Bump dictdiffer from 0.9.0 to 0.10.0

[dependabot]

Bumps dictdiffer from 0.9.0 to 0.10.0.

Changelog

Sourced from dictdiffer's changelog.

Changes

Version v0.10.0 (released 2026-07-16)

• chore(setup): migrate from setuptools to hatchling
• chore(workflows): use the centralized GitHub actions
• chore(licenses): update license headers to use SPDX
• diff: fix path_limit with no change (#174)
• merge: support ignore param to diff function

Version 0.9.0 (released 2021-07-22)

• Adds absolute tolerance feature for floats (@​adrien-berchet) (#152)
• Drops support of Python<3.5 (@​adrien-berchet) (#160)
• Adds assert_no_diff helper to assist pytest users (@​joesolly) (#153)
• Migrates CI to gh-actions (@​ParthS007 @​diegodelemos) (#145)
• Removes dependency on pkg_resources (@​eldruin)

Version 0.8.1 (released 2019-12-13)

• Fix invalid diff output for sets. (@​jirikuncar @​danielduhh) (#133 #134)

Version 0.8.0 (released 2019-03-17)

• Respect dot_notation flag in ignore argument (@​yoyonel) (#107)
• Adds argument for toggling dot notation in diff. (@​robinchew)

Version 0.7.2 (released 2019-02-22)

• Two NaN values are considered the same, hence they are not shown in diff output. (#114) (@​t-b)
• Refactors diff method to reduce recursive call stack size. (#112) (@​yoyonel)
• Python porting best practice use feature detection instead of version detection to save an import and pass both PyLint and Flake8 tests with neither 'pragma' nor 'noqa'. (@​cclauss)

Version 0.7.1 (released 2018-05-04)

• Resolves issue with keys containing dots. (#101)

Version 0.7.0 (released 2017-10-16)

• Fixes problem with diff results that reference the original structure by introduction of deepcopy for all possibly unhashable items. Thus the diff does not change later when the diffed structures change.
• Adds new option for patching and reverting patches in-place.
• Adds Python 3.6 to test matrix.
• Fixes the ignore argument when it contains a unicode value.

... (truncated)

Commits

• 1e6eb4e release: v0.10.0
• 17f3b94 chore(setup): migrate from setuptools to hatchling
• fde6a4f chore(workflows): use the centralized GitHub actions
• 1ae323e chore(git-blame): ignore the SPDX license header commit
• 1c6111c chore(licenses): update license headers to use SPDX
• bfb5dd4 diff: fix path_limit with no change (#174)
• 6719335 merge: support ignore param to diff function
• b32e4b0 setup: populate python_requires >= 3.5 field
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[rtibblesbot]

🔵 Review posted

Last updated: 2026-08-01 01:15 UTC

[rtibblesbot]

PR #726 — dictdiffer 0.9.0 → 0.10.0 (minor), production dependency (pyproject.toml:38, dictdiffer>=0.8.0). Lockfile-only diff, confined to the dictdiffer block. CI passing on all 12 unit-test jobs (ubuntu/macos/windows × 3.9–3.13) plus the docs build.

Breaking changes: none. Deprecations: none. Security fixes: none. Peer/transitive deps: none — v0.10.0 declares zero unconditional Requires-Dist (all behind docs/numpy/tests extras).

First release in 5 years, so I diffed the published 0.9.0 and 0.10.0 wheels directly. Beyond SPDX license-header rewrites and an import reflow, there are exactly two behavioral edits, both gated behind opt-in parameters:

• diff(..., path_limit=...) no longer emits a spurious CHANGE for equal subtrees (#174)
• Merger.__init__ gains ignore=None, threaded into its internal diff() calls

Neither is reachable here: dictdiffer is imported only in ricecooker/utils/corrections.py:9, and both call sites (corrections.py:522, :546) are bare dictdiffer.diff(node_before, node_after) whose result is only printed. No path_limit, no Merger anywhere in the codebase.

Packaging notes, non-blocking: build backend moved setuptools → hatchling (sdist shrank 31.5 KB → 12.5 KB as tests/docs are no longer packaged), wheel tag narrowed to py3-none-any, and Requires-Python: >=3.7 is now declared. Ricecooker targets 3.9–3.13, so both are satisfied.

No code changes required.

---

@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Ran a dependency-update review pipeline over the version bump:

• Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
• Extracted the changelog and release notes across the version range
• Assessed compatibility with this project's usage and whether any code changes are required
• Treated CI as the primary safety net
• Scaled the review depth to the update's risk
• Chose the verdict from semver risk, changelog findings, and CI status

[rtibbles]

No concerns from changelog or tests.