Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

deps(core): bump the all group in /core/wren-core-base with 2 updates#2218

Open
dependabot[bot] wants to merge 1 commit intomainCanner/WrenAI:mainfrom
dependabot/cargo/core/wren-core-base/all-9f6043612eCanner/WrenAI:dependabot/cargo/core/wren-core-base/all-9f6043612eCopy head branch name to clipboard
Open

deps(core): bump the all group in /core/wren-core-base with 2 updates#2218
dependabot[bot] wants to merge 1 commit intomainCanner/WrenAI:mainfrom
dependabot/cargo/core/wren-core-base/all-9f6043612eCanner/WrenAI:dependabot/cargo/core/wren-core-base/all-9f6043612eCopy head branch name to clipboard

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Updates the requirements on pyo3 and sqlparser to permit the latest version.
Updates pyo3 to 0.28.3

Release notes

Sourced from pyo3's releases.

PyO3 0.28.3

This patch contains several fixes for stability of the PyO3 0.28.x series:

  • Python::attach and Python::try_attach will no longer return before the thread initializing the interpreter has finished runnning site.py when using the auto-initialize feature.
  • Fix unsoundness in PyBytesWriter::write_vectored when targeting the Python 3.15 prerelease interpreter.
  • Fix possible deadlock in .into_pyobject() implementation for C-like #[pyclass] enums.

A couple of edge cases causing compile failures were also fixed.

Thank you to the following contributors for the improvements:

@​alex @​bschoenmaeckers @​chirizxc @​davidhewitt @​Embers-of-the-Fire @​Icxolu @​maurosilber @​ngoldbaum

Changelog

Sourced from pyo3's changelog.

[0.28.3] - 2026-04-02

Fixed

  • Fix compile error with #[pyclass(get_all)] on a type named Probe. #5837
  • Fix compile error in debug builds related to _Py_NegativeRefcount with Python < 3.12. #5847
  • Fix a race condition where Python::attach or try_attach could return before site.py had finished running. #5903
  • Fix unsoundness in PyBytesWriter::write_vectored with Python 3.15 prerelease versions. #5907
  • Fix deadlock in .into_pyobject() implementation for C-like #[pyclass] enums. #5928

[0.28.2] - 2026-02-18

Fixed

  • Fix complex enum __qualname__ not using python name #5815
  • Fix FFI definition PyType_GetTypeDataSize (was incorrectly named PyObject_GetTypeDataSize). #5819
  • Fix memory corruption when subclassing native types with abi3 feature on Python 3.12+ (newly enabled in PyO3 0.28.0). #5823

[0.28.1] - 2026-02-14

Fixed

  • Fix *args / **kwargs support in experimental-async feature (regressed in 0.28.0). #5771
  • Fix clippy::declare_interior_mutable_const warning inside #[pyclass] generated code on enums. #5772
  • Fix ambiguous_associated_items compilation error when deriving FromPyObject or using #[pyclass(from_py_object)] macro on enums with Error variant. #5784
  • Fix __qualname__ for complex #[pyclass] enum variants to include the enum name. #5796
  • Fix missing std::sync::atomic::Ordering import for targets without atomic64. #5808

[0.28.0] - 2026-02-01

Packaging

  • Bump MSRV to Rust 1.83. #5531
  • Bump minimum supported quote version to 1.0.37. #5531
  • Bump supported GraalPy version to 25.0. #5542
  • Drop memoffset dependency. #5545
  • Support for free-threaded Python is now opt-out rather than opt-in. #5564
  • Bump target-lexicon dependency to 0.13.3. #5571
  • Drop indoc and unindent dependencies. #5608

Added

  • Add __init__ support in #[pymethods]. #4951
  • Expose PySuper on PyPy, GraalPy and ABI3 #4951
  • Add PyString::from_fmt and py_format! macro. #5199
  • Add #[pyclass(new = "from_fields")] option. #5421
  • Add pyo3::buffer::PyUntypedBuffer, a type-erased form of PyBuffer<T>. #5458
  • Add PyBytes::new_with_writer #5517
  • Add PyClass::NAME. #5579
  • Add pyo3_build_config::add_libpython_rpath_link_args. #5624

... (truncated)

Commits
  • 743af64 release: 0.28.3
  • 2042b4c fix deadlock when initializing enum via into_pyobject() (#5928)
  • 0157247 ci: update UI tests for Rust 1.94 (#5859)
  • e234f8a Update getting-started.md (#5899)
  • c06848d fix ffi-check in 3.15.0a7 (#5873)
  • 83f4283 remove unused try_trait_v2 feature when enabling the nightly feature (#5868)
  • 0de57ed Fix unsoundness in PyBytesWriter::write_vectored (#5907)
  • 49cd13f fixes #5900 -- address race condition with initialization and site.py loading...
  • c90d163 [fix] Fix std::ffi import for _Py_NegativeRefcount (#5847)
  • b79d725 fix(pyo3-macros): allow pyclass named Probe (#5837)
  • Additional commits viewable in compare view

Updates sqlparser to 0.61.0

Commits
  • 272c25e Fix changelog (#2206)
  • 09deb94 Prepare to release sqlparser 0.61.0 and sqlparser_derive 0.5.0 (#2195)
  • fcc7bce Fix MAP literals parsing (#2205)
  • 60abfec Add Tokenizer custom token mapper support (#2184)
  • 0924f3a PostgreSQL: Support PostgreSQL ANALYZE with optional table and column (#2187)
  • 23acd23 Add support for C-style comments (#2034)
  • e4c5500 Fixed overflow error, recursion counter was not included for parenthesis (#2199)
  • bc55b37 Added missing derives to dialect marker structs (#2191)
  • cb21477 MySQL: Allow optional constraint name after CONSTRAINT keyword (#2183)
  • d7f56e8 [Oracle] Support hierarchical queries (#2185)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [pyo3](https://github.com/pyo3/pyo3) and [sqlparser](https://github.com/apache/datafusion-sqlparser-rs) to permit the latest version.

Updates `pyo3` to 0.28.3
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](PyO3/pyo3@v0.26.0...v0.28.3)

Updates `sqlparser` to 0.61.0
- [Changelog](https://github.com/apache/datafusion-sqlparser-rs/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion-sqlparser-rs@v0.58.0...v0.61.0)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-version: 0.28.3
  dependency-type: direct:production
  dependency-group: all
- dependency-name: sqlparser
  dependency-version: 0.61.0
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 4, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: core. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 4, 2026
@github-actions github-actions Bot added the core label May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.