dependabot[bot] opened a new pull request, #40188: URL: https://github.com/apache/superset/pull/40188
Bumps [greenlet](https://github.com/python-greenlet/greenlet) from 3.1.1 to 3.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst";>greenlet's changelog</a>.</em></p> <blockquote> <h1>3.5.0 (2026-04-27)</h1> <ul> <li> <p>Remove the <code>atexit</code> callback. This callback caused greenlet APIs to become unavailable far too soon during interpreter shutdown. Now they remain available while all <code>atexit</code> callbacks run. Sometime after <code>Py_IsFinalizing</code> becomes true, they may begin misbehaving. Because the order in which C extensions are finalized is undefined, C extensions that are sensitive to this need to check the results of that function before invoking greenlet APIs. As a convenience, <code>PyGreenlet_GetCurrent</code> sets an exception and returns <code>NULL</code> when this happens (and <code>greenlet.getcurrent</code> begins returning <code>None</code>); other greenlet C API functions have undefined behaviour. Methods invoked directly on pre-existing <code>greenlet.greenlet</code> objects will continue to function at least until the greenlet C extension has been garbage collected and finalized.</p> <p>See <code>PR 508 <https://github.com/python-greenlet/greenlet/pull/508></code>_.</p> </li> </ul> <h1>3.4.0 (2026-04-08)</h1> <ul> <li> <p>Publish binary wheels for RiscV 64.</p> </li> <li> <p>Fix multiple rare crash paths during interpreter shutdown.</p> <p>Note that this now relies on the <code>atexit</code> module, and introduces subtle API changes during interpreter shutdown (for example, <code>getcurrent</code> is no longer available once the <code>atexit</code> callback fires).</p> <p>See <code>PR [#499](https://github.com/python-greenlet/greenlet/issues/499) <https://github.com/python-greenlet/greenlet/pull/499></code>_ by Nicolas Bouvrette.</p> </li> <li> <p>Address the results of an automated code audit performed by Daniel Diniz. This includes several minor correctness changes that theoretically could have been crashing bugs, but typically only in very rare circumstances.</p> <p>See <code>PR 502 <https://github.com/python-greenlet/greenlet/pull/502></code>_.</p> </li> <li> <p>Fix several race conditions that could arise in free-threaded builds when using greenlet objects from multiple threads, some of which could lead to assertion failures or interpreter crashes.</p> <p>See <code>issue 503 <https://github.com/python-greenlet/greenlet/issues/503></code>_, with thanks to Nitay Dariel and Daniel Diniz.</p> </li> </ul> <h1>3.3.2 (2026-02-20)</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-greenlet/greenlet/commit/c7acc72000572811d6462ebe01733a974f194990";><code>c7acc72</code></a> Preparing release 3.5.0</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/d08f99bf40801c5d57af6e13631c0ba68300ecf7";><code>d08f99b</code></a> CHANGES: Update link from <a href="https://redirect.github.com/python-greenlet/greenlet/issues/507";>#507</a> to more full description in <a href="https://redirect.github.com/python-greenlet/greenlet/issues/508";>#508</a>.</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/fd3391e33cedc7a17a86059f18dfbec2b3a320bd";><code>fd3391e</code></a> Merge pull request <a href="https://redirect.github.com/python-greenlet/greenlet/issues/508";>#508</a> from python-greenlet/issue507-remove-atexit</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/004e1e9bd5c0fa49c66b733c28ec92a3cd41fe09";><code>004e1e9</code></a> Remove the atexit callback.</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/b784a69a0da6abd6e66b15a2c1415d272fdd1292";><code>b784a69</code></a> Back to development: 3.4.1</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/df6734edbef6a0e54ecc4ba4735d93ae6d721095";><code>df6734e</code></a> Preparing release 3.4.0</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/0f860756608b767b2ed70f935053b319d1a1b828";><code>0f86075</code></a> Merge pull request <a href="https://redirect.github.com/python-greenlet/greenlet/issues/504";>#504</a> from python-greenlet/freethreading-fixes</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/459657482f3efaee294edff672bde45ac3fac208";><code>4596574</code></a> TLBC: crash appears to still happen on CI 3.14t ubuntu. Re-enable workaround.</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/2f4a1cf53fa282ab28ea4815164a9cb09b9320ce";><code>2f4a1cf</code></a> Make green_switch (python level greenlet.switch) and green_throw check for (p...</li> <li><a href="https://github.com/python-greenlet/greenlet/commit/a0c2a2a7519985d5fe2c034a54f1a0fed82a5905";><code>a0c2a2a</code></a> Fix unused variable warning when asserts are disabled.</li> <li>Additional commits viewable in <a href="https://github.com/python-greenlet/greenlet/compare/3.1.1...3.5.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
