Bump the pip group across 1 directory with 6 updates #263

dependabot · 2025-06-02T12:02:40Z

Bumps the pip group with 6 updates in the / directory:

Package	From	To
grpcio	`1.70.0`	`1.72.1`
protobuf	`5.29.4`	`5.29.5`
protovalidate	`0.7.1`	`0.8.0`
grpcio-tools	`1.70.0`	`1.71.0`
mypy	`1.15.0`	`1.16.0`
types-protobuf	`5.29.1.20250403`	`6.30.2.20250516`

Updates grpcio from 1.70.0 to 1.72.1

Release notes

Sourced from grpcio's releases.

Release v1.72.1

This is release gRPC Core 1.72.1 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Pin Cython to 3.1.1 #39609

This solves several issues:

#39588: Selecting unstable Cython releases when building gRPC Python artifacts.

Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.

cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).

Fix Python 3.12 MacOS universal release artifact #39418

Release v1.72.0

This is release gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Release v1.72.0-pre1

This is a prerelease of gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.71.1

This is release gRPC Core 1.71.1 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

[RLS] fix use-after-free from accessing config after LB policy shutdown (grpc/grpc#39303)

[EventEngine] Fix busy loop in thread pool when shutting down (grpc/grpc#39258)

Release v1.71.0

This is release gRPC Core 1.71.0 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

... (truncated)

Commits

1ca7b98 [Release] Bump version to 1.72.1 (on v1.72.x branch) (#39719)
54bd142 [Backport][v1.72]Added #defined to force disable secure_getenv (#39343) (#39715)
8a3e247 [SSA] backport fix to 1.72.x (#39704)
967170c Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
e1e0264 [Backport][v1.72.x][Python] Fix Python Linux distribtests copy conflicts (#39...
2abb6f3 [Backport][v1.72.x][Python] Pin Cython to 3.1.1 (#39609) (#39632)
fbd68c7 [Backport][v1.72.x] Fix Python 3.12 MacOS release artifact (#39418) (#39504)
84c340d [Backport][v1.72.x] Protect grpc generated sources from unwanted system macro...
3b179f8 [Backport-v1.72.x] [Build] Fix use_openssl=true (#39420)
6c47208 [RLS] fix use-after-free from accessing config after LB policy shutdown (v1.7...
Additional commits viewable in compare view

Updates protobuf from 5.29.4 to 5.29.5

Commits

f5de0a0 Updating version.json and repo version numbers to: 29.5
8563766 Merge pull request #21858 from shaod2/py-cp-29
05ba1a8 Add recursion depth limits to pure python
1ef3f01 Internal pure python fixes
69cca9b Remove fast-path check for non-clang compilers in MessageCreator. (#21612)
21fdb7a fix: contains check segfaults on empty map (#20446) (#20904)
03c50e3 Re-enable aarch64 tests. (#20853)
128f0aa Add volatile to featuresResolved (#20767)
bdd49bb Merge pull request #20755 from protocolbuffers/29.x-202503192110
c659468 Updating version.json and repo version numbers to: 29.5-dev
See full diff in compare view

Updates protovalidate from 0.7.1 to 0.8.0

Release notes

Sourced from protovalidate's releases.

v0.8.0

What's Changed

protovalidate-python is now conformant with protovalidate v0.11.0, sans current known limitations (higher resolution timestamps/durations, which are not currently supported by the CEL implementation.) Various dependencies are also updated.

Various maintenance by @stefanvanburen in bufbuild/protovalidate-python#261

Bump pytest from 8.3.4 to 8.3.5 by @dependabot in bufbuild/protovalidate-python#263

Bump ruff from 0.9.7 to 0.11.7 by @dependabot in bufbuild/protovalidate-python#262, bufbuild/protovalidate-python#264, bufbuild/protovalidate-python#267, bufbuild/protovalidate-python#270, bufbuild/protovalidate-python#278, bufbuild/protovalidate-python#289, bufbuild/protovalidate-python#293

Bump types-protobuf from 5.29.1.20250208 to 5.29.1.20250403 by @dependabot in bufbuild/protovalidate-python#266, bufbuild/protovalidate-python#279

Bump protobuf from 5.29.3 to 6.30.2 by @dependabot in bufbuild/protovalidate-python#265, bufbuild/protovalidate-python#276

Update to protovalidate 0.11.0 by @timostamm, @smaye81 in bufbuild/protovalidate-python#268, bufbuild/protovalidate-python#280, bufbuild/protovalidate-python#291

Prepare GitHub docs for shift to buf.build/docs by @jrinehart-buf in bufbuild/protovalidate-python#260

Move unit tests to local protos by @smaye81 in bufbuild/protovalidate-python#288

Upgrade validation logic by @smaye81 in bufbuild/protovalidate-python#275

Implement getField CEL function by @jchadwick-buf in bufbuild/protovalidate-python#290

Fix various v0.11.0 conformance issues by @jchadwick-buf in bufbuild/protovalidate-python#294

New Contributors

@jrinehart-buf made their first contribution in bufbuild/protovalidate-python#260

Full Changelog: bufbuild/protovalidate-python@v0.7.1...v0.8.0

Commits

12155fb Fix various v0.11.0 conformance issues (#294)
d09b71f Bump ruff from 0.11.6 to 0.11.7 (#293)
c3e7516 Upgrade to Protovalidate v0.11.0 (#291)
3a35cc4 Implement getField CEL function (#290)
44885c1 Upgrade validation logic (#275)
8979f49 Bump ruff from 0.11.4 to 0.11.6 (#289)
982f604 Move unit tests to local protos (#288)
8c767e9 Bump types-protobuf from 5.29.1.20250315 to 5.29.1.20250403 (#279)
fe0760d Bump ruff from 0.11.2 to 0.11.4 (#278)
0254834 Bump protobuf from 6.30.1 to 6.30.2 (#276)
Additional commits viewable in compare view

Updates grpcio-tools from 1.70.0 to 1.71.0

Release notes

Sourced from grpcio-tools's releases.

Release v1.71.0

This is release gRPC Core 1.71.0 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

[CallAttemptTracer] Fix call attempt tracer lifetimes for retries (#38729). (#38796)

[pick_first] fix bug that caused us to stop triggering connection attempts. (#38714)

[CodeGen][CPP] Added support for service "deprecated" option. (#38493)

[EventEngine] Add SetDefaultEventEngine API (and friends). (#38316)

C++

[build] Restrict grpc++_public_hdrs target to internal visibility. (#38646)

[Doc] Added C++17 cmake option. (#38432)

Python

[CI] Drop Python 3.8. (#38747)

[Python] Support musl-linux binary wheels on arm64. (#38223)

Ruby

[ruby] Build/test ruby 3.4 and build native gems with Ruby 3.4 support. (#38338)

Release v1.71.0-pre3

This is a prerelease of gRPC Core 1.71.0 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.71.0-pre2

This is a prerelease of gRPC Core 1.71.0 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.70.2

This is release gRPC Core 1.70.2 (genius).

... (truncated)

Commits

4e9357b Bump release version 202503061239 (#38943)
019447a [Backport-1.71.x] Work around gcc9 compilation error (#38935)
07fb201 [Backport-v1.71.x] Added std=c++17 to BCR presubmit test (#38902)
bf56e95 [Release] Bump version to 1.71.0-pre3 (on v1.71.x branch) (#38899)
e914907 [Backport-1.71.x] Added .bcr for publish-to-bcr (#38886)
b562d64 [Backport-to-v1.71] [Dep] Upgrade protoc-gen-validate to 1.2.1 (#38859)
3293a30 [Backport-to-v1.71] [UPB] Workaround for protobuf v30 upgrade (#38860)
e6c20e4 Bump release version 202502211249 (#38807)
c288114 [CallAttemptTracer] Fix call attempt tracer lifetimes for retries (#38729) (#...
a1f945b [chttp2] Fix channelz address (#38793) (#38795)
Additional commits viewable in compare view

Updates mypy from 1.15.0 to 1.16.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:
class A:
    _value: int
@property
def foo(self) -&gt; int:
    return self._value
@foo.setter
def foo(self, x: str | int) -&gt; None:
try:
self._value = int(x)
except ValueError:
raise Exception(f&quot;'{x}' is not a valid value for 'foo'&quot;)
This was contributed by Ivan Levkivskyi (PR 18510).

Flexible Variable Redefinitions (Experimental)

Mypy now allows unannotated variables to be freely redefined with different types when using the experimental --allow-redefinition-new flag. You will also need to enable --local-partial-types. Mypy will now infer a union type when different types are assigned to a variable:
# mypy: allow-redefinition-new, local-partial-types
def f(n: int, b: bool) -> int | str:
if b:
x = n
else:
</tr></table>

... (truncated)

Commits

9e72e96 Update version to 1.16.0
8fe719f Add changelog for 1.16 (#19138)
2a036e7 Revert "Infer correct types with overloads of Type[Guard | Is] (#19161)
b6da4fc Allow enum members to have type objects as values (#19160)
334469f [mypyc] Improve documentation of native and non-native classes (#19154)
a499d9f Document --allow-redefinition-new (#19153)
96525a2 Merge commit '9e45dadcf6d8dbab36f83d9df94a706c0b4f9207' into release-1.16
9e45dad Clear more data in TypeChecker.reset() instead of asserting (#19087)
772cd0c Add --strict-bytes to --strict (#19049)
0b65f21 Admit that Final variables are never redefined (#19083)
Additional commits viewable in compare view

Updates types-protobuf from 5.29.1.20250403 to 6.30.2.20250516

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [grpcio](https://github.com/grpc/grpc) | `1.70.0` | `1.72.1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.5` | | [protovalidate](https://github.com/bufbuild/protovalidate-python) | `0.7.1` | `0.8.0` | | [grpcio-tools](https://github.com/grpc/grpc) | `1.70.0` | `1.71.0` | | [mypy](https://github.com/python/mypy) | `1.15.0` | `1.16.0` | | [types-protobuf](https://github.com/typeshed-internal/stub_uploader) | `5.29.1.20250403` | `6.30.2.20250516` | Updates `grpcio` from 1.70.0 to 1.72.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.70.0...v1.72.1) Updates `protobuf` from 5.29.4 to 5.29.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v5.29.4...v5.29.5) Updates `protovalidate` from 0.7.1 to 0.8.0 - [Release notes](https://github.com/bufbuild/protovalidate-python/releases) - [Commits](bufbuild/protovalidate-python@v0.7.1...v0.8.0) Updates `grpcio-tools` from 1.70.0 to 1.71.0 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.70.0...v1.71.0) Updates `mypy` from 1.15.0 to 1.16.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.15.0...v1.16.0) Updates `types-protobuf` from 5.29.1.20250403 to 6.30.2.20250516 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.72.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: protovalidate dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: grpcio-tools dependency-version: 1.71.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: mypy dependency-version: 1.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: types-protobuf dependency-version: 6.30.2.20250516 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-06-02T12:19:13Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added the area/dependencies Affects dependencies label Jun 2, 2025

dependabot bot requested a review from a team as a code owner June 2, 2025 12:02

dependabot bot added the area/dependencies Affects dependencies label Jun 2, 2025

vroldanbet closed this Jun 2, 2025

vroldanbet reopened this Jun 2, 2025

github-actions bot locked and limited conversation to collaborators Jun 2, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the pip group across 1 directory with 6 updates #263

Bump the pip group across 1 directory with 6 updates #263

Uh oh!

dependabot bot commented on behalf of github Jun 2, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 2, 2025

Uh oh!

Uh oh!

Bump the pip group across 1 directory with 6 updates #263

Are you sure you want to change the base?

Bump the pip group across 1 directory with 6 updates #263

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 2, 2025

Release v1.72.1

Python

Release v1.72.0

Release v1.72.0-pre1

Release v1.71.1

Release v1.71.0

Core

v0.8.0

What's Changed

New Contributors

Release v1.71.0

Core

C++

Python

Ruby

Release v1.71.0-pre3

Release v1.71.0-pre2

Release v1.70.2

Mypy Release Notes

Next Release

Mypy 1.16

Different Property Getter and Setter Types

Flexible Variable Redefinitions (Experimental)

Uh oh!

dependabot bot commented on behalf of github Jun 2, 2025

Uh oh!

Uh oh!