Skip to content

chore(deps): bump marshmallow from 3.18.0 to 3.26.2#1199

Merged
6d7a merged 1 commit intomainfrom
dependabot/uv/marshmallow-3.26.2
Apr 15, 2026
Merged

chore(deps): bump marshmallow from 3.18.0 to 3.26.2#1199
6d7a merged 1 commit intomainfrom
dependabot/uv/marshmallow-3.26.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026 •
edited
Loading

Bumps marshmallow from 3.18.0 to 3.26.2.

Changelog

Sourced from marshmallow's changelog.

3.26.2 (2025-12-19)

Bug fixes:

  • :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

3.26.1 (2025-02-03)

Bug fixes:

  • Typing: Fix type annotations for class Meta <marshmallow.Schema.Meta> options (:issue:2804). Thanks :user:lawrence-law for reporting.

Other changes:

  • Remove default value for the data param of Nested._deserialize <marshmallow.fields.Nested._deserialize> (:issue:2802). Thanks :user:gbenson for reporting.

3.26.0 (2025-01-22)

Features:

  • Typing: Add type annotations and improved documentation for class Meta <marshmallow.Schema.Meta> options (:pr:2760).
  • Typing: Improve type coverage of marshmallow.Schema.SchemaMeta (:pr:2761).
  • Typing: marshmallow.Schema.loads parameter allows bytes and bytesarray (:pr:2769).

Bug fixes:

  • Respect data_key when schema validators raise a ValidationError <marshmallow.exceptions.ValidationError> with a field_name argument (:issue:2170). Thanks :user:matejsp for reporting.
  • Correctly handle multiple @post_load <marshmallow.post_load> methods where one method appends to the data and another passes pass_original=True (:issue:1755). Thanks :user:ghostwheel42 for reporting.
  • URL fields now properly validate file paths (:issue:2249). Thanks :user:0xDEC0DE for reporting and fixing.

Documentation:

  • Add :doc:upgrading guides <upgrading> for 3.24 and 3.26 (:pr:2780).
  • Various documentation improvements (:pr:2757, :pr:2759, :pr:2765, :pr:2774, :pr:2778, :pr:2783, :pr:2796).

Deprecations:

  • The ordered class Meta <marshmallow.Schema.Meta> option is deprecated (:issue:2146, :pr:2762). Field order is already preserved by default. Set marshmallow.Schema.dict_class to collections.OrderedDict

... (truncated)

Commits
  • 1407d51 Merge pull request #2878 from marshmallow-code/3.x-mypy-unreachable
  • b2292f5 Fix mypy errors
  • 8acd211 Merge pull request #2877 from marshmallow-code/3.x-delint
  • b4bcb4a [pre-commit.ci] auto fixes from pre-commit.com hooks
  • b78af7a Delint
  • 2c4451e Merge commit from fork
  • 86d101a Bump version and update changelog
  • 489a8d4 Only deep copy error message collections
  • 6d4a17d Add test coverage for error message modification
  • 0356a3f Merge error store messages without rebuilding collections
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 26, 2026 19:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 26, 2026
@dependabot dependabot bot force-pushed the dependabot/uv/marshmallow-3.26.2 branch 2 times, most recently from 42ff22d to 4e127dd Compare April 14, 2026 13:56
@6d7a 6d7a force-pushed the dependabot/uv/marshmallow-3.26.2 branch from 4e127dd to e3b8442 Compare April 15, 2026 07:08
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 15, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.91%. Comparing base (70f3314) to head (c946386).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #1199   +/-   ##
=======================================
  Coverage   92.91%   92.91%           
=======================================
  Files         171      171           
  Lines        8329     8329           
=======================================
  Hits         7739     7739           
  Misses        590      590
Flag Coverage Δ
unittests 92.91% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@6d7a 6d7a force-pushed the dependabot/uv/marshmallow-3.26.2 branch 5 times, most recently from 7de83a3 to e1ddb3d Compare April 15, 2026 12:03
@6d7a
chore(deps): bump marshmallow from 3.18.0 to 3.26.2
c946386 
Bumps [marshmallow](https://github.com/marshmallow-code/marshmallow) from 3.18.0 to 3.26.2.
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.18.0...3.26.2)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-version: 3.26.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@6d7a 6d7a force-pushed the dependabot/uv/marshmallow-3.26.2 branch from e1ddb3d to c946386 Compare April 15, 2026 12:42
@6d7a 6d7a merged commit e653e78 into main Apr 15, 2026
31 checks passed
@6d7a 6d7a deleted the dependabot/uv/marshmallow-3.26.2 branch April 15, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@6d7a 6d7a 6d7a approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code skip-changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@6d7a