Skip to content

chore(deps): bump dependencies, keep py3.9 via version-marker splits (BLDX-1571)#982

Merged
Aryamanz29 merged 1 commit into
mainfrom
aryaman/bldx-1571
Jul 21, 2026
Merged

chore(deps): bump dependencies, keep py3.9 via version-marker splits (BLDX-1571)#982
Aryamanz29 merged 1 commit into
mainfrom
aryaman/bldx-1571

Conversation

@Aryamanz29

Copy link
Copy Markdown
Member

What

Brings dependencies current while preserving Python >= 3.9.1 support, using the python_version marker-split pattern established for msgspec in CNCT-85 (#977). Packages whose latest release drops py3.9 are pinned to their last 3.9-compatible version on < '3.10' (or < '3.11' for networkx) and the current release on the newer interpreters.

httpx (the original trigger)

  • httpx needs no change — latest stable is 0.28.1, exactly our pin. The 3.9-dropping release is the 1.0 dev line (not GA). When 1.0 ships, adopt via the same split — noted in BLDX-1571.
  • Its companion httpx-retries got the split now (0.4.6 on <3.10 / 0.6.0 on 3.10+).

Bumps

Runtime: httpx-retries 0.4→0.6, authlib 1.6→1.7, tenacity 9.1.2→9.1.4 (3.10+), networkx 3.2→3.6 (3.11+), lazy-loader 0.4→0.5, pytz 2026.1→2026.2.
Dev: pytest 8→9, mypy 1.19→2.3, vcrpy 7→8, deepdiff 8→9, pytest-asyncio 1.2→1.4, pre-commit 4.3→4.6, filelock 3.25→3.32, urllib3 2.6→2.7, types-* bumped, ruff 0.15.5→0.15.22, pytest-cov/pytest-order/virtualenv minor.
Docs: mkdocs-material 9.6→9.7. (mkdocstrings held at 0.29 — 1.x is a major config-format change and the docs build isn't in unit-test scope; separate follow-up.)

uv.lock + requirements.txt regenerated (uv export --all-extras --no-hashes), mirroring #977.

Verification

Ran the full unit suite on both ends of the support range in isolated venvs:

  • py3.9 (floor): 6997 passed, 5 skipped
  • py3.13 (ceiling): 6997 passed, 5 skipped

Plus qa-checks: ruff format/ruff check clean, mypy 2.3.0 (the major bump) — no issues across 994 files. No coverage-threshold changes.

Notes

  • No version.txt/HISTORY.md bump — dependency bumps ride the next [release] PR (per the CNCT-85 precedent).
  • The 5 major bumps (pytest 9, mypy 2, deepdiff 9, vcrpy 8) all pass as-is; no fallbacks were needed.

Ticket: BLDX-1571

🤖 Generated with Claude Code

…ts (BLDX-1571)

Brings deps current while preserving Python >= 3.9.1 support using the msgspec
marker-split pattern (CNCT-85). Packages whose latest drops py3.9 are pinned to
their last 3.9-compatible release on <3.10 (or <3.11 for networkx) and the
current release on 3.10+.

Runtime: httpx-retries 0.4->0.6, authlib 1.6->1.7, tenacity 9.1.2->9.1.4
(3.10+), networkx 3.2->3.6 (3.11+), lazy-loader 0.4->0.5, pytz 2026.1->2026.2.
httpx stays 0.28.1 (latest stable; 1.0 is dev-only, drops 3.9 — follow-up).
Dev: pytest 8->9, mypy 1.19->2.3, vcrpy 7->8, deepdiff 8->9, pytest-asyncio
1.2->1.4, pre-commit 4.3->4.6, filelock/urllib3/types-* bumped, ruff 0.15.5->
0.15.22, pytest-cov/pytest-order/virtualenv/mkdocs-material minor bumps.

Verified: unit tests pass on py3.9 (floor) AND py3.13 (ceiling) — 6997 passed,
5 skipped each; ruff + mypy 2.3.0 clean (994 files). No version/HISTORY bump —
rides the next [release] PR, per the CNCT-85 precedent.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@linear

linear Bot commented Jul 21, 2026

Copy link
Copy Markdown

BLDX-1571

@Aryamanz29
Aryamanz29 merged commit f68f2b5 into main Jul 21, 2026
61 of 74 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant