Skip to content

build(deps): bump the python-minor-patch group across 1 directory with 5 updates - #9252

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python/plugins/azuredevops/python-minor-patch-aa03376f57
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python/plugins/azuredevops/python-minor-patch-aa03376f57

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 5 updates in the /backend/python/pydevlake directory:

Package From To
mysqlclient 2.2.8 2.3.0
inflect 7.5.0 7.6.0
pydevd-pycharm 263.3889.77 263.7031.30
jsonpointer 3.1.1 3.4
certifi 2026.7.22 2026.10.19

Updates mysqlclient from 2.2.8 to 2.3.0

Release notes

Sourced from mysqlclient's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: PyMySQL/mysqlclient@v2.2.8...v2.3.0

Changelog

Sourced from mysqlclient's changelog.

What's new in 2.3.0

Release: 2026-09-07

  • Concurrent use of the same Connection object from multiple threads now raises ProgrammingError immediately instead of causing undefined behavior. Applications should use separate connections for concurrent operations. (#781)

  • Add an optional executemany_fallback="multi" connection option. When enabled, Cursor.executemany() can batch eligible INSERT, REPLACE, UPDATE, and DELETE statements into multi-statement queries instead of executing them one at a time. This can significantly improve performance of operations such as SQLAlchemy bulk UPDATEs. The default remains "loop", and the existing multi-row INSERT/REPLACE optimization is unchanged. (#798)

  • Add Cursor.warning_count to expose the warning count for the last statement. (#780)

  • Make Cursor itself an iterator as specified by DB-API 2.0. iter(cursor) is cursor and next(cursor) fetches the next row. (#785)

  • Quote stored procedure names and user variable names in Cursor.callproc(), allowing names containing reserved words or special characters. (#789)

  • Fix conversion of datetime.timedelta values to support microseconds and negative values correctly. (#795)

  • Add Windows ARM64 wheels. (#796)

  • Test with Python 3.15 and free-threaded Python 3.15, and update the MariaDB Connector/C used for Windows wheels to 3.4.9. (#797)

  • Add Connection.more_results() for checking whether additional results remain after a multi-statement query. (#798)

  • Deprecate accessing exception classes such as ProgrammingError and OperationalError as Cursor attributes. Access them from the MySQLdb package instead. (#782)

  • Deprecate the reconnect parameter of Connection.ping(). Calling ping() without the parameter is unchanged. (#790)

======================

Commits

Updates inflect from 7.5.0 to 7.6.0

Changelog

Sourced from inflect's changelog.

v7.6.0

Features

  • Added number_to_currency, which writes an amount in words with the cents as a fraction of one hundred, as on checks and money orders (number_to_currency(100020.56) is "one hundred thousand and twenty and 56/100"). (#213)
  • defnoun now accepts a keyword-only case parameter. Pass case="preserve" to retain the literal case of an uppercase noun's custom plural (such as defnoun("URL", "URLs", case="preserve")) rather than normalizing it to the case of the input. (#275)

Bugfixes

  • Pluralizing a multi-word phrase whose word count changes during inflection (such as when a leading article is dropped) no longer raises an IndexError. postprocess now restores word-wise capitalization by pairing original and inflected words rather than by index. (#172)
  • number_to_words now honors a custom comma separator across the word-spelling, grouped, and threshold code paths rather than only the default ", ". (#176)
  • ordinal now handles negative numbers: it no longer raises a TypeError on negative integers and returns a suffix based on the last digit (e.g. ordinal(-1) is -1st). (#192)
  • singular_noun now recognizes words ending in "-ss" (such as "class", "boss", and "address") as already singular and returns False instead of stripping the trailing "s". (#214)
  • number_to_words now groups digits from the right, so 123 with group=2 reads as one, twenty-three instead of twelve, three. (#217)
  • Avoid a TypeError when singularizing long compounds whose leading noun is already singular. (#222)
  • number_to_words now expands floats expressed in scientific notation (such as 1e20 or 0.000001) instead of mis-parsing the exponent. (#226)
  • number_to_words no longer emits a stray space before a punctuation andword (such as number_to_words(541140, andword=",")). (#229)
  • In classical "names" mode, a capitalized multi-word phrase whose final noun is lowercase and ends in a consonant plus "y" now pluralizes that noun (e.g. "Old technology" -> "Old technologies") instead of treating the whole phrase as a proper name. (#231)
  • Numeric count values equal to 1 (such as 1.0) are now treated as singular. (#232)
  • Word arguments are now exposed as str to static type checkers (such as Pylance and mypy) while still enforcing the non-empty-string check at runtime. (#233)
  • Common uncountable mass nouns (such as "equipment", "luggage", "baggage", "jewelry", "machinery", "cutlery", and "livestock") are now left unchanged by plural_noun instead of being incorrectly pluralized. (#239)
  • number_to_words now raises the documented NumOutOfRangeError for numbers whose magnitude exceeds the largest known scale word, instead of leaking an uncaught IndexError. (#242)
  • present_participle now returns "being" for the verb "be" (and its forms "is", "are", "were") instead of the malformed "bing". (#252)
  • num now raises BadNumValueError instead of leaking an OverflowError for non-finite counts such as float("inf"). (#256)
  • plural_noun no longer drops the trailing prepositional phrase when the head of a compound has an irregular plural (e.g. "brother-in-law" now pluralizes to "brothers-in-law"). (#264)
  • ordinal now raises BadNumValueError for malformed numeric input such as "11 11" instead of leaking a bare ValueError. (#269)
  • Handle signed numeric literals in inflect() interpolation arguments.
  • Restore the persistent count when an interpolated function in inflect() raises an exception.
  • compare and the related compare_nouns/compare_verbs/compare_adjs no longer leave the engine in classical mode as a side effect of the comparison.
  • present_participle now inserts a k before -ing for verbs ending in a vowel followed by c (for example "panics" becomes "panicking").
Commits
  • f51d6c4 Finalize
  • d71ac13 Merge pull request #284 from FatmaMahmoudR/number-to-currency
  • 4f08d01 Merge origin/main into pr-284
  • 5dbb158 Merge main into pr-284
  • a6487c1 Merge pull request #283 from Madin-H23/fix/group-numbers-from-the-right
  • f90d024 Model grouping concerns: reuse _grouped_from_right, render per group
  • 8db9695 Merge main into pr-283
  • e966293 Merge pull request #276 from SparkUiX/codex/fix-capitalized-compound-plurals
  • 159543a Merge main into pr-276
  • a58a8a3 Merge pull request #282 from jaraco/fix-172-postprocess-index
  • Additional commits viewable in compare view

Updates pydevd-pycharm from 263.3889.77 to 263.7031.30

Commits
  • 543e3c7 FUS-7730 [fus]: auto-update bundled metadata
  • 1b3303d FUS-8353 [fus]: auto-update bundled metadata
  • f42b69e FUS-8959 FUS-8961 FUS-8964 FUS-8969 [fus]: auto-update bundled metadata
  • bf9ac97 PY-91264 Select the bundled Pyrefly as the default type engine
  • 70685a6 RIDER-143961 [SE] fixed cancellation at SeAsyncContributorWrapper
  • 12316e3 FUS-8570 [fus]: auto-update bundled metadata
  • 805d166 PY-91264 Enable bundled pyrefly as default type engine in 2026.3 EAP
  • e637adf PY-93062 Point the bundled Pyrefly at the stubs PyCharm ships
  • 01460ce IJAI-3124 rewrite URLs for central and Claude downloads
  • b5cd537 IJAI-750 snapshot AIR at a4ca8b07c1221
  • Additional commits viewable in compare view

Updates jsonpointer from 3.1.1 to 3.4

Release notes

Sourced from jsonpointer's releases.

3.4

What's Changed

Full Changelog: stefankoegl/python-json-pointer@v3.3...v3.4

3.3

What's Changed

New Contributors

Full Changelog: stefankoegl/python-json-pointer@v3.2.1...v3.3

3.2.1

What's Changed

Full Changelog: stefankoegl/python-json-pointer@v3.2.0...v3.2.1

3.2.0

What's Changed

New Contributors

Full Changelog: stefankoegl/python-json-pointer@v3.1.1...v3.2.0

Commits
  • fb77107 bump version to 3.4
  • 677fb60 Merge pull request #84 from stefankoegl/claude/cool-lamport-vayggt
  • 57a8e8d bump version to 3.3
  • ea7e2c4 Merge pull request #92 from xingzhao-ji/fix-cli-malformed-json-batches
  • 9b78c3b Raise JsonPointerException when appending to an immutable sequence
  • 15079d6 Make malformed-input continuation opt-in
  • 4b71780 Continue CLI batches after malformed JSON input
  • 86b82bf Merge pull request #91 from muneikh/fix-pointer-join-interruptions
  • bd83197 Preserve control-flow exceptions when joining pointer parts
  • f2641f0 bump version to 3.2.1
  • Additional commits viewable in compare view

Updates certifi from 2026.7.22 to 2026.10.19

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 5 updates

Bumps the python-minor-patch group with 5 updates in the /backend/python/pydevlake directory:

| Package | From | To |
| --- | --- | --- |
| [mysqlclient](https://github.com/PyMySQL/mysqlclient) | `2.2.8` | `2.3.0` |
| [inflect](https://github.com/jaraco/inflect) | `7.5.0` | `7.6.0` |
| [pydevd-pycharm](https://github.com/JetBrains/intellij-community) | `263.3889.77` | `263.7031.30` |
| [jsonpointer](https://github.com/stefankoegl/python-json-pointer) | `3.1.1` | `3.4` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.7.22` | `2026.10.19` |



Updates `mysqlclient` from 2.2.8 to 2.3.0
- [Release notes](https://github.com/PyMySQL/mysqlclient/releases)
- [Changelog](https://github.com/PyMySQL/mysqlclient/blob/main/HISTORY.rst)
- [Commits](PyMySQL/mysqlclient@v2.2.8...v2.3.0)

Updates `inflect` from 7.5.0 to 7.6.0
- [Release notes](https://github.com/jaraco/inflect/releases)
- [Changelog](https://github.com/jaraco/inflect/blob/main/NEWS.rst)
- [Commits](jaraco/inflect@v7.5.0...v7.6.0)

Updates `pydevd-pycharm` from 263.3889.77 to 263.7031.30
- [Release notes](https://github.com/JetBrains/intellij-community/releases)
- [Commits](JetBrains/intellij-community@pycharm/263.3889.77...pycharm/263.7031.30)

Updates `jsonpointer` from 3.1.1 to 3.4
- [Release notes](https://github.com/stefankoegl/python-json-pointer/releases)
- [Commits](stefankoegl/python-json-pointer@v3.1.1...v3.4)

Updates `certifi` from 2026.7.22 to 2026.10.19
- [Commits](certifi/python-certifi@2026.07.22...2026.10.19)

---
updated-dependencies:
- dependency-name: mysqlclient
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: inflect
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pydevd-pycharm
  dependency-version: 263.7031.30
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: jsonpointer
  dependency-version: '3.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 26, 2026
DoDiODev added a commit to DoDiODev/devlake that referenced this pull request Oct 26, 2026
Lockfile-only refresh of transitive/indirect dependencies with published
security advisories. No manifest (package.json, pyproject.toml) changes,
no forced resolutions; every bump stays within the ranges already declared
by the parent packages.

Python (poetry.lock in pydevlake, plugins/azuredevops, test/fakeplugin):
- urllib3 2.7.0 -> 2.8.0
  (certifi 2026.10.19 is left to the python-minor-patch group, apache#9252)

Go (backend/go.mod, go.sum):
- github.com/quic-go/quic-go v0.59.0 -> v0.59.1 (indirect)

config-ui/yarn.lock (yarn up -R, semver-compatible):
- lodash, @babel/runtime, @babel/core, follow-redirects,
  mdast-util-to-hast, js-yaml, brace-expansion, minimatch, picomatch,
  browserslist, baseline-browser-mapping, cross-spawn, source-map-js
- node-gyp (implicit "latest" dep of fsevents) 10.0.1 -> 13.1.0, which
  moves tar 6 -> 7.5.22 and drops make-fetch-happen 13 / socks /
  ip-address / sprintf-js / http-cache-semantics / glob 10.4
- ahooks ^3.4.1 (via @ahooksjs/use-url-state) 3.7.10 -> 3.10.0, which
  drops js-cookie 2.2.1

Not addressed: decode-uri-component 0.2.2 (via query-string@6 <-
@ahooksjs/use-url-state 3.5.1, no newer parent release).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants