Skip to content

build(deps): bump typer from 0.27.3 to 0.29.0 - #401

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/typer-0.29.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/typer-0.29.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown
Contributor

Bumps typer from 0.27.3 to 0.29.0.

Release notes

Sourced from typer's releases.

0.29.0

Features

  • ✨ Use Pydantic for parameter validation. PR #1831 by @​svlandeg.

    Typer now uses Pydantic internally to validate command-line parameters. This is a gradual migration focused on preserving compatibility with existing Typer applications. Some validation error messages, help text, and usage output have changed.

    Compatibility changes:

    • Pydantic >=2.5.3 is now a required dependency.
    • click_type has been removed from typer.Option() and typer.Argument(). New ways to provide custom types will be provided with Pydantic, with much more flexibility.
    • Some defaults are now validated more strictly. The previous tuple example's (None, None, None) default now fails validation. Use tuple[str, int, bool] | None with a default of None and check for None before unpacking, as shown in the updated tuple example. This also makes the code more correct, so you could consider this a bug fix, but if you depended on this behavior, there's a change needed in your code.
    • Default datetime parsing now follows Pydantic's rules, accepting Unix timestamps, timezone offsets, and fractional seconds.
    • Callback parameter objects no longer expose Click's .type, .make_metavar(), .human_readable_name, or .type_cast_value(). Custom integrations using these need updating.

Fixes

  • 🐛 Escape terminal controls in Pydantic validation errors. PR #2005 by @​tiangolo.

Docs

0.28.0

Fixes

  • 🐛 Ensure that the default option name is not changed by setting a metavar. PR #1957 by @​svlandeg.

Docs

Internal

Changelog

Sourced from typer's changelog.

0.29.0 (2026-11-09)

Features

  • ✨ Use Pydantic for parameter validation. PR #1831 by @​svlandeg.

    Typer now uses Pydantic internally to validate command-line parameters. This is a gradual migration focused on preserving compatibility with existing Typer applications. Some validation error messages, help text, and usage output have changed.

    Compatibility changes:

    • Pydantic >=2.5.3 is now a required dependency.
    • click_type has been removed from typer.Option() and typer.Argument(). New ways to provide custom types will be provided with Pydantic, with much more flexibility.
    • Some defaults are now validated more strictly. The previous tuple example's (None, None, None) default now fails validation. Use tuple[str, int, bool] | None with a default of None and check for None before unpacking, as shown in the updated tuple example. This also makes the code more correct, so you could consider this a bug fix, but if you depended on this behavior, there's a change needed in your code.
    • Default datetime parsing now follows Pydantic's rules, accepting Unix timestamps, timezone offsets, and fractional seconds.
    • Callback parameter objects no longer expose Click's .type, .make_metavar(), .human_readable_name, or .type_cast_value(). Custom integrations using these need updating.

Fixes

  • 🐛 Escape terminal controls in Pydantic validation errors. PR #2005 by @​tiangolo.

Docs

0.28.0 (2026-11-06)

Fixes

  • 🐛 Ensure that the default option name is not changed by setting a metavar. PR #1957 by @​svlandeg.

Docs

Internal

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [typer](https://github.com/fastapi/typer) from 0.27.3 to 0.29.0.
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.3...0.29.0)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 13, 2026
@github-actions

Copy link
Copy Markdown

Added

Changed

  • typer: 0.27.3 → 0.29.0

@github-actions

Copy link
Copy Markdown

🔍 lockscan Security Report

Base 893e80ee9b3c7324137cebc2fa46464f54cabb23
Head a2d14ed3cc0216ebf79dc2229cb6f7106c816dae
Analyzed 6 package(s)
Ecosystems python

🟠 3 High · 🔵 1 Low

Findings

Severity Package Version Signals
🟠 High pydantic (transitive) 2.14.3 exec:compile, exec:compile, exec:compile, +31 more patterns
🟠 High pydantic-core (transitive) 2.50.4 binary anomaly (51)
🟠 High typing-extensions (transitive) 4.16.0 exec:eval, exec:eval, exec:eval, +4 more patterns
🔵 Low typing-inspection (transitive) 0.4.5 exec:exec, exec:exec

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants