timsaucer opened a new pull request, #1589: URL: https://github.com/apache/datafusion-python/pull/1589
# Which issue does this PR close? N/A — this batches several open Dependabot PRs (#1585, #1584, #1583, #1582, #1580, #1565, #1552, #1542, #1540, #1539, #1538, #1537, #1536, #1535) into one so they can be reviewed and merged together. # Rationale for this change There are many individual Dependabot dependency-bump PRs open at once. Merging them one at a time repeatedly invalidates lockfiles and re-triggers CI. Combining them into a single PR lets all updates land together with one CI run. # What changes are included in this PR? GitHub Actions (pinned SHAs + version comments updated): - github/codeql-action 4.35.4 -> 4.36.2 (#1585) - astral-sh/setup-uv 8.1.0 -> 8.2.0 (#1584) Cargo (`Cargo.lock`): - chrono 0.4.44 -> 0.4.45 (#1583) - log 0.4.30 -> 0.4.32 (#1582) - uuid 1.23.1 -> 1.23.2 (#1565) Python (`uv.lock`): - pyarrow 22.0.0 -> 23.0.1 (#1580) - idna 3.10 -> 3.15 (#1552) - pytest 8.3.4 -> 9.0.3 (#1542) - pyjwt 2.10.1 -> 2.12.0 (#1540) - pygments 2.19.1 -> 2.20.0 (#1539) - requests 2.32.3 -> 2.33.0 (#1538) - urllib3 2.3.0 -> 2.7.0 (#1537) - pynacl 1.5.0 -> 1.6.2 (#1536) - cryptography 44.0.0 -> 46.0.7 (#1535) Resolving the above also pulled in supporting transitive bumps in `uv.lock` (cffi 1.17.1 -> 2.0.0, pytest-asyncio 0.25.3 -> 1.4.0, typing-extensions, and a new backports-asyncio-runner). # Are there any user-facing changes? No public API changes. These are build, CI, and dev/test dependency updates only. Note that pytest is a major version bump (8 -> 9); CI will confirm the test suite still passes. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
