build(deps): bump the 03_patch-updates group with 2 updates

[dependabot]

Bumps the 03_patch-updates group with 2 updates: polars and ruff.

Updates polars from 1.42.0 to 1.42.1

Release notes

Sourced from polars's releases.

Python Polars 1.42.1

⚠️ Deprecations

• Deprecate strict parameter of pl.concat, replace with new how='horizontal_extend' (#27965)

🚀 Performance improvements

• Add a sampled resolve mode for multi-file parquet metadata (#28111)
• Speed up small dtype series sums with a upcast sum kernel (#27958)
• Don't block on path expansion (#28073)

✨ Enhancements

• Close ResourceWarning leaks in database tests (#28066)

🐞 Bug fixes

• Incorrect sorted fast-path returning nan for grouped max (#28129)
• Fix panic on scan_parquet filter of fixed-size binary column (#28122)
• Fix decimal dynamic float cast (#28126)
• Fix pyiceberg key dot HDFS prefix filter (#28109)
• Fix projection pushdown panic on select(len()) after groupby (#28108)
• Fully resolve remaining ResourceWarning leaks in database/iceberg tests (#28107)
• Expiry time loading for AWS DeferredRefreshableCredentials (#28099)
• Close ResourceWarning leaks in database tests (#28066)
• Avoid panic on temporal extraction for datetime columns with nulls (#28054)
• Prevent panic in replace when old/new contain Expr or object dtype values (#27433)

📖 Documentation

• Fix dataset regression in the examples (#28131)
• Emphasize to generally not ever write Rust tests (#28082)
• Mention Polars skill in User Guide's LLM section (#28113)

🛠️ Other improvements

• Disallow usage of tokio::spawn in clippy (#28123)
• Improve Makefile with respect to venv robustness (#28110)
• Remove legacy prelude glob imports from leaf files (#28114)
• Skip pandas 3.0.4 due to pd.TimeDelta segfault (#28125)
• Update mypy to the new 2.x release (#28116)
• Ensure pyrefly checks run as part of make pre-commit (#28095)
• Fix test_select_explode_height_filter_order_by failure when POLARS_MAX_THREADS=2 (#28090)
• Add Morsel::height (#28060)

Thank you to all our contributors for making this release possible! @​0guban0v, @​Kevin-Patyk, @​TNieuwdorp, @​alexander-beedie, @​azimafroozeh, @​dsprenkels, @​kdn36, @​nameexhaustion, @​orlp, @​raphaelroshan, @​ritchie46 and @​sar-cheng

Commits

• 0df0c25 Python Polars 1.42.1 (#28128)
• 876bfb8 docs: Fix dataset regression in the examples (#28131)
• 07560f7 chore(rust): Disallow usage of tokio::spawn in clippy (#28123)
• aa5d073 fix: Incorrect sorted fast-path returning nan for grouped max (#28129)
• a2f2559 docs: Emphasize to generally not ever write Rust tests (#28082)
• 156e7f5 chore(python): Improve Makefile with respect to venv robustness (#28110)
• fc09271 fix: Fix panic on scan_parquet filter of fixed-size binary column (#28122)
• 3dce32b docs: Mention Polars skill in User Guide's LLM section (#28113)
• bd27f24 refactor(rust): Remove legacy prelude glob imports from leaf files (#28114)
• 853a398 fix: Fix decimal dynamic float cast (#28126)
• Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.15.21

Release notes

Sourced from ruff's releases.

0.15.21

Release Notes

Released on 2026-07-09.

Preview features

• Add --add-ignore for adding ruff:ignore comments (#26346)
• [flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
• Avoid whitespace normalization when formatting comments (#26455)
• [pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

• Refine non-empty f-string detection (#26526)
• Detect syntax errors in individual notebook cells (#26419)
• [flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

• [flake8-executable] Mark EXE004 fix as unsafe (#26033)
• [flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
• [pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

• Avoid per-token source index visitor calls (#26506)
• Cache parenthesized expression boundaries in the formatter (#26344)
• Improve performance of rendering edits in preview mode (#26565)
• Inline fits_element in formatter (#26429)
• Inline formatter printing hot paths (#26504)
• Lazily create builtin bindings (#26510)
• Skip empty trivia scans in the source indexer (#26507)
• Use ICF for macOS release builds (#25780)

Formatter

• Add --extend-exclude to ruff format (#26372)

Documentation

• Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
• Fix Mozilla Firefox repository link in README (#26537)
• [flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
• [ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

• @​EkriirkE
• @​tingerrr

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.21

Released on 2026-07-09.

Preview features

• Add --add-ignore for adding ruff:ignore comments (#26346)
• [flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
• Avoid whitespace normalization when formatting comments (#26455)
• [pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

• Refine non-empty f-string detection (#26526)
• Detect syntax errors in individual notebook cells (#26419)
• [flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

• [flake8-executable] Mark EXE004 fix as unsafe (#26033)
• [flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
• [pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

• Avoid per-token source index visitor calls (#26506)
• Cache parenthesized expression boundaries in the formatter (#26344)
• Improve performance of rendering edits in preview mode (#26565)
• Inline fits_element in formatter (#26429)
• Inline formatter printing hot paths (#26504)
• Lazily create builtin bindings (#26510)
• Skip empty trivia scans in the source indexer (#26507)
• Use ICF for macOS release builds (#25780)

Formatter

• Add --extend-exclude to ruff format (#26372)

Documentation

• Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
• Fix Mozilla Firefox repository link in README (#26537)
• [flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
• [ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

• @​EkriirkE
• @​tingerrr
• @​s-rigaud

... (truncated)

Commits

• 3e1f636 Bump 0.15.21 (#26676)
• 4059807 [ty] Infer metaclass-declared attributes on class instances (#26512)
• 013e5d0 [ty] Use a dedicated project name type (#26665)
• 7ad39ad [ty] Avoid allocating decorated parameter names (#26666)
• c36f662 Improve performance of rendering edits in preview mode (#26565)
• ad26408 [ty] Gate membership narrowing on __contains__ semantics (#25964)
• 4594ca7 [ty] Add variant discriminators for CodeGeneratorKind (#26659)
• 1af03da [ty] Pydantic: Fix float conversion in unions (#26655)
• a004a36 [ty] Handle callable classes in solver (#26090)
• d8ef3b0 [ty] Parse all supported Google docstring sections. (#26653)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[clue-gyg]

✅ Auto-approved as trivial change

The PR only modifies uv.lock (a lock file exempt from the size limit), containing patch-version bumps for polars (1.42.0 → 1.42.1) and ruff (0.15.20 → 0.15.21) generated by Dependabot. No production code, dependency manifests, or security-sensitive files are changed.