Skip to content

chore(deps-dev): bump griffe from 1.14.0 to 2.3.0 - #4069

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/griffe-2.3.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/griffe-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps griffe from 1.14.0 to 2.3.0.

Release notes

Sourced from griffe's releases.

2.3.0

2.3.0 - 2026-09-04

Compare with 2.2.0

Features

  • Add option to give precedence to docstrings in stubs vs. source (09a2a13 by Timothée Mazzucotelli). Issue-447, PR-481

Bug Fixes

  • Preserve nested tuple parentheses (e095a7c by Alperen). PR-487, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr
  • Preserve nested f-string format specs (38921b7 by Alperen). PR-486
  • Disable all docstring warnings when passing warnings=False (5cb0ae2 by Timothée Mazzucotelli).

Performance Improvements

  • Reuse computed parent in is_imported (092ac31 by Timothée Mazzucotelli).
  • Only build debug messages at debug level (8f05a4a by Timothée Mazzucotelli).
  • Avoid creating new sets when handling labels (06cd02e by Timothée Mazzucotelli).
  • Maintain map of AST node type to visitor function (e21851e by Timothée Mazzucotelli).
  • Avoid cyclic refs in ASTs to allow garbage-collecting them (b968de0 by Timothée Mazzucotelli).
  • Cache per-module path-related properties during serialization (8bd6cc4 by Timothée Mazzucotelli).
  • Do not fire load events when no extension has hooked them (0e2ae7c by Timothée Mazzucotelli).
  • Compute costly message lazily in alias resolution errors (1e391b8 by Timothée Mazzucotelli).
  • Avoid iterating many times over function parameters when merging stubs (03cae74 by Timothée Mazzucotelli).
  • Avoid iterating many times over function parameters when diff'ing (d3cf2c4 by Timothée Mazzucotelli).
  • Improve efficiency of AST parameter extraction (1e37cd4 by Timothée Mazzucotelli).
  • Cache serializable expression fields (f9e48c1 by Timothée Mazzucotelli).
  • Use maps to make JSON encoder faster (b7de96f by Timothée Mazzucotelli).
  • Avoid recomputing inherited members when diff'ing (a29e028 by Timothée Mazzucotelli).
  • Make Google, Numpy and Sphinx docstring parsers faster (7f39373 by Timothée Mazzucotelli).
  • Pre-compile patterns for docstring style detection (ad58ad5 by Timothée Mazzucotelli).
  • LRU-cache parsing of type annotations in docstrings (1671e59 by Timothée Mazzucotelli).

2.2.0

2.2.0 - 2026-08-16

Compare with 2.1.0

Features

  • Support await expressions (6b3caab by Vincent Gao). PR-479
  • Support unpacking in dict comprehensions (2d39391 by mushitoriami). PR-475

Bug Fixes

... (truncated)

Changelog

Sourced from griffe's changelog.

2.3.0 - 2026-09-04

Compare with 2.2.0

Features

  • Add option to give precedence to docstrings in stubs vs. source (09a2a13 by Timothée Mazzucotelli). Issue-447, PR-481

Bug Fixes

  • Preserve nested tuple parentheses (e095a7c by Alperen). PR-487, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr
  • Preserve nested f-string format specs (38921b7 by Alperen). PR-486
  • Disable all docstring warnings when passing warnings=False (5cb0ae2 by Timothée Mazzucotelli).

Performance Improvements

  • Reuse computed parent in is_imported (092ac31 by Timothée Mazzucotelli).
  • Only build debug messages at debug level (8f05a4a by Timothée Mazzucotelli).
  • Avoid creating new sets when handling labels (06cd02e by Timothée Mazzucotelli).
  • Maintain map of AST node type to visitor function (e21851e by Timothée Mazzucotelli).
  • Avoid cyclic refs in ASTs to allow garbage-collecting them (b968de0 by Timothée Mazzucotelli).
  • Cache per-module path-related properties during serialization (8bd6cc4 by Timothée Mazzucotelli).
  • Do not fire load events when no extension has hooked them (0e2ae7c by Timothée Mazzucotelli).
  • Compute costly message lazily in alias resolution errors (1e391b8 by Timothée Mazzucotelli).
  • Avoid iterating many times over function parameters when merging stubs (03cae74 by Timothée Mazzucotelli).
  • Avoid iterating many times over function parameters when diff'ing (d3cf2c4 by Timothée Mazzucotelli).
  • Improve efficiency of AST parameter extraction (1e37cd4 by Timothée Mazzucotelli).
  • Cache serializable expression fields (f9e48c1 by Timothée Mazzucotelli).
  • Use maps to make JSON encoder faster (b7de96f by Timothée Mazzucotelli).
  • Avoid recomputing inherited members when diff'ing (a29e028 by Timothée Mazzucotelli).
  • Make Google, Numpy and Sphinx docstring parsers faster (7f39373 by Timothée Mazzucotelli).
  • Pre-compile patterns for docstring style detection (ad58ad5 by Timothée Mazzucotelli).
  • LRU-cache parsing of type annotations in docstrings (1671e59 by Timothée Mazzucotelli).

2.2.0 - 2026-08-16

Compare with 2.1.0

Features

  • Support await expressions (6b3caab by Vincent Gao). PR-479
  • Support unpacking in dict comprehensions (2d39391 by mushitoriami). PR-475

Bug Fixes

  • Forward warn_missing_types to Sphinx return section reader (a15e782 by Timothée Mazzucotelli). Issue-mkdocstrings-python-337
  • Make stringified expressions valid and faithful Python (eb85f0d by Vincent Gao). PR-478
  • Empty tuples can never be implicit (82e728d by Vincent Gao). PR-474, Co-authored-by: Timothée Mazzucotelli dev@pawamoy.fr
  • Render f-strings and t-strings with correct quote delimiters (90e28d4 by Bartosz Sławecki). Issue-444, PR-455
  • Detect basic admonitions 'example', 'note' and 'warning' in Google/Numpy docstrings when inferring style (f30306f by Timothée Mazzucotelli).

... (truncated)

Commits
  • ecd5349 chore: Prepare release 2.3.0
  • 09a2a13 feat: Add option to give precedence to docstrings in stubs vs. source
  • e095a7c fix: Preserve nested tuple parentheses
  • efa8ac1 Merge branch 'main' of github.com:mkdocstrings/griffe
  • 092ac31 perf: Reuse computed parent in is_imported
  • 76e1082 chore: Add docs for package parameter
  • 8f05a4a perf: Only build debug messages at debug level
  • 06cd02e perf: Avoid creating new sets when handling labels
  • e21851e perf: Maintain map of AST node type to visitor function
  • b968de0 perf: Avoid cyclic refs in ASTs to allow garbage-collecting them
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 13, 2026 03:08
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 13, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-14T05:42:44.866242Z ec49d7e New commits
🔒 Security Review ✅ Completed 2026-10-14T05:44:30.644342Z ec49d7e New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@openai-sdks

openai-sdks Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

OkTest Summary

✅ 236/236 SDK tests passed in 9.069s for Python SDK PR #4069.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 230ms
tests/chat-completions-create.test.ts ✅ Passed 192ms
tests/chat-completions-stream.test.ts ✅ Passed 255ms
tests/files-content-binary.test.ts ✅ Passed 221ms
tests/files-create-multipart.test.ts ✅ Passed 210ms
tests/files-list-pagination.test.ts ✅ Passed 205ms
tests/initialize-config.test.ts ✅ Passed 159ms
tests/instance-isolation.test.ts ✅ Passed 180ms
tests/models-list.test.ts ✅ Passed 297ms
tests/responses-background-lifecycle.test.ts ✅ Passed 216ms
tests/responses-body-method-errors.test.ts ✅ Passed 290ms
tests/responses-cancel-timeout.test.ts ✅ Passed 205ms
tests/responses-cancel.test.ts ✅ Passed 187ms
tests/responses-compact-retries.test.ts ✅ Passed 284ms
tests/responses-compact.test.ts ✅ Passed 187ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 151ms
tests/responses-create-advanced.test.ts ✅ Passed 249ms
tests/responses-create-disconnect.test.ts ✅ Passed 1.232s
tests/responses-create-errors.test.ts ✅ Passed 202ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 199ms
tests/responses-create-retries.test.ts ✅ Passed 548ms
tests/responses-create-stream-failures.test.ts ✅ Passed 736ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 235ms
tests/responses-create-stream-wire.test.ts ✅ Passed 1.983s
tests/responses-create-stream.test.ts ✅ Passed 334ms
tests/responses-create-terminal-states.test.ts ✅ Passed 202ms
tests/responses-create-timeout.test.ts ✅ Passed 213ms
tests/responses-create.test.ts ✅ Passed 234ms
tests/responses-delete.test.ts ✅ Passed 165ms
tests/responses-input-items-errors.test.ts ✅ Passed 363ms
tests/responses-input-items-list.test.ts ✅ Passed 285ms
tests/responses-input-items-options.test.ts ✅ Passed 321ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 299ms
tests/responses-input-tokens-count.test.ts ✅ Passed 183ms
tests/responses-malformed-inputs.test.ts ✅ Passed 1.033s
tests/responses-not-found-errors.test.ts ✅ Passed 255ms
tests/responses-parse.test.ts ✅ Passed 289ms
tests/responses-retrieve-retries.test.ts ✅ Passed 206ms
tests/responses-retrieve.test.ts ✅ Passed 223ms
tests/responses-stored-method-errors.test.ts ✅ Passed 461ms
tests/retry-behavior.test.ts ✅ Passed 3.072s
tests/sdk-error-shape.test.ts ✅ Passed 232ms

View OkTest run #38517954118

SDK merge (a775ec04ecd0) · head (ec49d7e7f4fd) · base (86cae50785fb) · OkTest (63b471b22245)

@github-actions

github-actions Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Castiron custom code

Evaluated main: 86cae50785fb7b7bf2a5d2383370b214b304acd2.

✅ No new custom-code files detected.

40 mixed files remain; 0 existing customizations changed.

Compared 86cae50785fb → ec49d7e7f4fd. Generated baselines verified.

40 existing customizations unchanged
  • api.md
  • scripts/castiron/custom_code_budget.py
  • scripts/castiron/test_custom_code_github.py
  • scripts/castiron/test_custom_code_publication.py
  • scripts/castiron/test_custom_code_report.py
  • src/openai/init.py
  • src/openai/_client.py
  • src/openai/resources/audio/transcriptions.py
  • src/openai/resources/audio/translations.py
  • src/openai/resources/beta/agents/environments/files.py
  • src/openai/resources/beta/agents/sessions/artifacts.py
  • src/openai/resources/beta/agents/sessions/sessions.py
  • src/openai/resources/beta/beta.py
  • src/openai/resources/beta/responses/responses.py
  • src/openai/resources/beta/threads/runs/runs.py
  • src/openai/resources/beta/threads/threads.py
  • src/openai/resources/chat/completions/completions.py
  • src/openai/resources/embeddings.py
  • src/openai/resources/files.py
  • src/openai/resources/live/forks.py
  • src/openai/resources/live/live.py
  • src/openai/resources/live/sideband.py
  • src/openai/resources/realtime/api.md
  • src/openai/resources/realtime/realtime.py
  • src/openai/resources/responses/responses.py
  • src/openai/resources/uploads/uploads.py
  • src/openai/resources/vector_stores/file_batches.py
  • src/openai/resources/vector_stores/files.py
  • src/openai/resources/videos.py
  • src/openai/resources/webhooks/init.py
  • src/openai/resources/webhooks/webhooks.py
  • src/openai/types/fine_tuning/fine_tuning_job_integration.py
  • src/openai/types/realtime/conversation_item_input_audio_transcription_delta_event.py
  • src/openai/types/realtime/realtime_error_event.py
  • src/openai/types/responses/tool.py
  • src/openai/types/responses/tool_param.py
  • src/openai/types/webhooks/init.py
  • src/openai/types/webhooks/live_call_incoming_webhook_event.py
  • src/openai/types/webhooks/unwrap_webhook_event.py
  • tests/api_resources/test_videos.py

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 38518027387 --repo openai/openai-python \
  --name castiron-custom-code-38518027387-1 --dir /tmp/castiron-custom-code-38518027387-1
git apply --stat /tmp/castiron-custom-code-38518027387-1/custom-code.patch
cat /tmp/castiron-custom-code-38518027387-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 86cae50785fb7b7bf2a5d2383370b214b304acd2 ec49d7e7f4fd6003ad488d82f7505ff851b7f055
python3 scripts/castiron/custom_code_report.py report \
  --base 86cae50785fb7b7bf2a5d2383370b214b304acd2 \
  --head ec49d7e7f4fd6003ad488d82f7505ff851b7f055 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-ec49d7e7f4fd
cat /tmp/castiron-custom-code-ec49d7e7f4fd/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: de69acdec7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread uv.lock Outdated
[[package]]
name = "openai"
version = "3.29.0" # x-release-please-version
version = "3.29.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Restore the release-please version marker

Restore # x-release-please-version on this version line. The dependency-locks job in .github/workflows/ci.yml:63-67 explicitly asserts that uv.lock contains the exact marked line, so every CI run for this commit fails before lint, build, and tests; the same assertion fails locally against the committed lock.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/uv/griffe-2.3.0 branch from de69acd to 1269622 Compare October 14, 2026 04:02

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1269622246

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread uv.lock
[[package]]
name = "griffe"
version = "1.14.0"
version = "2.3.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Raise the declared Griffe security floor

When the dependency-locks job runs the base revision's scripts/check-dependency-security.py before lock validation, this upgrade is compared with the unchanged griffe>=1 declaration in pyproject.toml; running that checker against the parent and this tree exits with Raise the contextual protected security minimum to the patched release for griffe. Update the declared dev-dependency minimum to cover 2.3.0, otherwise CI still fails even after the separately reported release-please marker is restored.

AGENTS.md reference: AGENTS.md:L31-L34

Useful? React with 👍 / 👎.

Bumps [griffe](https://github.com/mkdocstrings/griffe) from 1.14.0 to 2.3.0.
- [Release notes](https://github.com/mkdocstrings/griffe/releases)
- [Changelog](https://github.com/mkdocstrings/griffe/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/griffe@1.14.0...2.3.0)

---
updated-dependencies:
- dependency-name: griffe
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/griffe-2.3.0 branch from 1269622 to ec49d7e Compare October 14, 2026 05:41

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants