dependabot[bot] opened a new pull request, #46068: URL: https://github.com/apache/superset/pull/46068
Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.14.1 to 2.14.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/releases";>pydantic's releases</a>.</em></p> <blockquote> <h2>v2.14.2 2026-10-29</h2> <h2>v2.14.2 (2026-10-29)</h2> <p>This release addresses 2 security issues, <a href="https://github.com/pydantic/pydantic/security/advisories/GHSA-qpmf-fgh3-ff25";>https://github.com/pydantic/pydantic/security/advisories/GHSA-qpmf-fgh3-ff25</a> and <a href="https://github.com/pydantic/pydantic/security/advisories/GHSA-3r8g-cqwr-jr29";>https://github.com/pydantic/pydantic/security/advisories/GHSA-3r8g-cqwr-jr29</a>.</p> <h4>Packaging</h4> <ul> <li>Bump PyO3 to 0.30.1, jiter to 0.18.0, use <code>PyFrozenDict</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14003";>#14003</a></li> <li>Bump speedate to v0.18.0 by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14007";>#14007</a></li> <li>Publish <code>pydantic-core</code> wheels for PyPy 8.0 (<code>pp80</code> ABI) by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14083";>#14083</a></li> </ul> <h4>Performance</h4> <ul> <li>Avoid Python tuple allocation during model fields validation by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13955";>#13955</a></li> <li>Lazily call repr of values during nested union serialization by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14082";>#14082</a></li> <li>Skip decorator field checks when no field decorators exist by <a href="https://github.com/alexmojaki";><code>@alexmojaki</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14111";>#14111</a></li> <li>Avoid heap allocation for small JSON model field buffers by <a href="https://github.com/alexmojaki";><code>@alexmojaki</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14113";>#14113</a></li> </ul> <h4>Fixes</h4> <ul> <li> <p>Make JSON validation by iteration consistent with Python approach by <a href="https://github.com/davidhewitt";><code>@davidhewitt</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13275";>#13275</a>.</p> <p>JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:</p> <pre lang="python"><code>from pydantic import BaseModel, ConfigDict from pydantic.alias_generators import to_camel <p>class Page(BaseModel):<br /> model_config = ConfigDict(extra='forbid', alias_generator=to_camel)</p> <pre><code>page_size: int = 10 </code></pre> <p>Page.model_validate_json('{"page_size": 50}')</p> <h1>Before: Page(page_size=10)</h1> <h1>After: ValidationError (extra_forbidden)</h1> <p></code></pre></p> <p>See the <a href="https://redirect.github.com/pydantic/pydantic/pull/13275";>pull request</a> for the full list of behavior changes. This change addresses <a href="https://github.com/pydantic/pydantic/security/advisories/GHSA-qpmf-fgh3-ff25";>https://github.com/pydantic/pydantic/security/advisories/GHSA-qpmf-fgh3-ff25</a>.</p> </li> <li> <p>Ignore extra data matching a field name in <code>TypedDict</code> and dataclasses with <code>extra=allow</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14090";>#14090</a>. Addresses <a href="https://github.com/pydantic/pydantic/security/advisories/GHSA-3r8g-cqwr-jr29";>https://github.com/pydantic/pydantic/security/advisories/GHSA-3r8g-cqwr-jr29</a>.</p> </li> <li> <p>Fix unpickling of generic classes defined in separate module by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13994";>#13994</a></p> </li> <li> <p>Support explicit <code>by_alias</code> overriding <code>validate_by_alias</code> in validation JSON schemas by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13997";>#13997</a></p> </li> <li> <p>Fix mypy plugin crash on deferred empty model by <a href="https://github.com/ilevkivskyi";><code>@ilevkivskyi</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14027";>#14027</a></p> </li> <li> <p>Fix infinite recursion when validating an invalid default with <code>PydanticUseDefault</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14028";>#14028</a></p> </li> <li> <p>Implement recursion guard for <code>validate_strings()</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14029";>#14029</a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md";>pydantic's changelog</a>.</em></p> <blockquote> <h2>v2.14.2 (2026-10-29)</h2> <p><a href="https://github.com/pydantic/pydantic/releases/tag/v2.14.2";>GitHub release</a></p> <h3>What's Changed</h3> <h4>Packaging</h4> <ul> <li>Bump PyO3 to 0.30.1, jiter to 0.18.0, use <code>PyFrozenDict</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14003";>#14003</a></li> <li>Bump speedate to v0.18.0 by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14007";>#14007</a></li> <li>Publish <code>pydantic-core</code> wheels for PyPy 8.0 (<code>pp80</code> ABI) by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14083";>#14083</a></li> </ul> <h4>Performance</h4> <ul> <li>Avoid Python tuple allocation during model fields validation by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13955";>#13955</a></li> <li>Lazily call repr of values during nested union serialization by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14082";>#14082</a></li> <li>Skip decorator field checks when no field decorators exist by <a href="https://github.com/alexmojaki";><code>@alexmojaki</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14111";>#14111</a></li> <li>Avoid heap allocation for small JSON model field buffers by <a href="https://github.com/alexmojaki";><code>@alexmojaki</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14113";>#14113</a></li> </ul> <h4>Fixes</h4> <ul> <li> <p>Make JSON validation by iteration consistent with Python approach by <a href="https://github.com/davidhewitt";><code>@davidhewitt</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13275";>#13275</a>.</p> <p>JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:</p> <pre lang="python"><code>from pydantic import BaseModel, ConfigDict from pydantic.alias_generators import to_camel <p>class Page(BaseModel):<br /> model_config = ConfigDict(extra='forbid', alias_generator=to_camel)</p> <pre><code>page_size: int = 10 </code></pre> <p>Page.model_validate_json('{"page_size": 50}')</p> <h1>Before: Page(page_size=10)</h1> <h1>After: ValidationError (extra_forbidden)</h1> <p></code></pre></p> <p>See the <a href="https://redirect.github.com/pydantic/pydantic/pull/13275";>pull request</a> for the full list of behavior changes.</p> </li> <li> <p>Fix unpickling of generic classes defined in separate module by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13994";>#13994</a></p> </li> <li> <p>Support explicit <code>by_alias</code> overriding <code>validate_by_alias</code> in validation JSON schemas by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/13997";>#13997</a></p> </li> <li> <p>Fix mypy plugin crash on deferred empty model by <a href="https://github.com/ilevkivskyi";><code>@ilevkivskyi</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14027";>#14027</a></p> </li> <li> <p>Fix infinite recursion when validating an invalid default with <code>PydanticUseDefault</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14028";>#14028</a></p> </li> <li> <p>Implement recursion guard for <code>validate_strings()</code> by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14029";>#14029</a></p> </li> <li> <p>Support named tuples in <code>Sequence</code> serialization by <a href="https://github.com/Viicos";><code>@Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/14033";>#14033</a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pydantic/pydantic/commit/aa540acc29960fb394312cf97d888c99f9686814";><code>aa540ac</code></a> Update changelog for v2.14.2</li> <li><a href="https://github.com/pydantic/pydantic/commit/6cde12fa3e08201193bac8330c84dbe19cc825c8";><code>6cde12f</code></a> Update changelog for v2.14.2</li> <li><a href="https://github.com/pydantic/pydantic/commit/2db7c25776c2ede3cccc9eca84024f2245ba1571";><code>2db7c25</code></a> Fix deep copy of self-referential models</li> <li><a href="https://github.com/pydantic/pydantic/commit/d783154a3922871a49dda2de88856f445a58bc35";><code>d783154</code></a> Update changelog for v2.14.2</li> <li><a href="https://github.com/pydantic/pydantic/commit/df49b6cff91a7e0d4ae8c001e77b8b9f0eec312b";><code>df49b6c</code></a> Avoid heap allocation for small JSON model field buffers</li> <li><a href="https://github.com/pydantic/pydantic/commit/cd93e699ad7f38be3ec95712b0e2cba2d037b62f";><code>cd93e69</code></a> Skip decorator field checks when no field decorators exist</li> <li><a href="https://github.com/pydantic/pydantic/commit/2771e57c39e660471f208908c0b856fb65435165";><code>2771e57</code></a> Make JSON validation by iteration consistent with Python approach</li> <li><a href="https://github.com/pydantic/pydantic/commit/8102e3f16712dbe3109859de1610d9308ea8027f";><code>8102e3f</code></a> Avoid Python tuple allocation during model fields validation</li> <li><a href="https://github.com/pydantic/pydantic/commit/dd139b5ddc2fbbb63cb1a178104d35f5076ef550";><code>dd139b5</code></a> Bump <code>pydantic.v1</code> namespace to v1.10.27</li> <li><a href="https://github.com/pydantic/pydantic/commit/66155f9965ef6ad19b2ddb29546644b321d069c9";><code>66155f9</code></a> Prepare release v2.14.2</li> <li>Additional commits viewable in <a href="https://github.com/pydantic/pydantic/compare/v2.14.1...v2.14.2";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
