Skip to content

Python dependency: Bump psycopg from 3.3.6 to 3.3.7 in the python-minor-and-patch group - #10751

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-minor-and-patch-c192d421a7
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-minor-and-patch-c192d421a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 1 update: psycopg.

Updates psycopg from 3.3.6 to 3.3.7

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Current release

Psycopg 3.3.8 ^^^^^^^^^^^^^

  • Revert the use of /etc/ssl as SSL directory in the binary packages on Linux and macOS: it caused the system openssl.cnf to be loaded, which could break connections, for instance on FIPS-enabled systems (:ticket:[#1476](https://github.com/psycopg/psycopg/issues/1476)).
  • Fix the size of the binary packages on Linux x86_64, increased in 3.3.7 by padding of the bundled libraries (:ticket:[#1477](https://github.com/psycopg/psycopg/issues/1477)).

Psycopg 3.3.7 ^^^^^^^^^^^^^

  • Fix segfault fetching arrays of strings or timestamps after closing the connection (:ticket:[#1428](https://github.com/psycopg/psycopg/issues/1428)).
  • Fix ~Connection.cancel_safe() failing if the cancel connection is not ready immediately, for instance on a slow network (:ticket:[#1440](https://github.com/psycopg/psycopg/issues/1440)).
  • Fix reference cycles created adapting recursive types, which kept data in memory until the next garbage collection (:tickets:[#1443](https://github.com/psycopg/psycopg/issues/1443), [#1462](https://github.com/psycopg/psycopg/issues/1462)).
  • Fix loading intervals with a very large number of hours in text format, which could lose microseconds (:ticket:[#1446](https://github.com/psycopg/psycopg/issues/1446)).
  • Fix leak of adapters calling ~psycopg.types.composite.register_composite() repeatedly without custom !make_object or !make_sequence functions (:ticket:[#1449](https://github.com/psycopg/psycopg/issues/1449)).
  • Roll back the transaction if entering a ~Connection.transaction() block is interrupted, for instance by a task cancellation (:ticket:[#1451](https://github.com/psycopg/psycopg/issues/1451)).
  • Quote array elements with Unicode white space, which CockroachDB would otherwise strip from strings (cockroach#176211__, 🎫[#1465](https://github.com/psycopg/psycopg/issues/1465)).
  • Set the system SSL root certificate directory to /etc/ssl in the binary packages on Linux and macOS.

.. __: cockroachdb/cockroach#176211

Psycopg 3.3.6 ^^^^^^^^^^^^^

... (truncated)

Commits
  • 4daf632 chore: bump psycopg package version to 3.3.7
  • 7ce93bb chore(deps): bump pypa/cibuildwheel
  • 70dce7a test: run three assertions trapped after the expected exception
  • 845a06b Merge pull request #1450 from Rahul-cs50/fix/1449-register-composite-leaks-ad...
  • ac2e3bb test: add and use get_objects() to GCFixture
  • c62b9eb fix(composite): don't leak adapters registering a composite repeatedly
  • 0e7049f docs: mention resolution of ticket #1462 in news file
  • e1fc504 Merge pull request #1443 from spicysharkco/fix/array-dumper-cycles
  • 0ad38b9 fix: don't create reference cycles dumping lists as arrays
  • 2acfd91 Merge pull request #1465 from dvarrazzo/crdb-whitespace-issue-176211
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor-and-patch group with 1 update: [psycopg](https://github.com/psycopg/psycopg).


Updates `psycopg` from 3.3.6 to 3.3.7
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.3.6...3.3.7)

---
updated-dependencies:
- dependency-name: psycopg
  dependency-version: 3.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Nov 6, 2026
@coderabbitai

coderabbitai Bot commented Nov 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like psycopg is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 6, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/python-minor-and-patch-c192d421a7 branch November 6, 2026 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants