Skip to content

build: bump the python-deps group with 8 updates#78

Closed
dependabot[bot] wants to merge 1 commit intodependabotchangesfrom
dependabot/pip/dependabotchanges/python-deps-91fa53e99e
Closed

build: bump the python-deps group with 8 updates#78
dependabot[bot] wants to merge 1 commit intodependabotchangesfrom
dependabot/pip/dependabotchanges/python-deps-91fa53e99e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Updates the requirements on azure-identity, azure-core, azure-storage-file-datalake, azure-kusto-data, azure-kusto-ingest, requests, python-dateutil and pandas to permit the latest version.
Updates azure-identity to 1.25.3

Commits

Updates azure-core to 1.40.0

Release notes

Sourced from azure-core's releases.

azure-core_1.40.0

1.40.0 (2026-04-30)

Features Added

  • Added support for per-operation http_logging_level overrides in HttpLoggingPolicy. #44115
  • Introduced the keyword argument additional_allowed_query_params to DistributedTracingPolicy and HttpLoggingPolicy to allow users to specify additional URL query parameters that should not be redacted in span attributes or logs. #46482
    • Users can specify this at the SDK client level by passing additional_allowed_query_params to the client constructor. For example: client = ServiceClient(..., additional_allowed_query_params={"custom_param"}). This will apply to all operations performed by the client.

Other Changes

  • URL attributes in HTTP tracing spans will now have query parameters sanitized by default. To add additional query parameters that should not be redacted, use the additional_allowed_query_params argument in your client constructor. #46482
  • Python 3.9 is no longer supported. Please use Python version 3.10 or later.
Commits

Updates azure-storage-file-datalake to 12.23.0

Commits
  • b3301ac STG 100 GA Release Date for 2026-01-06
  • beb8dfa [Storage][STG 100] Prepare branch for GA + cherry-pick block size change (#44...
  • 6c9b459 Increment package version after release of azure-monitor-opentelemetry-export...
  • b9dcce8 Bump cspell from 9.3.2 to 9.4.0 in /eng/common/spelling (#44264)
  • 04be001 [py sdk - TA] add 2025-11-01 to Readme (#44259)
  • 31e2155 adding more agent creation traces (#44263)
  • 2f728ba Use azpysdk Bandit Check in CI (#44214)
  • 771fa84 Fix unhelpful error when no stress packages are found (#43538)
  • 8646fbe Sync eng/common directory with azure-sdk-tools for PR 13142 (#44244)
  • 874cfcf [Storage] Update Swagger and Release Date (#44243)
  • Additional commits viewable in compare view

Updates azure-kusto-data to 6.0.3

Release notes

Sourced from azure-kusto-data's releases.

v6.0.3

What's Changed

Full Changelog: Azure/azure-kusto-python@v6.0.2...v6.0.3

Changelog

Sourced from azure-kusto-data's changelog.

[6.0.3] - 2026-03-31

Fixed

  • Fixed KustoApiError crashing when no message is provided by defaulting to "Unknown Kusto service error".
  • Updated KustoApiError.__init__ message parameter type to Optional[str].

Changed

  • Bumped dependencies: aiohttp 3.13.4, azure-core 1.39.0, cryptography 46.0.6, pygments 2.20.0, pyjwt 2.12.1, urllib3 2.6.3.

[6.0.2] - 2026-02-19

Fixed

  • Fixed dataframe_from_result_table crashing with pandas 3.0 when a datetime column contains all null values.
  • Removed legacy pandas 1.x code path in parse_datetime (minimum supported pandas is now 2.3.1).

[6.0.1] - 2025-12-25

Fixed

  • Managed Streaming Should Handle Throttling Events Correctly
  • Changed extra's name back to aio
  • Fixed handling of datetime columns in old pandas versions.
  • Fixed encoding error in ingest_from_dataframe when using csv data format.

[6.0.0] - 2025-11-26

Added

  • Support Delos and Gov SG clouds

Changed

  • [BREAKING] Minimum supported Python version is now 3.9, to align with other Azure SDKs.
  • The project's infrastructure has been updated:
    • uv is used to manage packages
    • ruff is used for linting and formatting
    • basedpyright is used for type checking
    • poe is used to manage tasks
    • pdoc is used to generate documentation

[5.0.5] - 2025-07-20

Added

  • More endpoints supported by default.

[5.0.4] - 2025-06-24

Changed

  • CloudSettings will now reuse the HTTP session from the query client for sync clients.

Fixed

... (truncated)

Commits
  • 7a7eb81 docs: add changelog entry for 6.0.3 (#636)
  • 4e30e20 PR: 628 (#635)
  • 64fb50e chore: consolidate uv dependency upgrades (#634)
  • 6c198cf *Allow transformation functions for CSV and SCSV formats as well (#629)
  • dc3d28b [bugfix]: Fixes datetime parsing for all nulls data (#621)
  • a5fadc8 add kustothrottle test (#619)
  • 312c243 Formatting + test fix
  • 7ba009e Reapply "Managed Streaming Should Handle Throttling Events Correctly" (#618)
  • 5259589 Fixes pandas date method + fix ingest tests race conditions (#615)
  • 9c10946 Revert "Managed Streaming Should Handle Throttling Events Correctly"
  • Additional commits viewable in compare view

Updates azure-kusto-ingest to 6.0.3

Release notes

Sourced from azure-kusto-ingest's releases.

v6.0.3

What's Changed

Full Changelog: Azure/azure-kusto-python@v6.0.2...v6.0.3

Changelog

Sourced from azure-kusto-ingest's changelog.

[6.0.3] - 2026-03-31

Fixed

  • Fixed KustoApiError crashing when no message is provided by defaulting to "Unknown Kusto service error".
  • Updated KustoApiError.__init__ message parameter type to Optional[str].

Changed

  • Bumped dependencies: aiohttp 3.13.4, azure-core 1.39.0, cryptography 46.0.6, pygments 2.20.0, pyjwt 2.12.1, urllib3 2.6.3.

[6.0.2] - 2026-02-19

Fixed

  • Fixed dataframe_from_result_table crashing with pandas 3.0 when a datetime column contains all null values.
  • Removed legacy pandas 1.x code path in parse_datetime (minimum supported pandas is now 2.3.1).

[6.0.1] - 2025-12-25

Fixed

  • Managed Streaming Should Handle Throttling Events Correctly
  • Changed extra's name back to aio
  • Fixed handling of datetime columns in old pandas versions.
  • Fixed encoding error in ingest_from_dataframe when using csv data format.

[6.0.0] - 2025-11-26

Added

  • Support Delos and Gov SG clouds

Changed

  • [BREAKING] Minimum supported Python version is now 3.9, to align with other Azure SDKs.
  • The project's infrastructure has been updated:
    • uv is used to manage packages
    • ruff is used for linting and formatting
    • basedpyright is used for type checking
    • poe is used to manage tasks
    • pdoc is used to generate documentation

[5.0.5] - 2025-07-20

Added

  • More endpoints supported by default.

[5.0.4] - 2025-06-24

Changed

  • CloudSettings will now reuse the HTTP session from the query client for sync clients.

Fixed

... (truncated)

Commits
  • 7a7eb81 docs: add changelog entry for 6.0.3 (#636)
  • 4e30e20 PR: 628 (#635)
  • 64fb50e chore: consolidate uv dependency upgrades (#634)
  • 6c198cf *Allow transformation functions for CSV and SCSV formats as well (#629)
  • dc3d28b [bugfix]: Fixes datetime parsing for all nulls data (#621)
  • a5fadc8 add kustothrottle test (#619)
  • 312c243 Formatting + test fix
  • 7ba009e Reapply "Managed Streaming Should Handle Throttling Events Correctly" (#618)
  • 5259589 Fixes pandas date method + fix ingest tests race conditions (#615)
  • 9c10946 Revert "Managed Streaming Should Handle Throttling Events Correctly"
  • Additional commits viewable in compare view

Updates requests to 2.33.1

Release notes

Sourced from requests's releases.

v2.33.1

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30

Changelog

Sourced from requests's changelog.

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)
  • Fixed Content-Type header parsing for malformed values. (#7309)
  • Improved error consistency for malformed header values. (#7308)

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.

... (truncated)

Commits

Updates python-dateutil to 2.9.0.post0

Release notes

Sourced from python-dateutil's releases.

2.9.0.post0

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.
Changelog

Sourced from python-dateutil's changelog.

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

Version 2.9.0 (2024-02-29)

Data updates

  • Updated tzdata version to 2024a. (gh pr #1342)

Features

  • Made all dateutil submodules lazily imported using PEP 562 <https://www.python.org/dev/peps/pep-0562/>_. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

  • Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

  • Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)

Version 2.8.2 (2021-07-08)

Data updates

  • Updated tzdata version to 2021a. (gh pr #1128)

... (truncated)

Commits
  • 1ae8077 Merge pull request #1346 from pganssle/release_2.9.0.post0
  • ee6de9d Update news to prepare for release
  • 9780d32 Pin setuptools_scm to <8
  • db9d018 Merge pull request #1343 from pganssle/release_2.9.0
  • 423ca2f Run updatezinfo before build
  • edd3fd4 Update NEWS file
  • fe02d02 Run towncrier with Python 3.11
  • 9c7524a Fix MANIFEST.in pattern
  • 6de58f5 Update classifiers to include Python 3.12
  • 8fe0cab Merge pull request #1342 from pganssle/update_zoneinfo
  • Additional commits viewable in compare view

Updates pandas to 3.0.2

Release notes

Sourced from pandas's releases.

pandas 3.0.2

We are pleased to announce the release of pandas 3.0.2. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • ab90747 RLS: 3.0.2 (#64934)
  • 6f27013 Backport PR #64931 on branch 3.0.x (DOC/BLD: temporary disable upload of docs...
  • 48ddc60 Backport PR #64664 on branch 3.0.x (BUG: DataFrame.sum() crashes on empty Dat...
  • 8774488 [backport 3.0.x] PERF: fix slow python loop in validation for ArrowStringArra...
  • 33af6cc Backport PR #64133 on branch 3.0.x (BUG: str.find returns byte offset instead...
  • 4ef49d8 [backport 3.0.x] BUG: fix convert_dtypes dropping values from sliced mixed-dt...
  • 0668f34 [backport 3.0.x] BUG: Fix HDFStore.put with StringDtype columns and compressi...
  • 23f2f44 [backport 3.0.x] BUG: Suppress unnecessary RuntimeWarning in to_datetime with...
  • 83ba804 Backport PR #64886: BUG: Compute Variance of Complex Numbers Correctly (#64892)
  • bb5ca1a Backport PR #64386 on branch 3.0.x (BUG: fix sort_index AssertionError with R...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: bump the python-deps group with 8 updates
a95a2b0 
Updates the requirements on [azure-identity](https://github.com/Azure/azure-sdk-for-python), [azure-core](https://github.com/Azure/azure-sdk-for-python), [azure-storage-file-datalake](https://github.com/Azure/azure-sdk-for-python), [azure-kusto-data](https://github.com/Azure/azure-kusto-python), [azure-kusto-ingest](https://github.com/Azure/azure-kusto-python), [requests](https://github.com/psf/requests), [python-dateutil](https://github.com/dateutil/dateutil) and [pandas](https://github.com/pandas-dev/pandas) to permit the latest version.

Updates `azure-identity` to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.1...azure-identity_1.25.3)

Updates `azure-core` to 1.40.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-core_1.29.0...azure-core_1.40.0)

Updates `azure-storage-file-datalake` to 12.23.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-file-datalake_12.14.0...azure-storage-file-datalake_12.23.0)

Updates `azure-kusto-data` to 6.0.3
- [Release notes](https://github.com/Azure/azure-kusto-python/releases)
- [Changelog](https://github.com/Azure/azure-kusto-python/blob/master/CHANGELOG.md)
- [Commits](Azure/azure-kusto-python@v6.0.0...v6.0.3)

Updates `azure-kusto-ingest` to 6.0.3
- [Release notes](https://github.com/Azure/azure-kusto-python/releases)
- [Changelog](https://github.com/Azure/azure-kusto-python/blob/master/CHANGELOG.md)
- [Commits](Azure/azure-kusto-python@v6.0.0...v6.0.3)

Updates `requests` to 2.33.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.33.1)

Updates `python-dateutil` to 2.9.0.post0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.8.2...2.9.0.post0)

Updates `pandas` to 3.0.2
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.2)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-core
  dependency-version: 1.40.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-storage-file-datalake
  dependency-version: 12.23.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-kusto-data
  dependency-version: 6.0.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-kusto-ingest
  dependency-version: 6.0.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: requests
  dependency-version: 2.33.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dateutil
  dependency-version: 2.9.0.post0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pandas
  dependency-version: 3.0.2
  dependency-type: direct:production
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 1, 2026
@Yamini-Microsoft Yamini-Microsoft deleted the branch dependabotchanges May 4, 2026 11:19
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 4, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/dependabotchanges/python-deps-91fa53e99e branch May 4, 2026 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft

@toherman-msft toherman-msft Awaiting requested review from toherman-msft

@nchandhi nchandhi Awaiting requested review from nchandhi

@dgp10801 dgp10801 Awaiting requested review from dgp10801

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Yamini-Microsoft