Skip to content

Comments

chore(deps-dev): bump cython from 3.1.4 to 3.1.6#1632

Merged
bdraco merged 1 commit intomasterfrom
dependabot/pip/cython-3.1.6
Nov 1, 2025
Merged

chore(deps-dev): bump cython from 3.1.4 to 3.1.6#1632
bdraco merged 1 commit intomasterfrom
dependabot/pip/cython-3.1.6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps cython from 3.1.4 to 3.1.6.

Release notes

Sourced from cython's releases.

3.1.6

No release notes provided.

3.1.5 (2025-10-19)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Changelog

Sourced from cython's changelog.

3.1.6 (2025-10-23)

Bugs fixed

  • Unicode characters formatted from C integers with f"{value:c}" could result in invalid Python string objects since Cython 3.1.0. (Github issue :issue:7240)

  • cythonize (program and function) now uses concurrent.futures.ProcessPoolExecutor instead of multiprocessing.Pool to fix a hang on build failures in parallel builds. A possible work-around is to disable parallel builds. Patch by Sviatoslav Sydorenko. (Github issue :issue:7183)

3.1.5 (2025-10-20)

Bugs fixed

  • Conversion from C++ strings longer than PY_SSIZE_T_MAX did not validate the length.

  • Some non-Limited API code was incorrectly used in generated header files. (Github issue :issue:7157)

  • Optimised unpacking of Python integers in expressions uses a slightly safer scheme. (Github issue :issue:7134)

  • Empty return statements were not always reported when tracing. (Github issue :issue:7022)

  • Value conversion errors when tracing C return statements no longer fail the trace but fall back to reporting None returns instead. (Github issue :issue:6503)

Commits
  • b40c676 Prepare release of 3.1.6.
  • 2c00332 Build: Clear "license-files" option in setup metadata due to
  • 6d0b9bd Build: Use twine to check the wheels before uploading them.
  • fecd0e5 Silence a C coercion warning in a test.
  • 2a68bbc Avoid back-and-forth between signed and unsigned index types in C array conve...
  • 1824975 Silence a C compiler warning about implicit signed/unsigned conversion.
  • a583bc3 Disable parallelism in cythonize command/function on spawn (GH-7183)
  • 2ee0bc1 Update changelog.
  • b0f7b40 Fix f-string joining when non-ASCII "{intvalue:c}" character formats are invo...
  • 67351ba Adapt release date of 3.1.5 to PyPI release time.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cython](https://github.com/cython/cython) from 3.1.4 to 3.1.6.
- [Release notes](https://github.com/cython/cython/releases)
- [Changelog](https://github.com/cython/cython/blob/master/CHANGES.rst)
- [Commits](cython/cython@3.1.4...3.1.6)

---
updated-dependencies:
- dependency-name: cython
  dependency-version: 3.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 27, 2025
@codecov
Copy link

codecov bot commented Oct 27, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.76%. Comparing base (77baf33) to head (a8c8213).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1632   +/-   ##
=======================================
  Coverage   99.76%   99.76%           
=======================================
  Files          33       33           
  Lines        3401     3401           
  Branches      461      461           
=======================================
  Hits         3393     3393           
  Misses          5        5           
  Partials        3        3           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed-hq
Copy link

codspeed-hq bot commented Oct 27, 2025

CodSpeed Performance Report

Merging #1632 will not alter performance

Comparing dependabot/pip/cython-3.1.6 (a8c8213) with master (77baf33)

Summary

✅ 6 untouched

@bdraco bdraco merged commit e5fd618 into master Nov 1, 2025
78 of 80 checks passed
@bdraco bdraco deleted the dependabot/pip/cython-3.1.6 branch November 1, 2025 05:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant