Skip to content

chore(weave): bump the core group across 1 directory with 5 updates#6493

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/uv/master/core-6136296ff7
Closed

chore(weave): bump the core group across 1 directory with 5 updates#6493
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/uv/master/core-6136296ff7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026 •
edited
Loading

Bumps the core group with 5 updates in the / directory:

Package From To
wandb 0.23.0 0.25.1
pydantic 2.12.4 2.12.5
tenacity 9.1.2 9.1.4
jsonschema 4.25.1 4.26.0
clickhouse-connect 0.11.0 0.15.0

Updates wandb from 0.23.0 to 0.25.1

Release notes

Sourced from wandb's releases.

v0.25.1

What's Changed

Added

Fixed

v0.25.0

What's Changed

Notable Changes

This version drops support for Python 3.8.

Added

Changed

Fixed

v0.24.2

What's Changed

Added

... (truncated)

Changelog

Sourced from wandb's changelog.

[0.25.1] - 2026-03-10

Added

Fixed

[0.25.0] - 2026-02-12

Notable Changes

This version drops support for Python 3.8.

Added

Changed

Fixed

[0.24.2] - 2026-02-04

Added

Fixed

... (truncated)

Commits
  • f35ff86 Bump version and update CHANGELOG for release 0.25.1
  • db0c863 chore: use json_util in object3d to speed up serialization when using orjson ...
  • 9b5eb64 chore: update Python requirements (#11380)
  • aa464b2 chore: bump charm.land/bubbletea/v2 from 2.0.1 to 2.0.2 in /core (#11475)
  • 8c34050 chore: bump charm.land/lipgloss/v2 from 2.0.0 to 2.0.1 in /core (#11474)
  • e0cca89 chore: bump google.golang.org/api from 0.269.0 to 0.270.0 in /core (#11473)
  • b8115c9 chore: bump github.com/mattn/go-runewidth from 0.0.20 to 0.0.21 in /core (#11...
  • 4466ad0 chore: prevent test_wb_logging_last_resort from breaking due to warnings (#11...
  • d134e4b chore: bump golang.org/x/sync from 0.19.0 to 0.20.0 in /core (#11466)
  • 9f0a9fc chore: bump golang.org/x/time from 0.14.0 to 0.15.0 in /core (#11465)
  • Additional commits viewable in compare view

Updates pydantic from 2.12.4 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

  • Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
  • Several updates to the documentation by @​Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

  • Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
  • Several updates to the documentation by @​Viicos.
Commits
  • bd2d0dd Prepare release v2.12.5
  • 7d0302e Document security implications when using create_model()
  • e9ef980 Fix typo in Standard Library Types documentation
  • f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
  • a76c1aa Update documentation about JSON Schema
  • 8cbc72c Add documentation about custom __init__()
  • 99eba59 Add additional test for FieldInfo.get_default()
  • c710769 Special case MISSING sentinel in smart_deepcopy()
  • 20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
  • c86515a Update parts of the model and revalidate_instances documentation
  • See full diff in compare view

Updates tenacity from 9.1.2 to 9.1.4

Release notes

Sourced from tenacity's releases.

9.1.4

What's Changed

Full Changelog: jd/tenacity@9.1.3...9.1.4

9.1.3

What's Changed

New Contributors

Full Changelog: jd/tenacity@9.1.2...9.1.3

Commits
  • d4e868d Fix retry() annotations with async sleep= function (#555)
  • 24415eb support async sleep for sync fn (#551)
  • 3bf33b4 chore: drop Python 3.9 support (EOL) (#552)
  • 7027da3 chore(deps): bump the github-actions group with 2 updates (#550)
  • 21ae7d0 docs: fix syntax error in wait_chain docstring example (#548)
  • ef12c9e chore(deps): bump actions/checkout in the github-actions group (#547)
  • c35a4b3 chore(deps): bump the github-actions group with 2 updates (#545)
  • e792bba ci: fix mypy (#546)
  • 0f55245 ci: remove reno requirements (#542)
  • 815c34f feat(wait): add wait_exception strategy (#541)
  • Additional commits viewable in compare view

Updates jsonschema from 4.25.1 to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).
Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates clickhouse-connect from 0.11.0 to 0.15.0

Release notes

Sourced from clickhouse-connect's releases.

v0.15.0

Improvements

  • Comprehensive ClickHouse JOIN support in SQLAlchemy via ch_join() with all strictness/distribution modifiers and USING syntax (#635, #636)
  • Multi-column array_join() for parallel array expansion (#633)
  • Add missing Replicated engine variants (ReplicatedReplacingMergeTree, etc.) (#687)
  • Lazy imports for numpy, pandas, pyarrow, and polars, ~4x faster bare import time (#589)

Bug Fixes

  • Fix .final() and .sample() silently overwriting each other when chained (#658)
  • Fix sqlalchemy.values() to emit ClickHouse VALUES table function syntax (#681)
  • Fix GraphiteMergeTree to properly quote config_section argument

Other

  • Remove py.typed marker that was causing false type errors for mypy/pyright users (#691)

Full Changelog: ClickHouse/clickhouse-connect@v0.14.1...v0.15.0

v0.14.1

Bug fixes

  • Fixed JSON and Dynamic column read paths to properly decode shared variant data instead of returning raw binary with discriminator byte prefixes. Closes #599, #615, #674
  • Fixed empty ORM/DBAPI SELECT results so cursor.description is still populated when ClickHouse Native format returns no data blocks. This restores correct handling for empty result sets, including parameterized and limited queries. Closes #675
  • Reenabled the default Cython runtime path so compiled driverc modules are used again unless CLICKHOUSE_CONNECT_USE_C=0 is exoplicitly set. Closes #676

Full Changelog: ClickHouse/clickhouse-connect@v0.14.0...v0.14.1

v0.14.0

High level notes

This release is primarily focused on preparing the path to 1.0.0. It introduces a handful of breaking changes and deprecation warnings for APIs that will be removed or finalized in 1.0.0. If your code uses any of the deprecated parameters, you'll now see DeprecationWarnings with clear migration guidance and highly recommend addressing these before upgrading to 1.0.0 when it ships.

Breaking Changes

  • apply_server_timezone renamed to tz_source. Options are "auto" (the default), "server", or "local". The old parameter currently still works with a deprecation warning. ClickHouse/clickhouse-connect#670
  • utc_tz_aware renamed to tz_mode. Options are "naive_utc" (the default), "aware", or "schema". The old parameter still currently still works with a deprecation warning. ClickHouse/clickhouse-connect#664
  • Removed Object('json') type. This was a legacy experimental JSON type has been removed in favor of the new JSON type in ClickHouse. ClickHouse/clickhouse-connect#666

Deprecations

  • Pandas 1.x support is deprecated and will be removed in 1.0.0. ClickHouse/clickhouse-connect#667
  • There's a async-native client based on clickhouse-connect v0.11.0 that is available for testing via pip install clickhouse_connect[async]==0.12.0rc1. A FutureWarning advertising this will now be emitted on creation of the (to be legacy) async client. ClickHouse/clickhouse-connect#672

Experimental

Improvements

New Contributors

Full Changelog: ClickHouse/clickhouse-connect@v0.13.0...v0.14.0

... (truncated)

Changelog

Sourced from clickhouse-connect's changelog.

0.15.0, 2026-03-26

Improvements

  • SQLAlchemy: Comprehensive ClickHouse JOIN support via the new ch_join() helper. All strictness modifiers (ALL, ANY, SEMI, ANTI, ASOF), the GLOBAL distribution modifier, and explicit CROSS JOIN are now available. Use with select_from() to generate ClickHouse-specific join syntax like GLOBAL ALL LEFT OUTER JOIN. Closes #635
  • SQLAlchemy: array_join() now supports multiple columns for parallel array expansion. Pass a list of columns and a matching list of aliases to generate ARRAY JOIN col1 AS a, col2 AS b, col3 AS c. Single-column usage is unchanged. Closes #633
  • SQLAlchemy: ch_join() now supports USING syntax via the new using parameter. Pass a list of column name strings to generate USING (col1, col2) instead of ON. This is important for FULL OUTER JOIN where USING merges the join column correctly while ON produces default values (0, '') for unmatched sides. Closes #636
  • SQLAlchemy: Add missing Replicated table engine variants: ReplicatedReplacingMergeTree, ReplicatedCollapsingMergeTree, ReplicatedVersionedCollapsingMergeTree, and ReplicatedGraphiteMergeTree. Closes #687
  • Lazy imports for optional dependencies (numpy, pandas, pyarrow, polars). If installed, these heavy libraries are no longer imported at import clickhouse_connect time. They are only imported when features that need them are actually used. The C/Numpy optimization bridge is also deferred. This speeds up bare import time of clickhouse-connect about 4X in environments where all four are installed. Closes #589

Other

  • Remove py.typed marker file. The package does not have comprehensive type annotations, so the PEP 561 marker was causing false type errors for mypy/pyright users. Closes #691

Bug Fixes

  • SQLAlchemy: Fix .final() and .sample() silently overwriting each other when chained. Both methods now store modifiers as custom attributes on the Select instance and render them during compilation, replacing the previous with_hint() approach that only allowed one hint per table. Chaining in either order (e.g. select(t).final().sample(0.1)) correctly produces FROM t FINAL SAMPLE 0.1. Also fixes rendering for aliased tables (FROM t AS u FINAL) and supports explicit table targeting in joins. Fixes #658
  • SQLAlchemy: Fix sqlalchemy.values() to generate ClickHouse's VALUES table function syntax. The compiler now emits VALUES('col1 Type1, col2 Type2', ...) with the column structure as the first argument, instead of the standard SQL form that places column names after the alias. Generic SQLAlchemy types are mapped to ClickHouse equivalents (e.g. Integer to Int32, String to String). Also handles CTE usage by wrapping in SELECT * FROM VALUES(...). Fixes #681
  • SQLAlchemy: Fix GraphiteMergeTree and ReplicatedGraphiteMergeTree to properly single-quote the config_section argument as ClickHouse requires.

0.14.1, 2026-03-11

Bug Fixes

  • Fix JSON and Dynamic column read paths to properly decode shared variant data instead of returning raw binary with discriminator byte prefixes. Shared data values, used when paths exceed max_dynamic_paths or types exceed max_dynamic_types are now decoded from ClickHouse's binary variant encoding. Scalar types like integers, floats, strings, booleans, and nulls as well as nested objects are now fully decoded. Compound types like Array, Tuple, Map, DateTime, Date, Decimal, and UUID are not yet decoded and will be returned as raw bytes. Fixes #599, #615, and #674
  • SQLAlchemy: Fixed empty ORM/DBAPI SELECT results so cursor.description is still populated when ClickHouse Native format returns no data blocks. This restores correct handling for empty result sets, including parameterized and limited queries. Closes #675
  • Restore the default Cython runtime path so compiled driverc modules are used again unless CLICKHOUSE_CONNECT_USE_C=0 is set. Fix C/Python parity issues in streaming exception handling, FixedString string reads, nullable array helpers, and numpy conversion helpers, and expand CI and unit parity coverage to keep the optimized and pure-Python paths in sync. Addresses #676
  • Simplify pivot in the Cython data conversion module to use tuple(zip(*...)) instead of a manual tuple-building loop which matches the pure-Python implementation and provides significant insert speedup.

0.14.0, 2026-03-09

Breaking Changes

  • Renamed apply_server_timezone parameter to tz_source across Client and HttpClient. The new tz_source parameter accepts string values: "auto" (default, was None), "server" (was True or "always"), and "local" (was False). The old apply_server_timezone parameter is still accepted but emits a DeprecationWarning and will be removed in 1.0. Passing both tz_source and apply_server_timezone raises ProgrammingError. The "always" value (which had no distinct runtime behavior from True) maps to "server".
  • Renamed utc_tz_aware parameter to tz_mode across Client, QueryContext, and all query methods. The new tz_mode parameter accepts string values: "naive_utc" (default, was False), "aware" (was True), and "schema" (unchanged). The old utc_tz_aware parameter is still accepted but emits a DeprecationWarning and will be removed in 1.0. Passing both tz_mode and utc_tz_aware raises ProgrammingError. Closes #654
  • Removed the deprecated Object('json') type. This was the legacy experimental JSON type that has been superseded by the new JSON type in ClickHouse. Closes #556

Deprecations

  • Pandas 1.x support is now deprecated and will be removed in v1.0.0. A DeprecationWarning is emitted at import time for pandas 1.x users.

Improvements

  • Added support for the SAMPLE clause in SQLAlchemy statements. Note: Due to a SQLAlchemy limitation, only one hint (SAMPLE or FINAL) can be applied per table; chaining both will silently ignore one. For now, this change enables use of sample(), but chaining with final() is not yet supported. Closes #634
  • Experimental: Added Python 3.14 free-threading (cp314t) wheel builds for all platforms. The full test suite currently (as of 2 MAR, 2026) passes under free-threaded Python, but is not added to the CI test matrix at this time nor has it been otherwise tested to any degree. Free-threading support should be considered experimental with no guarantees of correctness at this time. Closes #573

0.13.0, 2026-02-26

Improvements

  • BREAKING CHANGE: Implement native write path for Variant data type with type-aware dispatching. Previously, all values inserted into a Variant column were stringified and sent to the server, which would store them in the String member if present, or attempt server-side conversion otherwise. Values are now serialized using their native ClickHouse types client-side (e.g. inserting 100 into Variant(Int64, String) stores Int64(100) instead of String("100")). Key changes:
    • Values that don't match any variant member now raise DataError instead of being stringified and delegated to the server.
    • A typed_variant(value, 'TypeName') helper is provided for cases where automatic dispatch

... (truncated)

Commits
  • c4c2a4e 0.15.0 release prep (#694)
  • cd8cbf4 Joe/remove pytyped and other small cleanup issues (#693)
  • 05859ef implement lazy loading of heavy optional deps (#689)
  • 611161f SQLAlchemy core improvements (#688)
  • 5fd16eb simple ddl support for a few new engine types (#690)
  • a0e621c add Peter for reviews (#682)
  • c40bbac 0.14.1 bugfix release prep (#680)
  • 323b768 Reenable default Cython runtime path and reestablish C/Python parity (#679)
  • 0114948 fix sqlalchemy empty result metadata for orm queries (#678)
  • 60ca78c Fix shared variant decoding for JSON and Dynamic columns (#677)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 30, 2026
@dependabot dependabot Bot requested a review from a team as a code owner March 30, 2026 16:43
@dependabot dependabot Bot added python:uv Pull requests that update python:uv code dependencies Pull requests that update a dependency file labels Mar 30, 2026
@wandbot-3000
Copy link
Copy Markdown

wandbot-3000 Bot commented Mar 30, 2026

Preview this PR with FeatureBee: https://beta.wandb.ai/?betaVersion=40b16f53825cbfe6ef5b759eeae0c4ac6199e6b2

@dependabot dependabot Bot changed the title chore(weave): bump the core group with 5 updates chore(weave): bump the core group across 1 directory with 5 updates Mar 30, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/master/core-6136296ff7 branch from 7c666ca to 5f15b61 Compare March 30, 2026 18:44
@dependabot
chore(weave): bump the core group with 5 updates
47b2613 
Bumps the core group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [wandb](https://github.com/wandb/wandb) | `0.23.0` | `0.25.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.4` | `2.12.5` |
| [tenacity](https://github.com/jd/tenacity) | `9.1.2` | `9.1.4` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.1` | `4.26.0` |
| [clickhouse-connect](https://github.com/ClickHouse/clickhouse-connect) | `0.11.0` | `0.15.0` |


Updates `wandb` from 0.23.0 to 0.25.1
- [Release notes](https://github.com/wandb/wandb/releases)
- [Changelog](https://github.com/wandb/wandb/blob/main/CHANGELOG.md)
- [Commits](wandb/wandb@v0.23.0...v0.25.1)

Updates `pydantic` from 2.12.4 to 2.12.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.4...v2.12.5)

Updates `tenacity` from 9.1.2 to 9.1.4
- [Release notes](https://github.com/jd/tenacity/releases)
- [Commits](jd/tenacity@9.1.2...9.1.4)

Updates `jsonschema` from 4.25.1 to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.1...v4.26.0)

Updates `clickhouse-connect` from 0.11.0 to 0.15.0
- [Release notes](https://github.com/ClickHouse/clickhouse-connect/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-connect/blob/main/CHANGELOG.md)
- [Commits](ClickHouse/clickhouse-connect@v0.11.0...v0.15.0)

---
updated-dependencies:
- dependency-name: wandb
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: core
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: core
- dependency-name: tenacity
  dependency-version: 9.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: core
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: core
- dependency-name: clickhouse-connect
  dependency-version: 0.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: core
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/master/core-6136296ff7 branch from 5f15b61 to 47b2613 Compare March 30, 2026 22:01
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 6, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 6, 2026
@dependabot dependabot Bot deleted the dependabot/uv/master/core-6136296ff7 branch April 6, 2026 13:27
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants