Skip to content

build(deps): bump the simple group in /ci/builder with 4 updates - #38421

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/ci/builder/simple-e1a4f853e0
Open

build(deps): bump the simple group in /ci/builder with 4 updates#38421
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/pip/ci/builder/simple-e1a4f853e0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the simple group in /ci/builder with 4 updates: boto3, ipywidgets, shtab and xxhash.

Updates boto3 from 1.43.72 to 1.43.76

Commits

Updates ipywidgets from 8.1.8 to 8.1.9

Release notes

Sourced from ipywidgets's releases.

Release 8.1.9

What's Changed

New Contributors

Full Changelog: jupyter-widgets/ipywidgets@8.1.8...8.1.9

Commits

Updates shtab from 1.10.0 to 1.11.0

Release notes

Sourced from shtab's releases.

shtab v1.11.0 stable

  • 📚 add helpful headers (instructions to end-users) to generated scripts (#253)
  • ⚙️ add complex developer examples (#253)
  • ⏪ support bash completion mid-command (#248 <- #116)
  • 🗃️ bash: drop global compopt -o filenames (#250 <- #67)
  • 🍂 fix fallbacks (#252)
    • 🥇 zsh: metavar overrides dest
    • 🍥 zsh & fish: description overrides help, rewrap descriptions
    • 🤫 tcsh: respect help=SUPPRESS
    • 😖 fix choices: dict without confusing with subparsers (#214 -> #220)
    • ⏩ forward-compatible with python/cpython#67037
  • 📚 update FAQs (#252 <- #190, #169, #105)
  • 🔀 fix zsh positional ordering (#251 <- #123)
  • 🧹 misc tidying
Commits
  • df4d2d2 Merge pull request #253 from tqdm/user-help
  • cdc6094 lint
  • a6f73e3 add end-user help in scripts
  • 31b46d3 update example
  • d74f60e Merge pull request #250 from ThomasWaldmann/fix-bash-subcommand-slash-67
  • 2089c80 speedup & harmonise tests
  • 3597b0e lint
  • 9e54b4a backward-compat function name safeguard
  • 9ff52ba bash: re-enable filename processing for builtin functions
  • 1cb83f0 bash: drop global compopt -o filenames
  • Additional commits viewable in compare view

Updates xxhash from 4.0.0 to 4.0.1

Release notes

Sourced from xxhash's releases.

v4.0.1

  • Clean up _parse_init_args keyword handling so the defensive check for a duplicate data keyword raises a proper error message
  • Add _xxhash module docstring

Full Changelog: ifduyue/python-xxhash@v4.0.0...v4.0.1

Changelog

Sourced from xxhash's changelog.

v4.0.1 2026-08-17


- Clean up ``_parse_init_args`` keyword handling so the defensive check
  for a duplicate ``data`` keyword raises a proper error message
- Add ``_xxhash`` module docstring
Commits
  • e2c1bcf Release v4.0.1
  • 669a69c Clean up _parse_init_args keyword handling
  • 4a6136d build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1
  • aa26ed6 Bump version to 4.0.1.dev0
  • d774e2a Add _xxhash module docstring
  • c8d9a0e Clarify changelog: update() keyword and GIL release threshold
  • 80d42d2 Mention exact str rejection error in changelog
  • befdf3b Update changelog: note str input rejection
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
boto3 [>= 1.42.dev0, < 1.43]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the simple group in /ci/builder with 4 updates: [boto3](https://github.com/boto/boto3), [ipywidgets](https://github.com/jupyter-widgets/ipywidgets), [shtab](https://github.com/tqdm/shtab) and [xxhash](https://github.com/ifduyue/python-xxhash).


Updates `boto3` from 1.43.72 to 1.43.76
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.72...1.43.76)

Updates `ipywidgets` from 8.1.8 to 8.1.9
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@8.1.8...8.1.9)

Updates `shtab` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](tqdm/shtab@v1.10.0...v1.11.0)

Updates `xxhash` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v4.0.0...v4.0.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.76
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: simple
- dependency-name: ipywidgets
  dependency-version: 8.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: simple
- dependency-name: shtab
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: simple
- dependency-name: xxhash
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: simple
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the A-dependencies Area: dependency upgrades label Aug 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 23, 2026 22:04
@dependabot dependabot Bot added the A-dependencies Area: dependency upgrades label Aug 23, 2026

@bosconi bosconi left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good.

shtab 1.11.0 changes its generated bash and zsh templates (usage headers,
per-action compopt handling, zsh positional ordering), so the checked-in
scripts under misc/completions no longer match what bin/gen-completion
produces. That makes `bin/gen-completion check` fail in the lint job.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

A-dependencies Area: dependency upgrades

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant