chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312 #199

dependabot · 2025-10-23T01:26:52Z

Updates the requirements on pywin32 to permit the latest version.

Release notes

Build 311

A release with a number of incremental improvements

Install via pip:
pip install pywin32 --upgrade
More details in the README

Changelog

Sourced from pywin32's changelog.

Build 311, released 2025/07/14

Fix use-after-free in CertDeleteCertificateFromStore (mhammond#2637)

Better support for COM identifiers with non-ascii characters (mhammond#2632)

pywin32's own warnings will now refer to the caller, rather than to the internal source of warning itself (mhammond#2594, [@Avasam][Avasam])

Fixed a regression that broke special __dunder__ methods with CoClass. (mhammond#1870, mhammond#2493, [@Avasam][Avasam], [@geppi][geppi])

Fixed TypeError: cannot unpack non-iterable NoneType object when registering an axscript client ScriptItem (mhammond#2513, [@Avasam][Avasam])

Fixed a memory leak when SafeArrays are used as out parameters ([@the-snork][the-snork])

Fixed dispatch handling for properties ([@the-snork][the-snork])

Resolved a handful of deprecation warnings (mhammond#2567, mhammond#2576, [@Avasam][Avasam])

The following classes now produce a valid eval string representation when calling repr: (mhammond#2573, [@Avasam][Avasam])

pywin.tools.browser.HLIPythonObject

win32com.server.exception.COMException

win32comext.axscript.client.error.AXScriptException

win32comext.axscript.client.pyscript.NamedScriptAttribute

Added initial DECIMAL/VT_DECIMAL support (mhammond#1501, [@gesslerpd][gesslerpd])

Build 310, released 2025/03/16

Fixed a regression where win32com.client.DispatchWithEvents and win32com.client.WithEvents would throw a TypeError on the second call (mhammond#2491, [@Avasam][Avasam])

Fixed regression causing win32com.shell.shell to be missing a number of IIDs. (mhammond#2487, [@Avasam][Avasam])

As part of the above, Windows 7 is now minimum supported.

Build 309, released 2025/03/09

pywin32

Fixed Access Violation crashes in 3.12 by moving PyWInObject_Free* methods so GIL is acquired (mhammond#2467, [@Mscht][Mscht])

Added support for relative path for pywin32_postinstall's -destination argument (mhammond#2454, [@Avasam][Avasam])

The postinstall script is now available as a console script. You can invoke it in one of two new methods: (mhammond#2408, [@Avasam][Avasam])

python -m pywin32_postinstall -install (recommended)

pywin32_postinstall -install (shorter but you don't have control over which python environment is used)

Changed the implementation of 'com_record' to a subclassable Python type (mhammond#2437, mhammond#2361, [@geppi][geppi])

Removed param hIcon from win32comext.shell.ShellExecuteEx. It was unusable since Windows Vista (mhammond#2423, [@Avasam][Avasam])

Fixed nbios.NCBStruct packing (mhammond#2406, [@Avasam][Avasam])

Restored axdebug builds on Python 3.10 (mhammond#2416, [@Avasam][Avasam])

Fix for Python 3.12 interpreter crashes when accessing a COM Record field (mhammond#2415, [@geppi][geppi])

Pythonwin: Bumped Scintilla from 1.77 to 4.4.6. The full changelog can be found here: https://www.scintilla.org/ScintillaHistory.html

Fixed Pythonwin's editor failing due to invalid regex import (mhammond#2419, [@Avasam][Avasam])

Last error wrongly set by some modules (mhammond#2302, [@CristiFati][CristiFati])

Dropped support for Python 3.7 (mhammond#2207, [@Avasam][Avasam])

Implement the creation of SAFEARRAY(VT_RECORD) from a sequence of COM Records (mhammond#2317, [@geppi][geppi])

Implement record pointers as [in, out] method parameters of a Dispatch Interface (mhammond#2304, mhammond#2310, [@geppi][geppi])

Fix memory leak converting to PyObject from some SAFEARRAY elements (mhammond#2316)

Fix bug where makepy support was unnecessarily generated (mhammond#2354, mhammond#2353, [@geppi][geppi])

Fail sooner on invalid win32timezone.TimeZoneInfo creation (mhammond#2338, [@Avasam][Avasam])

Removed temporary win32com.server.policy reexports hack (mhammond#2344, [@Avasam][Avasam])

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

* chore(gha): add metadata to BetterStack when posting heartbeats * chore(gha): Add --fail-with-body to BetterStack curl request and reorder arguments

* chore(gha): Spike for Ketryx integration * chore(gha): Allow to skip jobs/steps via commit message, see CONTRIBUTING.md * fix(platform): Fix broken pytest collection if user does not have permission to access aignx test bucket

Fixed some typos in readme.md.

Add DICOM specimen definition to glossary

fix(codegen): don't rely on redirects from /v1 to /api/v1 feat: allow to boot with zero config, i.e. no .env file required in default case chore(deps): bump fix(platform): allow to dial into dev environment chore(heta): adapt tests to 1.0.0-beta.5 of HETA

…lify adapting to new apps

refactor(uv): define required uv version in pyproject.toml, for use across GHA chore(deps): bump various github actions versions

chore(heta): further adaptation to changed output file sizes

github-actions · 2025-10-23T01:27:58Z

Claude encountered an error —— View job

I'll analyze this and get back to you.

* chore(qupath): Reenable E2E Test Scenario (Download -> Create Project -> Inspect) * chore(ai): Improve vscode/agent guidance * chore(tests): PLATFORM_ENVIRONMENT dependent app versions in tests * chore(deps); bump

* feat(application): generate, show and validate custom metadata for input items * feat(application): support for test-app in GUI * feat(application): show error code on failed items * feat(application): show more more details in CLI commands applicaton run list and application run describe * refactor(application): improve dryness * chore(tests): strip ansi codes by default when normalizing output, reducing flakiness of tests in rare scenarios * chore(tests): significantly improve daily scheduled test now called flow tests, including beating heart on * docs(application): auto-generate json schema from pydantic models for sdk specific custom metadata of input items

* refactor(dataset): move business logic to from CLI to service. * feat(application): support download of results for input items where external_ids points to GCP bucket or webserver. * feat(application): scrollable runs in sidebar with auto-refresh and notifier on run terminated

* feat(platform): Support for tags in custom sdk metadata, run and item-level * feat(platform): Support created_at and updated_at in custom sdk metadata, run and item-level * feat(platform): Support nocache=True on cached operations * feat(platform): Custom run and item metadata can be updated * chore(platform): Improved depth of tests * chore(platform): Fix race condition in e2e test due to caching by using nocache * chore(platform): Start with submit-and-find e2e tests later replacing submit-and-wait * feat(application): Custom run and item metadata can be dumped as JSON via the CLI * feat(application): custom run metadata can be updated via the CLI * feat(application): Custom run metadata can be edited via the GUI (admins only) * feat(application): Allow to submit tags via CLI and find back runs via tags * chore(qupath): Enable complex automated test scenario covering creating QuPath projects * chore(deps): bump * docs(AI): update

Updates the requirements on [pywin32](https://github.com/mhammond/pywin32) to permit the latest version. - [Release notes](https://github.com/mhammond/pywin32/releases) - [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md) - [Commits](https://github.com/mhammond/pywin32/commits) --- updated-dependencies: - dependency-name: pywin32 dependency-version: '311' dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-10-26T18:30:08Z

Claude encountered an error —— View job

I'll analyze this and get back to you.

github-actions · 2025-10-26T20:41:30Z

Claude finished @dependabot[bot]'s task —— View job

Review: pywin32 Dependency Update (v310 → v311)

Summary

✅ APPROVED - This is a safe, non-breaking dependency update from Dependabot.

The PR updates the pywin32 version constraint from >=310,<311 to >=310,<312, allowing pywin32 v311 (released 2025/07/14) to be installed.

Analysis

Change Overview

File: pyproject.toml:93
Change: pywin32>=310,<311 → pywin32>=310,<312
Scope: Windows-only dependency (sys_platform == 'win32')
Type: Minor version update (310 → 311)

SDK Usage of pywin32

The SDK uses pywin32 in two locations, both with limited scope:

src/aignostics/utils/_gui.py:176 - GUI file picker for Windows drives
```
import win32api
drives = win32api.GetLogicalDriveStrings().split("\000")[:-1]
```
- API used: win32api.GetLogicalDriveStrings()
- Purpose: Display Windows drive letters in NiceGUI file picker
- Risk: ✅ Low - stable API, unchanged in v311
src/aignostics/third_party/showinfm/system/windows.py:9 - File explorer integration
```
from win32com.shell import shell
# Uses: shell.SHGetDesktopFolder(), shell.SHILCreateFromPath(), 
#       shell.SHOpenFolderAndSelectItems()
```
- API used: Shell COM interfaces
- Purpose: Open Windows Explorer and select files
- Risk: ✅ Low - COM interfaces are stable

pywin32 v311 Changelog Review

Key improvements in v311 (relevant to this SDK):

✅ Fixed Access Violation crashes in Python 3.12 (mhammond#2467) - Critical for Python 3.12/3.13 support
✅ Fixed memory leak with SafeArrays - Performance improvement
✅ Better COM identifier support - Enhanced stability
✅ Minimum Windows version: Windows 7 - SDK already requires Windows 10+

Breaking changes: ❌ None affecting SDK usage

CI/CD Status

✅ Build Native Only: Passed (Windows build successful)
🔄 CI/CD Pipeline: In progress (includes Windows tests on 3.11, 3.12, 3.13)
🔄 Claude Code Review: This review

The CI pipeline will automatically test pywin32 v311 on Windows runners with all supported Python versions (3.11, 3.12, 3.13).

Checklist

✅ Architecture Compliance: No architecture changes
✅ Breaking Changes: None identified
✅ Security: No security concerns (pywin32 is Windows-only, sandboxed)
✅ Test Coverage: Existing tests sufficient (GUI/utils modules covered)
✅ Documentation: No doc updates needed (internal dependency)

✅ Conventional Commits: ✅ Commit follows convention

chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312

✅ Medical Device Impact: None (Windows GUI utility only)
✅ Backward Compatibility: Maintained (v310 still supported)

Recommendation

✅ Approve and merge after CI pipeline passes.

Rationale:

Python 3.12/3.13 stability: v311 fixes critical crashes in Python 3.12, which SDK supports
Memory leak fixes: Improves performance for SafeArray operations
Low risk: SDK uses only stable, basic pywin32 APIs (drive enumeration, shell operations)
Automated testing: CI pipeline validates on Windows with all Python versions
Conventional commit: Follows chore(deps): pattern correctly
Backward compatible: Maintains support for v310 (lower bound unchanged)

No action required - standard Dependabot update, safe to merge when CI passes.

codecov · 2025-10-26T21:01:04Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

sonarqubecloud · 2025-10-26T21:01:49Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot · 2025-11-02T09:30:03Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

helmut-hoffer-von-ankershoffen and others added 30 commits July 15, 2025 07:19

Bump version: 0.2.101 → 0.2.102

89c45e1

chore(gha): monitor scheduled audit in betterstack

e9f22f8

Bump version: 0.2.102 → 0.2.103

ec34fce

docs: update URLs in openapi spec and downstream docs

083e992

Bump version: 0.2.103 → 0.2.104

66439dd

chore(gha): add metadata to BetterStack when posting heartbeats (#61)

bd74063

* chore(gha): add metadata to BetterStack when posting heartbeats * chore(gha): Add --fail-with-body to BetterStack curl request and reorder arguments

Ketryx Integration

2c4da92

* chore(gha): Spike for Ketryx integration * chore(gha): Allow to skip jobs/steps via commit message, see CONTRIBUTING.md * fix(platform): Fix broken pytest collection if user does not have permission to access aignx test bucket

sec(dep): ensure starlette >= 0.47.2 given GHSA-2c2j-9gv5-cj73

98ebe61

Bump version: 0.2.104 → 0.2.105

f6ff9d2

chore(audit): allow for heartbeat url specific for audit

475eac1

chore(publish): adapt to recent changes

524f8d1

Bump version: 0.2.105 → 0.2.106

0a9c328

fix typos in readme.md

1b6a652

add DICOM specimen definition to glossary

da644bd

Merge pull request #69 from aignostics/fix_typos

3c5ad6a

Fixed some typos in readme.md.

Merge pull request #70 from aignostics/extend_glossary_with_specimen

c1c91c9

Add DICOM specimen definition to glossary

chore(deps): bump nicegui

e190094

Bump version: 0.2.106 → 0.2.107

0a57bda

chore(test): adapt remaining test config to beta.5 of heta

6d98300

Bump version: 0.2.107 → 0.2.108

4c55978

Bump version: 0.2.108 → 0.2.109

e40350a

refactor(tests): central constants for app and app version id to simp…

4156d33

…lify adapting to new apps

refactor(tests): central place for app id and version

fef1174

sec(dep): Force UV >0.8.6 given CVE-2025-54368

e8ff6c1

chore(tests): adapt to heta.5

47cffb7

Bump version: 0.2.109 → 0.2.110

0f3b2da

sec(dep): ensure all uses of uv are >= 0.8.6 (CVE-2025-54368)

c7b7db2

refactor(uv): define required uv version in pyproject.toml, for use across GHA chore(deps): bump various github actions versions

chore(deps): bump

a62e9c7

chore(heta): further adaptation to changed output file sizes

Bump version: 0.2.110 → 0.2.111

4c05136

dependabot bot added bot Automated pull requests or issues dependabot Pull requests from Dependabot skip:test:long_running Skip long-running tests (≥5min) labels Oct 23, 2025

helmut-hoffer-von-ankershoffen and others added 10 commits October 23, 2025 11:59

sec(uv): require uv >=0.9.5 given security advisory GHSA-w476-p2h3-79g9

68c5b08

Bump version: 0.2.193 → 0.2.194

7e33ac8

sec(uv): require uv >=0.9.5 given security advisory GHSA-w476-p2h3-79g9

9c75648

Bump version: 0.2.194 → 0.2.195

0f8b8d5

Reenable QuPath Test

fdc7b01

* chore(qupath): Reenable E2E Test Scenario (Download -> Create Project -> Inspect) * chore(ai): Improve vscode/agent guidance * chore(tests): PLATFORM_ENVIRONMENT dependent app versions in tests * chore(deps); bump

chore(platform): fix test

6dee520

dependabot bot force-pushed the dependabot/pip/pywin32-gte-310-and-lt-312 branch from 83ab12f to d319600 Compare October 26, 2025 18:17

helmut-hoffer-von-ankershoffen and others added 4 commits October 26, 2025 19:50

test(application): fix race condition in test

21febad

reduce flakiness

5277152

regression

1c00ae9

Merge branch 'main' into dependabot/pip/pywin32-gte-310-and-lt-312

d10507d

helmut-hoffer-von-ankershoffen self-requested a review as a code owner November 1, 2025 12:29

helmut-hoffer-von-ankershoffen force-pushed the main branch 2 times, most recently from 9905ef4 to 997dfe8 Compare November 1, 2025 19:25

helmut-hoffer-von-ankershoffen closed this Nov 2, 2025

helmut-hoffer-von-ankershoffen force-pushed the main branch from c10d0b2 to b88bccd Compare November 2, 2025 09:30

dependabot bot deleted the dependabot/pip/pywin32-gte-310-and-lt-312 branch November 2, 2025 09:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312 #199

chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312 #199

Uh oh!

dependabot bot commented on behalf of github Oct 23, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 23, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 26, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 26, 2025 •

edited

Loading

Uh oh!

codecov bot commented Oct 26, 2025

Uh oh!

sonarqubecloud bot commented Oct 26, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312 #199

chore(deps): update pywin32 requirement from <311,>=310 to >=310,<312 #199

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Build 311

Build 311, released 2025/07/14

Build 310, released 2025/03/16

Build 309, released 2025/03/09

pywin32

Uh oh!

github-actions bot commented Oct 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Oct 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Oct 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review: pywin32 Dependency Update (v310 → v311)

Summary

Analysis

Change Overview

SDK Usage of pywin32

pywin32 v311 Changelog Review

CI/CD Status

Checklist

Recommendation

Uh oh!

codecov bot commented Oct 26, 2025

Codecov Report

Uh oh!

sonarqubecloud bot commented Oct 26, 2025

Quality Gate passed

Uh oh!

dependabot bot commented on behalf of github Nov 2, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

dependabot bot commented on behalf of github Oct 23, 2025 •

edited

Loading

github-actions bot commented Oct 23, 2025 •

edited

Loading

github-actions bot commented Oct 26, 2025 •

edited

Loading

github-actions bot commented Oct 26, 2025 •

edited

Loading