chore(deps): bump the python group across 1 directory with 17 updates by dependabot[bot] · Pull Request #71 · Neverdecel/CodeRAG

dependabot · 2026-07-28T11:26:53Z

Updates the requirements on lancedb, pylance, pyarrow, pathspec, tree-sitter, tqdm, fastapi, uvicorn, mcp, openai, onnxruntime-gpu, anthropic, ruff, mypy, pre-commit, pytest and setuptools to permit the latest version.
Updates lancedb to 0.34.0

Release notes

Sourced from lancedb's releases.

Python LanceDB v0.34.0

🛠 Breaking Changes

refactor!: drop unused loss field from IndexStatistics by @wjones127 in lancedb/lancedb#3496

fix!: combine repeated where filters with AND instead of replacing by @wjones127 in lancedb/lancedb#3585

🎉 New Features

feat(python): unify sync create_index API to match async API by @wjones127 in lancedb/lancedb#2882

feat(table): route merge_insert through the MemWAL LSM write path by @touch-of-grey in lancedb/lancedb#3354

feat(python): support remote tables in PyTorch dataloaders by @Xuanwo in lancedb/lancedb#3432

feat: add update_field_metadata to edit per-field metadata by @brendanclement in lancedb/lancedb#3482

feat: deprecate replace_field_metadata for update_field_metadata by @brendanclement in lancedb/lancedb#3484

feat(python): support blob modes in query to_pandas by @BubbleCal in lancedb/lancedb#3487

feat(rust): support datafusion expressions for merge insert predicates by @Ar-maan05 in lancedb/lancedb#3444

feat(remote): implement set/unset_lsm_write_spec REST variant by @hamersaw in lancedb/lancedb#3501

feat: add table branch support by @brendanclement in lancedb/lancedb#3490

feat: support checking out a version on a branch by @brendanclement in lancedb/lancedb#3504

feat: support FM-Index scalar index for substring search by @jackye1995 in lancedb/lancedb#3532

feat: adds isin support to the 'Expr' builder by @stumpylog in lancedb/lancedb#3523

feat: expand IndexConfig with rich per-index metadata by @wjones127 in lancedb/lancedb#3497

feat(python): accept Expr in Table.delete and merge when_not_matched_by_source_delete by @stumpylog in lancedb/lancedb#3524

feat: support rename_table on LanceNamespaceDatabase by @nuthalapativarun in lancedb/lancedb#3520

feat(bindings): expose new IndexConfig fields in Python and Node.js by @wjones127 in lancedb/lancedb#3534

feat: skills to connect and update column metadata by @dantasse in lancedb/lancedb#3541

feat: add table branch support to remote tables and Python/TS bindings by @brendanclement in lancedb/lancedb#3540

feat(query): add approx mode to vector queries by @BubbleCal in lancedb/lancedb#3549

feat: send read-freshness signal on the lance-namespace path by @brendanclement in lancedb/lancedb#3551

feat(rust): add blob v2 schema declaration and write path by @geruh in lancedb/lancedb#3528

feat(rust): add blob read and materialization APIs by @geruh in lancedb/lancedb#3562

feat(rust): add OAuth header provider by @jackye1995 in lancedb/lancedb#3579

feat(python): expose OAuth connection config by @jackye1995 in lancedb/lancedb#3586

feat(node): expose OAuth connection config by @jackye1995 in lancedb/lancedb#3587

feat: add skill to work with branches better by @dantasse in lancedb/lancedb#3596

feat: add polars dataframe integration by @westonpace in lancedb/lancedb#3584

feat(remote): monotonic reads via x-lancedb-min-read-version watermark by @jackye1995 in lancedb/lancedb#3597

feat(rust): re-export arrow and datafusion crates from lancedb by @wjones127 in lancedb/lancedb#3576

🐛 Bug Fixes

feat(python): support blob modes in query to_pandas by @BubbleCal in lancedb/lancedb#3487

fix(rerankers/mrr): raise ValueError on empty vector_results list by @devteamaegis in lancedb/lancedb#3469

fix(rerankers): guard against empty vector_results in RRFReranker.rerank_multivector by @devteamaegis in lancedb/lancedb#3467

fix(python): route blob query pandas through scanner by @BubbleCal in lancedb/lancedb#3491

fix(python): make LanceDBClientError pickleable by @hashwnath in lancedb/lancedb#3470

fix(python): run AsyncTable.search embeddings on a dedicated executor by @Ar-maan05 in lancedb/lancedb#3459

fix(python): push down namespace full reads by @BubbleCal in lancedb/lancedb#3516

fix(util): convert numpy scalars in value_to_sql by @devteamaegis in lancedb/lancedb#3522

fix(nodejs): treat NAPI_RS_FORCE_WASI as truthy only when set to 'true' by @nuthalapativarun in lancedb/lancedb#3519

fix: support LargeList label list indexes by @Xuanwo in lancedb/lancedb#3529

... (truncated)

Commits

1545bd4 Bump version: 0.34.0-beta.7 → 0.34.0
589331d Bump version: 0.34.0-beta.6 → 0.34.0-beta.7
56f8565 feat: update lance dependency to v8.0.0
37466a0 Bump version: 0.31.0-beta.5 → 0.31.0-beta.6
bfce8a5 Bump version: 0.34.0-beta.5 → 0.34.0-beta.6
a1261e6 fix(python): average MRR reciprocal ranks over all rankings (#3599)
17c4991 docs(python): add missing parameter documentation for when_matched_update_all...
d889321 fix!: combine repeated where filters with AND instead of replacing (#3585)
8a37f2a feat(rust): re-export arrow and datafusion crates from lancedb (#3576)
f94673a ci: update deprecated GitHub Actions to latest versions (Fixes #3577) (#3608)
Additional commits viewable in compare view

Updates pylance to 9.0.0

Release notes

Sourced from pylance's releases.

v9.0.0

What's Changed

Breaking Changes 🛠

refactor!: rename FMIndexIndexDetails to FMIndexDetails by @westonpace in lance-format/lance#7397

feat(fts)!: add configurable posting block size by @BubbleCal in lance-format/lance#7466

feat(fts)!: make v2 the default index format by @BubbleCal in lance-format/lance#7512

New Features 🎉

feat(namespace-dir): add alter table column operations (add/alter/drop) by @XuQianJin-Stars in lance-format/lance#6273

feat: compile-time feature-gated Rust backtrace for JNI error diagnostics by @summaryzb in lance-format/lance#6365

feat(lance-linalg): runtime SIMD dispatch for pre-Haswell x86_64 from-source builds by @tobocop2 in lance-format/lance#6630

feat(namespace-dir): implement update_table and delete_from_table by @XuQianJin-Stars in lance-format/lance#6923

feat(namespace-dir): implement alter_transaction for DirectoryNamespace by @XuQianJin-Stars in lance-format/lance#6974

feat(mem_wal): support prefiltered LSM vector and FTS search by @touch-of-grey in lance-format/lance#7138

feat(index): support distributed LabelList scalar index builds by @jackye1995 in lance-format/lance#7223

feat(compaction): introduce RowAddrRemap structure to avoid remap OOM caused by HashMap by @zhangyue19921010 in lance-format/lance#7237

feat: support cleanup explain for python and java by @yanghua in lance-format/lance#7248

feat(schema_evolution): allow Dict <-> value-type casts in alter_columns by @valkum in lance-format/lance#7289

feat: add SpillStore trait with local-disk implementation by @wjones127 in lance-format/lance#7311

feat(blob-v2): configure packed blob file max size with field metadata by @jo-migo in lance-format/lance#7322

feat(index): support Utf8View prefixes in SargableQueryParser by @wombatu-kun in lance-format/lance#7351

feat: support COUNT(*) pushdown on stable row id datasets by @wkalt in lance-format/lance#7360

feat(mem-wal): add ShardWriter::abort + Sealed manifest fence for drop-table by @hamersaw in lance-format/lance#7361

feat(mem-wal): add ShardWriter::put_no_wait by @hamersaw in lance-format/lance#7362

feat: add RLE v2 run length widths by @Xuanwo in lance-format/lance#7376

feat: support hamming clustering by @brendanclement in lance-format/lance#7379

feat(file): v2 writer/reader support columns of unequal length by @wjones127 in lance-format/lance#7406

feat(mem_wal): row-level delete via tombstone rows by @hamersaw in lance-format/lance#7417

feat(python): add list_with_delimiter, delete_file, and read_range to LanceFileSession by @jmhsieh in lance-format/lance#7426

feat(python): expose fragment-reuse remap and delete-by-offset by @wkalt in lance-format/lance#7438

feat(index): read a column's min/max from ZoneMap without a scan by @Ali2Arslan in lance-format/lance#7463

feat: add ICU split tokenizer variant by @Xuanwo in lance-format/lance#7474

feat(mem_wal): tombstone-preserving point lookup by @hamersaw in lance-format/lance#7482

feat(mem_wal): non-blocking ShardWriter::delete_no_wait by @hamersaw in lance-format/lance#7483

feat(bitpacking): add owned bitpacking codecs by @BubbleCal in lance-format/lance#7496

feat(io): publish object store metrics via the metrics crate by @wjones127 in lance-format/lance#7533

feat: data overlay files — model, feature flag, and write/commit path by @wjones127 in lance-format/lance#7535

feat: resolve data overlay files on the take (and scan) read path by @wjones127 in lance-format/lance#7536

feat(python): expose Lance metrics via OpenTelemetry by @wjones127 in lance-format/lance#7537

feat(python): expose DataOverlay commit operation by @wjones127 in lance-format/lance#7540

feat: add blob write preparation API by @Xuanwo in lance-format/lance#7558

feat: support update with blob encoding column by @nyl3532016 in lance-format/lance#7579

feat(fts): impact skip data for posting lists by @BubbleCal in lance-format/lance#7602

feat: support per-base storage options with base_. prefix by @jackye1995 in lance-format/lance#7608

feat: support multi-base tables in merge insert with target base routing by @jackye1995 in lance-format/lance#7610

feat(python): expose MemWAL shard delete by @u70b3 in lance-format/lance#7649

feat: compress RLE child buffers by @Xuanwo in lance-format/lance#7663

feat: support list blob scans by @Xuanwo in lance-format/lance#7664

feat: support segment selection in pylance prewarm by @jackye1995 in lance-format/lance#7677

... (truncated)

Commits

1dd3a46 chore: release version 9.0.0
e4650e9 chore: release candidate 9.0.0-rc.2
224430b chore(python): python 3.14 support (#7728)
17d3609 feat: add batch blob range reads (#7864)
3956a55 fix(fts): use v3 as the capability gate (#7866)
d708253 perf: plan take operations through FilteredReadExec's range-read path (#7672)
2d9e081 chore(deps): bump the cargo group across 1 directory with 12 updates (#7858)
6e02515 fix(fts): restore format version environment fallback (#7855)
fee1f3c feat: add code analyzer for FTS (#7681)
0a32ec9 fix(python): allow blob writer cleanup across threads (#7827)
Additional commits viewable in compare view

Updates pyarrow to 25.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.0

Release Notes URL: https://arrow.apache.org/release/25.0.0.html

Commits

59bea6e MINOR: [Release] Update versions for 25.0.0
381fab6 MINOR: [Release] Update .deb/.rpm changelogs for 25.0.0
7f72d5b MINOR: [Release] Update CHANGELOG.md for 25.0.0
fe2f85c GH-50336: [Release][Archery] Fix archery GitHub integration for release scrip...
c658548 GH-50293: [CI] Run check-labels for all triggers to avoid cancelling further ...
f83c8ca GH-50330: [C++][R][Parquet] Add missing typename in RleBitPackedDecoderGetRun...
35e0f63 GH-50318: [R][CI] Install missing libpng-dev for test-r-linux-as-cran (#50328)
61ca7a9 GH-50295: [C++][R] #include <ranges> in vector_select_k.cc breaks macOS CRAN ...
1b6edb8 GH-50291: [Python][Packaging] Stop using nightly build dependencies for build...
e183ea9 MINOR: [Docs] Add Timestamp With Offset to canonical extension types status (...
Additional commits viewable in compare view

Updates pathspec to 1.1.1

Release notes

Sourced from pathspec's releases.

v1.1.1

Release v1.1.1. See CHANGES.rst.

Changelog

Sourced from pathspec's changelog.

1.1.1 (2026-04-26)

Improvements:

Improved type checking with mypy and pyright.

Bug fixes:

Fixed typing on PathSpec[TPattern] to PathSpec[TPattern_co].

Added missing variant type-hint type[Pattern] to PathSpec.from_lines() parameter pattern_factory.

Fixed possible type error when using + and += operators on PathSpec.

1.1.0 (2026-04-22)

New features:

Issue [#108](https://github.com/cpburnz/python-pathspec/issues/108)_: Specialize pattern type for PathSpec as PathSpec[TPattern] for better debugging of PathSpec().patterns.

Bug fixes:

Issue [#93](https://github.com/cpburnz/python-pathspec/issues/93)_: Git discards invalid range notation. GitIgnoreSpecPattern now discards patterns with invalid range notation like Git.

Pull [#106](https://github.com/cpburnz/python-pathspec/issues/106)_: Fix escape() not escaping backslash characters.

Improvements:

Pull [#110](https://github.com/cpburnz/python-pathspec/issues/110)_: Nicer debug print outs (and str for regex pattern).

.. _Pull [#106](https://github.com/cpburnz/python-pathspec/issues/106): cpburnz/python-pathspec#106 .. _Issue [#108](https://github.com/cpburnz/python-pathspec/issues/108): cpburnz/python-pathspec#108 .. _Pull [#110](https://github.com/cpburnz/python-pathspec/issues/110): cpburnz/python-pathspec#110

1.0.4 (2026-01-26)

Bug fixes:

Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103)_: Using re2 fails if pyre2 is also installed.

.. _Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103): cpburnz/python-pathspec#103

1.0.3 (2026-01-09)

Bug fixes:

... (truncated)

Commits

ecf71a9 Release v1.1.1
6727491 Improve type checking with mypy and pyright
c9249c8 Release v1.1.0
a1abeba Test Iron Proxy for CI
0b04dae Test Iron Proxy for CI
ccaedca Test Iron Proxy for CI
06391d8 Test Iron Proxy for CI
45907bf Test Iron Proxy for CI
0d7c7de Pin all Github actions
36fadda Specialize patterns
Additional commits viewable in compare view

Updates tree-sitter to 0.26.0

Release notes

Sourced from tree-sitter's releases.

v0.26.0

Breaking changes are marked with !.

Additions:

Point.edit()

Point.__repr__()

QueryCursor.set_containing_byte_range()

QueryCursor.set_containing_point_range()

Range.edit()

tree_sitter.__version__

Removals:

Language.version: use Language.abi_version !

Language.query(source): use Query(language, source) !

Parser.timeout_micros: use the progress_callback in parse() !

QueryCursor.timeout_micros: use the progress_callback in matches() or captures() !

Changes:

Point is a tuple subclass rather than a namedtuple object

Commits

a9e753e ci(pypi): skip riscv64 tests properly
eeababc chore: release 0.26.0
dac834e fix(node): fix reference leak
bdddb61 build: bump tree-sitter-rust from 0.24.1 to 0.24.2
baa5fd8 ci: bump the actions group across 1 directory with 2 updates
c680e3b build: bump tree_sitter/core from cd5b087 to 7f53486
2d3fb3a ci: bump actions/upload-pages-artifact from 4 to 5 in the actions group
bae0829 build: bump tree-sitter-rust from 0.24.0 to 0.24.1
d99f796 build: bump tree_sitter/core from 6f2e8a6 to cd5b087
a9282df build: bump tree_sitter/core from cd4b6e2 to 6f2e8a6
Additional commits viewable in compare view

Updates tqdm to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

contrib.concurrent: major improvements

support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)

fix total based on shortest iterable length (#1473)

use default max_workers (#1543 <- #1530, #1518)

support timeout, buffersize (#1576)

improve ETA (#1708 <- #1161)

update as_completed (#1709 <- #1565)

add tqdm.concurrent.intepreter_map (#1777)

asyncio: support iterables with only __aiter__ (#1714 <- #1686)

support reset(float("inf")) (#1783 <- #1781, #651)

framework: test & reduce wheel size (#1782)

Commits

96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
c27393e misc tidy
061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
9fc160b Update how we check for interpreter_map support in the tests
b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
16d5486 Add support for nested progress bars
9f5890f Add initial implementation for interpreter_map
321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
4664b57 minor tidy
426a098 Treat inf total as unknown in reset() too
Additional commits viewable in compare view

Updates fastapi to 0.140.8

Release notes

Sourced from fastapi's releases.

0.140.8

Fixes

🐛 Fix stream item type lost when using include_router(). PR #15077 by @alex-raw.

Commits

773342f 🔖 Release version 0.140.8 (#16088)
fd55790 📝 Update release notes
ad03e11 🐛 Fix stream item type lost when using include_router() (#15077)
98b12fe 🔖 Release version 0.140.7 (#16078)
e772894 📝 Update release notes
24c2a9f ⬆️ Upgrade latest-changes to 0.7.1 (#16077)
add1d26 📝 Update release notes
7bcb78d ⚡️ Avoid flattening dependencies for OpenAPI (#16076)
87095aa 📝 Update release notes
3d3c691 👷 Add OpenAPI dependency benchmarks (#16075)
Additional commits viewable in compare view

Updates uvicorn to 0.51.0

Release notes

Sourced from uvicorn's releases.

Version 0.51.0

What's Changed

Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @Kludex in Kludex/uvicorn#3025

Remove colorama from the standard extra by @Kludex in Kludex/uvicorn#3027

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Changelog

Sourced from uvicorn's changelog.

0.51.0 (July 8, 2026)

Added

Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)

Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)

Default --ws auto to websockets-sansio when websockets is installed (#2985)

Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)

Build a fresh asgi scope dict per request (#2977)

Cache the asgi scope sub-dict per connection (#2976)

Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)

Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

Replace click.style with an internal ANSI style helper (#2981)

Deprecated

Deprecate the legacy websockets implementation; use websockets-sansio or wsproto instead (#2985)

0.49.0 (June 3, 2026)

Changed

Bump httptools minimum version to 0.8.0 (#2962)

Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

... (truncated)

Commits

e4d0b05 Version 0.51.0 (#3028)
944e43d Remove colorama from the standard extra (#3027)
2e78770 Restart workers with overlap on SIGHUP for near-zero-downtime reloads (#3025)
a1b570c Version 0.50.2 (#3022)
83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
b4d0116 Version 0.50.1 (#3020)
2a9151d Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansi...
1bf3ab4 Cover the excluded-directory branch in FileFilter with a direct test (#3014)
837b5f9 Deflake multiprocess, reload, and signal supervisor tests (#2975)
21d2c16 Version 0.50.0 (#3013)
Additional commits viewable in compare view

Updates mcp to 1.28.1

Commits

777b8d0 [v1.x] Support TransportSecuritySettings in the WebSocket server transport (#...
4720467 [v1.x] Set Development Status classifier to Production/Stable (#2976)
6df3d73 [v1.x] Buffer per-request StreamableHTTP streams; store priming event before ...
32d3290 [v1.x] Pass a list to parametrize in test_docs_examples (pytest 9.1.0 compat)...
0dca751 [v1.x] Deflake the child process cleanup tests (#2839)
52258a9 [v1.x] Add a v2 status banner to the README (#2835)
b8f4917 [v1.x] Deprecate the WebSocket transport and the experimental tasks entry poi...
2309e5e fix: omit null optional fields from task result payloads (#2809)
494eb11 [v1.x] Support Python 3.14 (#2769)
6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
Additional commits viewable in compare view

Updates openai to 2.49.0

Release notes

Sourced from openai's releases.

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

require Python 3.10 and automate version reviews (#3537) (d4c151d)

Changelog

Sourced from openai's changelog.

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

api: accept None for prompt_cache_key/safety_identifier (36820e6)

api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)

stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (5a00941)

api: add owner_project_access to APIKeyListParams (f589d04)

api: manual updates (980f176)

api: manual updates (2eae984)

Bug Fixes

api: preserve generated type compatibility (00bd72a)

api: remove beta annotation compatibility aliases (99dbd15)

2.45.0 (2026-07-09)

... (truncated)

Commits

6ba31bc release: 2.49.0 (#3539)
90483ad test: support a hermetic local API reference (#3542)
d4c151d feat: require Python 3.10 and automate version reviews (#3537)
8a6adcb release: 2.48.0
cbd2fba feat(api): add support for spend_limit admin apis
00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
e67afa8 release: 2.47.0
e1925e9 feat(client): Add experimental runtime support for HTTPX2 clients (#3524)
7f4edb6 feat(stlc): configurable CI runner and private-production-repo support in wor...
d4dceb2 fix(deps): require patched aiohttp on Python 3.10+ (#3515)
Additional commits viewable in compare view

Updates onnxruntime-gpu to 1.28.0

Release notes

Sourced from onnxruntime-gpu's releases.

ONNX Runtime v1.28.0

Announcements & Breaking Changes

Upgraded to ONNX 1.22.0 and protobuf 6.33.5 (#28754, #29606, #28967). Graph optimizer opset version checks were updated accordingly (#28966).

cuDNN and cuFFT are now optional at runtime for the CUDA EP, and nvrtc is no longer linked, which significantly reduces the required CUDA redistributable footprint (#29252, #29808, #29705, #29620).

An experimental C/C++ API surface was introduced. OrtModelPackageApi now lives in the experimental C API and may change in future releases (#28746, #29142, #28990).

Deprecated / removed:

SkipLayerNorm strict mode is deprecated (#29388).

The TensorRT fused causal attention kernels were removed from the CUDA EP (#29143).

The dynamic WGSL generator (duktape/Node) path was removed in favor of the Python wgsl-gen implementation (#29141, #28355).

CUDA_QUANT_PREPROCESS is off by default (#29687).

NPM packages are now published from the CUDA 13 pipeline (#28773).

The CUDA 12.8 package architecture list was refreshed for this release (#29711).

Security Fixes

Memory safety & input validation

Hardened the ORT FlatBuffer model loader against malformed buffers, and removed now-redundant table offset validation (#28186, #29068)

Fixed type confusion in raw-pointer bind_input causing an out-of-bounds write (#28839)

Fixed out-of-bounds pointer in TensorAt for sub-byte packed types (#28973)

Fixed arbitrary memory read, out-of-bounds dereference, and other OOB accesses in kernels (#28991, #29011,

Updates the requirements on [lancedb](https://github.com/lancedb/lancedb), [pylance](https://github.com/lance-format/lance), [pyarrow](https://github.com/apache/arrow), [pathspec](https://github.com/cpburnz/python-pathspec), [tree-sitter](https://github.com/tree-sitter/py-tree-sitter), [tqdm](https://github.com/tqdm/tqdm), [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [mcp](https://github.com/modelcontextprotocol/python-sdk), [openai](https://github.com/openai/openai-python), [onnxruntime-gpu](https://github.com/microsoft/onnxruntime), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [pre-commit](https://github.com/pre-commit/pre-commit), [pytest](https://github.com/pytest-dev/pytest) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version. Updates `lancedb` to 0.34.0 - [Release notes](https://github.com/lancedb/lancedb/releases) - [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md) - [Commits](lancedb/lancedb@python-v0.33.0...python-v0.34.0) Updates `pylance` to 9.0.0 - [Release notes](https://github.com/lance-format/lance/releases) - [Changelog](https://github.com/lance-format/lance/blob/main/release_process.md) - [Commits](lance-format/lance@v0.10.0...v9.0.0) Updates `pyarrow` to 25.0.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@go/v16.0.0...apache-arrow-25.0.0) Updates `pathspec` to 1.1.1 - [Release notes](https://github.com/cpburnz/python-pathspec/releases) - [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst) - [Commits](cpburnz/python-pathspec@v0.12.0...v1.1.1) Updates `tree-sitter` to 0.26.0 - [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases) - [Commits](tree-sitter/py-tree-sitter@v0.25.2...v0.26.0) Updates `tqdm` to 4.70.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.68.2...v4.70.0) Updates `fastapi` to 0.140.8 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.137.1...0.140.8) Updates `uvicorn` to 0.51.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.49.0...0.51.0) Updates `mcp` to 1.28.1 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.9.0...v1.28.1) Updates `openai` to 2.49.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.41.1...v2.49.0) Updates `onnxruntime-gpu` to 1.28.0 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md) - [Commits](microsoft/onnxruntime@v1.17.0...v1.28.0) Updates `anthropic` to 0.120.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-python@v0.109.2...v0.120.0) Updates `ruff` to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.17...0.16.0) Updates `mypy` to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.1.0...v2.3.0) Updates `pre-commit` to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.1.0...9.1.1) Updates `setuptools` to 83.0.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v82.0.1...v83.0.0) --- updated-dependencies: - dependency-name: lancedb dependency-version: 0.34.0 dependency-type: direct:production dependency-group: python - dependency-name: pylance dependency-version: 9.0.0 dependency-type: direct:production dependency-group: python - dependency-name: pyarrow dependency-version: 25.0.0 dependency-type: direct:production dependency-group: python - dependency-name: pathspec dependency-version: 1.1.1 dependency-type: direct:production dependency-group: python - dependency-name: tree-sitter dependency-version: 0.26.0 dependency-type: direct:production dependency-group: python - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production dependency-group: python - dependency-name: fastapi dependency-version: 0.140.8 dependency-type: direct:development dependency-group: python - dependency-name: uvicorn dependency-version: 0.51.0 dependency-type: direct:development dependency-group: python - dependency-name: mcp dependency-version: 1.28.1 dependency-type: direct:development dependency-group: python - dependency-name: openai dependency-version: 2.49.0 dependency-type: direct:development dependency-group: python - dependency-name: onnxruntime-gpu dependency-version: 1.28.0 dependency-type: direct:development dependency-group: python - dependency-name: anthropic dependency-version: 0.120.0 dependency-type: direct:development dependency-group: python - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development dependency-group: python - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development dependency-group: python - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development dependency-group: python - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development dependency-group: python - dependency-name: setuptools dependency-version: 83.0.0 dependency-type: direct:development dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

codecov-commenter · 2026-07-28T11:28:28Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 28, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the python group across 1 directory with 17 updates - #71

chore(deps): bump the python group across 1 directory with 17 updates#71
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-9e56928ee0

dependabot Bot commented on behalf of github Jul 28, 2026

Uh oh!

codecov-commenter commented Jul 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 28, 2026

Python LanceDB v0.34.0

🛠 Breaking Changes

🎉 New Features

🐛 Bug Fixes

v9.0.0

What's Changed

Breaking Changes 🛠

New Features 🎉

Apache Arrow 25.0.0

v1.1.1

1.1.1 (2026-04-26)

1.1.0 (2026-04-22)

1.0.4 (2026-01-26)

1.0.3 (2026-01-09)

v0.26.0

Additions:

Removals:

Changes:

tqdm v4.70.0 stable

0.140.8

Fixes

Version 0.51.0

What's Changed

0.51.0 (July 8, 2026)

Added

Removed

0.50.2 (July 6, 2026)

Fixed

0.50.1 (July 6, 2026)

Fixed

0.50.0 (July 4, 2026)

Changed

Deprecated

0.49.0 (June 3, 2026)

Changed

0.48.0 (May 24, 2026)

v2.49.0

2.49.0 (2026-07-27)

Features

2.49.0 (2026-07-27)

Features

2.48.0 (2026-07-23)

Features

2.47.0 (2026-07-21)

Features

Bug Fixes

2.46.0 (2026-07-17)

Features

Bug Fixes

2.45.0 (2026-07-09)

ONNX Runtime v1.28.0

Announcements & Breaking Changes

Security Fixes

Memory safety & input validation

Uh oh!

codecov-commenter commented Jul 28, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant