Skip to content

Update wrapt requirement from >=2.2.2 to >=2.4.1 - #797

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/wrapt-gte-2.4.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/wrapt-gte-2.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on wrapt to permit the latest version.

Release notes

Sourced from wrapt's releases.

wrapt 2.4.1

Full release notes: https://wrapt.readthedocs.io/en/latest/changes.html#version-2-4-1

Install from PyPi (recommended):

pip install wrapt==2.4.1

PyPi uploads follow each GitHub release; if pip reports the version is unavailable, the matching PyPi upload may not have happened yet.

Pre-built wheels are provided for a range of Python versions and platforms (Linux x86_64/aarch64/riscv64, macOS x86_64 and arm64, Windows x86_64 and arm64, plus PyPy and free-threaded builds). The source distribution is also attached together with SHA256SUMS for verification.

Changelog

Sourced from wrapt's changelog.

Version 2.4.1

Bugs Fixed

  • The C extension implementation of PartialCallableObjectProxy did not expose the bound positional and keyword arguments supplied when the proxy was created, whereas the pure Python implementation makes them available as the _self_args and _self_kwargs attributes. The C extension implementation now provides read only _self_args and _self_kwargs attributes so that both implementations behave the same.

  • inspect.signature() applied to a PartialCallableObjectProxy reported the full signature of the wrapped callable, including the parameters that the bound positional and keyword arguments already supply, whereas for functools.partial those parameters are removed. The proxy did not define __signature__, so inspect followed __wrapped__ back to the callable and reported its signature unchanged. The proxy now provides __signature__ on instances, in both the pure Python and C extension implementations, giving the same result as for an equivalent functools.partial, including a ValueError when more positional arguments are bound than the callable accepts.

    This also affected wrapper functions used with FunctionWrapper and @wrapt.decorator. When a wrapped method is called via its class with the instance passed explicitly, the wrapper function receives a PartialCallableObjectProxy with the instance bound, and args without the instance. A wrapper which bound args and kwargs against inspect.signature(wrapped) would fail for such calls with a TypeError about a missing argument, while working for calls made via the instance. The reported signature now omits the bound instance so the binding succeeds.

    The signature of a partial whose wrapped callable is itself an already bound method is still reported incorrectly, for reasons outside of the control of wrapt. See the "Known Issues" documentation for details.

  • The C extension intercepts the __module__ and __doc__ attributes by name in its attribute get and set slots so that they are forwarded to the wrapped object. The name was compared by identity against an interned string, which relied on the attribute name having been interned. Names originating from Python source code always are, but a name constructed at runtime, for example by string concatenation or by decoding, is not, and for such a name the interception was skipped. Getting the attribute then returned the value captured when the proxy was created rather than the current value on the wrapped object, and setting it stored the value on the proxy rather than the wrapped object. The comparison now falls back to comparing by value when the identity check fails, guarded by a length check so that the cost for non matching names is unchanged.

... (truncated)

Commits
  • ae4346e Merge branch 'release/2.4.1'
  • 725f6ab Update to 2.4.1.
  • 8925921 Update to 2.4.1rc1.
  • 7663646 Compare intercepted attribute names by value, not only by identity.
  • 5fc1e3f Report signature of PartialCallableObjectProxy without bound arguments.
  • 6002b9a Expose bound arguments from C PartialCallableObjectProxy.
  • b047b3f Update to 2.4.1.dev1.
  • 77dd98e Merge branch 'release/2.4.0'
  • 691a8b2 Merge tag '2.4.0' into develop
  • a100d48 Update to 2.4.0.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [wrapt](https://github.com/GrahamDumpleton/wrapt) to permit the latest version.
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.2.2...2.4.1)

---
updated-dependencies:
- dependency-name: wrapt
  dependency-version: 2.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Skip Changelog Skip Changelog labels Sep 14, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 14, 2026 00:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Skip Changelog Skip Changelog labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Skip Changelog Skip Changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants