Skip to content

chore(deps-dev): bump the python group with 4 updates - #3214

Merged
vpetersson merged 1 commit into
masterfrom
dependabot/uv/python-c7abe89f82
Jul 27, 2026
Merged

chore(deps-dev): bump the python group with 4 updates#3214
vpetersson merged 1 commit into
masterfrom
dependabot/uv/python-c7abe89f82

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the python group with 4 updates: ruff, certifi, pillow-heif and sentry-sdk.

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates pillow-heif from 1.4.0 to 1.5.0

Release notes

Sourced from pillow-heif's releases.

v1.5.0

Added

  • Grid(tiled) image encoding: options.GRID_TILE_SIZE option, tile_size parameter for save and grid_tile_size parameter for register_*_opener. #317
  • info["tiling"] dictionary with the grid info for tiled images. #317
  • PH_LIBHEIF_CMAKE_ARGS environment variable for build_libs.py to pass extra cmake arguments to the libheif build.
  • Windows ARM64 wheels.

Changed

  • Minimum required libheif version is 1.23.1.
  • Releases are now tag-triggered and published to PyPI with attestations via Trusted Publishing. #432
  • libheif was updated from the 1.23.0 to 1.23.1 version. #445
  • libde265 was updated from the 1.1.0 to 1.1.1 version. #434

Removed

  • pi-heif package is discontinued, 1.4.0 is its final release. #431
  • 32-bit support and the PH_LIGHT_ACTION environment variable, build_libs.py now always builds x265. #431
Changelog

Sourced from pillow-heif's changelog.

[1.5.0 - 2026-07-22]

Added

  • Grid(tiled) image encoding: options.GRID_TILE_SIZE option, tile_size parameter for save and grid_tile_size parameter for register_*_opener. #317
  • info["tiling"] dictionary with the grid info for tiled images. #317
  • PH_LIBHEIF_CMAKE_ARGS environment variable for build_libs.py to pass extra cmake arguments to the libheif build.
  • Windows ARM64 wheels.

Changed

  • Minimum required libheif version is 1.23.1.
  • Releases are now tag-triggered and published to PyPI with attestations via Trusted Publishing. #432
  • libheif was updated from the 1.23.0 to 1.23.1 version. #445
  • libde265 was updated from the 1.1.0 to 1.1.1 version. #434

Removed

  • pi-heif package is discontinued, 1.4.0 is its final release. #431
  • 32-bit support and the PH_LIGHT_ACTION environment variable, build_libs.py now always builds x265. #431
Commits
  • 16c3dd8 v1.5.0
  • a14f250 chore(deps): update actions/setup-python action to v7 (#450)
  • 0950e1b chore(deps): update dependency strukturag/libde265 to v1.1.1 (#434)
  • e5ed405 chore(deps): update pypa/gh-action-pypi-publish action to v1.14.1 (#449)
  • 33319a2 chore(deps): update actions/checkout action to v7.0.1 (#451)
  • 7127731 ci: take freshly built libheif plugin for the load test (#452)
  • 44ae662 feat: grid(tiled) image encoding (#436)
  • 034ff6d chore(deps): update dependency strukturag/libheif to v1.23.1 (#445)
  • 179f11e chore(deps): update actions/setup-python action to v6.3.0 (#444)
  • e379737 chore(deps): update actions/cache action to v6 (#443)
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.66.0 to 2.66.1

Release notes

Sourced from sentry-sdk's releases.

2.66.1

Bug Fixes 🐛

Tracing

Internal Changes 🔧

Changelog

Sourced from sentry-sdk's changelog.

2.66.1

Bug Fixes 🐛

Tracing

Internal Changes 🔧

Commits
  • 653a292 Update CHANGELOG.md
  • e20c226 release: 2.66.1
  • 4524b65 fix(tracing): Stop setting NoOpSpan on scope in the streaming trace lifecyc...
  • 2e9f26e ref(tracing): No-op and emit warning in start_transaction with the streamin...
  • 3a50950 fix(tracing): handle exceptions raised within traces_sampler and other callba...
  • b5171b7 ref: Use top-level trace_lifecycle and ignore_spans options in tests (#6855)
  • 17e0348 ref: Use old sampling context format in span streaming (#6848)
  • 2e09497 test: Add streaming tests to test_http_headers (#6785)
  • 9996734 feat(tracing): Send sentry.segment.name.source instead of `sentry.span.sour...
  • 00224f7 remove span streaming docs in changelog (#6831)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the python group with 4 updates
d967258 
Bumps the python group with 4 updates: [ruff](https://github.com/astral-sh/ruff), [certifi](https://github.com/certifi/python-certifi), [pillow-heif](https://github.com/bigcat88/pillow_heif) and [sentry-sdk](https://github.com/getsentry/sentry-python).


Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `pillow-heif` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/bigcat88/pillow_heif/releases)
- [Changelog](https://github.com/bigcat88/pillow_heif/blob/master/CHANGELOG.md)
- [Commits](bigcat88/pillow_heif@v1.4.0...v1.5.0)

Updates `sentry-sdk` from 2.66.0 to 2.66.1
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.66.0...2.66.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pillow-heif
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sentry-sdk
  dependency-version: 2.66.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 23, 2026 05:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 23, 2026
@sonarqubecloud

sonarqubecloud Bot commented Jul 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@vpetersson
vpetersson merged commit dd65a18 into master Jul 27, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-c7abe89f82 branch July 27, 2026 17:51
@vpetersson-bot vpetersson-bot mentioned this pull request Jul 27, 2026
Merged
vpetersson pushed a commit that referenced this pull request Jul 27, 2026
@vpetersson-bot @claude
fix(deps): pin pillow-heif to 1.4.0 to unbreak the armhf build (#3218)
fbe83e9 
* fix(deps): pin pillow-heif to 1.4.0 to keep the armhf build green

pillow-heif 1.5.0 (introduced by the dependabot python-group bump in
#3214) requires libheif >= 1.23.1 to build from source — its
_pillow_heif.c carries `#error "pillow_heif requires libheif >= 1.23.1"`
and includes libheif/heif_tiling.h. Debian trixie ships libheif 1.19.8.

arm64/x86 install a prebuilt pillow-heif wheel, so they never compile and
were unaffected. armhf (pi2/pi3) has no wheel: uv builds from source and
the compile fails, which broke the pi2/pi3 server images and turned the
whole master docker-build matrix red (publish-latest skipped, so the
floating latest-<board> tags went stale and no release could be cut).

Hold at 1.4.0 (the last version that built on armhf; the deployed fleet
already runs it) until trixie carries libheif >= 1.23.1 or a 1.5.x with
armhf wheels lands. Only pillow-heif changes in the lockfile.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HJ3ucEkn62cbgPoisAZ5LQ

* ci(dependabot): stop bumping pillow-heif past 1.4.x

Guard the pin from the previous commit: pillow-heif >= 1.5.0 needs
libheif >= 1.23.1 to build from source, which Debian trixie (1.19.8)
can't satisfy on armhf (no wheel), breaking the pi2/pi3 build legs.
Ignore >= 1.5.0 so dependabot won't re-propose it, while still allowing
1.4.x patch updates. Revisit when trixie carries libheif >= 1.23.1.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HJ3ucEkn62cbgPoisAZ5LQ

---------

Co-authored-by: vpetersson-bot <307551610+vpetersson-bot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vpetersson vpetersson vpetersson approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vpetersson