chore(deps): bump the production-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
pyarrow	25.0.0	25.0.1
packaging	26.2	26.3
redshift-connector	2.1.15	2.1.16
gremlinpython	3.7.2	3.8.1
progressbar2	4.5.0	4.6.0

Updates pyarrow from 25.0.0 to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Apache Arrow 25.0.1 RC1

Release Notes: Release Candidate: 25.0.1 RC1

Apache Arrow 25.0.1 RC0

Release Notes: Release Candidate: 25.0.1 RC0

Commits

• beccec0 MINOR: [Release] Update versions for 25.0.1
• 7bdf01a MINOR: [Release] Update .deb/.rpm changelogs for 25.0.1
• 91dbae1 MINOR: [Release] Update CHANGELOG.md for 25.0.1
• 849d463 GH-50808: [Python] Narrow Feather deprecation to V1 format (#50685)
• e70ebf5 GH-50600: [Release] Pin Python version in Conda verification
• f5037be GH-50578: [C++][FlightRPC][ODBC] Always return SQL_NO_DATA from GetMoreResult...
• 1491589 GH-50503: [Parquet] Remove SVE128 unpack (#50611)
• d1eaaed GH-50326: [Python] Convert arrays to Python objects without per-element Scala...
• fe14135 GH-50428: [C++] Better mimalloc configuration on macOS (#50549)
• 8fb632a GH-50383: [Release] Remove deprecated -f flag on conda create environment (#5...
• See full diff in compare view

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

• Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
• PEP 808: accept Metadata-Version: 2.6. (#1194)
• Add a limit argument to parse_tag() for compressed tag sets. (#1220)
• Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
• Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
• Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

• Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
• Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

• Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
• Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
• Fix an AttributeError when hashing internally trimmed versions. (#1242)
• Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

• Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
• Normalize requested extra names before comparing or hashing requirements. (#644)
• Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
• Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
• Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
• Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
• Keep the parentheses of a nested group when serializing markers. (#1316)
• Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
• Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
• Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
• Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
• Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

• Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
• Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
• Reject malformed Description-Content-Type values. (#1329)
• Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
• Route multipart email payloads to unparsed instead of asserting. (#1247)
• Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
• Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03

Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

• 929fd4b Bump for release
• f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
• f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
• b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
• 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
• 413d006 docs: changelog for 26.3 (#1343)
• 4eb0753 docs(metadata): explain selective field validation (#1342)
• 77e9ed4 feat(tags): add pure Python tag generator (#1346)
• 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
• 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
• Additional commits viewable in compare view

Updates redshift-connector from 2.1.15 to 2.1.16

Release notes

Sourced from redshift-connector's releases.

v2.1.16

Full Changelog: aws/amazon-redshift-python-driver@v2.1.15...v2.1.16

Changelog

Sourced from redshift-connector's changelog.

v2.1.16 (2026-08-03)

• Added enable_table_types connection option to generalize get_tables() table types to TABLE/VIEW when disabled
• Added support for the default AWS credential provider chain in Identity Enhanced Credentials authentication.
• Fixed get_procedure_columns() and get_function_columns() to return the correct LENGTH value for character-type parameters.
• Fixed get_columns() to report TEXT columns as VARCHAR with size 256.

Commits

• 3c3b00e Update CHANGELOG.md
• 2ba140c chore: bump version to 2.1.16
• 4a94a39 feat(plugin): Add default credentials fallback to IdpTokenAuthPlugin
• e9a01eb fix: report text columns as varchar with size 256 in metadata APIs
• 3ff304d feat: Add enable_table_types connection option to control TABLE_TYPE granularity
• e7321f5 fix: return correct length for get_procedure_columns and get_function_columns
• See full diff in compare view

Updates gremlinpython from 3.7.2 to 3.8.1

Updates async-timeout from 5.0.1 to 4.0.3

Changelog

Sourced from async-timeout's changelog.

5.0.1 (2024-11-06)

Misc

• [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0 (2024-10-31)

Features

• Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

• On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

• Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)

4.0.3 (2023-08-10)

• Fixed compatibility with asyncio.timeout() on Python 3.11+.
• Added support for Python 3.11.
• Dropped support for Python 3.6.

4.0.2 (2021-12-20)

Misc

• [#259](https://github.com/aio-libs/async-timeout/issues/259) <https://github.com/aio-libs/async-timeout/issues/259>, [#274](https://github.com/aio-libs/async-timeout/issues/274) <https://github.com/aio-libs/async-timeout/issues/274>

4.0.1 (2121-11-10)

... (truncated)

Commits

• a489744 Release 4.0.3 (#364)
• 5e3a4f0 Bump docutils from 0.19 to 0.20.1 (#369)
• 6a5964b Bump pytest-cov from 4.0.0 to 4.1.0 (#365)
• fcbeb65 Bump mypy from 1.2.0 to 1.4.1 (#368)
• 5eeffae Bump pytest from 7.3.1 to 7.4.0 (#366)
• 8ec8cc0 Bump pytest-asyncio from 0.21.0 to 0.21.1 (#367)
• 7290654 Bump pytest-asyncio from 0.20.3 to 0.21.0 (#354)
• 9f07afa Mention import at least once in the readme (#361)
• e1c8827 Bump pytest from 7.2.1 to 7.3.1 (#360)
• 211a9bf Bump mypy from 0.991 to 1.2.0 (#358)
• Additional commits viewable in compare view

Updates progressbar2 from 4.5.0 to 4.6.0

Release notes

Sourced from progressbar2's releases.

v4.6.0

Highlights since 4.5.0:

Performance

• progressbar.progressbar() now auto-dispatches to a lean fast path for the common wrap-a-loop case, and an integer update gate keeps gated iterations to an increment, a compare and a store (#316).
• Optional native iterator accelerator: pip install 'progressbar2[fast]'. See benchmarks/report.md for the numbers against tqdm, rich, alive-progress and click.

Features

• tqdm-style arguments on progressbar(): desc, total, unit, unit_scale and postfix.
• MultiBar(join_timeout=...) bounds the wait for unfinished bars on with-block exit.
• TERM-based color detection generalized beyond xterm variants (#318), plus a truecolor-terminal allowlist for stripped COLORTERM environments.
• AttributeDict is generic over its value type.

Fixes

• 28 bugs found in a full audit of the bar, widgets, MultiBar and the CLI (#315), plus regression coverage for #212, #295 and #301 (#317, #326).
• 16-color mapping no longer collapses mid-intensity colors (e.g. maroon) to black.
• The wheel no longer ships the repo-level benchmarks/, scripts/ and tools/ directories.

Documentation

• Rebuilt as an interactive site: a tutorial, task-focused how-tos, per-widget pages with animated demos, and an in-browser Python console that runs every example live: https://progressbar-2.readthedocs.io/
• Full API docstring coverage, enforced in CI.

Compatibility

• Requires Python 3.10+ (was 3.8).
• Still backwards compatible with the original progressbar package.

Full changelog: wolph/python-progressbar@v4.5.0...v4.6.0

Commits

• 81eed97 fix(packaging): keep benchmarks/, scripts/ and tools/ out of the wheel
• f6cedbd chore: release 4.6.0
• 88dbae8 docs: fix and slow down the README demo animations
• ac06aab docs: accuracy and editorial pass over docs and docstrings
• ac646c6 docs: document the whole package and enforce the ruff docstring gate
• defcf71 docs: rebuild the documentation as an interactive Diataxis site
• 01b86f6 Merge pull request #326 from wolph/harden-issue-tests-2
• 071fb2f style: restore top-level test spacing
• eface72 test: remove unused widget max values
• fbeeefa style: satisfy current ruff union ordering
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions