Skip to content

build(deps): bump smart-open from 7.0.4 to 9.0.2 - #14763

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/smart-open-9.0.2
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/smart-open-9.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps smart-open from 7.0.4 to 9.0.2.

Release notes

Sourced from smart-open's releases.

v9.0.2

What's Changed

New Contributors

Full Changelog: piskvorky/smart_open@v9.0.1...v9.0.2

v9.0.1

What's Changed

New Contributors

Full Changelog: piskvorky/smart_open@v9.0.0...v9.0.1

v9.0.0

[!NOTE] HTTP range requests are now pinned to the version first read, so seeks fail with 412 against servers whose validators change between requests. See MIGRATING_FROM_OLDER_VERSIONS.md for the opt out and the other HTTP behaviour changes.

What's Changed

New Contributors

Full Changelog: piskvorky/smart_open@v8.0.4...v9.0.0

v8.0.4

... (truncated)

Changelog

Sourced from smart-open's changelog.

9.0.2, 2026-11-03

  • Bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 in the github-actions group (PR #994, @​dependabot[bot])
  • [azure] Fix read-all position after buffered reads (PR #993, @​linjiaye929)
  • [s3] Stop writing URL credentials and default config to the caller's transport_params (PR #995, @​kakkar87d)
  • [s3] Stop writing the default config to the caller's client_kwargs in iter_bucket (PR #996, @​ddelange)

9.0.1, 2026-10-29

  • [http] Release responses when numeric header parsing fails (PR #992, @​edsonsims)

9.0.0, 2026-10-28

  • [ssh] Include credentials in cached SSH connection keys (PR #982, @​kakkar87d)
  • [http] Close streamed responses when opening fails (PR #984, @​JackyHsu-X)
  • [hdfs] Close and reap writers when flushing the pipe fails (PR #985, @​chivector)
  • [http] Reject ignored range requests when seeking (PR #981, @​BSAIPF)
  • [s3, azure] Preserve multibyte line terminators across refills (PR #983, @​mayankdhingra02)
  • [hdfs] Terminate the put command when a write context fails (PR #986, @​ddelange)
  • [http] Validate partial responses and pin range requests to one version (PR #987, @​ddelange)
  • [http] Request the remaining bytes when a server caps a range response (PR #988, @​ddelange)
  • [http] Raise on reads after a failed range request instead of returning EOF (PR #989, @​ddelange)
  • [s3] Count S3 multipart writer memoryview inputs in bytes (PR #990, @​youdie006)
  • [http] Document v9.0.0 range request changes and keep identity encoding in the If-Match opt out (PR #991, @​ddelange)

8.0.4, 2026-10-17

  • Use binary unit labels (GiB, MiB) in upload size logs (PR #978, @​ddelange)
  • [ftp] Close FTP connections when connection or transfer setup fails (PR #976, @​xiehuanyi)
  • [ssh] Include the port in cached SSH connection keys (PR #967, @​xiehuanyi)
  • [ssh] Apply wildcard Host and Match stanzas from ~/.ssh/config (PR #968, @​xiehuanyi)
  • [s3,azure] Abort uploads when closing a compressed stream fails (PR #969, @​zhechen-cs)
  • [hdfs] Raise on failed hdfs dfs -cat/-put commands and reap reader processes on close (PR #970, @​zhechen-cs)
  • [http] Keep position and drop stale buffered data when a seek request fails (PR #975, @​xiehuanyi)
  • [webhdfs] Accept bytes-like inputs in writes (PR #971, @​zhechen-cs)
  • [webhdfs] Infer compression from the URI path and keep IPv6 hosts and encoded usernames intact (PR #973, @​zhechen-cs)
  • [local] Infer compression from uppercase file extensions (PR #974, @​zhechen-cs)
  • [local] Handle Windows drive letters in file:// URIs (PR #977, @​zhechen-cs)
  • [ftp] Raise upload failures reported by the server on close (PR #972, @​zhechen-cs)
  • [http] Raise from seek() when the server rejects a range request (PR #980, @​ddelange)

8.0.3, 2026-10-12

... (truncated)

Commits
  • c368321 Merge branch 'develop' into master
  • 1b1a9af Update CHANGELOG.md
  • 3223c03 Stop writing the default config to the caller's client_kwargs in iter_bucket ...
  • 9306701 [s3] Stop writing URL credentials and default config to the caller's transpor...
  • 785d3e8 [azure] Fix read-all position after buffered reads (#993)
  • 264d423 Bump pypa/gh-action-pypi-publish (#994)
  • 5d51351 Merge branch 'master' into develop
  • 348970c Merge branch 'develop' into master
  • eabe904 Update CHANGELOG.md
  • 8982b3a [http] Release responses when numeric header parsing fails (#992)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [smart-open](https://github.com/piskvorky/smart_open) from 7.0.4 to 9.0.2.
- [Release notes](https://github.com/piskvorky/smart_open/releases)
- [Changelog](https://github.com/piskvorky/smart_open/blob/develop/CHANGELOG.md)
- [Commits](piskvorky/smart_open@v7.0.4...v9.0.2)

---
updated-dependencies:
- dependency-name: smart-open
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major A high priority issue which might affect a lot of people or large parts of the codebase labels Nov 9, 2026
@cla-bot cla-bot Bot added the cla-signed CLA Bot: community license agreement signed label Nov 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed CLA Bot: community license agreement signed dependencies Pull requests that update a dependency file major A high priority issue which might affect a lot of people or large parts of the codebase

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants