chore(deps-dev): bump orjson from 3.10.10 to 3.11.6#575
Conversation
Bumps [orjson](https://github.com/ijl/orjson) from 3.10.10 to 3.11.6. - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.10...3.11.6) --- updated-dependencies: - dependency-name: orjson dependency-version: 3.11.6 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| { url = "https://pypi.devinfra.sentry.io/wheels/orjson-3.11.6-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:cded072b9f65fcfd188aead45efa5bd528ba552add619b3ad2a81f67400ec450" }, | ||
| { url = "https://pypi.devinfra.sentry.io/wheels/orjson-3.11.6-cp314-cp314-macosx_15_0_arm64.whl", hash = "sha256:132b0ab2e20c73afa85cf142e547511feb3d2f5b7943468984658f3952b467d4" }, | ||
| { url = "https://pypi.devinfra.sentry.io/wheels/orjson-3.11.6-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:b376fb05f20a96ec117d47987dd3b39265c635725bda40661b4c5b73b77b5fde" }, | ||
| { url = "https://pypi.devinfra.sentry.io/wheels/orjson-3.11.6-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:6dddf9ba706294906c56ef5150a958317b09aa3a8a48df1c52ccf22ec1907eac" }, |
There was a problem hiding this comment.
macOS x86_64 wheel missing after orjson bump
Medium Severity
The new orjson 3.11.6 macOS wheels in the lock file are macosx_15_0_arm64 only, replacing the previous macosx_10_15_universal2 wheels that supported both Intel x86_64 and Apple Silicon arm64 from macOS 10.15+. The private Sentry PyPI mirror (pypi.devinfra.sentry.io) appears to only carry the arm64 macOS 15 wheels, so Intel Mac developers (x86_64) and Apple Silicon developers on macOS < 15.0 will have no matching prebuilt wheel, likely causing installation failures when running uv sync.


Bumps orjson from 3.10.10 to 3.11.6.
Release notes
Sourced from orjson's releases.
... (truncated)
Changelog
Sourced from orjson's changelog.
... (truncated)
Commits
ec020243.11.6d581687build, clippy misc4105b29writer::num62bb185Fix sporadic crash on serializing object closed860078PyRef idiom refactors343ae2fDeserializer, Utf8Buffer7835f58PyBytesRef and other input refactor71e0516PyStrRef1096df4MSRV 1.89b718e75Drop support for python3.9Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.