timsaucer opened a new pull request, #1787:
URL: https://github.com/apache/datafusion-python/pull/1787
# Which issue does this PR close?
Closes #1784.
Closes #1780.
Closes #1781.
Closes #1782.
Closes #1778.
Closes #1770.
Closes #1769.
Closes #1767.
Closes #1748.
# Rationale for this change
Refresh dependencies ahead of the 55 release and consolidate the open
dependabot PRs into a single change so they can be closed together.
# What changes are included in this PR?
- `cargo update` to pick up the latest semver-compatible Rust dependencies
(DataFusion 55.2.0, arrow 59.3.0).
- GitHub Actions: `taiki-e/install-action` 2.85.5 → 2.87.22,
`astral-sh/setup-uv` 10.0.1 → 10.2.0, `github/codeql-action/init` and
`github/codeql-action/analyze` 4.37.9 → 4.38.2. The two CodeQL actions must
move together; #1767 and #1770 each fail individually with `Loaded a
configuration file for version '4.37.9', but running version '4.38.2'`.
- `uv.lock`: virtualenv 21.5.0 → 21.7.13 (pulls python-discovery 1.4.2 →
1.6.1), urllib3 2.7.0 → 2.8.0, tornado 6.5.8 → 6.5.9, pyjwt 2.13.0 → 2.15.0,
soupsieve 2.8.4 → 2.9.
Not included: the arrow 60 bumps (#1749, #1750, #1751, #1752). DataFusion 55
depends on arrow 59, so these must wait for a DataFusion release on arrow 60.
# Are there any user-facing changes?
No.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
