Skip to content

Bump yarl from 1.21.0 to 1.22.0 - #11594

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/pip/yarl-1.22.0
Oct 9, 2025
Merged

github-actions[bot] merged 1 commit into
masterfrom
dependabot/pip/yarl-1.22.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2025 •

Copy link
Copy Markdown
Contributor

Bumps yarl from 1.21.0 to 1.22.0.

Release notes

Sourced from yarl's releases.

1.22.0

Features

  • Added arm64 Windows wheel builds -- by :user:finnagin.

    Related issues and pull requests on GitHub: #1516.


1.20.1

Bug fixes

  • Started raising a :exc:ValueError exception raised for corrupted IPv6 URL values.

    These fixes the issue where exception :exc:IndexError was leaking from the internal code because of not being handled and transformed into a user-facing error. The problem was happening under the following conditions: empty IPv6 URL, brackets in reverse order.

    -- by :user:MaelPic.

    Related issues and pull requests on GitHub: #1512.

Packaging updates and notes for downstreams

  • Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #1514.

  • Made Cython line tracing opt-in via the with-cython-tracing build config setting -- by :user:bdraco.

    Previously, line tracing was enabled by default in :file:pyproject.toml, which caused build issues for some users and made wheels nearly twice as slow. Now line tracing is only enabled when explicitly requested via pip install . --config-setting=with-cython-tracing=true or by setting the YARL_CYTHON_TRACING environment variable.

    Related issues and pull requests on GitHub: #1521.


Changelog

Sourced from yarl's changelog.

1.22.0

(2025-10-05)

Features

  • Added arm64 Windows wheel builds -- by :user:finnagin.

    Related issues and pull requests on GitHub: :issue:1516.


Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 6, 2025
@dependabot
dependabot Bot requested review from asvetlov and webknjaz as code owners October 6, 2025 23:12
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 6, 2025
@github-actions
github-actions Bot enabled auto-merge (squash) October 6, 2025 23:28
@codspeed

codspeed Bot commented Oct 6, 2025 •

Copy link
Copy Markdown

CodSpeed Performance Report

Merging #11594 will not alter performance

Comparing dependabot/pip/yarl-1.22.0 (7bf372c) with master (df8ad83)

Summary

✅ 59 untouched

@codecov

codecov Bot commented Oct 6, 2025 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.73%. Comparing base (df8ad83) to head (7bf372c).
⚠️ Report is 283 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11594      +/-   ##
==========================================
- Coverage   98.74%   98.73%   -0.01%     
==========================================
  Files         127      127              
  Lines       43448    43448              
  Branches     2326     2326              
==========================================
- Hits        42903    42900       -3     
- Misses        389      392       +3     
  Partials      156      156              
Flag Coverage Δ
CI-GHA 98.62% <ø> (-0.01%) ⬇️
OS-Linux 98.35% <ø> (-0.01%) ⬇️
OS-Windows 96.69% <ø> (ø)
OS-macOS 97.58% <ø> (ø)
Py-3.10.11 97.15% <ø> (+<0.01%) ⬆️
Py-3.10.18 97.64% <ø> (ø)
Py-3.11.13 97.84% <ø> (-0.01%) ⬇️
Py-3.11.9 97.35% <ø> (ø)
Py-3.12.10 97.45% <ø> (ø)
Py-3.12.11 97.94% <ø> (ø)
Py-3.13.7 98.20% <ø> (ø)
Py-3.14.0 98.15% <ø> (ø)
Py-3.14.0t 97.21% <ø> (ø)
Py-pypy3.10.16-7.3.19 91.96% <ø> (+4.50%) ⬆️
VM-macos 97.58% <ø> (ø)
VM-ubuntu 98.35% <ø> (-0.01%) ⬇️
VM-windows 96.69% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot
dependabot Bot force-pushed the dependabot/pip/yarl-1.22.0 branch from 13a2472 to 59f5000 Compare October 7, 2025 00:19
Bumps [yarl](https://github.com/aio-libs/yarl) from 1.21.0 to 1.22.0.
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.21.0...v1.22.0)

---
updated-dependencies:
- dependency-name: yarl
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/yarl-1.22.0 branch from 59f5000 to 7bf372c Compare October 9, 2025 12:33
@github-actions
github-actions Bot merged commit b8e6596 into master Oct 9, 2025
41 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/yarl-1.22.0 branch October 9, 2025 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants