Skip to content

[CHORE](deps)(deps): Bump the python-dependencies group with 2 updates - #609

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-0a5a6eb981
Closed

[CHORE](deps)(deps): Bump the python-dependencies group with 2 updates#609
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-0a5a6eb981

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 2 updates: ruff and pyspark.

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates pyspark from 4.1.2 to 4.2.0

Commits
  • 32f7299 Preparing Spark release v4.2.0-rc6
  • 7a25c75 [SPARK-56972][SS][FOLLOWUP] Reject sink evolution combined with async progres...
  • 44daf01 [SPARK-58024][PYTHON] Convert Arrow struct and map columns to Python rows in ...
  • d0856c7 [SPARK-58019][PYTHON] Convert Arrow list columns to Python rows in bulk
  • e79fd9b [MINOR][UI][4.2] Encode query parameters when generating log page scripts
  • fc46f2a [SPARK-57962][PYTHON] Guard against path traversal in install_spark tar extra...
  • 380776d [MINOR][UI] Escape HTML when rendering error messages in the Web UI tables
  • c40f044 [SQL] Allow more control over UDT creation during input loading
  • 5a347f9 [SPARK-58042][CONNECT] Validate the UDT jvm_class is a UserDefinedType before...
  • e3c6298 [SPARK][SQL] LDAP Thriftserver improvement
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[CHORE](deps)(deps): Bump the python-dependencies group with 2 updates
c5cb281 
Bumps the python-dependencies group with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [pyspark](https://github.com/apache/spark).


Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `pyspark` from 4.1.2 to 4.2.0
- [Commits](apache/spark@v4.1.2...v4.2.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyspark
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added automation 🦾 Change/enhance automation of a process bot labels Jul 29, 2026
@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown

🗺️ Schema reference docs preview is live!
🌍 Preview https://staging.overturemaps.org/schema/pr/609/schema/index.html
🕐 Updated Jul 29, 2026 20:14 UTC
📝 Commit c5cb281
🔧 env SCHEMA_PREVIEW true

Note

♻️ This preview updates automatically with each push to this PR.

@sethfitz

Seth Fitzsimmons (sethfitz) commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

Same comment as #610 (comment), but refined slightly. dev dependencies are ok to treat this way, but just updating uv.lock may still be preferable.

@lowlydba

John McCall (lowlydba) commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Same comment as #610 (comment), but refined slightly. dev dependencies are ok to treat this way, but just updating uv.lock may still be preferable.

Heard Seth Fitzsimmons (@sethfitz) - can you either make a new issue with more detailed requirements for this at large, or open a PR to tweak dependabot.yml? Its a relatively simple schema & well documented

@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-0a5a6eb981 branch July 29, 2026 20:33
@sethfitz

Seth Fitzsimmons (sethfitz) commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

John McCall (@lowlydba) #613

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

automation 🦾 Change/enhance automation of a process bot

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sethfitz @lowlydba