Skip to content

Bump streamlit 1.64.0 + pyarrow 25.0.1; Dependabot groups - #166

Merged
thejayer merged 2 commits into
mainfrom
cursor/streamlit-pyarrow-17f2
Sep 28, 2026
Merged

thejayer merged 2 commits into
mainfrom
cursor/streamlit-pyarrow-17f2

Conversation

@thejayer

Copy link
Copy Markdown
Owner

Supersedes Dependabot #46 (streamlit 1.59.1→1.60.0), which could not lock because streamlit 1.60.0 requires pyarrow<25 while the lock had pyarrow==25.0.0.

What landed

  • streamlit 1.59.1 → 1.64.0 (latest 1.x). 1.64.0 allows pyarrow!=25.0.0,<26, so we do not have to downgrade Arrow to 24.x.
  • pyarrow 25.0.0 → 25.0.1, the patched wheel for the thread-init segfault (apache/arrow#50471). Constraint is now pyarrow>=15.0,!=25.0.0.
  • Dependabot hygiene so the remaining unsatisfiable PRs do not reopen:
    • pip groups: pydantic* together; streamlit + pyarrow together
    • ignore urllib3>2.2.3 until espn-api lifts <=2.2.3
    • ignore ESLint / TypeScript majors until eslint-config-next / typescript-eslint catch up

Does not touch hockey work. Does not bump pydantic-core, urllib3, TypeScript 7, or ESLint 10.

Blocked Dependabot PRs (closing separately)

PR Outcome
#46 streamlit 1.60.0 Superseded by this PR
#41 pydantic-core 2.47.0 Close — stable pydantic 2.13.5 still pins core 2.46.5; 2.47.0 is 2.14.0a1 only
#39 urllib3 2.7.0 Close — espn-api 0.46.0 still requires urllib3<=2.2.3
#44 TypeScript 7.0.2 Close — typescript-eslint / eslint-config-next do not support TS 7
#40 ESLint 10 Close — eslint-config-next plugins peer-lock to ESLint 9

Test plan

  • pip install -r requirements-lock.txt && pip install -e . --no-deps
  • ruff check .
  • pytest -q
  • Import check: python -c "import streamlit, pyarrow; print(streamlit.__version__, pyarrow.__version__)"
Open in Web Open in Cursor 

cursoragent and others added 2 commits September 28, 2026 15:12
Streamlit 1.60+ rejects pyarrow 25.0.0 (thread-init segfault,
apache/arrow#50471). 1.64.0 allows 25.0.1, which is the patched
wheel, so we skip the 1.60.0 / pyarrow<25 pairing Dependabot #46
could not lock.

Co-authored-by: Austin Wiley <[email protected]>
Stop unsatisfiable single-package PRs (pydantic-core without pydantic,
streamlit without pyarrow) and stop reopening ESLint 10, TypeScript 7,
and urllib3>2.2.3 until espn-api / eslint-config-next catch up.

Co-authored-by: Austin Wiley <[email protected]>
@coderabbitai

coderabbitai Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)
  • coderabbit-review
🚫 Excluded labels (none allowed) (1)
  • coderabbit-skip

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Team

Run ID: 5826a064-d43f-4f9c-87c6-abf43b39923f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@cursor

cursor Bot commented Sep 28, 2026

Copy link
Copy Markdown

CI is green on this branch (python 3.11+3.12, web, web-e2e, www, fitness, images). Local: lock installs, pip check clean, ruff check . clean, full pytest green, import streamlit / ffa.dashboard / pyarrow 25.0.1 all succeed.

Dependabot leftovers from this cleanup:

Leaving this PR merge-ready; not merging from the agent. Hockey #165 was not touched.

@thejayer
thejayer marked this pull request as ready for review September 28, 2026 15:16
@thejayer
thejayer merged commit a71ee60 into main Sep 28, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants