Bump the minor-and-patch group with 20 updates by dependabot[bot] · Pull Request #19 · appeler/search-names

dependabot · 2026-07-23T05:25:29Z

Bumps the minor-and-patch group with 20 updates:

Package	From	To
nameparser	`1.1.3`	`1.4.0`
nltk	`3.9.2`	`3.10.0`
typer	`0.20.0`	`0.27.0`
pydantic	`2.12.5`	`2.13.4`
spacy	`3.8.11`	`3.8.14`
sentence-transformers	`5.1.2`	`5.6.0`
ruff	`0.14.6`	`0.15.21`
pre-commit	`4.5.0`	`4.6.0`
coverage	`7.12.0`	`7.15.2`
pytest	`9.0.1`	`9.1.1`
pytest-asyncio	`1.3.0`	`1.4.0`
furo	`2025.9.25`	`2025.12.19`
torch	`2.9.1`	`2.13.0`
scipy	`1.16.3`	`1.17.1`
joblib	`1.5.2`	`1.5.3`
polars	`1.35.2`	`1.42.1`
elasticsearch	`9.2.0`	`9.4.1`
opensearch-py	`3.1.0`	`3.2.0`
fastapi	`0.122.0`	`0.139.0`
deptry	`0.24.0`	`0.25.1`

Updates nameparser from 1.1.3 to 1.4.0

Release notes

Sourced from nameparser's releases.

v1.4.0

Add Constants.copy(), a detached deep copy that preserves the source instance's current customizations (unlike Constants(), which always starts from library defaults) -- useful as CONSTANTS.copy() for a private snapshot of the shared config (#260)

Deprecate passing constants=None to HumanName (or assigning hn.C = None): it silently builds a fresh Constants(), discarding any customizations the caller may have expected to carry over from the shared CONSTANTS. Emits DeprecationWarning; will raise TypeError in 2.0. Use constants=Constants() for fresh library defaults or constants=CONSTANTS.copy() for a private snapshot instead (closes #260)

Deprecate assigning Constants.empty_attribute_default for removal in 2.0 (#255): once None support goes, the only legal value left is the default '', so a dial with one position isn't configuration. Emits DeprecationWarning; reading the attribute is unaffected

Deprecate unknown-key attribute access on TupleManager/RegexTupleManager (CONSTANTS.regexes.typo, CONSTANTS.capitalization_exceptions.typo, etc.) for removal in 2.0 (#256): a misspelled or omitted key currently degrades silently (None/EMPTY_REGEX) with no traceback pointing at the typo. Emits DeprecationWarning naming the miss and the known keys; will raise AttributeError in 2.0. .get() remains available for intentional soft access

Deprecate HumanName slice access (name[1:-3]) and item assignment (name['first'] = value) for removal in 2.0 (#258): field access by position has no real use case, and item assignment duplicates plain attribute assignment. Both emit DeprecationWarning; string-key access (name['first']) is unaffected

Deprecate SetManager.add_with_encoding() itself for removal in 2.0 (#245), regardless of argument type: use add() instead (decoding bytes first). Previously only the bytes path warned; the str path was silent even though the whole method goes away

Deprecate loading a legacy-format Constants pickle (written by nameparser <= 1.2.x, before the 1.3.0 pickle fix) for removal in 2.0 (#279): __setstate__'s migration shim currently skips the stale computed-property key silently. Emits DeprecationWarning once per call telling users to re-pickle; will raise ValueError in 2.0

Fix the "Lastname, Firstname" comma format not being recognized when the input uses the Arabic comma ، (U+060C, the standard comma in Arabic/Persian/Urdu text) or the fullwidth CJK comma ， (U+FF0C) instead of the ASCII comma: both variants now also split the format and no longer leak into the parsed output (closes #265)

Full changelog: https://github.com/derek73/python-nameparser/blob/master/docs/release_log.rst

v1.3.1

Patch release with two output-corruption bug fixes. No API changes. Full details in the release log.

Bug fixes

Invisible Unicode bidirectional control characters are now stripped during preprocessing (#266, thanks @apoorva-01) — LRM/RLM/ALM, the embedding/override marks, and the isolates U+2066–U+2069 previously survived parsing and stuck to first/last/etc., so a copy-pasted right-to-left name silently failed equality and dedup. Disable via CONSTANTS.regexes.bidi = False.

str() no longer corrupts name text containing the substring "None" when empty_attribute_default is None (#254) — e.g. "Nonez Smith" rendered as "z Smith". Empty attributes are now substituted as '' before the format string is applied, instead of scrubbing the interpolated "None" from the output afterward. Present since 2016; the default '' configuration was never affected.

v1.3.0

This release works through essentially the entire backlog of open issues — nearly every bug and feature request in the tracker, including several dating back to 2014. Alongside the fixes, it adds long-requested functionality: maiden name support, surname-prefix splitting, patronymic name ordering, and a set of new customization hooks on Constants.

The release was developed with Claude Code, and every fix and feature ships with regression tests. The complete list of changes is below.

This release is the bridge release ahead of 2.0: every planned 2.0 removal now has its replacement shipped and emits a DeprecationWarning naming it, so code can migrate while both APIs work. Full details in the release log.

Deprecations (removal in 2.0)

== and hash() on HumanName (#223) — the design's three promises (case-insensitive equality, equality with plain strings, hashability) are mutually inconsistent, equality depends on string_format, and maiden is invisible to it. Replacements, new in this release: matches() for semantic comparison (name.matches("Smith, John") and name.matches("John Smith") both match) and comparison_key() for sets, dicts, dedup, and sorting.

bytes input (#245) — decode first, e.g. value.decode('utf-8'); the encoding kwarg is deprecated with it.

SetManager.__call__ (#243) — iterate the manager or copy with set(manager).

SetManager.remove() of a missing member (#243) — will raise KeyError in 2.0 like set.remove; new discard() is the intentional ignore-missing spelling.

Breaking changes

HumanName is no longer its own iterator; iter(name) returns a fresh independent iterator (fixes state corruption from break/nested loops/len() mid-loop) (#225)

Vestigial unparsable attribute removed (unreachable since 2013; use len(name) == 0); __ne__ removed (derived from __eq__)

REGEXES and CAPITALIZATION_EXCEPTIONS are now dicts — iterate with .items() (#227, #233)

Internal __process_initial__ renamed _process_initial (dunder names are reserved)

Behavior changes affecting parse output (default-on)

Bound Arabic given-name prefixes (abdul, abu, …) join forward into the first name (#150); disable via CONSTANTS.bound_first_names.clear()

A leading unknown multi-letter period-abbreviation ("Major.") parses as a title (#109)

Parsing no longer mutates the shared CONSTANTS it reads — parse results no longer depend on what was parsed earlier in the process, and parsing is thread-safe against config writes

New

maiden field with maiden_delimiters routing (#22); given_names (#157); last_base/last_prefixes for surname particles (#130, #132)

... (truncated)

Changelog

Sourced from nameparser's changelog.

1.4.0 - July 12, 2026

Add Constants.copy(), a detached deep copy that preserves the source instance's current customizations (unlike Constants(), which always starts from library defaults) -- useful as CONSTANTS.copy() for a private snapshot of the shared config (#260)

Deprecate passing constants=None to HumanName (or assigning hn.C = None): it silently builds a fresh Constants(), discarding any customizations the caller may have expected to carry over from the shared CONSTANTS. Emits DeprecationWarning; will raise TypeError in 2.0. Use constants=Constants() for fresh library defaults or constants=CONSTANTS.copy() for a private snapshot instead (closes #260)

Deprecate assigning Constants.empty_attribute_default for removal in 2.0 (#255): once None support goes, the only legal value left is the default '', so a dial with one position isn't configuration. Emits DeprecationWarning; reading the attribute is unaffected

Deprecate unknown-key attribute access on TupleManager/RegexTupleManager (CONSTANTS.regexes.typo, CONSTANTS.capitalization_exceptions.typo, etc.) for removal in 2.0 (#256): a misspelled or omitted key currently degrades silently (None/EMPTY_REGEX) with no traceback pointing at the typo. Emits DeprecationWarning naming the miss and the known keys; will raise AttributeError in 2.0. .get() remains available for intentional soft access

Deprecate HumanName slice access (name[1:-3]) and item assignment (name['first'] = value) for removal in 2.0 (#258): field access by position has no real use case, and item assignment duplicates plain attribute assignment. Both emit DeprecationWarning; string-key access (name['first']) is unaffected

Deprecate SetManager.add_with_encoding() itself for removal in 2.0 (#245), regardless of argument type: use add() instead (decoding bytes first). Previously only the bytes path warned; the str path was silent even though the whole method goes away

Deprecate loading a legacy-format Constants pickle (written by nameparser <= 1.2.x, before the 1.3.0 pickle fix) for removal in 2.0 (#279): __setstate__'s migration shim currently skips the stale computed-property key silently. Emits DeprecationWarning once per call telling users to re-pickle; will raise ValueError in 2.0

Fix the "Lastname, Firstname" comma format not being recognized when the input uses the Arabic comma ، (U+060C, the standard comma in Arabic/Persian/Urdu text) or the fullwidth CJK comma ， (U+FF0C) instead of the ASCII comma: both variants now also split the format and no longer leak into the parsed output (closes #265)

1.3.1 - July 11, 2026

Fix invisible Unicode bidirectional control characters (LRM/RLM/ALM, the embedding/override marks, and the isolates U+2066–U+2069) surviving parsing and sticking to first/last/etc., so a copy-pasted right-to-left name silently failed equality and dedup. They are now stripped in preprocessing like emoji; disable via CONSTANTS.regexes.bidi = False (closes #266)

Fix str() corrupting name text containing the substring "None" when empty_attribute_default is None (e.g. "Nonez Smith" rendered as "z Smith"): empty attributes are now substituted as '' before the format string is applied, instead of scrubbing the interpolated "None" from the output afterward (closes #254)

1.3.0 - July 5, 2026

Breaking Changes & Deprecations

Deprecate HumanName.__eq__ and __hash__ for removal in 2.0 (#223): the current design's three promises — case-insensitive equality, equality with plain strings, and hashability — are mutually inconsistent (equal objects can hash differently), equality depends on string_format, and maiden is invisible to it. Both now emit DeprecationWarning naming the replacement; behavior is otherwise unchanged until 2.0 (closes #224)

Deprecate bytes input for removal in 2.0 (#245): passing bytes to HumanName/full_name or to SetManager.add()/add_with_encoding() now emits DeprecationWarning — decode first, e.g. value.decode('utf-8'). The encoding constructor argument is deprecated with it

Deprecate SetManager.__call__ for removal in 2.0 (#243): calling a manager returns the raw underlying set, so mutating the result bypasses normalization and cache invalidation; iterate the manager or copy with set(manager) instead

Add SetManager.discard(), and deprecate remove() of a missing member (#243): it currently does nothing but will raise KeyError in 2.0, matching set.remove; use discard() for intentional ignore-missing removal. Removing present members is unchanged and does not warn

Fix HumanName acting as its own iterator with a stored cursor: breaking out of a loop, iterating in nested loops, or calling len(name) mid-loop corrupted subsequent iteration; iter(name) now returns a fresh independent iterator each time. next(name) on the instance itself (undocumented) now raises TypeError — call next(iter(name)) instead (closes #225)

Remove the vestigial unparsable attribute: the guard that was meant to set it has been unreachable since 2013 (v0.2.9), so it has reported False for every parsed name for over a decade; check len(name) == 0 to detect an empty parse

Remove __ne__; Python 3 derives != from __eq__ automatically

Change internal initials helper __process_initial__ to _process_initial: double-underscore-both-sides names are reserved for Python special methods; subclasses overriding the old name must rename their override

Change REGEXES from a set of (name, pattern) tuples to a dict, so a duplicate name is a visible overwrite in the source instead of a nondeterministic winner at import time; code iterating REGEXES directly now gets keys instead of pairs — use .items() (#227)

Change CAPITALIZATION_EXCEPTIONS from a tuple of (key, value) tuples to a dict; code iterating it directly now gets keys instead of pairs — use .items() (#233)

Behavior Changes (affect existing parse output)

Add bound_first_names set to Constants; bound Arabic given-name prefixes (abdul, abu, etc.) now join forward to form a single first name (e.g. "abdul salam ahmed salem" → first="abdul salam", middle="ahmed", last="salem"). Disable via CONSTANTS.bound_first_names.clear(). Default-on: changes parsing output for names with these prefixes. (#150)

Treat an unrecognized, multi-letter token ending in a period in the leading title run (before the first name is set), e.g. "Major.", as a title instead of a first name; internal-period abbreviations ("E.T.") and single-letter initials ("J.") are unaffected. Default-on: changes parsing of names with a leading unknown period-abbreviation (closes #109)

Fix parsing writing back into the Constants it reads (usually the shared module-level CONSTANTS): pieces derived while parsing a name — period-joined titles/suffixes like "Lt.Gov." and conjunction-joined pieces like "Mr. and Mrs." or "von und zu" — are now tracked per parse instead of being permanently add()-ed to the config, so parse results no longer depend on which names were parsed earlier in the process and parsing no longer mutates shared state across threads

Fix __hash__ to lowercase the name like __eq__ does, so equal HumanName instances hash equal and behave correctly in sets and dicts

New comparison methods

Add matches() and comparison_key() for explicit name comparison: matches() compares parsed components case-insensitively (parsing str arguments first, so name.matches("Smith, John") and name.matches("John Smith") both match) and comparison_key() returns a hashable tuple of the seven components for dedup, dict keys, and sorting (#224)

New name fields

Add a first-class maiden field and maiden_delimiters to Constants, so a delimiter (e.g. parenthesis) can be routed to maiden instead of nickname for alternate/maiden surnames, e.g. "Baker (Johnson), Jenny" (closes #22)

... (truncated)

Commits

ac37e57 Release v1.4.0 (#287)
b6c0679 Add 2.0 deprecation warnings for 1.4 second-wave removals (#263) (#286)
4aaedb8 Add README breadcrumb for the 2.0 design RFC
8f570ce Merge pull request #283 from derek73/docs/262-constants-contract-reframe
381ca36 Clarify the "see below" pointer in the new customize.rst lead-in
4f3fe14 Reframe shared CONSTANTS as an application-startup contract
18c9b6a Merge pull request #282 from derek73/feature/260-constants-copy-none-deprecation
a0933bc Test Constants.copy() preserves subclass type
310a793 Add Constants.copy(); deprecate constants=None
59fdabb Merge pull request #281 from derek73/fix/265-arabic-comma
Additional commits viewable in compare view

Updates nltk from 3.9.2 to 3.10.0

Release notes

Sourced from nltk's releases.

v3.10.0-rc1

What's Changed

CHILDES corpus reader: lazy loading (fixes #1340) by @nschneid in nltk/nltk#1341

Stanseg by @casperlehmann in nltk/nltk#1350

Add optional CCG semantics computation by @tanin47 in nltk/nltk#1321

address of free software foundation updated by @Lightyagami1 in nltk/nltk#1347

Added a verification for empty tokens by @gnardari in nltk/nltk#1353

use data.load for vader lexicon by @afgiel in nltk/nltk#1303

Ensure that proper exceptions are caught correctly by @pombredanne in nltk/nltk#1343

Reset CCGVar everytime we invoke lexicon.fromstring() and skip the unicode test because it fails on python2.7 by @tanin47 in nltk/nltk#1354

Add tanin as an author :) by @tanin47 in nltk/nltk#1355

framenet.py: remove unnecessary str() call that causes problems for names with Unicode characters by @nschneid in nltk/nltk#1360

remove u because it doesn't work in Python 3.0 to 3.2 by @tanin47 in nltk/nltk#1362

moved the import for dispersion_plot out of the else block by @dennisobrien in nltk/nltk#1364

Raise warning for infinite recursion by @alvations in nltk/nltk#1365

Patch None TypeError in align_blocks() by @alvations in nltk/nltk#1366

Safer try-except for catching infinite recursion by @alvations in nltk/nltk#1368

Collections refactor by @nschneid in nltk/nltk#1382

Handles fringe cases in BLEU by @alvations in nltk/nltk#1383

Allow specifying substitution cost in edit distance by @dnc1994 in nltk/nltk#1386

Pl196x fixes by @pkasprzyk in nltk/nltk#1359

Docs/ngrams by @ColCarroll in nltk/nltk#1403

Fix conll.py by @germanferrero in nltk/nltk#1402

Aline by @geoffbacon in nltk/nltk#1407

Handle empty files in a corpus by @alexisdimi in nltk/nltk#1411

fixed bug: StackDecoder would throw exception if it's unable to finish… by @hikui in nltk/nltk#1405

add hikui to authors by @hikui in nltk/nltk#1412

removes download-cache pip flag from tox config by @fievelk in nltk/nltk#1415

Added three tokenizers, one detokenizer and two tokenizer-related word/char list corpora by @alvations in nltk/nltk#1282

Much faster Vader sentiment tagging by @georgeberry in nltk/nltk#1409

Fixes doctest in is_cjk() and REPP tokenizer wrapper by @alvations in nltk/nltk#1420

Fixed doctest for UnicharsCorpusReader and NonbreakingPrefixesCorpusReader by @alvations in nltk/nltk#1422

Updated senna version in docstring by @alvations in nltk/nltk#1431

Removes Python 2.6 and Python 3.1-3.3 code, Improves Python 3.5 syntax by @adamn in nltk/nltk#1429

Cleanup by @dimazest in nltk/nltk#1432

Fix zero division & log(0) in PunktTrainer._col_log_likelihood by @mrecachinas in nltk/nltk#1247

Update stanford_segmenter.py by @janissl in nltk/nltk#1444

explained data format for constructor by @drevicko in nltk/nltk#1450

Use a more efficient idiom for flattening nested lists by @rmalouf in nltk/nltk#1447

improved documentation of load_array() by @drevicko in nltk/nltk#1452

changed "list or iterator" to "sequence" by @drevicko in nltk/nltk#1453

Deal gracefully with degenerate cases. by @drevicko in nltk/nltk#1454

deal with (hopefully) all degenerate cases by @drevicko in nltk/nltk#1455

Enable unordered comparison for gaac clustering by @alvations in nltk/nltk#1456

Rewrite porter.py by @ExplodingCabbage in nltk/nltk#1261

Update naivebayes.py by @andyreagan in nltk/nltk#1461

Fixes bug where download status not returned. by @nsfabina in nltk/nltk#1468

Use lcon and rcon variables in conllned() when trace is False - Issue #1474 by @timleslie in nltk/nltk#1475

Use shutil.copyfileobj for unzipping by @ikorolev93 in nltk/nltk#1478

Fixing Chen&Cherry method 6 smoothing in BLEU score by @alvations in nltk/nltk#1477

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.0 2026-06-11

Enforce the stricter nltk.pathsec security policy by default

Document the new security model and migration guidance

Harden resource loading against path traversal and SSRF/DNS-rebinding

Harden downloader path handling and block XML entity expansion

Close remaining corpus-reader security edge cases

Replace unsafe exec() usage in the utility CLI

Warn on unpickling user-provided pickles

Add HuggingFace datasets integration (nltk.huggingface)

Align TnT with Brants (2000) specifications

Fix PorterStemmer irregular-form lowercasing in NLTK mode

Fix TransitionParser sparse index dtype for scikit-learn 1.9

Fix TextCat tie handling

Fix WordNet object comparisons for incompatible types

Cache WordNet max depth lazily for lch_similarity()

Fix CCG variable direction, substitution, and type-raising bugs

Fix Jaro similarity for single-character and empty-string cases

Improve CI and release-maintenance workflows

Thanks to the following contributors to 3.10.0: 13rac1, alvations, bowiechen, devesh-2002, ekaf, elias-ba, haosenwang1018, HyperPS, ihitamandal, jancallewaert, jhnwnstd, JuanIMartinezB, Lemm1, LinZiyuu, Mr-Neutr0n, PastelStorm, scruge1, Syzygy2048, ylwango613, yzhaoinuw

Version 3.9.4 2026-03-24

Support Python 3.14

Fix bug in Levenshtein distance when substitution_cost > 2

Fix bug in Treebank detokeniser re quote ordering

Fix bug in Jaro similarity for empty strings

Several security enhancements

Fix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder

Implement TextTiling vocabulary introduction method (Hearst 1997)

Fix ALINE feature matrix errors and add comprehensive tests

Support multiple VerbNet versions, fix longid/shortid regex for VerbNet ids

Let downloader fallback to md5 when sha256 is unavailable

Several other minor bugfixes and code cleanups

Thanks to the following contributors to 3.9.4: Min-Yen Kan, Eric Kafe, Emily Voss, bowiechen, Hrudhai01, jancallewaert, Mr-Neutr0n, pollak.peter89, ylwango613,

Version 3.9.3 2026-02-21

Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader (#3468)

Block path traversal/arbitrary reads in nltk.data for protocol-less refs (#3467)

Block path traversal/abs paths in corpus readers and FS pointers (#3479, #3480)

Validate external StanfordSegmenter JARs using SHA256 (#3477)

... (truncated)

Commits

bd49f90 allow escaped brackets in Tree.fromstring (#3694)
27b8ad6 don't crash chomsky_normal_form on terminals with siblings (#3693)
52227d2 Use os.name for Windows path handling (#3605)
06c0e2c Avoid RIBES zero division on empty inputs (#3604)
a167389 Treat missing unzip output as stale (#3607)
c94c967 Fix EOF empty document bug in IEER corpus reader (#3648)
94a259c Enforce restrictive primitive type checking in pathsec wrappers (#3692)
5ac475d fix(security): isolate Stanford Java options and clean temp files (#3683)
986f26e ci(deps): bump the github-actions group with 3 updates (#3691)
f26b375 fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502)...
Additional commits viewable in compare view

Updates typer from 0.20.0 to 0.27.0

Release notes

Sourced from typer's releases.

0.27.0

Breaking Changes

💥 Update metavar printing. PR #1863 by @svlandeg.

Internal

⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1896 by @dependabot[bot].

⬆️ Bump ty to 0.0.53. PR #1877 by @YuriiMotov.

⬆ Bump the github-actions group across 1 directory with 4 updates. PR #1897 by @dependabot[bot].

🔧 Set Dependabot schedule interval to "monthly". PR #1873 by @YuriiMotov.

⬆ Bump pre-commit hooks. PR #1895 by @tiangolo.

👷 Add GH workflow to bump pre-commit hook versions. PR #1872 by @YuriiMotov.

👷 Fix latest-changes checkout target. PR #1883 by @tiangolo.

⬆️ Update issue-manager to 0.8.1. PR #1880 by @tiangolo.

⬆ Bump the github-actions group across 1 directory with 8 updates. PR #1874 by @dependabot[bot].

⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1876 by @dependabot[bot].

⬆️ Update latest-changes to 0.6.1. PR #1879 by @tiangolo.

⬆ Bump https://github.com/crate-ci/typos from v1.46.0 to 1.47.2 in the pre-commit group across 1 directory. PR #1834 by @dependabot[bot].

⬆ Bump pydantic-settings from 2.14.1 to 2.14.2. PR #1849 by @dependabot[bot].

0.26.8

Fixes

🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @svlandeg.

🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @foomunleong.

Docs

📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @tiangolo.

📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @phalberg.

Internal

👷 Simplify pull request workflow triggers. PR #1858 by @tiangolo.

👷 Update issue-manager to 0.7.1. PR #1857 by @tiangolo.

⬆️ Update issue-manager to 0.7.0. PR #1856 by @tiangolo.

🔒️ Update zizmor workflow security checks. PR #1854 by @tiangolo.

⬆️ Group Dependabot updates. PR #1853 by @tiangolo.

⬆️ Update Dependabot ecosystem coverage. PR #1851 by @tiangolo.

👷 Fix alls-green test dependency. PR #1848 by @tiangolo.

⬆ Bump cryptography from 46.0.7 to 48.0.1. PR #1841 by @dependabot[bot].

⬆ Bump pyjwt from 2.12.0 to 2.13.0. PR #1839 by @dependabot[bot].

⬆ Bump the github-actions group across 1 directory with 3 updates. PR #1828 by @dependabot[bot].

⬆ Bump the python-packages group with 3 updates. PR #1829 by @dependabot[bot].

0.26.7

Fixes

🐛 Respect wait=False when launching URLs with xdg-open. PR #1820 by @patrick91.

... (truncated)

Changelog

Sourced from typer's changelog.

0.27.0 (2026-07-15)

Breaking Changes

💥 Update metavar printing. PR #1863 by @svlandeg.

Internal

⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1896 by @dependabot[bot].

⬆️ Bump ty to 0.0.53. PR #1877 by @YuriiMotov.

⬆ Bump the github-actions group across 1 directory with 4 updates. PR #1897 by @dependabot[bot].

🔧 Set Dependabot schedule interval to "monthly". PR #1873 by @YuriiMotov.

⬆ Bump pre-commit hooks. PR #1895 by @tiangolo.

👷 Add GH workflow to bump pre-commit hook versions. PR #1872 by @YuriiMotov.

👷 Fix latest-changes checkout target. PR #1883 by @tiangolo.

⬆️ Update issue-manager to 0.8.1. PR #1880 by @tiangolo.

⬆ Bump the github-actions group across 1 directory with 8 updates. PR #1874 by @dependabot[bot].

⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1876 by @dependabot[bot].

⬆️ Update latest-changes to 0.6.1. PR #1879 by @tiangolo.

⬆ Bump https://github.com/crate-ci/typos from v1.46.0 to 1.47.2 in the pre-commit group across 1 directory. PR #1834 by @dependabot[bot].

⬆ Bump pydantic-settings from 2.14.1 to 2.14.2. PR #1849 by @dependabot[bot].

0.26.8 (2026-06-25)

Fixes

🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @svlandeg.

🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @foomunleong.

Docs

📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @tiangolo.

📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @phalberg.

Internal

👷 Simplify pull request workflow triggers. PR #1858 by @tiangolo.

👷 Update issue-manager to 0.7.1. PR #1857 by @tiangolo.

⬆️ Update issue-manager to 0.7.0. PR #1856 by @tiangolo.

🔒️ Update zizmor workflow security checks. PR #1854 by @tiangolo.

⬆️ Group Dependabot updates. PR #1853 by @tiangolo.

⬆️ Update Dependabot ecosystem coverage. PR #1851 by @tiangolo.

👷 Fix alls-green test dependency. PR #1848 by @tiangolo.

⬆ Bump cryptography from 46.0.7 to 48.0.1. PR #1841 by @dependabot[bot].

⬆ Bump pyjwt from 2.12.0 to 2.13.0. PR #1839 by @dependabot[bot].

⬆ Bump the github-actions group across 1 directory with 3 updates. PR #1828 by @dependabot[bot].

⬆ Bump the python-packages group with 3 updates. PR #1829 by @dependabot[bot].

0.26.7 (2026-06-03)

... (truncated)

Commits

60af34b 🔖 Release version 0.27.0 (#1899)
efaf4d5 📝 Update release notes
42196d4 💥 Update metavar printing (#1863)
3a3bd0f 📝 Update release notes
fa6caa9 ⬆ Bump the python-packages group across 1 directory with 5 updates (#1896)
35b8990 📝 Update release notes
5c7e904 ⬆️ Bump ty to 0.0.53 (#1877)
91b19a0 📝 Update release notes
4336118 ⬆ Bump the github-actions group across 1 directory with 4 updates (#1897)
9a5a42e 📝 Update release notes
Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Bump libc from 0.2.155 to 0.2.185 by @Viicos in #13109

Adapt pydantic-core linker flags on macOS by @washingtoneg and @Viicos in #13147

Fixes

Preserve RootModel core metadata by @Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Bump libc from 0.2.155 to 0.2.185 by @Viicos in #13109

Adapt pydantic-core linker flags on macOS by @washingtoneg and @Viicos in #13147

Fixes

Preserve RootModel core metadata by @Viicos in #13129

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits

cf67d4b Fix linting
f0d8a21 Prepare release v2.13.4
5e3fe1d Check for pydantic tag pattern in CI
7f9edcc Document tagging conventions
b46a0c9 Adapt pydantic-core linker flags on macOS
50629c8 Update to PyPy 7.3.22
8522ebb Preserve RootModel core metadata
a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...

Bumps the minor-and-patch group with 20 updates: | Package | From | To | | --- | --- | --- | | [nameparser](https://github.com/derek73/python-nameparser) | `1.1.3` | `1.4.0` | | [nltk](https://github.com/nltk/nltk) | `3.9.2` | `3.10.0` | | [typer](https://github.com/fastapi/typer) | `0.20.0` | `0.27.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` | | [spacy](https://github.com/explosion/spaCy) | `3.8.11` | `3.8.14` | | [sentence-transformers](https://github.com/huggingface/sentence-transformers) | `5.1.2` | `5.6.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.6` | `0.15.21` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.0` | `4.6.0` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.12.0` | `7.15.2` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.1` | `9.1.1` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` | | [furo](https://github.com/pradyunsg/furo) | `2025.9.25` | `2025.12.19` | | [torch](https://github.com/pytorch/pytorch) | `2.9.1` | `2.13.0` | | [scipy](https://github.com/scipy/scipy) | `1.16.3` | `1.17.1` | | [joblib](https://github.com/joblib/joblib) | `1.5.2` | `1.5.3` | | [polars](https://github.com/pola-rs/polars) | `1.35.2` | `1.42.1` | | [elasticsearch](https://github.com/elastic/elasticsearch-py) | `9.2.0` | `9.4.1` | | [opensearch-py](https://github.com/opensearch-project/opensearch-py) | `3.1.0` | `3.2.0` | | [fastapi](https://github.com/fastapi/fastapi) | `0.122.0` | `0.139.0` | | [deptry](https://github.com/osprey-oss/deptry) | `0.24.0` | `0.25.1` | Updates `nameparser` from 1.1.3 to 1.4.0 - [Release notes](https://github.com/derek73/python-nameparser/releases) - [Changelog](https://github.com/derek73/python-nameparser/blob/master/docs/release_log.rst) - [Commits](derek73/python-nameparser@v1.1.3...v1.4.0) Updates `nltk` from 3.9.2 to 3.10.0 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@3.9.2...v3.10.0) Updates `typer` from 0.20.0 to 0.27.0 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.20.0...0.27.0) Updates `pydantic` from 2.12.5 to 2.13.4 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.4) Updates `spacy` from 3.8.11 to 3.8.14 - [Release notes](https://github.com/explosion/spaCy/releases) - [Commits](explosion/spaCy@release-v3.8.11...release-v3.8.14) Updates `sentence-transformers` from 5.1.2 to 5.6.0 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](huggingface/sentence-transformers@v5.1.2...v5.6.0) Updates `ruff` from 0.14.6 to 0.15.21 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.6...0.15.21) Updates `pre-commit` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.0...v4.6.0) Updates `coverage` from 7.12.0 to 7.15.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.12.0...7.15.2) Updates `pytest` from 9.0.1 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.1...9.1.1) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0) Updates `furo` from 2025.9.25 to 2025.12.19 - [Release notes](https://github.com/pradyunsg/furo/releases) - [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md) - [Commits](pradyunsg/furo@2025.09.25...2025.12.19) Updates `torch` from 2.9.1 to 2.13.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.9.1...v2.13.0) Updates `scipy` from 1.16.3 to 1.17.1 - [Release notes](https://github.com/scipy/scipy/releases) - [Commits](scipy/scipy@v1.16.3...v1.17.1) Updates `joblib` from 1.5.2 to 1.5.3 - [Release notes](https://github.com/joblib/joblib/releases) - [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst) - [Commits](joblib/joblib@1.5.2...1.5.3) Updates `polars` from 1.35.2 to 1.42.1 - [Release notes](https://github.com/pola-rs/polars/releases) - [Commits](pola-rs/polars@py-1.35.2...py-1.42.1) Updates `elasticsearch` from 9.2.0 to 9.4.1 - [Release notes](https://github.com/elastic/elasticsearch-py/releases) - [Commits](elastic/elasticsearch-py@v9.2.0...v9.4.1) Updates `opensearch-py` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/opensearch-project/opensearch-py/releases) - [Changelog](https://github.com/opensearch-project/opensearch-py/blob/main/CHANGELOG.md) - [Commits](opensearch-project/opensearch-py@v3.1.0...v3.2.0) Updates `fastapi` from 0.122.0 to 0.139.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.122.0...0.139.0) Updates `deptry` from 0.24.0 to 0.25.1 - [Release notes](https://github.com/osprey-oss/deptry/releases) - [Changelog](https://github.com/osprey-oss/deptry/blob/main/CHANGELOG.md) - [Commits](osprey-oss/deptry@0.24.0...0.25.1) --- updated-dependencies: - dependency-name: nameparser dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nltk dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: typer dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: spacy dependency-version: 3.8.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sentence-transformers dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.15.21 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: coverage dependency-version: 7.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: furo dependency-version: 2025.12.19 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: torch dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: scipy dependency-version: 1.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: joblib dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: polars dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: elasticsearch dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: opensearch-py dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.139.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: deptry dependency-version: 0.25.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-23T09:26:53Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 23, 2026

github-actions Bot approved these changes Jul 23, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) July 23, 2026 05:52

dependabot Bot closed this Jul 23, 2026

auto-merge was automatically disabled July 23, 2026 09:26
Pull request was closed

dependabot Bot deleted the dependabot/uv/minor-and-patch-3042d4092a branch July 23, 2026 09:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-and-patch group with 20 updates - #19

Bump the minor-and-patch group with 20 updates#19
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/minor-and-patch-3042d4092a

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.4.0

v1.3.1

Bug fixes

v1.3.0

Deprecations (removal in 2.0)

Breaking changes

Behavior changes affecting parse output (default-on)

New

v3.10.0-rc1

What's Changed

0.27.0

Breaking Changes

Internal

0.26.8

Fixes

Docs

Internal

0.26.7

Fixes

0.27.0 (2026-07-15)

Breaking Changes

Internal

0.26.8 (2026-06-25)

Fixes

Docs

Internal

0.26.7 (2026-06-03)

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 2026-04-13

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 (2026-04-13)

Uh oh!

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading