877e184 feat(duckdb): Add transpilation support for ILIKE ANY, LIKE ANY/ALL functions...
  • b6ada45 Feat(snowflake): support ALTER ICEBERG TABLE (#7401)
  • 7216cf9 feat(snowflake): support DROP ICEBERG TABLE (#7398)
  • 2a9bf94 support snowflake SHOW ICEBERG TABLES (#7397)
  • 6359c29 Add postgres, redshift tests that cover SIMILAR TO ... ESCAPE
  • 438f031 Feat(duckdb): support the full SHOW TABLES syntax spec
  • 263bb7f feat(duckdb): do not issue CREATE unsupported iceberg property warning (#7396)
  • 3582aa5 refactor(generators): Cleanup and fully compile all generators (#7389)
  • 71e00f3 Sync w/ integration tests
  • Additional commits viewable in compare view

Updates google-cloud-bigquery-storage from 2.36.2 to 2.37.0

Release notes

Sourced from google-cloud-bigquery-storage's releases.

google-cloud-bigquery-storage: v2.37.0

v2.37.0 (2026-03-26)

Commits
  • 4e80530 chore: create a release (#16193)
  • ab44f7e chore(deps): update dependency requests to v2.33.0 [security] (#16464)
  • 943a979 chore(migration): Migrate code from googleapis/sphinx-docfx-yaml into package...
  • e3731d5 Merge branch 'main' into migration.gapic-generator-python.migration.2026-03-2...
  • 7a05a34 chore: create a release (#16191)
  • c23b067 fix typo
  • c174901 add placeholder for system test nox session
  • 0f19d85 chore: fix missing heading in changelog (#16189)
  • a16755d chore: librarian onboard pull request: 20260323T111101Z (#16141)
  • 9694ce9 chore: librarian onboard pull request: 20260323T114549Z (#16143)
  • Additional commits viewable in compare view

Updates requests from 2.32.5 to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.
Commits

Updates filelock from 3.25.0 to 3.25.2

Release notes

Sourced from filelock's releases.

3.25.2

What's Changed

Full Changelog: tox-dev/filelock@3.25.1...3.25.2

3.25.1

What's Changed

Full Changelog: tox-dev/filelock@3.25.0...3.25.1

Changelog

Sourced from filelock's changelog.

########### Changelog ###########


3.25.2 (2026-03-11)


  • 🐛 fix(unix): suppress EIO on close in Docker bind mounts :pr:513

3.25.1 (2026-03-09)


  • [pre-commit.ci] pre-commit autoupdate :pr:510 - by :user:pre-commit-ci[bot]
  • 🐛 fix(win): restore best-effort lock file cleanup on release :pr:511
  • [pre-commit.ci] pre-commit autoupdate :pr:508 - by :user:pre-commit-ci[bot]
  • 📝 docs(logo): add branded project logo :pr:507

3.25.0 (2026-03-01)


  • ✨ feat(async): add AsyncReadWriteLock :pr:506
  • Standardize .github files to .yaml suffix
  • build(deps): bump actions/download-artifact from 7 to 8 :pr:503 - by :user:dependabot[bot]
  • build(deps): bump actions/upload-artifact from 6 to 7 :pr:502 - by :user:dependabot[bot]
  • Move SECURITY.md to .github/SECURITY.md
  • Add security policy
  • Add permissions to check workflow :pr:500
  • [pre-commit.ci] pre-commit autoupdate :pr:499 - by :user:pre-commit-ci[bot]

3.24.3 (2026-02-19)


  • 🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire :pr:495
  • 🐛 fix(ci): add trailing blank line after changelog entries :pr:492

3.24.2 (2026-02-16)


  • 🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race :pr:491
  • 🐛 fix(test): resolve flaky write non-starvation test :pr:490
  • 📝 docs: restructure using Diataxis framework :pr:489

3.24.1 (2026-02-15)


... (truncated)

Commits

Updates prek from 0.3.5 to 0.3.8

Release notes

Sourced from prek's releases.

0.3.8

Release Notes

Released on 2026-03-23.

Enhancements

  • Add experimental language: deno support (#1516)
  • Add pretty-format-json as builtin hook (#915)
  • Add check-vcs-permalinks as builtin hook (#1842)
  • Add check-illegal-windows-names as builtin hook (#1841)
  • Add check-shebang-scripts-are-executable builtin hook (#1847)
  • Add destroyed-symlinks builtin hook (#1851)
  • Add file-contents-sorter as builtin hook (#1846)
  • Add --all flag to prek uninstall (#1817)
  • Improve file pattern parse errors (#1829)
  • Validate uv binary after download (#1825)

Bug fixes

  • Fix workspace-relative added file paths (#1852)
  • Relax alias-anchor ratio check for check-yaml (#1839)

Contributors

Install prek 0.3.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.8/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.8/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.8

Released on 2026-03-23.

Enhancements

  • Add experimental language: deno support (#1516)
  • Add pretty-format-json as builtin hook (#915)
  • Add check-vcs-permalinks as builtin hook (#1842)
  • Add check-illegal-windows-names as builtin hook (#1841)
  • Add check-shebang-scripts-are-executable builtin hook (#1847)
  • Add destroyed-symlinks builtin hook (#1851)
  • Add file-contents-sorter as builtin hook (#1846)
  • Add --all flag to prek uninstall (#1817)
  • Improve file pattern parse errors (#1829)
  • Validate uv binary after download (#1825)

Bug fixes

  • Fix workspace-relative added file paths (#1852)
  • Relax alias-anchor ratio check for check-yaml (#1839)

Contributors

0.3.7

Due to a release process failure, this version was republished as 0.3.8.

0.3.6

Released on 2026-03-16.

Enhancements

  • Allow selectors for hook ids containing colons (#1782)
  • Rename prek install-hooks to prek prepare-hooks and prek install --install-hooks to prek install --prepare-hooks (#1766)
  • Retry auth-failed repo clones with terminal prompts enabled (#1761)

Performance

  • Optimize detect_private_key by chunked reading and using aho-corasick (#1791)
  • Optimize fix_byte_order_marker by shifting file contents in place (#1790)

Bug fixes

... (truncated)

Commits

Updates ruff from 0.15.4 to 0.15.8

Release notes

Sourced from ruff's releases.

0.15.8

Release Notes

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.8

Released on 2026-03-26.

Preview features

  • [ruff] New rule unnecessary-if (RUF050) (#24114)
  • [ruff] New rule useless-finally (RUF072) (#24165)
  • [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#24162)
  • [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#24100)

Bug fixes

  • [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#24166)
  • [flake8-bandit] Check tuple arguments for partial paths in S607 (#24080)
  • [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#24088)
  • E501/W505/formatter: Exclude nested pragma comments from line width calculation (#24071)
  • Fix %foo? parsing in IPython assignment expressions (#24152)
  • analyze graph: resolve string imports that reference attributes, not just modules (#24058)

Rule changes

  • [eradicate] ignore ty: ignore comments in ERA001 (#24192)
  • [flake8-bandit] Treat sys.executable as trusted input in S603 (#24106)
  • [flake8-self] Recognize Self annotation and self assignment in SLF001 (#24144)
  • [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#24142)
  • [refurb] Parenthesize generator arguments in FURB142 fixer (#24200)

Performance

  • Speed up diagnostic rendering (#24146)

Server

  • Warn when Markdown files are skipped due to preview being disabled (#24150)

Documentation

  • Clarify extend-ignore and extend-select settings documentation (#24064)
  • Mention AI policy in PR template (#24198)

Other changes

  • Use trusted publishing for NPM packages (#24171)

Contributors

... (truncated)

Commits
  • c2a8815 Release 0.15.8 (#24217)
  • d444d52 [ty] Infer lambda expressions with Callable type context (#22633)
  • 9622285 [ty] Autocomplete arguments if in arguments node (#24167)
  • d812662 Use the release environment in publish-docs (#24214)
  • eda2355 [ty] Show Final source in final assignment diagnostic (#24194)
  • 929eb52 [ty] Enforce Final attribute assignment rules for annotated and augmented wri...
  • 34998be [ty] Fix typo in comment (#24211)
  • 560aca0 [ty] Minor simplifications to some benchmark code (#24209)
  • 683bae5 [ty] Track non-terminal-call constraints in global scope (#23245)
  • 4704c2a [ty] Remove unnecessary intermediate collection in `StaticClassLiteral::field...
  • Additional commits viewable in compare view

Updates ty from 0.0.21 to 0.0.26

Release notes

Sourced from ty's releases.

0.0.26

Release Notes

Released on 2026-03-26.

Bug fixes

  • Prevent "too many cycle iteration" panics in more situations (#24061)
  • Fix false positives and false negatives when unpacking a union of tuples into a function call (#23298)

Core type checking

  • Add support for typing.Concatenate (#23689)
  • Validate the return type of generator functions (#24026)
  • Support dataclass field converters (#23088)
  • Disallow Self in metaclass and static methods (#23231)
  • Improve call inference for keyword-only dict() (#24103)
  • Respect non-explicitly defined dataclass_transform params (#24170)
  • Unconditionally silence diagnostics in unreachable code (#24179)
  • Respect terminal-function-call narrowing in global scope (#23245)

Performance

  • Fix performance regression for narrowing on a larger Literal type(#24185)

Contributors

Install ty 0.0.26

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.26/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.26/ty-installer.ps1 | iex"

Download ty 0.0.26

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.26

Released on 2026-03-26.

Bug fixes

  • Prevent "too many cycle iteration" panics in more situations (#24061)
  • Fix false positives and false negatives when unpacking a union of tuples into a function call (#23298)

Core type checking

  • Add support for typing.Concatenate (#23689)
  • Validate the return type of generator functions (#24026)
  • Support dataclass field converters (#23088)
  • Disallow Self in metaclass and static methods (#23231)
  • Improve call inference for keyword-only dict() (#24103)
  • Respect non-explicitly defined dataclass_transform params (#24170)
  • Unconditionally silence diagnostics in unreachable code (#24179)
  • Respect terminal-function-call narrowing in global scope (#23245)

Performance

  • Fix performance regression for narrowing on a larger Literal type(#24185)

Contributors

0.0.25

Released on 2026-03-24.

Breaking changes

  • Support type:ignore[ty:code] suppressions (#24096)

Bug fixes

  • Avoid eager TypedDict diagnostics in TypedDict | dict unions (#24151)
  • Fix Salsa panic propagation (#24141)
  • Fix folding ranges of comments separated by statements (#24132)
  • Fix loop-header reachability cycles in conditional unpacking (#24006)
  • Fix subtyping of intersections containing NewTypes of unions vs. unions (#24087)
  • Fix untracked reads in Salsa queries that can lead to backdating panics (#24051)

... (truncated)

Commits

Bumps the python-packages group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [db-dtypes](https://github.com/googleapis/google-cloud-python) | `1.4.4` | `1.5.1` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.4.4` | `1.5.1` |
| [google-cloud-bigquery](https://github.com/googleapis/python-bigquery) | `3.40.1` | `3.41.0` |
| [sqlglot](https://github.com/tobymao/sqlglot) | `29.0.1` | `30.1.0` |
| [google-cloud-bigquery-storage](https://github.com/googleapis/google-cloud-python) | `2.36.2` | `2.37.0` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.33.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.25.0` | `3.25.2` |
| [prek](https://github.com/j178/prek) | `0.3.5` | `0.3.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.8` |
| [ty](https://github.com/astral-sh/ty) | `0.0.21` | `0.0.26` |



Updates `db-dtypes` from 1.4.4 to 1.5.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-vmwareengine-v1.4.4...db-dtypes-v1.5.1)

Updates `duckdb` from 1.4.4 to 1.5.1
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.4.4...v1.5.1)

Updates `google-cloud-bigquery` from 3.40.1 to 3.41.0
- [Release notes](https://github.com/googleapis/python-bigquery/releases)
- [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/python-bigquery/commits)

Updates `pandas` from 3.0.1 to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.1...v2.3.3)

Updates `sqlglot` from 29.0.1 to 30.1.0
- [Commits](tobymao/sqlglot@v29.0.1...v30.1.0)

Updates `google-cloud-bigquery-storage` from 2.36.2 to 2.37.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-bigquery-storage-v2.36.2...google-cloud-bigquery-storage-v2.37.0)

Updates `requests` from 2.32.5 to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `filelock` from 3.25.0 to 3.25.2
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.25.0...3.25.2)

Updates `prek` from 0.3.5 to 0.3.8
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.5...v0.3.8)

Updates `ruff` from 0.15.4 to 0.15.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.8)

Updates `ty` from 0.0.21 to 0.0.26
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.21...0.0.26)

---
updated-dependencies:
- dependency-name: db-dtypes
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: duckdb
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: google-cloud-bigquery
  dependency-version: 3.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: sqlglot
  dependency-version: 30.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: google-cloud-bigquery-storage
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: filelock
  dependency-version: 3.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: prek
  dependency-version: 0.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ty
  dependency-version: 0.0.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 31, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Architecture diagram
sequenceDiagram
    participant App as Python Application
    participant SQL as SQLGlot (v30.1.0)
    participant BQ as BigQuery Client (v3.41.0)
    participant BQS as BQ Storage (v2.37.0)
    participant LocalDB as DuckDB (v1.5.1)
    participant DF as Pandas/db-dtypes
    participant Net as Requests (v2.33.1)

    Note over App,Net: Data Ingestion & Transformation Flow

    App->>SQL: CHANGED: Transpile SQL Dialect
    SQL-->>App: Return Optimized SQL (v30.1 Logic)

    App->>Net: CHANGED: Authenticate & Send Request
    Note right of Net: NEW: CVE-2026-25645 fix<br/>for zipped path extraction
    Net->>BQ: Execute Query

    alt High Performance Read
        App->>BQS: Open Read Session
        BQS->>DF: CHANGED: Stream data using db-dtypes (v1.5.1)
        DF-->>App: Return DataFrame (Pandas v2.3.3)
    else Standard Fetch
        BQ-->>App: Return Rowset
    end

    Note over App,LocalDB: Local Analytical Processing

    App->>LocalDB: CHANGED: Scan Data (Requires Python 3.10+)
    
    alt Arrow Export
        App->>LocalDB: CHANGED: to_arrow_table()
        Note right of LocalDB: Replaces deprecated<br/>fetch_arrow_table()
    else Polars Integration
        App->>LocalDB: NEW: Pushdown filter/projection to LazyFrame
    end

    LocalDB-->>App: Result Set / Arrow Table

    Note over App,LocalDB: Concurrency & Tooling
    App->>App: CHANGED: filelock (v3.25.2)<br/>Fixed EIO on Docker bind mounts
Loading

@MaxHalford MaxHalford merged commit 5807488 into main Mar 31, 2026
2 of 3 checks passed
@MaxHalford MaxHalford deleted the dependabot/uv/python-packages-3de883c204 branch March 31, 2026 12:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant