Repository navigation
chore(deps-dev): Bump typing-extensions from 4.15.0 to 4.16.0 in /python/geobrix - #142
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.15.0 to 4.16.0. - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.15.0...4.16.0) --- updated-dependencies: - dependency-name: typing-extensions dependency-version: 4.16.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
Not taking this one. A |
|
@dependabot close |
Applies the vetted Dependabot Maven bumps on the dev line, where the keysmap can be updated in the same change (the PRs target main and fail the PGP gate there). - #139 com.uber:h3 3.7.0 -> 3.7.3. Databricks Runtime 17.3, 18 and 19 all ship h3 3.7.3, so the "until Photon updates" condition in the pom is met. Same group signing key, so no keysmap entry; the stale 3.7.0 noSig lines go. - #133 maven-clean-plugin 3.5.0 and #136 maven-deploy-plugin 3.2.0: build-only; add their jar/pom lines under the Apache Maven signer already trusted for install/deploy 3.1.4. - #137 proj4j 1.4.3: not applied. Nothing in GeoBrix uses proj4j or proj4j-epsg, yet they put 162 classes and EPSG data in the fat JAR. Both dependencies and their keysmap entries are removed instead. - #134 maven-site-plugin stays at 3.12.1 (nothing runs mvn site; the new closure needs five unreviewed signing keys). - Dependabot pip updates now use increase-if-necessary, so a PR raises a floor only when the constraint would otherwise stop resolving (stops floor-only PRs like #141 and #142 that force runtime moves). Verified: the strict PGP verify build passes; the rebuilt fat JAR has no proj4j classes and bundles h3 3.7.3 with its darwin-arm64 native; the JAR packaging check passes; scalastyle and the gridx and H3 rasterize Scala suites pass. Co-authored-by: Isaac <no-reply@databricks.com>
Applies the vetted Dependabot Python bumps on the dev line. The PRs edit pyproject.toml and the lock .in files but never regenerate the hash-pinned .txt locks, so their green CI still ran the old versions; here the env5 and env6 CI locks are recompiled and the tests run against them. - #138 numexpr floor >=2.14.1 (the 2.13.1+ NaN and boolean semantics); CI pins 2.11.0 -> 2.14.2, what users already get. Not preinstalled on any supported runtime, so nothing moves. - #135 tippecanoe floor >=2.72.0, CI pin 2.45.0 -> 2.72.0. Not preinstalled anywhere; manylinux wheels exist for x86_64 and aarch64. - #140 overturemaps floor >=1.0.2 to fence out 1.0.0 and 1.0.1, which predate the absolute STAC href fix on the --stac path. The extra's comments now say click>=8.3.0 and tqdm>=4.67.3 (the old text said click>=8.4 and never mentioned the tqdm move on DBR 18/19, env 5/6). - The two -all locks already resolved numexpr 2.14.2 and tippecanoe 2.72.0 and are unchanged on recompile. - #141 imageio and #142 typing_extensions floors are not applied: they would force runtime package moves for no gain. Co-authored-by: Isaac <no-reply@databricks.com>
|
Correction to the comment above. We measured that Serverless environment 5 does not hold GeoBrix does need a higher floor than |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps typing-extensions from 4.15.0 to 4.16.0.
Release notes
Sourced from typing-extensions's releases.
... (truncated)
Changelog
Sourced from typing-extensions's changelog.
Commits
f29cd28Prepare relase 4.16.0 (#774)4317461Bump version to 4.16.0rc2.dev (#772)4f71098Prepare release 4.16.0rc2 (#771)37ed08aRemove use ofasyncio.coroutines.iscoroutinefunction()(#769)8dcc559ImproveTypedDictdocumentation (#770)224f8d5Post-release followups for 3.16.0rc1 (#767)777de3ePrepare release 4.16.0rc1 (#766)890be90Type variable tuple variance (#741)0e05458Pin SQLAlchemy third-party tests to pytest==9.0.3 (#765)d277746docs: add version compatibility table (#733)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)