[renovate-bot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
SQLAlchemy (changelog)	==2.1.5 → ==2.1.6				patch
actions/setup-python (changelog)	5fda3b9 → 6d4fd22			action	digest
alembic (changelog)	==1.20.0 → ==1.20.1				patch
bigquery-magics (source)	==0.15.1 → ==0.15.2				patch
bigquery_magics (source)	==0.15.1 → ==0.15.2				patch
certifi	==2026.10.19 → ==2026.10.23				patch
db-dtypes (source)	==1.8.0 → ==1.9.0				minor
filelock (changelog)	==4.2.4 → ==4.2.5				patch
google-api-core	==2.42.0 → ==2.43.2				minor
google-cloud-bigquery (source)	==3.46.2 → ==3.47.0				minor
google.cloud.bigquery (source)	==3.46.2 → ==3.47.0				minor
googleapis-common-protos (source)	==1.75.5 → ==1.76.0				minor
grpc-google-iam-v1	==0.14.5 → ==0.14.6				patch
grpcio	==1.84.0 → ==1.85.1				minor
grpcio-status	==1.84.0 → ==1.85.1				minor
ipython	==9.17.1 → ==9.18.0				minor
mcr.microsoft.com/devcontainers/python	3.14 → 3.15			final	minor
multidict	==7.1.0 → ==7.2.1				minor
pandas (changelog)	==3.0.6 → ==3.1.0				minor
platformdirs (changelog)	==4.13.5 → ==4.14.0				minor
pyasn1 (changelog)	==0.6.4 → ==0.6.5				patch
pycparser	==3.11 → ==3.12				minor
pytest (changelog)	==9.1.1 → ==9.2.0				minor
pytest-asyncio (changelog)	==1.4.0 → ==1.4.1				patch
python-dateutil	==2.9.0.post0 → ==3.0.0				major
python-discovery (changelog)	==1.6.4 → ==1.7.0				minor
pytz (source)	==2026.5 → ==2026.6				minor
ruff (source, changelog)	==0.17.1 → ==0.17.3				patch
wrapt (changelog)	==2.5.1 → ==2.5.2				patch

---

Release Notes

googleapis/google-cloud-python (bigquery-magics)

v0.15.2: bigquery-magics: v0.15.2

Compare Source

Features

• support Python 3.15 (8fceef4)

Bug Fixes

• bigquery-magics: wait for graph server startup before returning from init (#​18763) (77e4d66)
• validate Host header in graph_server request handlers (#​17932) (ea7299f)

certifi/python-certifi (certifi)

v2026.10.23

Compare Source

tox-dev/filelock (filelock)

v4.2.5

Compare Source

Bug fixes

• acquire and acquire raise TypeError for a blocking that is not a bool, as the constructor and the blocking setter already do. A truthy value such as the string "false" used to count as True, so a call meant as a single attempt waited for the instance's timeout, and without a limit at the default -1 (#​870) by @​simpleqt and @​gaborbernat.
• A SoftFileLock acquisition whose first read of its new marker's identity failed reads it again before rolling back. On Windows the rollback could otherwise not recognize the marker it had created, and the empty marker it left blocked the path for every later acquisition, since no contender breaks an empty marker (#​869) by @​simpleqt and @​gaborbernat.
• A fork() child of a process holding a SoftFileLease starts from an unheld claim. It used to inherit the parent's token, last compromise and heartbeat, so token and compromise reported a claim the child never held while is_locked reported it unheld (#​868) by @​dxbjavid and @​gaborbernat.
• A nested acquire of a held FileLock or SoftFileLock no longer creates the lock file's parent directory. After a rename of that directory during the hold, the nested acquire recreated the old name, and when a file had taken the name it raised FileExistsError and left the hold's recursion count incremented (#​878) by @​0x5t4l1n and @​gaborbernat.
• Fix ReadWriteLock failing every acquire with "link directory ... was replaced while opening" in a group-writable directory whose inherited ACL, such as an NFSv4 one on ZFS, opens the link directory to the group. The lock now closes the empty link directory to its owner, and where the filesystem refuses that, such as ZFS with aclmode=restricted, it names the directory to make writable by its owner only (#​898) by @​gaborbernat.
• Fix SoftFileLock, MarkerSoftFileLock and SoftFileLease raising OverflowError out of acquire(), or never reclaiming a dead holder's lock, when a stranded restore claim beside the lock names a process number outside 1..2**31-1 or spells it in non-ASCII digits. Such a claim is now ignored, as no filelock writes one (#​871) by @​dxbjavid and @​gaborbernat.
• Fix soft locks on Windows keeping the marker of a holder that has exited while another process still holds a handle to it, such as a parent's subprocess.Popen after wait() or multiprocessing.Process after join(). Acquiring such a lock with the default timeout=-1 waited forever (#​874) by @​nk-batman21.
• Fix the read-only reopen of a lock file this account cannot write resolving a relative path against the working directory of the moment. A chdir between the refused O_RDWR open and the reopen made the acquisition wait on a file that is not there, or probe one in another directory. The reopen now uses the path the acquisition pinned (#​889) by @​dxbjavid and @​gaborbernat.
• Handle EMLINK, the error FreeBSD reports when a no-follow open refuses a symlink, in a soft reader/writer lock's protocol tree, so heartbeat reports lost ownership there rather than a transient refresh error (#​866) by @​pacocartones and @​gaborbernat.
• Resolving ReadWriteLock or AsyncReadWriteLock raises the ImportError when a module other than Python's sqlite3 is missing, as in a frozen application that left out a filelock submodule. The names are None only without SQLite (#​880) by @​pintu544 and @​gaborbernat.

Documentation

• The lock-probing recipe in the how-to guide probes with blocking=False instead of a tiny timeout (#​873) by @​tongwentao and @​gaborbernat.

Packaging

• Releases now run on the shared tox-dev/github-workflows pipeline, with a locked release toolchain and generated GitHub Release notes (#​885) by @​gaborbernat.

New Contributors

• @​simpleqt made their first contribution in #​869
• @​KennyMcSimpson made their first contribution in #​875
• @​0x5t4l1n made their first contribution in #​878
• @​tongwentao made their first contribution in #​873
• @​pacocartones made their first contribution in #​866
• @​nk-batman21 made their first contribution in #​874
• @​pintu544 made their first contribution in #​880
• @​00200200 made their first contribution in #​877

PyPI release

Full Changelog

googleapis/google-cloud-python (google-cloud-bigquery)

v3.47.0

Compare Source

Features

• bigquery: add column data policies to SchemaField (#​18710) (157efe4)
• bigquery: add timestamp_precision for Arrow query results (#​18649) (a29d384)
• bigquery: read Arrow results from explicit destinations (#​18654) (8ac01b9)
• bigquery: share one BigQuery Storage client per Client (#​18652) (89cbc50)
• bigquery: skip job creation for ARROW query_and_wait results (#​18799) (ca24f26)
• bigquery: validate Arrow queries before sending them (#​18645) (1ac51ce)
• support Python 3.15 (8fceef4)

Bug Fixes

• bigquery: apply max_results to the whole Arrow result (#​18651) (48c022c)
• bigquery: keep the Arrow first page and wait without rows (#​18650) (4eb0e71)
• bigquery: keep the Arrow schema for empty results (#​18655) (3ccf5ac)
• bigquery: pass universe_domain to the BigQuery Storage client (#​18783) (6ab4063)
• bigquery: raise when an Arrow batch arrives before its schema (#​18791) (7944a4c)
• bigquery: require bqstorage 2.43.0 (#​18780) (3cd40ce)
• bigquery: send the same Arrow options on jobs.query and ReadRows (#​18646) (d7a2d27)

ipython/ipython (ipython)

v9.18.0

Compare Source

aio-libs/multidict (multidict)

v7.2.1

Compare Source

=====

(2026-10-24)

Bug fixes

• Fixed a regression in 7.2.0 where a subclass of
  :class:~multidict.MultiDictProxy or :class:~multidict.CIMultiDictProxy
  that converted its argument in its own __init__() raised
  :exc:TypeError before that __init__() ran; such a subclass got an
  empty multidict until its __init__() set the proxied one
  -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1824, :issue:1825.

---

v7.2.0

Compare Source

=====

(2026-10-23)

7.2.0 drops Python 3.10, fixes a crash in a proxy built without
__init__() and a :exc:MemoryError from a huge __length_hint__(),
and is otherwise a performance release for the C extension: lookups,
adds, updates and deletes each needed a few percent fewer instructions.

Bug fixes

• Stopped a huge __length_hint__() from raising :exc:MemoryError in
  :meth:~multidict.MultiDict.extend, :meth:~multidict.MultiDict.update
  and :meth:~multidict.MultiDict.merge; the C extension capped the room
  it reserved for the hint at the largest table the constructor allocates
  up front -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1767.

• Fixed a segmentation fault when using a :class:~multidict.MultiDictProxy
  or :class:~multidict.CIMultiDictProxy built by __new__() without
  __init__(); __new__() started requiring the proxied multidict, the
  same argument as the constructor -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1782.

Features

• Sped up reading a multidict in the C extension. md[key],
  :meth:~multidict.MultiDict.get and :meth:~multidict.MultiDict.getone
  became up to 7% faster by returning the lookup's result by value instead
  of through a pointer to the caller's local, which had made
  -fstack-protector-strong add a stack canary to every call. On the GIL
  build a :meth:~multidict.MultiDict.get miss became 5% faster and
  key in md inlined its hash table lookup. On the free-threaded build
  :meth:~multidict.MultiDict.getall stopped taking the multidict's lock
  for a multidict without repeated keys, the way
  :meth:~multidict.MultiDict.get already avoided it. len(md.keys())
  and iterating over the keys of a multidict that holds a key more than
  once became 4% to 13% faster -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1775, :issue:1776, :issue:1781, :issue:1800, :issue:1817.

• Sped up building and updating a multidict in the C extension. On the GIL
  build, constructing a multidict from a sequence of pairs needed 8% to 10%
  fewer instructions and :meth:~multidict.MultiDict.update 3.5% to 4.5%
  fewer. On the free-threaded build, building a
  :class:~multidict.MultiDict became up to 14% faster, since a table that
  is both full and unable to hold the new key in its compact form was grown
  and moved in one rebuild, and :meth:~multidict.MultiDict.add,
  md[key] = value for a new key and
  :meth:~multidict.MultiDict.setdefault needed 2% to 3% fewer
  instructions, about 1% fewer on the GIL build. Updating a multidict with
  existing keys needed 1.5% to 2.9% fewer instructions, while adding a new
  key needed about 0.5% more on the GIL build -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1763, :issue:1774, :issue:1780, :issue:1785, :issue:1802.

• Sped up replacing and removing items in the C extension.
  :meth:~multidict.MultiDict.add, :meth:~multidict.MultiDict.getall,
  md[key] = value and del md[key] stopped computing the identity
  of a key that, or whose :class:~multidict.istr canonical form, already
  serves as one, as md[key] did, and checked a
  :class:~multidict.CIMultiDict key holding uppercase letters only once.
  On the GIL build del md[key] needed 4% to 5% fewer instructions,
  md[key] = value about 2% fewer and :meth:~multidict.MultiDict.pop
  1% fewer. Replacing a key that had duplicates needed 0.8% to 1.7% fewer
  instructions, and :meth:~multidict.MultiDict.clear became 6% faster on
  the free-threaded build -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1769, :issue:1770, :issue:1779, :issue:1796, :issue:1809.

Removals and backward incompatible breaking changes

• Dropped support for Python 3.10 as it has reached end of life
  -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1777.

Improved documentation

• Refreshed the instruction-count tables in the benchmarking reference
  against the current tree -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1816, :issue:1818.

Packaging updates and notes for downstreams

• Added the CPython 3.15 trove classifier and started testing the
  GIL and free-threaded 3.15 builds in CI -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1766.

Contributor-facing changes

• Split the release publishing and signing across four parallel jobs, so
  that each one finishes well within the lifetime of its short-lived PyPI
  upload token -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1768, :issue:1822.

• Changed the clear() benchmarks to clear a thousand prebuilt
  multidicts of 0 to 99 items each, copied outside the measured region,
  since the copy inside the timed loop and the single small table it
  measured made the result swing by up to 19% between runs of the same
  commit -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1784.

• Pinned Hypothesis in the MyPy pre-commit hooks and dropped a
  type: ignore comment from the Hypothesis tests that became unused
  once Hypothesis annotated run_state_machine_as_test(), which failed
  the MyPy lint job -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1820.

• Fixed a test of a huge __length_hint__() failing on 32-bit builds,
  where its 2**40 hint did not fit a Py_ssize_t
  -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1821.

Miscellaneous internal changes

• Split the C extension's helpers per table kind, so that the lookup
  loops of pop(), popall(), item replacement and update(), the
  table rebuild and the deferred delete of an entry call the helper for
  their own kind instead of testing it again, and moved the choice between
  overwriting and dropping each entry of a repeated key into the per-kind
  loops of update(). Folded helpers with a single caller into that
  caller: choosing the kind of a new table, reading a compact entry's
  identity and hash, filling a new entry, replacing a key's values,
  deleting a key and looking up the first value of a key that needs a
  computed identity. Merged the two per-kind checks for a deleted entry
  into one, and removed the separate watched copies of delete, pop and
  replace, folding the add that follows a missed replace into the replace
  itself -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1771, :issue:1772, :issue:1773, :issue:1786, :issue:1788,
  :issue:1789, :issue:1790, :issue:1792, :issue:1804, :issue:1805,
  :issue:1810, :issue:1811.

• Removed duplicated code from the C extension: the (key, default)
  methods shared their argument parsing and missing-key result, and one
  macro each replaced the copies of the lock-free compact entry match on
  the free-threaded build and of the per-kind dispatch of a single key
  lookup. Turned the watcher record, flush and pending check helpers and
  _growth_rate() into macros, so that a multidict without watchers
  skipped evaluating the event arguments, renamed the lowercase
  function-like macros to upper case, and dropped the leading underscore
  from the watcher functions that the macros call from other headers
  -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1793, :issue:1794, :issue:1795, :issue:1806, :issue:1807,
  :issue:1808, :issue:1812.

• Adjusted how the C extension spends GCC's inlining budget: marked most
  checks that lead to a raised exception as unlikely, so the compiler
  moves the error paths out of the hot code, kept the event name lookup of
  a failing watcher callback report and the cleanup of a dropped watcher
  event log out of line, and dropped the inline hint from the helpers
  that compute a table's size and that rebuild, build or free a table's
  keys -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1783, :issue:1791, :issue:1801, :issue:1815.

• Moved the C extension's repr() of multidicts, proxies and views and
  its equality comparison out of the hash table header, each into a header
  of its own -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1778, :issue:1787.

---

pandas-dev/pandas (pandas)

v3.1.0: pandas 3.1.0

Compare Source

We are pleased to announce the release of pandas 3.1.0.
This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

Highlights include:

• New DataFrame.select() and updated DataFrame.filter() method
• Faster pd.read_csv(), with parallel reads of large files

See the detailed release notes for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade pandas

Or from conda-forge

conda install -c conda-forge pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

tox-dev/platformdirs (platformdirs)

v4.14.0

Compare Source

Features

• Accept a keyword-only ensure_exists in the module-level media directory functions, such as user_documents_path, to create a directory set through XDG_*_DIR or user-dirs.dirs (#​656) by @​darrenhuai and @​gaborbernat.

Bug fixes

• Return the media and fonts directories under root's home for root with use_site_for_root, ignoring the invoking user's XDG_*_DIR, user-dirs.dirs and XDG_DATA_HOME, and create no inherited media directory under ensure_exists (#​661) by @​gaborbernat.
• Raise ValueError from site_data_dir and site_config_dir under multipath=True when appname or version contains os.pathsep, rather than returning a string that splits into a directory outside the site base (#​662) by @​gaborbernat.
• Parse an unquoted user-dirs.dirs value with a long run of blanks in linear time, rather than in time quadratic in the run's length on every Unix media directory lookup (#​663) by @​gaborbernat.
• Treat a relative HOME as unset on Unix, macOS and iOS, taking the home from the password database or raising RuntimeError, rather than resolving user directories against the working directory (#​664) by @​gaborbernat.
• Refuse a symlink as XDG_RUNTIME_DIR in user_runtime_dir when the value ends with / or /., which made the check follow the link (#​665) by @​gaborbernat.
• Redirect user_*_dir calls with use_site_for_root=True when the effective uid is 0, so a setuid-root process gets the site directories, and name and check the runtime directory by the effective uid (#​666) by @​gaborbernat.
• Apply the XDG_RUNTIME_DIR check of the Unix user_runtime_dir to the macOS one, so it no longer uses a directory that is a symlink, owned by another user or not mode 0700 (#​667) by @​gaborbernat.
• Reject an XDG_RUNTIME_DIR below a parent that another user can replace, such as their own entry in /tmp, instead of creating the runtime directory through it (#​668) by @​gaborbernat.
• Stop accepting a Unix runtime directory that another user creates between the owner check and its use: ensure_exists and place_runtime_file create it before checking it, and find_runtime_file checks it again after a hit (#​669) by @​gaborbernat.
• Raise PermissionError on macOS when ensure_exists would create the site cache through a /Library/Caches/$appname that is a symlink, not a directory, or owned by a user other than root and the current one (#​670) by @​gaborbernat.
• With ensure_exists, raise FileExistsError when a configured media directory such as user_documents_dir is a regular file or a symlink to one, instead of returning the file's path. Dangling symlinks are still returned unchanged (#​672) by @​rupayon123 and @​gaborbernat.

New Contributors

• @​rupayon123 made their first contribution in #​672

PyPI release

Full Changelog

v4.13.7

Compare Source

Bug fixes

• Fall back to the default media directories when user-dirs.dirs exists but cannot be read, rather than raising PermissionError or IsADirectoryError (#​632) by @​Debasishhh and @​gaborbernat.
• Resolve the Windows Projects directory from USERPROFILE when HOME is empty, rather than raising RuntimeError (#​635) by @​pabszero and @​gaborbernat.
• Resolve $HOME entries in user-dirs.dirs to /Documents instead of //Documents when the home directory is / (#​636) by @​darrenhuai and @​gaborbernat.
• Print the error and keep listing directories in python -m platformdirs when the home directory is unknown, rather than stopping with RuntimeError (#​638) by @​tongwentao and @​gaborbernat.
• Raise FileNotFoundError from the place_*_file methods when the user directory is on a missing Windows drive or network share, rather than recursing until RecursionError (#​639) by @​nk-batman21 and @​gaborbernat.
• Search the directories of a subclass's overridden iter_*_paths method in find_*_file and find_*_files, rather than the base class ones (#​640) by @​KennyMcSimpson and @​gaborbernat.
• Keep isolated_dirs paths under a relative root after the working directory changes, and yield the root as an absolute path (#​643) by @​0x5t4l1n and @​gaborbernat.
• Ignore Windows folder overrides with a UNC path missing its server or share name, such as \\server, instead of treating the application name as the share (#​647) by @​RedCat888 and @​gaborbernat.

Documentation

• Remove the literal /opt/homebrew from a macOS source comment. Homebrew replaces it with a placeholder when bottling on Apple Silicon but not on Linux, so formulae that bundle platformdirs could not share one bottle across both (#​644) by @​Moisan and @​gaborbernat.

New Contributors

• @​Moisan made their first contribution in #​644
• @​pabszero made their first contribution in #​635
• @​RedCat888 made their first contribution in #​647
• @​yuefdev made their first contribution in #​630
• @​Debasishhh made their first contribution in #​632
• @​tongwentao made their first contribution in #​638
• @​nk-batman21 made their first contribution in #​639
• @​KennyMcSimpson made their first contribution in #​640
• @​0x5t4l1n made their first contribution in #​643

PyPI release

Full Changelog

v4.13.6

Compare Source

Packaging

• Releases now run on the shared tox-dev/github-workflows pipeline, with a locked release toolchain and generated GitHub Release notes (#​650) by @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

pyasn1/pyasn1 (pyasn1)

v0.6.5

Compare Source

• GHSA-mm57-4v3p-rchx: Decoded binary REAL mantissas in linear time
  instead of repeatedly shifting a growing integer and slicing the
  remaining bytes (thanks for reporting, manus-use, manus-pi, ucsurf,
  adriank31)
• GHSA-2qm8-x737-gmw5: Reassembled constructed BIT STRING fragments
  in linear time while preserving their decoded bit values, including
  intermediate fragment padding (thanks for reporting, manus-use)
• GHSA-9m75-vc3g-4x39: Reassembled constructed OCTET STRING and
  character-string fragments and indefinite-length ANY content in
  linear time. Nested constructed OCTET STRING fragments now contribute
  their decoded octets (thanks for reporting, alimony, manus-pi, adriank31)
• GHSA-fm9c-5rcf-2q5p: Bounded schemaless container type tracking
  after two distinct tag sets to prevent quadratic CPU use from
  colliding long tag IDs (thanks for reporting, droideck)

eliben/pycparser (pycparser)

v3.12

Compare Source

pytest-dev/pytest (pytest)

v9.2.0

Compare Source

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

• #​14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

• #​8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

  Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

• #​993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

  • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
  • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

  pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

• #​14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec.
  The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

• #​14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

• #​14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1,
  all higher-scoped fixtures (module, package, and session) defined
  as instance methods are now deprecated.

  They suffer from the same issue the original deprecation only fixed for
  class-scoped fixtures, see 10819 and 14011.

• #​14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

• #​7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

• #​14743: Full diff: now contains a legend explaining the + & - symbols in diff output.
• #​2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.
• #​6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

• #​10745: A RecursionError whose recursion origin cannot be located now shows only the
  first and last 10 stack frames, matching what pytest already did when locating
  the origin failed outright. Previously the full traceback -- often around a
  thousand near-identical frames -- was rendered, which was both slow and
  unreadable. Pass --full-trace to see every frame.

• #​10745: The line numbers of a module's statements are now computed once per traceback
  instead of once per traceback entry, which noticeably speeds up rendering
  failures raised from large test modules.

• #​11418: The cached rewritten modules in __pycache__ are now invalidated by a hash of
  the source instead of its modification time, using the checked-hash pyc format
  from 552.

  Timestamps make the cache useless wherever source files get fresh modification
  times, most notably in CI: a checkout gives every file a new mtime, so a
  restored cache is discarded in full and every test module is rewritten again.
  Hashing the source costs roughly 15 microseconds per file and makes the cache
  survive that.

  Existing timestamp based caches are ignored and rewritten once.

• #​12624: The pytest_plugins variable and the PYTEST_PLUGINS environment variable now also accept entry point names of installed plugins (e.g. xdist), in addition to importable module names, matching the behavior of the -p command-line option.

  As part of this change, plugins specified by entry point name through these mechanisms are now also listed in the plugins: line of the terminal header (12615).

  Based on the original implementation by Marcel Telka in 12616.

• #​12697: Warnings emitted while importing plugins through -p, PYTEST_PLUGINS, or entry point autoloading are now captured, filtered, and reported like other warnings.

• #​12860: Assertion diffs for dict.items() and dict.keys() comparisons (>=, <=, >, <, ==) now show which items are missing, the same way set comparisons do.

• #​13354: Node.get_closest_marker <_pytest.nodes.Node.get_closest_marker> now also accepts a ~pytest.MarkDecorator as its default, for example item.get_closest_marker("foo", pytest.mark.foo(1)), and returns the wrapped ~pytest.Mark.

  Previously the only way to build a default was to instantiate ~pytest.Mark directly, which is private and warns.

• #​13369: Improved the error from pytest.RunResult.assert_outcomes when a plugin changes or removes pytest's standard terminal summary, and documented how to isolate output-changing plugins.

• #​13431: Exposed pytest.ParameterSet as the type of the return value of pytest.param().
  This can be used in type annotations and isinstance checks.

• #​13564: Issue a warning when fixtures are wrapped with a decorator that prevents
  correct discovery, including @classmethod above @pytest.fixture and
  @staticmethod above @pytest.fixture. Put @pytest.fixture above
  those decorators on test classes.

• #​14164: Exposed pytest.Approx as the type of the return value of pytest.approx().
  This can be used in type annotations and isinstance checks.

• #​14463: Assertion diffs for mappings now match up keys the way the compared mappings match them themselves.

  Key comparison goes through the mappings' key views instead of plain sets of their keys, so a mapping
  with its own notion of key equivalence, such as case-insensitive header mappings, no longer
  reports its common keys as missing on either side.

• #​14523: Large assertion comparison diffs are now built lazily and capped to the
  truncation budget, so a huge diff is no longer formatted in full just to
  be truncated. As a consequence, the truncation footer no longer
  reports the exact number of hidden lines.

• #​14687: The default fd-level output capturing (--capture=fd) now skips reading the capture buffer for tests which produce no output, reducing per-test overhead in large test suites.

• #​14724: --no-summary now only applies directly to pytest's own summary.

  The flag no longer skips the pytest_terminal_summary hook, so third-party
  plugins (for example coverage) can still write their terminal summaries.

• #​14751: parser.addini <pytest.Parser.addini> now also accepts type expressions for its type argument, in addition to the existing string tags: the plain Python types str, bool, int, float, a Literal of strings, and unions of these (for example int | str or int | Literal["auto"]).

• #​14754: pytest.approx() now rejects infinite relative tolerances for datetime.timedelta values with a clear ValueError instead of raising OverflowError.

• #​14791: The junit_family, junit_logging, junit_duration_report, console_output_style, empty_parameter_set_mark, assertion_text_diff_style and tmp_path_retention_policy configuration options are now registered with the set of

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates the SQLAlchemy dependency in packages/sqlalchemy-spanner/requirements.txt from version 2.1.5 to 2.1.6, along with updating its associated cryptographic hashes. There are no review comments to address, and I have no additional feedback to provide.