Skip to content

Bump the python-packages group across 1 directory with 3 updates#166

Merged
MaxHalford merged 1 commit intomainfrom
dependabot/uv/python-packages-1a07abb88d
Jan 27, 2026
Merged

Bump the python-packages group across 1 directory with 3 updates#166
MaxHalford merged 1 commit intomainfrom
dependabot/uv/python-packages-1a07abb88d

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 27, 2026

Bumps the python-packages group with 3 updates in the / directory: duckdb, pandas and rich.

Updates duckdb from 1.4.3 to 1.4.4

Release notes

Sourced from duckdb's releases.

v1.4.4 Bugfix Release

DuckDB core v1.4.4 Changelog: duckdb/duckdb@v1.4.3...v1.4.4

What's Changed in the Python Extension

Full Changelog: duckdb/duckdb-python@v1.4.3...v1.4.4

Commits
  • a12f36c Prepare for v1.4.4 (#280)
  • 77a3f8d Set submodule to release hash
  • f1711b5 Support for Pandas 3.0.0 (#277)
  • 8361d73 Move slow tests to slow and fix test error when pyarrow is missing
  • 5d9b64e Add timedelta[s|ms|us|ns] numpy types
  • 5a654d3 pandas default backend fixes
  • 9d6edb6 dependency updates and fix for lazy attribute accessors
  • c2e6505 Support Pandas' new str type
  • e32ed3e Fix DECREF bug during interpreter shutdown (#275)
  • 39c384b Fix DECREF bug during interpreter shutdown
  • Additional commits viewable in compare view

Updates pandas from 2.3.3 to 3.0.0

Release notes

Sourced from pandas's releases.

pandas 3.0.0

We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes various new features, bug fixes, and performance improvements, as well as possible breaking changes.

The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.

Highlights include:

See the announcement blog post and the detailed release notes for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Pandas 3.0.0rc2

No release notes provided.

Pandas 3.0.0rc1

No release notes provided.

Pandas 3.0.0rc0

We are pleased to announce a first release candidate for pandas 3.0.0. If all goes well, we'll release pandas 3.0.0 in a few weeks.

See the [whatsnew][0] for a list of all the changes.

The release is available on conda-forge and PyPI.

The release can be installed from PyPI

python -m pip install --upgrade --pre pandas==3.0.0rc0

Or from conda-forge

conda install -c conda-forge/label/pandas_rc pandas==3.0.0rc0

Please report any issues with the release candidate on the pandas issue tracker.

... (truncated)

Commits
  • 366ccdf RLS: 3.0.0
  • 139f4d0 DOC: split/reorder other enhancements section in 3.0.0 whatsnew notes (#63762)
  • fd2a4f4 TST: assert reading of legacy pickles against current data (#61792)
  • cc0bcaa DOC: update whatsnew section on datetimelike resolution (#63780)
  • 3ddbb49 DOC: remove 2.3.4 whatsnew file from released 3.0 docs (#63779)
  • ee63532 CLN: Create temporary HDF5 file path and HDFStore for pytables tests (#63492)
  • 9512e99 CoW: better chained assignment warning message for update() method (#63500)
  • 1db90d5 API: rename read_iceberg selected_fields keyword to columns (#63748)
  • c9b51fa BUG: .str methods failing on PyArrow using regex with \Z (#63705)
  • 7cff0f4 API: Period.to_timestamp default to microsecond unit (#63760)
  • Additional commits viewable in compare view

Updates rich from 14.2.0 to 14.3.1

Release notes

Sourced from rich's releases.

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Changelog

Sourced from rich's changelog.

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Upgrade pandas to 3.0.0, duckdb to 1.4.4, and rich to 14.3.1 to pick up bug fixes and pandas 3 support. Updates the pandas upper bound in pyproject and refreshes uv.lock.

  • Migration
    • Run the test suite and fix pandas 3 changes: default string dtype, Copy-on-Write behavior, and datetime resolution.
    • Replace any pytz usage with zoneinfo or add pytz explicitly if still required.
    • Verify duckdb <-> pandas DataFrame paths work as expected with pandas 3.

Written for commit 3b7f301. Summary will update on new commits.

Bumps the python-packages group with 3 updates in the / directory: [duckdb](https://github.com/duckdb/duckdb-python), [pandas](https://github.com/pandas-dev/pandas) and [rich](https://github.com/Textualize/rich).


Updates `duckdb` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.4.3...v1.4.4)

Updates `pandas` from 2.3.3 to 3.0.0
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.0)

Updates `rich` from 14.2.0 to 14.3.1
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.2.0...v14.3.1)

---
updated-dependencies:
- dependency-name: duckdb
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pandas
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: rich
  dependency-version: 14.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 27, 2026
Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Architecture diagram
sequenceDiagram
    participant App as Application Logic
    participant Duck as DuckDB (v1.4.4)
    participant Pandas as Pandas (v3.0.0)
    participant Rich as Rich (v14.3.1)

    Note over App,Rich: Impact of Major Version Upgrade (Pandas 3.0 + DuckDB Integration)

    App->>Duck: execute("SELECT ...")
    
    Note over Duck,Pandas: UPDATED: DuckDB now supports Pandas 3.0 types
    Duck->>Pandas: to_df() / fetchdf()
    
    alt Backend Data Construction
        Pandas->>Pandas: NEW: infer_objects()
        Note right of Pandas: Strings now use "string[pyarrow]"<br/>or new numpy string dtype by default
    end
    
    Pandas-->>Duck: DataFrame Object
    Duck-->>App: Returns DataFrame

    Note over App,Pandas: CHANGED: Pandas 3.0 Runtime Behavior

    App->>Pandas: Operation (e.g., slice, modify)
    
    alt Copy-on-Write (CoW) Behavior
        Pandas->>Pandas: Check reference counts
        opt Modification on View
            Pandas->>Pandas: NEW: Trigger deep copy
            Note right of Pandas: Prevents side-effects<br/>No SettingWithCopyWarning
        end
    end

    App->>Rich: console.print(dataframe)
    Rich->>Pandas: Iterates values
    Rich->>Rich: CHANGED: Calculate cell widths
    Note right of Rich: Fixes for multi-codepoint/emoji widths
    Rich-->>App: Renders to Terminal
Loading

@MaxHalford MaxHalford merged commit 1155b1f into main Jan 27, 2026
3 checks passed
@MaxHalford MaxHalford deleted the dependabot/uv/python-packages-1a07abb88d branch January 27, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant