Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps cython from 3.1.3 to 3.1.6.

Release notes

Sourced from cython's releases.

3.1.6

No release notes provided.

3.1.5 (2025-10-19)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

3.1.4

No release notes provided.

Changelog

Sourced from cython's changelog.

3.1.6 (2025-10-23)

Bugs fixed

  • Unicode characters formatted from C integers with f"{value:c}" could result in invalid Python string objects since Cython 3.1.0. (Github issue :issue:7240)

  • cythonize (program and function) now uses concurrent.futures.ProcessPoolExecutor instead of multiprocessing.Pool to fix a hang on build failures in parallel builds. A possible work-around is to disable parallel builds. Patch by Sviatoslav Sydorenko. (Github issue :issue:7183)

3.1.5 (2025-10-20)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

3.1.4 (2025-09-16)

Features added

  • Declarations for the new PyUnstable_*() refcounting C-API functions in Py3.14 were added. (Github issue :issue:6836)

Bugs fixed

... (truncated)

Commits
  • b40c676 Prepare release of 3.1.6.
  • 2c00332 Build: Clear "license-files" option in setup metadata due to
  • 6d0b9bd Build: Use twine to check the wheels before uploading them.
  • fecd0e5 Silence a C coercion warning in a test.
  • 2a68bbc Avoid back-and-forth between signed and unsigned index types in C array conve...
  • 1824975 Silence a C compiler warning about implicit signed/unsigned conversion.
  • a583bc3 Disable parallelism in cythonize command/function on spawn (GH-7183)
  • 2ee0bc1 Update changelog.
  • b0f7b40 Fix f-string joining when non-ASCII "{intvalue:c}" character formats are invo...
  • 67351ba Adapt release date of 3.1.5 to PyPI release time.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cython](https://github.com/cython/cython) from 3.1.3 to 3.1.6.
- [Release notes](https://github.com/cython/cython/releases)
- [Changelog](https://github.com/cython/cython/blob/master/CHANGES.rst)
- [Commits](cython/cython@3.1.3...3.1.6)

---
updated-dependencies:
- dependency-name: cython
  dependency-version: 3.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant