Skip to content

chore(deps-dev): bump cffi from 2.0.0 to 2.1.1 - #1545

Merged
github-actions[bot] merged 4 commits into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/cffi-2.1.0
Oct 15, 2026
Merged

github-actions[bot] merged 4 commits into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/cffi-2.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cffi from 2.0.0 to 2.1.1.

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

v2.1.0

  • Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.
  • Dropped support for Python 3.9.
  • Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.
  • Fixed crashes inside __delitem__.
  • Fixed "string too big" error under MSVC.
  • Fixed mingw builds.
  • Added support for arm64 iOS wheels.
Commits
  • fd33e77 New release 2.1.1
  • 56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
  • d9f6f70 New release 2.1.0
  • 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
  • 1362e5d Move cffi-gen-src release note to 2.1.0 notes
  • a797055 Make error message when embedding version test fails more friendly
  • f1f40a8 Update changelog
  • dc62c93 Delete missed cp39 Windows builds
  • a341180 Update version numbers to prepare for v2.1 release
  • 9f04d85 Mark test using inet_ntoa as thread-unsafe
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Combines the 13 open dependabot PRs into a single update.

requirements-dev.txt:
- aiohttp: 3.13.5 -> 3.14.1 (#1530; supersedes #1521 -> 3.14.0)
- astroid: 4.0.2 -> 4.1.2 (pylint group #1529)
- pylint: 4.0.5 -> 4.0.6 (pylint group #1529)
- click: 8.1.8 -> 8.4.1 (#1519)
- cryptography: 46.0.7 -> 48.0.1 (#1531)
- docutils: 0.22.4 -> 0.23 (#1522)
- microsoft-kiota-*: 1.10.1 -> 1.10.2 (kiota group #1516)
- msal: 1.36.0 -> 1.37.0 (#1523)
- opentelemetry-api/sdk: 1.42.0 -> 1.42.1 (open-telemetry group #1515)
- opentelemetry-semantic-conventions: 0.63b0 -> 0.63b1 (#1515)
- platformdirs: 4.9.6 -> 4.10.0 (#1518)
- PyJWT: 2.12.1 -> 2.13.0 (#1520)
- wrapt: 2.2.0 -> 2.2.1 (#1517)

GitHub Actions:
- actions/checkout: v6 -> v7 (#1532)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
pylint 4.0.6 requires astroid<=4.1.dev0,>=4.0.2, so astroid 4.1.2 caused a
ResolutionImpossible error. Downgrade to 4.0.4 (latest 4.0.x) to fix CI.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Group PRs are all-or-nothing. Dependabot's pylint group pairs astroid 4.1.2
with pylint 4.0.6, but pylint 4.0.6 requires astroid<=4.1.dev0, so the pair
is unresolvable. Rather than partially apply the group with an astroid
workaround, leave the whole group out (astroid/pylint stay at main values)
so it remains a clean standalone Dependabot PR.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 13, 2026 05:15
@dependabot dependabot Bot added the python Pull requests that update Python code label Jul 13, 2026
@github-actions
github-actions Bot enabled auto-merge July 13, 2026 05:15
@dependabot
dependabot Bot force-pushed the dependabot/pip/cffi-2.1.0 branch 3 times, most recently from 658e880 to a4fb149 Compare July 14, 2026 20:37
@dependabot
dependabot Bot force-pushed the dependabot/pip/cffi-2.1.0 branch from a4fb149 to 90c1d47 Compare July 22, 2026 00:28
@dependabot
dependabot Bot force-pushed the dependabot/pip/cffi-2.1.0 branch from 90c1d47 to fa5ead8 Compare August 5, 2026 19:31
Bumps [cffi](https://github.com/python-cffi/cffi) from 2.0.0 to 2.1.1.
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.1)

---
updated-dependencies:
- dependency-name: cffi
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from main to chore/consolidate-dependabot-updates October 15, 2026 04:54
@dependabot dependabot Bot changed the title chore(deps-dev): bump cffi from 2.0.0 to 2.1.0 chore(deps-dev): bump cffi from 2.0.0 to 2.1.1 Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/cffi-2.1.0 branch from fa5ead8 to e56c11d Compare October 15, 2026 04:54
@github-actions
github-actions Bot merged commit bed7133 into chore/consolidate-dependabot-updates Oct 15, 2026
10 of 11 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/cffi-2.1.0 branch October 15, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant