[dependabot]

Bumps narwhals from 2.27.1 to 2.28.0.

Release notes

Sourced from narwhals's releases.

Narwhals v2.28.0

Changes

🚀 Performance improvements

• perf: drop_nulls before unique in Polars cat.get_categories (#4082)

✨ Enhancements

• feat: Extend plugin support for IO and from_* methods/functions (#3753)
• feat: support list.{len,get,min,max,mean,median,sum,sort} for Dask (#4017)

🐞 Bug fixes

• fix null-handling in mode for sql like (#4111)
• fix: ignore modules that are still being imported (#4068)
• fix: handle eager plugin native objects in is_into_lazyframe, get_native_namespace and Series.__getitem__ (#4098)
• fix: Consistently raise DuplicateError in rename (#4104)
• fix: support DuckDB 2.0 in joins, time zone lookup and from_native typing (#4099)
• ci: fix lightgbm, patch tea-tasting (#4100)
• fix: var/std on Dask return null for N <= ddof, and zero instead of null for constant group_by groups (#4081)
• fix: don't raise unhashable type for cuDF categorical columns (#4090)
• fix: treat non-ASCII letters as word characters in str.to_titlecase on DuckDB, Spark-like and old polars (#4085)
• fix: restore set difference between selectors (#4087)
• fix: return selector union columns in schema order (#4032)
• fix: correct var/std with ddof > 1 on SQL backends, including over and null for N <= ddof (#4022)
• fix: stop using DuckDBPyRelation.fetchone, removed in DuckDB 2.0 (#4078)
• test: fix Implementation typing tests for pyrefly 1.4 (#4077)
• fix: floor // on DuckDB for negative operands and floats (#3994)
• fix: keep the dtype of scalar reduction results on the PyArrow backend (#4043)
• fix: raise InvalidOperationError for mismatched list.contains items on pyarrow-backed backends (#3915)
• fix: raise consistent errors for invalid descending/reverse in sort and top_k (#4038)
• fix: do not drop nulls in mode on pandas-like and dask (#4061)
• fix: avoid copying numpy arrays in pandas Series.from_numpy on pandas 3 (#4096)
• fix: DuckDB dt.total_* wrong for durations of one hour or more (#4106)
• fix: return null from arg_min and arg_max when no valid values exist (#4079)

📖 Documentation

• docs: mention forward_fill / ffill in fill_null docs (#4057)
• docs: document that null values are ignored in aggregations (#4050)
• docs: document unicode case mapping differences in str.{to_uppercase,to_lowercase} (#3986)

🛠️ Other improvements

• test: avoid tied sort keys in first/last group-by test (#4112)
• chore: make bump_version.py fail-safe and stop it from churning uv.lock (#4052)
• test: use packaging.version.Version for backend version checks (#4066)
• chore(deps): lock file maintenance (#4075)
• chore: prek autoupdate (#4069)

... (truncated)

Commits

• 49fea3c release: Bump version to 2.28.0
• 8e2561e test: avoid tied sort keys in first/last group-by test (#4112)
• 97545f7 fix null-handling in mode for sql like (#4111)
• 2090b20 fix: ignore modules that are still being imported (#4068)
• d2c1728 skip changelog(deps): Update github actions (#4110)
• 7d0be6c fix: do not drop nulls in mode on pandas-like and dask (#4061)
• 1ac6a0a fix: handle eager plugin native objects in is_into_lazyframe, `get_native_n...
• 9b4c7d9 fix: avoid copying numpy arrays in pandas Series.from_numpy on pandas 3 (#4...
• 632d9c2 test: only xfail test_truediv_same_dims on Polars < 2.1 (#4109)
• a5c368e fix: DuckDB dt.total_* wrong for durations of one hour or more (#4106)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
zecblock	Ready	Preview	Nov 2, 2026 3:18pm UTC

2 Skipped Deployments

Project	Deployment	Actions	Updated
zecblock-crosslink	Ignored	Preview	Nov 2, 2026 3:18pm UTC
zecblock-testnet	Ignored	Preview	Nov 2, 2026 3:18pm UTC

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.