chore(pip): Bump the python group across 1 directory with 19 updates

[dependabot]

Bumps the python group with 19 updates in the / directory:

Package	From	To
statsmodels	0.14.6	0.15.0
doubleml	0.11.3	0.11.4
alembic	1.18.5	1.19.1
ast-serialize	0.6.0	0.8.0
fonttools	4.63.0	4.64.0
greenlet	3.5.4	3.5.5
idna	3.18	3.19
joblib	1.5.3	1.6.0
kiwisolver	1.5.0	1.5.1
librt	0.13.0	0.15.0
mako	1.3.12	1.4.1
mypy	2.3.0	2.3.1
narwhals	2.24.0	2.25.0
packaging	26.2	26.3
patsy	1.0.2	1.0.3
pygments	2.20.0	2.21.0
soupsieve	2.9.1	2.9.2
sqlalchemy	2.0.51	2.0.52
tqdm	4.69.1	4.70.0

Updates statsmodels from 0.14.6 to 0.15.0

Release notes

Sourced from statsmodels's releases.

Release 0.15.0

The statsmodels developers are happy to announce the release of 0.15.0. 358 issues were closed in this release and 655 pull requests were merged. Major new features include:

• Standardized on rng for controlling randomness across the package (SPEC 007), replacing seed/random_state
• Functions with variable-length tuple returns now return documented NamedTuple results instead
• A new abstracted formula engine that supports both patsy and formulaic as the backend
• Support for Polars DataFrames and Series as model input
• Switched the build backend from setuptools to meson-python
• New robust estimators: CovDetMCD, CovDetS, CovDetMM, and RLMDetSMM
• New tests: Diebold-Mariano, Pesaran-Timmermann, Jonckheere-Terpstra, Leybourne-McCabe, and a delete-k block jackknife estimator
• The Hamilton filter, local false discovery rate correction, and an L1-penalized GLM solver
• HurdleCountModel gained fit_regularized, and MICEData is now iterable

This release also raises the minimum supported versions of NumPy, SciPy, and pandas, and tightens input validation for many string-valued options across the package (invalid values that previously failed silently or with a confusing error now raise a clear ValueError). A handful of long-standing bugs in seldom-exercised code paths were also corrected as part of a systematic coverage audit this cycle, some of which change numerical output for affected models. See the release notes for the complete list of enhancements, breaking changes, and bug fixes.

Commits

• 278ff99 Merge pull request #10211 from bashtage/update-release-note
• ab3f3bc DOC: Final release note
• 9307ef1 Merge pull request #8712 from bdpedigo/nobs-style
• 463e5c5 Merge pull request #10210 from Panzerkampfwagen-del/mice-data-iterable
• cc734d8 Merge branch 'main' into mice-data-iterable
• 2912b84 Merge pull request #10209 from Panzerkampfwagen-del/var-df-model-docstring
• 279b9f4 ENH: make MICEData iterable, yielding successive imputed datasets
• ce7f2c0 DOC: clarify VARResults.df_model counts parameters per equation
• d1e1875 Merge pull request #10205 from bashtage/fix-hurdle-and-l1-cov
• bb385fb Merge pull request #10208 from bashtage/update-release-note
• Additional commits viewable in compare view

Updates doubleml from 0.11.3 to 0.11.4

Release notes

Sourced from doubleml's releases.

DoubleML 0.11.4

• Bugfix: Fixes bug for critical values in DoubleMLBLP. Decreases joint confidence intervals length. [Py #400](DoubleML/doubleml-for-py#400)

Commits

• 96e32c9 fix: ensure real values are used in sqrtm calculations and adjust quantile ax...
• See full diff in compare view

Updates alembic from 1.18.5 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

• [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

  References: #1842

1.19.0

Released: August 4, 2026

changed

• [changed] [installation] Environmental updates:

  -   Trove classifiers now include Python 3.15 which is now part of CI
      integration
  
  
  Python 3.14 is also added to trove classifiers which had been previously
  omitted
  
  
  Implemented PEP 604 style unions in type annotations
  

feature

• [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

  References: #508

bug

... (truncated)

Commits

• See full diff in compare view

Updates ast-serialize from 0.6.0 to 0.8.0

Commits

• a0d7a91 Bump version to 0.8.0
• a0ba661 Try building version-specific wheels for Emscripten (#76)
• fc316fa Add missing Python 3.15 trove classifier (#74)
• 74193f3 Bump version to 0.7.0
• 5b7276c Minor update after adding wheels for Python 3.15 (#73)
• 49e34a5 Vendor Ruff crates (#70)
• fbca1af Build musllinux wheels for ppc64le and riscv64 (#72)
• c2db11c Build wheels for Python 3.15 (#71)
• See full diff in compare view

Updates fonttools from 4.63.0 to 4.64.0

Release notes

Sourced from fonttools's releases.

4.64.0

• [feaLib] Fix name-table parsing for multibyte Mac encodings (#1196, #4092).
• [ttProgram] Also indent TrueType assembly following IDEF[ ], like function definitions (#4093).
• [subset] Keep East Asian spacing palt by default (#4094).
• [subset] Bug fix for MATH table in which constructions for glyphs that are only added during MATH closure were kept (#4096).
• [ufoLib] Make glyph-to-group construction accessible outside of lookup function (#4102).
• [glyf] Use reverse glyph map for O(1) __setitem__ membership (#4103).
• [ttLib] Fix fixLookupOverFlows() reporting success when it had not promoted any lookup to Extension, masking unresolvable overflows.
• [ttLib] Add support for TrueType Collection version 2 (#4100).
• [ttLib] Pin a single head.modified timestamp across TTCollection.save (#4111).
• [ttLib] Give an actionable error when LookupList overflow is unrecoverable (#4109).
• [ttLib] Add support for the AAT bitmap tables bhed, bdat, bloc, variants of head, EBDT, EBLC used in legacy Apple bitmap-only fonts (#4115).
• [ttLib] Check OS/2 fsSelection/macStyle consistency against bhed as well as head (#4118, #4119).
• [misc.roundTools] Add types and documentation (#4123).
• [varLib.instancer] Instance the BASE table (#4137).
• [varLib.instancer] Fix Private-dict vsindex handling in instantiateCFF2 (#4129, #4132).
• [varLib.instancer] Fix crash instancing CFF2 fonts without a VariationStore (#4130, #4131).
• [sfnt] Raise TTLibError instead of AssertionError or struct.error when reading a font truncated within the table directory or a table entry (#4147, #4149).
• [misc.xmlWriter] Escape the ]]> terminator inside CDATA sections, so an SVG document containing it can no longer smuggle markup past a TTX round trip (#4139).
• [varLib.instancer] Implement avar2 partial-instancing: the avar version 2 ItemVariationStore is adjusted so that remaining axes behave the same after limiting the designspace (#4045).
• [feaLib] Add shorthand for the value at the default location in a variable scalar: (100 wght=900:120) means (wght=400:100 wght=900:120) when the wght default is 400 (#4024).
• [cmap] Raise TTLibError for a truncated or out-of-bounds cmap subtable header (#4151).
• [designspaceLib] Reject conflicting duplicate inputs in axis maps instead of silently keeping the last one (#4153).
• [designspaceLib] Read an empty <lib> element as an empty lib instead of raising IndexError (#4142, #4144).
• [colorLib] Raise a legible error when a COLRv0 layer, or a COLRv1 PaintGlyph or PaintColrGlyph, references a glyph missing from the glyphMap, instead of failing obscurely later (#2629, #4141).
• [cmap] Don't drop subtables in unsupported formats when compiling or dumping a font read from binary (#4136).
• [ttLib] Implement splitSinglePos so GPOS lookup type 1 offset overflows can be recovered by splitting the subtable (#4091, #4108).
• [cmap] Round-trip empty Macintosh format 2 subtables (#3663, #4117).
• [glyf] Raise TTLibError instead of RecursionError when recalcBounds() hits a composite-component reference cycle (#3899, #4116).
• [svgLib] Fix crash parsing an SVG path with consecutive closepath commands (Z Z) (#4122).
• [ttLib] Fix DefaultTable type annotations (#4126).
• [ttLib] Add support for the EBSC (Embedded Bitmap Scaling) table (#4113).
• [svgLib] Suppress spurious close segments caused by floating-point drift in relative path commands (#3860, #4127).
• [qu2cu] Fix TypeError in the Cython-compiled build when Qu2CuPen passes tuple splines (#4160).
• [mort] Add semantic decompilation, TTX, and compilation support for rearrangement, contextual-substitution, ligature, and insertion subtables (#4158, #4159, #4161).
• [svgLib] Start a new subpath at the just-closed subpath's initial point when a drawto command follows a closepath, per SVG spec (#4154, #4155).
• [misc.filesystem] SECURITY Reject paths that resolve outside the filesystem root: a malicious UFO could read arbitrary files via .. components in contents.plist, and a crafted .ufoz could create files outside its temporary mirror (#4124).
• [ttLib] SECURITY Sanitise glyph names used as filenames in EBDT/CBDT ttx -z extfile export, preventing arbitrary file writes from untrusted fonts (#4128).
• [misc.etree] SECURITY Don't resolve external XML entities in XMLParser when lxml is used, preventing XXE file disclosure on lxml < 5.0 (#4145).
• [subset] Fully prune VARC auxiliary data: collect and remap variation indices referenced by condition tables when subsetting the MultiVarStore, and drop the AxisIndicesList, ConditionList, and MultiVarStore when they end up empty (#4162).

Changelog

Sourced from fonttools's changelog.

4.64.0 (released 2026-08-31)

• [feaLib] Fix name-table parsing for multibyte Mac encodings (#1196, #4092).
• [ttProgram] Also indent TrueType assembly following IDEF[ ], like function definitions (#4093).
• [subset] Keep East Asian spacing palt by default (#4094).
• [subset] Bug fix for MATH table in which constructions for glyphs that are only added during MATH closure were kept (#4096).
• [ufoLib] Make glyph-to-group construction accessible outside of lookup function (#4102).
• [glyf] Use reverse glyph map for O(1) __setitem__ membership (#4103).
• [ttLib] Fix fixLookupOverFlows() reporting success when it had not promoted any lookup to Extension, masking unresolvable overflows.
• [ttLib] Add support for TrueType Collection version 2 (#4100).
• [ttLib] Pin a single head.modified timestamp across TTCollection.save (#4111).
• [ttLib] Give an actionable error when LookupList overflow is unrecoverable (#4109).
• [ttLib] Add support for the AAT bitmap tables bhed, bdat, bloc, variants of head, EBDT, EBLC used in legacy Apple bitmap-only fonts (#4115).
• [ttLib] Check OS/2 fsSelection/macStyle consistency against bhed as well as head (#4118, #4119).
• [misc.roundTools] Add types and documentation (#4123).
• [varLib.instancer] Instance the BASE table (#4137).
• [varLib.instancer] Fix Private-dict vsindex handling in instantiateCFF2 (#4129, #4132).
• [varLib.instancer] Fix crash instancing CFF2 fonts without a VariationStore (#4130, #4131).
• [sfnt] Raise TTLibError instead of AssertionError or struct.error when reading a font truncated within the table directory or a table entry (#4147, #4149).
• [misc.xmlWriter] Escape the ]]> terminator inside CDATA sections, so an SVG document containing it can no longer smuggle markup past a TTX round trip (#4139).
• [varLib.instancer] Implement avar2 partial-instancing: the avar version 2 ItemVariationStore is adjusted so that remaining axes behave the same after limiting the designspace (#4045).
• [feaLib] Add shorthand for the value at the default location in a variable scalar: (100 wght=900:120) means (wght=400:100 wght=900:120) when the wght default is 400 (#4024).
• [cmap] Raise TTLibError for a truncated or out-of-bounds cmap subtable header (#4151).
• [designspaceLib] Reject conflicting duplicate inputs in axis maps instead of silently keeping the last one (#4153).
• [designspaceLib] Read an empty <lib> element as an empty lib instead of raising IndexError (#4142, #4144).
• [colorLib] Raise a legible error when a COLRv0 layer, or a COLRv1 PaintGlyph or PaintColrGlyph, references a glyph missing from the glyphMap, instead of failing obscurely later (#2629, #4141).
• [cmap] Don't drop subtables in unsupported formats when compiling or dumping a

... (truncated)

Commits

• 37dfa71 Release 4.64.0
• 5cab496 Update NEWS.rst [skip ci]
• 6f1429b [subset] Fully prune VARC auxiliary data (#4162)
• 93fc470 Merge pull request #4145 from insaf021/etree-no-external-entities
• 1ce6993 [misc.etree] only override resolve_entities on lxml < 5.0
• 9c10287 Merge pull request #4128 from insaf021/ebdt-extfile-basename
• 53e2b0b [E_B_D_T_] don't let sanitised glyph names collide
• 3bbd268 Merge pull request #4124 from insaf021/osfs-path-containment
• 6840516 [misc.filesystem] simplify containment check, pin symlink strictness
• 8f4b4ee [misc.filesystem] don't publish a half-built zip directory mirror
• Additional commits viewable in compare view

Updates greenlet from 3.5.4 to 3.5.5

Changelog

Sourced from greenlet's changelog.

3.5.5 (2026-08-10)

• Link the C++ runtime statically into the Windows wheels again, as the Appveyor builds did through 3.3.0. Since 3.3.1 _greenlet.pyd imported MSVCP140.dll, which no Windows CPython distribution ships, so importing greenlet failed on machines without the Visual C++ redistributable. See issue 525 <https://github.com/python-greenlet/greenlet/issues/525>_. Issue and pull request by Daniel Sticker.

.. note:: Binary 3.15 wheels are now built with 3.15.0rc1. This should be compatible with future 3.15 releases and is believed compatible with 3.15b4 as well (but not earlier versions).

Commits

• ddb1453 Preparing release 3.5.5
• 7de515c Update CHANGES: Credit for issue 525 and note about 3.15 binary wheels [skip ci]
• f3746aa Merge pull request #526 from stickerdaniel/windows-static-runtime
• f1ce3ca Restore static linking of the C++ runtime for Windows wheels
• b6690a5 Merge pull request #523 from python-greenlet/dependabot/github_actions/github...
• 726cc38 Bump the github-actions group with 3 updates
• e5c5f4c Merge pull request #522 from ddorian/c-stack-refs-test-detection
• be55a59 Check that the suspended greenlet is what keeps the class alive
• e9c01dd Back to development: 3.5.5
• See full diff in compare view

Updates idna from 3.18 to 3.19

Release notes

Sourced from idna's releases.

v3.19

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
• Reject A-labels that are not the canonical Punycode encoding of their U-label.
• Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
• Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
• Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
• Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Changelog

Sourced from idna's changelog.

3.19 (2026-08-18)

• Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
• Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
• Test on free-threaded CPython with the GIL disabled and document thread safety.
• Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
• Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
• The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
• Reject A-labels that are not the canonical Punycode encoding of their U-label.
• Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
• Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
• Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
• Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Commits

• 03a9a11 Release 3.19
• 2d2a7ef Pre-release 3.19rc0
• 5cce130 Merge pull request #268 from kjd/fix-std3-regex-alert
• 3914b75 Split the STD3 disallowed-character range so uppercase is explicit
• ce9fd98 Merge pull request #267 from kjd/housekeeping
• 809240c Fail CI when the license copyright year is behind the current year
• d9e16c5 Consolidate test fixtures, prune stale gitignore entries, and fix doc typos
• ef30fee Remove dead code and pare back superfluous comments
• b907913 Tighten the version support and Unicode notes in the README
• 6204cbe Ignore local build artifacts and stop packaging stray tooling config
• Additional commits viewable in compare view

Updates joblib from 1.5.3 to 1.6.0

Changelog

Sourced from joblib's changelog.

Release 1.6.0 - 2026/08/31

• Fix caching of functions whose source cannot be retrieved, such as functions defined in a notebook cell. Their identity fell back to str(hash(func.__code__)), which is salted by PYTHONHASHSEED and so differed between processes. A worker reading the func_code.py written by another one concluded that the function had changed and wiped the whole cache directory for it, discarding results computed by its peers. func_code.py is also no longer rewritten in place, so a reader can no longer catch it half-written and draw the same conclusion. joblib/joblib#1694

• Drop python 3.9 support. The oldest supported Python version is now Python 3.10. joblib/joblib#1773

• Fix eval_expr (used to evaluate the pre_dispatch argument of Parallel) to raise a ValueError as documented instead of leaking a ZeroDivisionError for expressions that divide or take a modulo by zero. joblib/joblib#1810

• MemorizedResult now forwards mmap_mode to its store backend, so a cached array reconstructed from a location is memory-mapped as requested instead of being loaded fully into memory. joblib/joblib#1799

• Unvendor cloudpickle to more quickly benefit from maintenance releases of cloudpickle joblib/joblib#1775

• Fix Memory.cache for functions with a keyword-only argument that has a default declared before a keyword-only argument without a default. joblib/joblib#1731

• Fix behavior of filter_args on some precise cases. joblib/joblib#1800

• Fix a concurrency error that could happen with unordered generator. joblib/joblib#1789

• Fix: dump() now accepts any input os.PathLike object to be consistent with load. joblib/joblib#1812

• The documentation now uses pydata sphinx theme. Furthermore, optional dependencies test and docs have been added to pyproject.toml. joblib/joblib#1774

• Vendor loky 3.6.0

... (truncated)

Commits

• cd9a6b0 Release 1.6.0 (#1844)
• d873f97 MNT vendor loky 3.6.0 (#1843)
• 4ff61af Bump the github-actions group with 4 updates (#1832)
• 804f472 FIX make func_code stable across processes when the source is unavailable (#1...
• 65cc49d TST Restore RNG sequence in hash compatibility test (#1837)
• c1b6541 CI Use pytest-run-parallel on free-threaded build (#1819)
• f6b80d3 MNT Simplify isinstance check in hashing (#1835)
• fa4d5af MNT remove python 3.9 from CI (#1773)
• 53cea7b DOC Update release docs to reflect usage of trusted publishing (#1826)
• 26500e9 Bump the github-actions group across 1 directory with 3 updates (#1790)
• Additional commits viewable in compare view

Updates kiwisolver from 1.5.0 to 1.5.1

Release notes

Sourced from kiwisolver's releases.

1.5.1

What's Changed

• build(deps): bump docker/setup-qemu-action from 2 to 4 by @​dependabot[bot] in nucleic/kiwi#218
• build(deps): bump actions/download-artifact from 5.0.0 to 8.0.0 by @​dependabot[bot] in nucleic/kiwi#219
• build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @​dependabot[bot] in nucleic/kiwi#222
• build(deps): bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 by @​dependabot[bot] in nucleic/kiwi#233
• build(deps): bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 by @​dependabot[bot] in nucleic/kiwi#236
• build(deps): bump actions/checkout from 6 to 7 by @​dependabot[bot] in nucleic/kiwi#237
• build(deps): bump codecov/codecov-action from 5 to 7 by @​dependabot[bot] in nucleic/kiwi#235
• build(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in nucleic/kiwi#239
• Add iOS build configuration. by @​freakboy3742 in nucleic/kiwi#238
• build(deps): bump sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0 by @​dependabot[bot] in nucleic/kiwi#242
• ci: start testing on Python 3.15 by @​MatthieuDartiailh in nucleic/kiwi#243

New Contributors

• @​freakboy3742 made their first contribution in nucleic/kiwi#238

Full Changelog: nucleic/kiwi@1.5.0...1.5.1

Changelog

Sourced from kiwisolver's changelog.

Wrappers 1.5.1 | Solver 1.5.1 | 28/08/2026

• add support for Python 3.15 PR #243
• fix bad version reported in C++ code PR #243

Commits

• 166899b cut release 1.5.1
• 1af7c11 ci: start testing on Python 3.15 (#243)
• 2e7291d build(deps): bump sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0 (#242)
• e8acf1e Add iOS build configuration. (#238)
• bd4b983 build(deps): bump actions/setup-python from 6 to 7 (#239)
• 00be78d build(deps): bump codecov/codecov-action from 5 to 7 (#235)
• 91a75dd build(deps): bump actions/checkout from 6 to 7 (#237)
• 9f56ae2 build(deps): bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#236)
• 613c5bc build(deps): bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 (#233)
• a7331ee build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#222)
• Additional commits viewable in compare view

Updates librt from 0.13.0 to 0.15.0

Commits

• a6d7fad Prepare for sentinel support
• dd0eeaf Build Linux wheels for ppc64le (#44)
• 3c133fa Sync mypy and bump version
• c963cc9 Build wheels for Python 3.15 (#43)
• See full diff in compare view

Updates mako from 1.3.12 to 1.4.1

Release notes

Sourced from mako's releases.

1.4.1

Released: Wed Aug 5 2026

bug

• [bug] [installation] Fixed issue in the 1.4.0 packaging where the repository's internal tools/ directory was detected by setuptools package discovery and installed as a top-level tools package into site-packages, shadowing unrelated tools packages belonging to other applications. Package discovery is now limited to the mako package explicitly.

  References: #438

1.4.0

Released: Tue Aug 4 2026

changed

• [changed] [examples] The examples/bench folder has been removed as it used mostly long-obsolete template engines. The examples/wsgi/run_wsgi.py example has been updated to remove the use of the removed-in-Python-3.13 cgi module, and to be runnable as a module from the project root.

• [changed] [installation] Minimum MarkupSafe dependency version bumped from 0.9.2 to 2.0.

• [changed] [tests] The test suite now runs via nox. The old tox.ini remains however nox will be the only system that's maintained.

• [changed] [installation] Project metadata has been migrated to PEP 621 pyproject.toml-based configuration. setup.cfg remains only for the [mako_testing] section used by Mako's own test suite. The build requirements now set the minimum setuptools version at 77.0.0 in order to build Mako from source.

• [changed] [installation] Minimum Python version is now 3.10. Mako 1.4.0 has been tested up through Python 3.15.0b4.

bug

• [bug] [ext] The minimum Lingua version supported by LinguaMakoExtractor is now 4.16. The test suite had continued to pin Lingua below 4 long after the extractor itself was repaired to work with Lingua 4 in version 1.2.0, with the result that the plugin was no longer covered by tests at all; the pinned version additionally imports pkg_resources at startup, which is not present in current setuptools releases and left the package

... (truncated)

Commits

• See full diff in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Updates narwhals from 2.24.0 to 2.25.0

Release notes

Sourced from narwhals's releases.

Narwhals v2.25.0

Changes

🚀 Performance improvements

• perf: remove redundant work in eager when/then, schema resolution, selectors, and module lookups (#3797)

✨ Enhancements

• feat: add str.strip_chars_{start,end} (#3843)
• feat: Add maintain_order argument to {Expr, Series}.list.unique (#3697)
• feat(typing): Introduce PluginName NewType so plugin backends can type check (#3794)
• feat(ibis): Add support for Expr.list.median for ibis backend (#3791)

🐞 Bug fixes

• fix: follow left-hand-index alignment rule for pandas-like concat (#3866)
• fix: null propagation for str boolean methods (#3865)
• fix: consistently place null's in with_row_index(order_by=...) (#3863)
• fix: honor schema column selection/order in pandas-like from_dicts (#3856)
• fix: use exact quantile for median on the pyarrow backend (#3855)
• fix: order Categorical columns by value in the pyarrow backend (#3862)
• fix: is_in was not preserving nulls where possible (#3859)
• fix: preserve nulls in pandas-like Expr.dt.ordinal_day (#3805)
• fix: resolve failing cross-references in documentation (#3790)

📖 Documentation

• docs: reorganise contributing.md and add useful make commands (#3836)
• fix: resolve failing cross-references in documentation (#3790)
• docs: Add Intella to "resources" (#3788)

🛠️ Other improvements

• ci: pin pandas in scikit-lego job to get ci green (#3860)
• chore: Bump pyrefly 1.2, remove some unnecessary pyrefly: ignores (#3848)
• chore: fix pandas nightly (#3849)
• chore: Remove pins in pyproject.toml, as dependencies are pinned in uv.lock anyway (#3847)
• chore: prek autoupdate (#3828)
• chore: add trailing-whitespace precommit (#3826)
• chore: Update uv lock, pre-commit hooks and fix linting issues (#3813)
• refactor: Dispatch IO functions via *Namespace methods (#3793)
• ci: fix lightgbm downstream test (#3801)
• chore: refactor compliant implementations to use expression_args instead of **expressifiable_args (#3766)
• chore: Small performance and robustness cleanups (#3798)
• chore: prek autoupdate (#3858)
• chore: prek autoupdate (#3846)
• ci: consolidate action updates in renovate and add zizmor pre-commit hook (#3835)
• test: split cat.get_categories tests for expr and series (#3814)

... (truncated)

Commits

• c481508 release: Bump version to 2.25.0
• 813f3bb update build process, remove push to stable branch (#3868)
• bc34ee7 fix: follow left-hand-index alignment rule for pandas-like concat (#3866)
• f5ba091 fix: null propagation for str boolean methods (#3865)
• d2b5bcc fix: consistently place null's in with_row_index(order_by=...) (#3863)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​tqdm@​4.69.1 ⏵ 4.70.0
	pypi/​mypy@​2.3.0 ⏵ 2.3.1	+1
	pypi/​fonttools@​4.63.0 ⏵ 4.64.0	+1
	pypi/​patsy@​1.0.2 ⏵ 1.0.3
	pypi/​joblib@​1.5.3 ⏵ 1.6.0	-1
	pypi/​sqlalchemy@​2.0.51 ⏵ 2.0.52
	pypi/​pygments@​2.20.0 ⏵ 2.21.0	+1
	pypi/​mako@​1.3.12 ⏵ 1.4.1	+1
	pypi/​alembic@​1.18.5 ⏵ 1.19.1	+1
	pypi/​greenlet@​3.5.4 ⏵ 3.5.5	+1
	pypi/​librt@​0.13.0 ⏵ 0.15.0
	pypi/​soupsieve@​2.9.1 ⏵ 2.9.2
	pypi/​packaging@​26.2 ⏵ 26.3	+1
	pypi/​kiwisolver@​1.5.0 ⏵ 1.5.1
	pypi/​ast-serialize@​0.6.0 ⏵ 0.8.0	+1
	pypi/​idna@​3.18 ⏵ 3.19	+1
	pypi/​narwhals@​2.24.0 ⏵ 2.25.0	+1

View full report