Skip to content

Bump pybind11 from 3.0.2 to 3.0.3#92

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pybind11-3.0.3
Closed

Bump pybind11 from 3.0.2 to 3.0.3#92
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pybind11-3.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps pybind11 from 3.0.2 to 3.0.3.

Release notes

Sourced from pybind11's releases.

Version 3.0.3

Bug fixes:

  • Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

  • Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

  • Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

  • Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

  • Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

  • Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

  • Fixed static_pointer_cast build failure with virtual inheritance in holder_caster_foreign_helpers.h. #6014

  • Fixed ambiguous factory template specialization that caused compilation failures with nvcc + GCC 14. #6011

  • Fixed crash in def_readwrite for non-smart-holder properties of smart-holder classes. #6008

  • Fixed memory leak for py::dynamic_attr() objects on Python 3.13+ by clearing managed __dict__ contents during deallocation. #5999

  • Fixed binding of noexcept and ref-qualified (&, &&) methods inherited from unregistered base classes. #5992

Internal:

  • Moved tomlkit dependency to the dev dependency group. #5990

  • Switched to newer public CPython APIs (PyType_GetFlags and public vectorcall APIs where available). #6005

Tests:

  • Made an async callback test deterministic by replacing fixed sleep with bounded waiting. #5986

CI:

... (truncated)

Changelog

Sourced from pybind11's changelog.

Version 3.0.3 (March 31, 2026)

Bug fixes:

  • Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

  • Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

  • Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

  • Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

  • Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

  • Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

  • Fixed static_pointer_cast build failure with virtual inheritance in holder_caster_foreign_helpers.h. #6014

  • Fixed ambiguous factory template specialization that caused compilation failures with nvcc + GCC 14. #6011

  • Fixed crash in def_readwrite for non-smart-holder properties of smart-holder classes. #6008

  • Fixed memory leak for py::dynamic_attr() objects on Python 3.13+ by clearing managed __dict__ contents during deallocation. #5999

  • Fixed binding of noexcept and ref-qualified (&, &&) methods inherited from unregistered base classes. #5992

Internal:

  • Moved tomlkit dependency to the dev dependency group. #5990

  • Switched to newer public CPython APIs (PyType_GetFlags and public vectorcall APIs where available). #6005

Tests:

  • Made an async callback test deterministic by replacing fixed sleep with bounded waiting. #5986

... (truncated)

Commits
  • 1b49908 docs: add v3.0.3 and v3.1.0 changelog updates. (#6023)
  • c066c76 fix: add missing PYBIND11_ALWAYS_INLINE macro for v3.0.3 backports
  • 76efcb3 Bump version from v3.0.2 → v3.0.3
  • 0f41635 chore(deps): bump pygments from 2.17.2 to 2.20.0 in /docs (#6024)
  • 54a4615 chore(deps): bump requests from 2.32.4 to 2.33.0 in /docs (#6013)
  • d12037c chore(deps): update pre-commit hooks (#6002)
  • 64eecc4 chore(deps): bump the actions group with 3 updates (#6000)
  • c0ea8fc Fix heap-buffer-overflow in pythonbuf with undersized buffers (#6019)
  • 8d621d6 fix: detect virtual inheritance in add_base to prevent pointer offset crash (...
  • b6a616e fix: strdup "self" arg in def_property_static, partially revert #6010 (gh...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pybind11](https://github.com/pybind/pybind11) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/pybind/pybind11/releases)
- [Changelog](https://github.com/pybind/pybind11/blob/master/docs/changelog.md)
- [Commits](pybind/pybind11@v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: pybind11
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 6, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 20, 2026

Superseded by #98.

@dependabot dependabot Bot closed this Apr 20, 2026
@dependabot dependabot Bot deleted the dependabot/pip/pybind11-3.0.3 branch April 20, 2026 21:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants