chore(deps): bump the all group across 1 directory with 7 updates by dependabot[bot] · Pull Request #352 · stac-utils/stac-fastapi-pgstac

dependabot · 2026-02-10T04:38:38Z

Bumps the all group with 6 updates in the / directory:

Package	From	To
orjson	`3.11.5`	`3.11.7`
cql2	`0.5.2`	`0.5.3`
uvicorn[standard]	`0.38.0`	`0.40.0`
pytest-postgresql	`7.0.2`	`8.0.0`
mirakuru	`2.6.1`	`3.0.1`
pytest	`8.4.2`	`9.0.2`

Updates orjson from 3.11.5 to 3.11.7

Release notes

Sourced from orjson's releases.

3.11.7

Changed

Use a faster library to serialize float. Users with byte-exact regression tests should note positive exponents are now written using a +, e.g., 1.2e+30 instead of 1.2e30. Both formats are spec-compliant.

ABI compatibility with CPython 3.15 alpha 5 free-threading.

3.11.6

Changed

orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).

Drop support for Python 3.9.

ABI compatibility with CPython 3.15 alpha 5.

Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

Fix sporadic crash serializing deeply nested list of dict.

Changelog

Sourced from orjson's changelog.

3.11.7 - 2026-02-02

Changed

Use a faster library to serialize float. Users with byte-exact regression tests should note positive exponents are now written using a +, e.g., 1.2e+30 instead of 1.2e30. Both formats are spec-compliant.

ABI compatibility with CPython 3.15 alpha 5 free-threading.

3.11.6 - 2026-01-29

Changed

orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).

Drop support for Python 3.9.

ABI compatibility with CPython 3.15 alpha 5.

Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

Fix sporadic crash serializing deeply nested list of dict.

Commits

ec2b066 3.11.7
1ca01f7 zmij
1716a22 cargo update
ec02024 3.11.6
d581687 build, clippy misc
4105b29 writer::num
62bb185 Fix sporadic crash on serializing object close
d860078 PyRef idiom refactors
343ae2f Deserializer, Utf8Buffer
7835f58 PyBytesRef and other input refactor
Additional commits viewable in compare view

Updates cql2 from 0.5.2 to 0.5.3

Changelog

Sourced from cql2's changelog.

0.5.3 - 2026-02-04

Fixed

use flags, not values, for validate and reduce in CLI (#165)

Other

(deps) bump the production-dependencies group across 1 directory with 6 updates (#166)

(deps) bump the production-dependencies group across 1 directory with 4 updates (#163)

(deps) bump the production-dependencies group across 1 directory with 9 updates (#161)

Commits

463bb33 chore: release v0.5.3 (#162)
490b634 fix: use flags, not values, for validate and reduce in CLI (#165)
bb99253 chore(deps): bump the production-dependencies group across 1 directory with 6...
e3632b9 chore(deps): bump the production-dependencies group across 1 directory with 4...
f37fdef chore(deps): bump the production-dependencies group across 1 directory with 9...
See full diff in compare view

Updates uvicorn[standard] from 0.38.0 to 0.40.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.40.0

What's Changed

Drop Python 3.9 by @Kludex in Kludex/uvicorn#2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

Version 0.39.0

What's Changed

explicitly start ASGI run with empty context by @pmeier in Kludex/uvicorn#2742

fix(websockets): Send close frame on ASGI return by @Kludex in Kludex/uvicorn#2769

New Contributors

@pmeier made their first contribution in Kludex/uvicorn#2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.40.0 (December 21, 2025)

Remove

Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

Send close frame on ASGI return for WebSockets (#2769)

Explicitly start ASGI run with empty context (#2742)

Commits

9ff6004 Version 0.40.0 (#2773)
19df042 Drop Python 3.9 (#2772)
865ce7c Run strict mypy on test suite (#2771)
4f40b84 Version 0.39.0 (#2770)
5692dfc fix(websockets): Send close frame on ASGI return (#2769)
4194764 chore(deps): bump the github-actions group with 2 updates (#2763)
d94bf28 explicitly start ASGI run with empty context (#2742)
8ae0bcb chore(deps): bump the github-actions group with 2 updates (#2748)
4744ff9 Add groups configuration for GitHub Actions (#2747)
0391372 chore(deps): bump astral-sh/setup-uv from 6.8.0 to 7.1.2 (#2746)
Additional commits viewable in compare view

Updates pytest-postgresql from 7.0.2 to 8.0.0

Changelog

Sourced from pytest-postgresql's changelog.

pytest-postgresql 8.0.0 (2026-01-23)

Breaking changes

Refactor DatabaseJanitor to use explicit template management. This includes a new as_template flag and making dbname a required parameter. ([#890](https://github.com/dbfixtures/pytest-postgresql/issues/890) <https://github.com/dbfixtures/pytest-postgresql/issues/890>__)

Bump the minimum supported pytest version to 8.2.

The previous minimum was about two years old, and older pytest versions can be flaky with fixture chaining that relies on getfixturevalue on Python 3.12-3.13 when used alongside xdist. ([#890](https://github.com/dbfixtures/pytest-postgresql/issues/890) <https://github.com/dbfixtures/pytest-postgresql/issues/890>__)

Support only PostgreSQL version 14 and up. ([#1250](https://github.com/dbfixtures/pytest-postgresql/issues/1250) <https://github.com/dbfixtures/pytest-postgresql/issues/1250>__)

Dropped support for Python 3.9 as it has reached End of Life

Bugfixes

Fix issue where --postgresql-drop-test-database was applied in process fixture.

It was already being read in client and noprocess fixtures. ([#1148](https://github.com/dbfixtures/pytest-postgresql/issues/1148) <https://github.com/dbfixtures/pytest-postgresql/issues/1148>__)

Documentation

Add a Mermaid sequence diagram to the documentation to illustrate fixture chaining and hierarchical cloning. ([#890](https://github.com/dbfixtures/pytest-postgresql/issues/890) <https://github.com/dbfixtures/pytest-postgresql/issues/890>__)

Improve code examples by adding types ([#1233](https://github.com/dbfixtures/pytest-postgresql/issues/1233) <https://github.com/dbfixtures/pytest-postgresql/issues/1233>__)

Add plugins' architecture diagram and display it in project's README. ([#1244](https://github.com/dbfixtures/pytest-postgresql/issues/1244) <https://github.com/dbfixtures/pytest-postgresql/issues/1244>__)

Improved README.rst:

Added a "Quick Start" section with a simple example.

Clarified psycopg 3 requirement for the plugin vs. psycopg 2 support for the application.

Updated PostgreSQL versioning notes (>= 10).

Explained the binary discovery mechanism (pg_config vs. fallbacks).

Promoted DatabaseJanitor as an advanced API.

Fixed broken table layouts and corrected various typos.

Features

Add depends_on parameter to postgresql_noproc factory to allow hierarchical cloning and chaining of process fixtures. ([#890](https://github.com/dbfixtures/pytest-postgresql/issues/890) <https://github.com/dbfixtures/pytest-postgresql/issues/890>__)

Convert Config kept in TypedDict into a dataclass ([#1225](https://github.com/dbfixtures/pytest-postgresql/issues/1225) <https://github.com/dbfixtures/pytest-postgresql/issues/1225>__)

Marked support for Python 3.14

Miscellaneus

... (truncated)

Commits

7b75c7b Release 8.0.0
f478f8f Merge pull request #1259 from dbfixtures/issue-890
f6232c8 Allow chaining noprocess fixtures - closes #890
30687e3 build(deps): bump packaging from 25.0 to 26.0
4de7c32 build(deps): bump packaging from 25.0 to 26.0
2b244db [pre-commit.ci] pre-commit autoupdate
21e67bb [pre-commit.ci] pre-commit autoupdate
43ecec6 build(deps): bump fizyk/actions-reuse/.github/workflows/shared-pre-co…
7c17701 build(deps): bump fizyk/actions-reuse/.github/workflows/shared-releas…
b1cad0e build(deps): bump fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml
Additional commits viewable in compare view

Updates mirakuru from 2.6.1 to 3.0.1

Changelog

Sourced from mirakuru's changelog.

mirakuru 3.0.1 (2025-11-01)

Bugfixes

Correctly point the minimum required python version.

Not updating it causes installs without pinned mirakuru versions to fail.

mirakuru 3.0.0 (2025-10-29)

Breaking changes

Drop support for Python 3.9

Features

Executors now accept additional kwargs that can be passed to popen. ([#905](https://github.com/dbfixtures/mirakuru/issues/905) <https://github.com/dbfixtures/mirakuru/issues/905>_)

Add support for Python 3.14

Bugfixes

Prevent OutputExecutor from hanging when a child process produces a large amount of output before the banner. This was resolved by implementing non-blocking reads and fragmented output consumption to avoid pipe backpressure and ensure timely banner detection. ([#98](https://github.com/dbfixtures/mirakuru/issues/98) <https://github.com/dbfixtures/mirakuru/issues/98>_)

Miscellaneus

Downgrade MacOS runner to 14, as the 15 running as macos-latest at the moment is misbehaving.

Tests on PyPy are running fine, while those on regular python vversion constantly fail.

Improve README

Replace black with ruff-format

Speed up tests with pytest-xdist

Update pipelines for fizyk/actions-reuse 4

Commits

49b6a09 Release 3.0.1
d2e9ce5 Merge pull request #949 from nsoranzo/patch-1
c9d8b5b Add newsfragment
66304f0 Update requires-python to 3.10
6399686 Release 3.0.0
98d245b Merge pull request #947 from dbfixtures/xdist
f4ef2d3 Merge pull request #948 from dbfixtures/readme
b2cb7e8 Speed up tests
77ed38d Improve README
3905b22 Merge pull request #946 from dbfixtures/issue-905
Additional commits viewable in compare view

Updates pytest from 8.4.2 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

... (truncated)

Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view

Updates pytest-asyncio from 1.2.0 to 0.23.3

Commits

260b791 [docs] Prepare release of v0.23.3.
6a253e2 [docs] Shorten changelog by combining multiple issues.
e2cbb90 [docs] Mention correct issue in changelog.
0c522bf [fix] Fixes a bug that caused an internal pytest error when using ImportWarni...
31c7e6f Build(deps): Bump coverage from 7.3.3 to 7.3.4 in /dependencies/default
38d5c7e Build(deps): Bump sphinx-rtd-theme in /dependencies/docs
650ec58 Build(deps): Bump babel from 2.13.1 to 2.14.0 in /dependencies/docs
0166a7e Build(deps): Bump typing-extensions in /dependencies/default
3a15f30 Build(deps): Bump coverage from 7.3.2 to 7.3.3 in /dependencies/default
28e91f0 Build(deps): Bump hypothesis in /dependencies/default
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [orjson](https://github.com/ijl/orjson) | `3.11.5` | `3.11.7` | | [cql2](https://github.com/developmentseed/cql2-rs) | `0.5.2` | `0.5.3` | | [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.38.0` | `0.40.0` | | [pytest-postgresql](https://github.com/dbfixtures/pytest-postgresql) | `7.0.2` | `8.0.0` | | [mirakuru](https://github.com/dbfixtures/mirakuru) | `2.6.1` | `3.0.1` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` | Updates `orjson` from 3.11.5 to 3.11.7 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.11.5...3.11.7) Updates `cql2` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/developmentseed/cql2-rs/releases) - [Changelog](https://github.com/developmentseed/cql2-rs/blob/main/CHANGELOG.md) - [Commits](developmentseed/cql2-rs@cql2-v0.5.2...cql2-v0.5.3) Updates `uvicorn[standard]` from 0.38.0 to 0.40.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.38.0...0.40.0) Updates `pytest-postgresql` from 7.0.2 to 8.0.0 - [Changelog](https://github.com/dbfixtures/pytest-postgresql/blob/main/CHANGES.rst) - [Commits](dbfixtures/pytest-postgresql@v7.0.2...v8.0.0) Updates `mirakuru` from 2.6.1 to 3.0.1 - [Changelog](https://github.com/dbfixtures/mirakuru/blob/main/CHANGES.rst) - [Commits](dbfixtures/mirakuru@v2.6.1...v3.0.1) Updates `pytest` from 8.4.2 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.2) Updates `pytest-asyncio` from 1.2.0 to 0.23.3 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.2.0...v0.23.3) --- updated-dependencies: - dependency-name: orjson dependency-version: 3.11.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: cql2 dependency-version: 0.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: uvicorn[standard] dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: pytest-postgresql dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all - dependency-name: mirakuru dependency-version: 3.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all - dependency-name: pytest-asyncio dependency-version: 0.23.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-17T04:38:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 10, 2026

dependabot bot closed this Feb 17, 2026

dependabot bot deleted the dependabot/uv/all-ea7ee2131b branch February 17, 2026 04:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all group across 1 directory with 7 updates#352

chore(deps): bump the all group across 1 directory with 7 updates#352
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/all-ea7ee2131b

dependabot bot commented on behalf of github Feb 10, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Feb 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.11.7

Changed

3.11.6

Changed

Fixed

3.11.7 - 2026-02-02

Changed

3.11.6 - 2026-01-29

Changed

Fixed

0.5.3 - 2026-02-04

Fixed

Other

Version 0.40.0

What's Changed

Version 0.39.0

What's Changed

New Contributors

0.40.0 (December 21, 2025)

Remove

0.39.0 (December 21, 2025)

Fixed

pytest-postgresql 8.0.0 (2026-01-23)

Breaking changes

Bugfixes

Documentation

Features

Miscellaneus

mirakuru 3.0.1 (2025-11-01)

Bugfixes

mirakuru 3.0.0 (2025-10-29)

Breaking changes

Features

Bugfixes

Miscellaneus

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

Uh oh!

dependabot bot commented on behalf of github Feb 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

dependabot bot commented on behalf of github Feb 10, 2026 •

edited

Loading