dependabot[bot] opened a new pull request, #753: URL: https://github.com/apache/sedona-db/pull/753
Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.25.1 to 0.28.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pyo3/pyo3/releases">pyo3's releases</a>.</em></p> <blockquote> <h2>PyO3 0.28.3</h2> <p>This patch contains several fixes for stability of the PyO3 0.28.x series:</p> <ul> <li><code>Python::attach</code> and <code>Python::try_attach</code> will no longer return before the thread initializing the interpreter has finished runnning <code>site.py</code> when using the <code>auto-initialize</code> feature.</li> <li>Fix unsoundness in <code>PyBytesWriter::write_vectored</code> when targeting the Python 3.15 prerelease interpreter.</li> <li>Fix possible deadlock in <code>.into_pyobject()</code> implementation for C-like <code>#[pyclass]</code> enums.</li> </ul> <p>A couple of edge cases causing compile failures were also fixed.</p> <p>Thank you to the following contributors for the improvements:</p> <p><a href="https://github.com/alex"><code>@alex</code></a> <a href="https://github.com/bschoenmaeckers"><code>@bschoenmaeckers</code></a> <a href="https://github.com/chirizxc"><code>@chirizxc</code></a> <a href="https://github.com/davidhewitt"><code>@davidhewitt</code></a> <a href="https://github.com/Embers-of-the-Fire"><code>@Embers-of-the-Fire</code></a> <a href="https://github.com/Icxolu"><code>@Icxolu</code></a> <a href="https://github.com/maurosilber"><code>@maurosilber</code></a> <a href="https://github.com/ngoldbaum"><code>@ngoldbaum</code></a></p> <h2>PyO3 0.28.2</h2> <p>This patch release contains a soundness fix for subclassing native types such as <code>PyList</code> with the <code>abi3</code> feature enabled when targeting a minimum version of Python 3.12 or higher. (Support for doing such subclassing was newly added in PyO3 0.28.0.)</p> <p>PyO3 0.28.0 and 0.28.1 will be yanked.</p> <p>This release also contains a correction to the FFI definition <code>PyType_GetTypeDataSize</code> and incorrectly-generated <code>__qualname__</code> on <code>#[pyclass]</code> enum variant types when using <code>#[pyo3(name = "...")]</code> option to rename the enum and/or variant.</p> <p>Thank you to the following contributors for the improvements:</p> <p><a href="https://github.com/davidhewitt"><code>@davidhewitt</code></a> <a href="https://github.com/Icxolu"><code>@Icxolu</code></a> <a href="https://github.com/ngoldbaum"><code>@ngoldbaum</code></a></p> <h2>PyO3 0.28.1</h2> <p>This patch contains a number of minor compile-time fixes for PyO3 0.28.0.</p> <p>Thank you to the following contributors for the improvements:</p> <p><a href="https://github.com/davidhewitt"><code>@davidhewitt</code></a> <a href="https://github.com/funsafemath"><code>@funsafemath</code></a> <a href="https://github.com/ngoldbaum"><code>@ngoldbaum</code></a> <a href="https://github.com/rara64"><code>@rara64</code></a> <a href="https://github.com/tdyas"><code>@tdyas</code></a></p> <h2>PyO3 0.28.0</h2> <p>This release contains many improvements across PyO3's feature set:</p> <ul> <li>Proper support for <code>__init__</code> methods for <code>#[pyclass]</code> types</li> <li>Support for <code>#[deleter]</code>s to complement the existing <code>#[getter]</code> and <code>#[setter]</code> attributes when implementing class "properties".</li> <li>Support for subclassing many Python types with the <code>abi3</code> feature (requires Python 3.12+).</li> <li>A new <code>#[pyclass(new = "from_fields")]</code> option to automatically define the constructor from the class fields.</li> <li>Many corrections to FFI definitions (including removal of many private CPython methods)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md">pyo3's changelog</a>.</em></p> <blockquote> <h2>[0.28.3] - 2026-04-02</h2> <h3>Fixed</h3> <ul> <li>Fix compile error with <code>#[pyclass(get_all)]</code> on a type named <code>Probe</code>. <a href="https://redirect.github.com/PyO3/pyo3/pull/5837">#5837</a></li> <li>Fix compile error in debug builds related to <code>_Py_NegativeRefcount</code> with Python < 3.12. <a href="https://redirect.github.com/PyO3/pyo3/pull/5847">#5847</a></li> <li>Fix a race condition where <code>Python::attach</code> or <code>try_attach</code> could return before <code>site.py</code> had finished running. <a href="https://redirect.github.com/PyO3/pyo3/pull/5903">#5903</a></li> <li>Fix unsoundness in <code>PyBytesWriter::write_vectored</code> with Python 3.15 prerelease versions. <a href="https://redirect.github.com/PyO3/pyo3/pull/5907">#5907</a></li> <li>Fix deadlock in <code>.into_pyobject()</code> implementation for C-like <code>#[pyclass]</code> enums. <a href="https://redirect.github.com/PyO3/pyo3/pull/5928">#5928</a></li> </ul> <h2>[0.28.2] - 2026-02-18</h2> <h3>Fixed</h3> <ul> <li>Fix complex enum <code>__qualname__</code> not using python name <a href="https://redirect.github.com/PyO3/pyo3/pull/5815">#5815</a></li> <li>Fix FFI definition <code>PyType_GetTypeDataSize</code> (was incorrectly named <code>PyObject_GetTypeDataSize</code>). <a href="https://redirect.github.com/PyO3/pyo3/pull/5819">#5819</a></li> <li>Fix memory corruption when subclassing native types with <code>abi3</code> feature on Python 3.12+ (newly enabled in PyO3 0.28.0). <a href="https://redirect.github.com/PyO3/pyo3/pull/5823">#5823</a></li> </ul> <h2>[0.28.1] - 2026-02-14</h2> <h3>Fixed</h3> <ul> <li>Fix <code>*args</code> / <code>**kwargs</code> support in<code> experimental-async</code> feature (regressed in 0.28.0). <a href="https://redirect.github.com/PyO3/pyo3/pull/5771">#5771</a></li> <li>Fix <code>clippy::declare_interior_mutable_const</code> warning inside <code>#[pyclass]</code> generated code on enums. <a href="https://redirect.github.com/PyO3/pyo3/pull/5772">#5772</a></li> <li>Fix <code>ambiguous_associated_items</code> compilation error when deriving <code>FromPyObject</code> or using <code>#[pyclass(from_py_object)]</code> macro on enums with <code>Error</code> variant. <a href="https://redirect.github.com/PyO3/pyo3/pull/5784">#5784</a></li> <li>Fix <code>__qualname__</code> for complex <code>#[pyclass]</code> enum variants to include the enum name. <a href="https://redirect.github.com/PyO3/pyo3/pull/5796">#5796</a></li> <li>Fix missing <code>std::sync::atomic::Ordering</code> import for targets without atomic64. <a href="https://redirect.github.com/PyO3/pyo3/pull/5808">#5808</a></li> </ul> <h2>[0.28.0] - 2026-02-01</h2> <h3>Packaging</h3> <ul> <li>Bump MSRV to Rust 1.83. <a href="https://redirect.github.com/PyO3/pyo3/pull/5531">#5531</a></li> <li>Bump minimum supported <code>quote</code> version to 1.0.37. <a href="https://redirect.github.com/PyO3/pyo3/pull/5531">#5531</a></li> <li>Bump supported GraalPy version to 25.0. <a href="https://redirect.github.com/PyO3/pyo3/pull/5542">#5542</a></li> <li>Drop <code>memoffset</code> dependency. <a href="https://redirect.github.com/PyO3/pyo3/pull/5545">#5545</a></li> <li>Support for free-threaded Python is now opt-out rather than opt-in. <a href="https://redirect.github.com/PyO3/pyo3/pull/5564">#5564</a></li> <li>Bump <code>target-lexicon</code> dependency to 0.13.3. <a href="https://redirect.github.com/PyO3/pyo3/pull/5571">#5571</a></li> <li>Drop <code>indoc</code> and <code>unindent</code> dependencies. <a href="https://redirect.github.com/PyO3/pyo3/pull/5608">#5608</a></li> </ul> <h3>Added</h3> <ul> <li>Add <code>__init__</code> support in <code>#[pymethods]</code>. <a href="https://redirect.github.com/PyO3/pyo3/pull/4951">#4951</a></li> <li>Expose <code>PySuper</code> on PyPy, GraalPy and ABI3 <a href="https://redirect.github.com/PyO3/pyo3/pull/4951">#4951</a></li> <li>Add <code>PyString::from_fmt</code> and <code>py_format!</code> macro. <a href="https://redirect.github.com/PyO3/pyo3/pull/5199">#5199</a></li> <li>Add <code>#[pyclass(new = "from_fields")]</code> option. <a href="https://redirect.github.com/PyO3/pyo3/pull/5421">#5421</a></li> <li>Add <code>pyo3::buffer::PyUntypedBuffer</code>, a type-erased form of <code>PyBuffer<T></code>. <a href="https://redirect.github.com/PyO3/pyo3/pull/5458">#5458</a></li> <li>Add <code>PyBytes::new_with_writer</code> <a href="https://redirect.github.com/PyO3/pyo3/pull/5517">#5517</a></li> <li>Add <code>PyClass::NAME</code>. <a href="https://redirect.github.com/PyO3/pyo3/pull/5579">#5579</a></li> <li>Add <code>pyo3_build_config::add_libpython_rpath_link_args</code>. <a href="https://redirect.github.com/PyO3/pyo3/pull/5624">#5624</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyO3/pyo3/commit/743af645e7143be6abe2217aafaa0540cf532af4"><code>743af64</code></a> release: 0.28.3</li> <li><a href="https://github.com/PyO3/pyo3/commit/2042b4c0c1da74844f43f4970ab52386abf6deac"><code>2042b4c</code></a> fix deadlock when initializing enum via <code>into_pyobject()</code> (<a href="https://redirect.github.com/pyo3/pyo3/issues/5928">#5928</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/01572470d031d16cd14fdc96f330397b4055f424"><code>0157247</code></a> ci: update UI tests for Rust 1.94 (<a href="https://redirect.github.com/pyo3/pyo3/issues/5859">#5859</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/e234f8a75aaa0c0c0feecaf360107a78a7c0e436"><code>e234f8a</code></a> Update getting-started.md (<a href="https://redirect.github.com/pyo3/pyo3/issues/5899">#5899</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/c06848d5f466350efe6bd05c9fc6cd923a12dd78"><code>c06848d</code></a> fix ffi-check in 3.15.0a7 (<a href="https://redirect.github.com/pyo3/pyo3/issues/5873">#5873</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/83f4283bde6e207827edeb9422e79944ced8327c"><code>83f4283</code></a> remove unused <code>try_trait_v2</code> feature when enabling the <code>nightly</code> feature (<a href="https://redirect.github.com/pyo3/pyo3/issues/5868">#5868</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/0de57ed453eeb47e40b011d8be2cdc0028116ebc"><code>0de57ed</code></a> Fix unsoundness in <code>PyBytesWriter::write_vectored</code> (<a href="https://redirect.github.com/pyo3/pyo3/issues/5907">#5907</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/49cd13fae22c5e46a4b0946539b9e64bb8ccb573"><code>49cd13f</code></a> fixes <a href="https://redirect.github.com/pyo3/pyo3/issues/5900">#5900</a> -- address race condition with initialization and site.py loading...</li> <li><a href="https://github.com/PyO3/pyo3/commit/c90d163638ef4a754fd31a3a29e3ba2ebc05a354"><code>c90d163</code></a> [fix] Fix <code>std::ffi</code> import for <code>_Py_NegativeRefcount</code> (<a href="https://redirect.github.com/pyo3/pyo3/issues/5847">#5847</a>)</li> <li><a href="https://github.com/PyO3/pyo3/commit/b79d7257dd0abd9d6d029878d8f0902a8e35e695"><code>b79d725</code></a> fix(pyo3-macros): allow pyclass named Probe (<a href="https://redirect.github.com/pyo3/pyo3/issues/5837">#5837</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pyo3/pyo3/compare/v0.25.1...v0.28.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
