chore(deps): bump the python-minor-and-patch group across 1 directory with 4 updates

[dependabot]

Bumps the python-minor-and-patch group with 4 updates in the / directory: pydantic, polars, ruff and pyright.

Updates pydantic from 2.13.3 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

Commits

• cf67d4b Fix linting
• f0d8a21 Prepare release v2.13.4
• 5e3fe1d Check for pydantic tag pattern in CI
• 7f9edcc Document tagging conventions
• b46a0c9 Adapt pydantic-core linker flags on macOS
• 50629c8 Update to PyPy 7.3.22
• 8522ebb Preserve RootModel core metadata
• a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
• 909259a Remove Logfire example in documentation
• 2c4174c Bump libc from 0.2.155 to 0.2.185
• See full diff in compare view

Updates polars from 1.41.2 to 1.43.2

Release notes

Sourced from polars's releases.

Python Polars 1.43.2

⚠️ Deprecations

• Deprecate casts from Categorical to integer dtypes (#28525)
• Deprecate not setting the plan_stage argument in show_graph() (#28391)

🚀 Performance improvements

• Pushdown len() to concat/union inputs (#28570)

✨ Enhancements

• Issue FutureWarning on using from_arrow of ArrowStreamExportable (#28442)
• Add infer_schema_files parameter to scan_csv (#28440)

🐞 Bug fixes

• Properly propagate enum metadata for iceberg column mapping (#28580)
• Correctly write parquet field IDs for enums and categoricals (#28581)
• Fix arrow C interop binview offset (#28623)
• Fix duplicate hive values in hive pre-partition rewrite (#28621)
• Double-counted offset for Arrow export of sliced Series(Array) (#28602)
• Struct/List/Array equality handling in sort and join (#28601)
• More careful slice pushdown into joins (#28578)
• Preserve ordering in sliced unions (#28576)
• Drop input sortedness when casting to a string (#28574)
• Clear sortedness flags in StringChunked substring kernels (#28573)
• Bad mask handling when reading optional parquet column (#28547)
• Any operation on Unknown(Int) and Unknown(Float) should result in Unknown(Float) (#28545)
• Flip nulls_last after Expr.reverse() (#28572)
• Fix high blocking thread use in sink_parquet with async local path (#28543)
• Serialize LazyFrames backed by bytes (#28568)
• Release GIL in SQLContext.execute() (#28549)
• Propagate nulls_last in function_expr_sortedness (#28544)
• Incorrect slicing when a join requires sorting (#28541)

🛠️ Other improvements

• Fix duckdb delta extension install collision (#28607)

Thank you to all our contributors for making this release possible! @​BitWeaverDev, @​Matt711, @​Samoilov2004, @​borchero, @​dancsi, @​dsprenkels, @​kdn36, @​masumi-ryugo, @​nameexhaustion and @​ritchie46

Python Polars 1.43.1

🚀 Performance improvements

• Optimize not(bool_f) to not_bool_f (#28474)

✨ Enhancements

... (truncated)

Commits

• ae588a9 fix: Properly propagate enum metadata for iceberg column mapping (#28580)
• f6c766a fix: Correctly write parquet field IDs for enums and categoricals (#28581)
• 12f83f5 Python Polars 1.43.2 (#28625)
• 1ec0668 fix: Fix arrow C interop binview offset (#28623)
• af24b92 perf: Pushdown len() to concat/union inputs (#28570)
• e79bdb0 fix: Fix duplicate hive values in hive pre-partition rewrite (#28621)
• 7a6cdbc fix: Double-counted offset for Arrow export of sliced Series(Array) (#28602)
• a2b0b2a fix: Struct/List/Array equality handling in sort and join (#28601)
• 9aca544 ci: Fix duckdb delta extension install collision (#28607)
• 7d6483b fix(rust): Use try_new in StructArray construction in polars-json (#27489)
• Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878
• @​MichaReiser

... (truncated)

Commits

• 80790b3 Bump 0.16.1 (#27330)
• 63830f3 [ty] Borrow from constraint set storage less often (#27328)
• f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
• 0d80497 Lint TOML files in the LSP (#26862)
• d91586b Update prek dependencies (#27293)
• 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
• b20daf7 [ty] refactor: add helper function to send partial results (#27249)
• 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
• 7c3e2db [ty] Fix enum class container assignability (#27318)
• d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
• Additional commits viewable in compare view

Updates pyright from 1.1.409 to 1.1.411

Commits

• 392b6ba Pyright NPM Package update to 1.1.411 (#363)
• 509391a Pyright NPM Package update to 1.1.410 (#361)
• See full diff in compare view

---

Note

Medium Risk
Polars spans two minor releases with behavioral fixes in joins/sorts/I/O; pydantic validation is on the request path—regression risk is mostly from dependency behavior, not this repo’s code.

Overview
Updates uv.lock only—no application code changes. Bumps four packages in the python-minor-and-patch group:

Runtime / models: pydantic 2.13.3 → 2.13.4 (with pydantic-core 2.46.3 → 2.46.4), including a small fix for RootModel core metadata. polars and polars-runtime-32 move 1.41.2 → 1.43.2, a wider jump with join/sort/parquet/Arrow fixes and new deprecations (e.g. categorical→integer casts).

Tooling: ruff 0.15.12 → 0.16.1 (minor linter release; rule and fix behavior may shift in CI). pyright 1.1.409 → 1.1.411 for static checking.

Verify with the existing workflow: ruff check / format, pyright, and tests after uv sync --locked.

^{Reviewed by Cursor Bugbot for commit 028774c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ca20459. Configure here.}

[cursor]

Polars explode deprecation after bump

Low Severity

Bumping polars to 1.42.1 makes DataFrame.explode() emit a DeprecationWarning unless empty_as_null is set. to_polars() still calls df.explode(...) without that argument, so any explode= usage (including unit tests and public paginator/order-book helpers) warns today, and empty list columns will change behavior under Polars 2.0.

 

^{Reviewed by Cursor Bugbot for commit ca20459. Configure here.}