Skip to content

Build(deps): Update pueblo requirement from >=0.0.18 to >=0.1.0 in /by-language/python-sqlalchemy - #2120

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/by-language/python-sqlalchemy/pueblo-gte-0.1.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/by-language/python-sqlalchemy/pueblo-gte-0.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on pueblo to permit the latest version.

Release notes

Sourced from pueblo's releases.

v0.1.0

What's Changed

  • IO: Fix software test, because S3 might have learned application/x-hdf5
  • ngr: Various version updates

Details

Full Changelog: pyveci/pueblo@v0.0.19...v0.1.0

Changelog

Sourced from pueblo's changelog.

2026-10-01 v0.1.0

  • IO: Fix software test, because S3 learned application/x-hdf5
  • ngr: Version updates

2026-07-06 v0.0.19

  • general: Adjusted dependency specification for click-aliases, for compatibility with Python 3.8.
  • nlp: Downgraded to unstructured 0.17, to get rid of the transitive llvmlite and numba dependencies
  • ngr: Accompanied changes in poethepoet v0.43 and newer

2026-04-07 v0.0.18

  • general: Downgrade to poethepoet 0.42 to fix task runner API
  • nlp: Relax package dependencies by removing upper bounds. The idea of a "validated ecosystem" is counter-productive in this case, because the strict constraints limit test case evolution.

2026-03-22 v0.0.17

  • mcp: Added McpConversation helper for exercising an MCP server

2026-03-22 v0.0.16

  • Replaced NLTK with spaCy to remediate CVE-2025-14009, following the decision of the unstructured package. NLTK's downloader uses zipfile.extractall() without path validation, enabling RCE via malicious packages (CVSS 10.0, no patch available). spaCy models install as pip packages, eliminating the vulnerable downloader entirely.
  • ngr: Added runner for shell scripts like test.sh

2026-02-08 v0.0.15

  • Downgraded to unstructured v0.18.27 due to installation problems with llvmlite

2026-01-25 v0.0.14

  • Testing: Fixed ValueError: Invalid frequency: S. Failed to parse with error message: Did you mean s?
  • ngr: Updated to poethepoet 0.38 at ngr-python-test-poethepoet
  • CI: Partially validated on Python 3.14t (free threading)

2025-12-15 v0.0.13

  • nlp: Switched from langchain to langchain-core
  • Testing: Migrated from pytest's LocalPath to pathlib.Path

2025-11-05 v0.0.12

  • ngr: Stopped overwriting existing Gradle wrapper. The --gradle-wrapper option can be used to optionally regenerate the Gradle wrapper now.

... (truncated)

Commits
  • 1d505f2 Release v0.1.0
  • 1914014 Chore: Update changelog
  • 1145402 Update dependency java-jdk to v25 (#341)
  • 76a397b Update dependency erlang/otp to v29
  • 15de762 Update dependency mcp to v2
  • 683a16e Update dependency elixir-lang/elixir to 1.19 || 1.20
  • 7de2d5c CI: Update to Erlang/OTP 28
  • 038c711 Update dependency elixir-lang/elixir to 1.19
  • 26ba473 Update dependency coverlet.collector to 10.1.0
  • 69f945e Update dependency ty to v0.0.84
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Concerns of dependencies. python Pull requests that update Python code labels Oct 5, 2026
@coderabbitai

coderabbitai Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: e728faf6-831e-486e-bc2c-98bffb5ac2db

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Updates the requirements on [pueblo](https://github.com/pyveci/pueblo) to permit the latest version.
- [Release notes](https://github.com/pyveci/pueblo/releases)
- [Changelog](https://github.com/pyveci/pueblo/blob/main/CHANGES.md)
- [Commits](pyveci/pueblo@v0.0.18...v0.1.0)

---
updated-dependencies:
- dependency-name: pueblo
  dependency-version: 0.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/by-language/python-sqlalchemy/pueblo-gte-0.1.0 branch from c5e180c to d2a646d Compare October 20, 2026 08:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Concerns of dependencies. python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants