Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 12 updates - #355

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-17c2135d0d
Open

chore(deps): bump the python-dependencies group across 1 directory with 12 updates#355
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-17c2135d0d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on uvicorn, sqlmodel, authlib, httpx2, nh3, psycopg[binary], boto3, anthropic, anthropic[bedrock], ruff, djlint and mypy to permit the latest version.
Updates uvicorn from 0.52.2 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)
Commits

Updates sqlmodel from 0.0.39 to 0.0.42

Release notes

Sourced from sqlmodel's releases.

0.0.42

Features

  • 🏷️ Allow Discriminator type for discriminator parameter in Field. PR #1729 by @​YuriiMotov.

0.0.41

Refactors

0.0.40

Docs

Internal

Changelog

Sourced from sqlmodel's changelog.

0.0.42 (2026-08-28)

Features

  • 🏷️ Allow Discriminator type for discriminator parameter in Field. PR #1729 by @​YuriiMotov.

0.0.41 (2026-08-28)

Refactors

0.0.40 (2026-08-28)

Docs

Internal

... (truncated)

Commits

Updates authlib from 1.7.2 to 1.8.0

Release notes

Sourced from authlib's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.7.2...v1.8.0

Commits
  • 1a86748 chore: release 1.8.0
  • e4fb941 Merge pull request #923 from authlib/fix-921
  • 9f2cd2e Merge pull request #922 from authlib/fix-902
  • 5d53239 fix(oidc): omit claims when the value is None
  • 772bc72 Merge pull request #919 from RavSinghChandan/fix-oauth1-insecure-transport-de...
  • 11794b0 Merge pull request #908 from arpitjain099/chore/device-cred-authenticated-cli...
  • 13f2eb0 fix(client): Added client_id parameter to AssertionClient (#476)
  • dde5b7a fix(client): rollback
  • e4aec8c fix(client): remove default= keyword from starlette client config.get calls (...
  • 62f41cc fix(client): httpx oauth1 binary form data (#779)
  • Additional commits viewable in compare view

Updates httpx2 from 2.10.0 to 2.12.0

Release notes

Sourced from httpx2's releases.

v2.12.0

Highlights

🛡️ Bounded response decompression

httpx2 now decodes gzip, deflate, Brotli, and Zstandard responses incrementally. Each decode step emits at most 1 MiB, so streaming a highly compressed response no longer requires materializing an entire inflated network chunk in memory (pydantic/httpx2#1126).

📦 Shared Zstandard API

Python 3.13 and earlier now use backports.zstd, which provides the same bounded incremental decompression API as compression.zstd on Python 3.14 and later (pydantic/httpx2#1146).

httpx2

Changed

Fixed

httpcore2

No changes since 2.11.0. Version bumped to stay in lockstep with httpx2.

Full Changelog: pydantic/httpx2@v2.11.0...v2.12.0

v2.11.0

Highlights

🌐 Public origin API

httpx2 now includes an immutable and hashable Origin value object, available through URL.origin. It provides normalized scheme, host, and effective port comparisons without including URL paths, queries, fragments, or credentials (pydantic/httpx2#1134).

🛠️ Request compatibility and validation

httpx2

Added

Changed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.12.0 (August 18th, 2026)

Changed

  • Use backports.zstd for Zstandard decoding on Python 3.13 and earlier. (#1146)

Fixed

  • Bound peak memory while streaming compressed responses and close response streams when decoding fails. (#1126)

2.11.0 (August 18th, 2026)

Added

  • Add the public Origin value object and URL.origin property for normalized, hashable origin comparisons. (#1134)

Changed

  • Require Brotli 1.2.0 or later for the brotli extra. (#1141)

Fixed

  • Restore deprecated status code aliases. (#1135)
  • Extract HTTP/2 release notes from changelog headings correctly. (#1136)
  • Respect explicit Transfer-Encoding headers and expose buffered request body lengths to WSGI applications. (#1137)
  • Validate multipart part header names and values before serialization. (#1142)
Commits

Updates nh3 from 0.3.6 to 0.3.7

Release notes

Sourced from nh3's releases.

v0.3.7

What's Changed

New Contributors

Full Changelog: messense/nh3@v0.3.6...v0.3.7

Commits
  • 74f36b8 Bump pyo3 from 0.29.0 to 0.29.2 (#140)
  • 5cb1a16 Update ammonia and bump version to 0.3.7
  • 5bc937a Bump ammonia from 4.1.3 to 4.1.4 (#139)
  • 5816c84 Bump actions/setup-python from 6 to 7 in the github-actions group (#138)
  • 7718812 Bump ammonia from 4.1.2 to 4.1.3 (#137)
  • 567c411 Validate tag_attribute_values conflict with attributes (#135)
  • c23021c Don’t depend on deprecated pyo3/generate-import-lib feature (#136)
  • 0343d0b Bump actions/checkout from 6 to 7 in the github-actions group (#132)
  • 0573fe4 Expose ammonia's id_prefix option via id_prefix kwarg (#134)
  • See full diff in compare view

Updates psycopg[binary] to 3.3.5

Changelog

Sourced from psycopg[binary]'s changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Current release

Psycopg 3.3.5 ^^^^^^^^^^^^^

  • Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).
  • Fix !ProgrammingError when dumping non-!None values with no !NoneType dumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).
  • Fix !wait_selector wait function to not raise !KeyError (:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).
  • Fix !DataError messages leaking the literal {...} placeholder instead of the offending value when loading a pre-year-1 :sql:timestamp or a malformed binary :sql:jsonb value (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).
  • Raise !DataError instead of !ValueError when ~psycopg.rows.namedtuple_row receives duplicate column names (:ticket:[#1348](https://github.com/psycopg/psycopg/issues/1348)).
  • Raise !DataError on inconsistent copy data (:tickets:[#1359](https://github.com/psycopg/psycopg/issues/1359), [#1360](https://github.com/psycopg/psycopg/issues/1360)).
  • Handle client encodings aliases (:ticket:[#1363](https://github.com/psycopg/psycopg/issues/1363)).
  • Fix building C extension with Cython 3.3.

Psycopg 3.3.4 ^^^^^^^^^^^^^

  • Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:[#1280](https://github.com/psycopg/psycopg/issues/1280)).
  • Fix client-side adaptation of enums whose name require quotes (:ticket:[#1298](https://github.com/psycopg/psycopg/issues/1298)).
  • Consistently populate ~Cursor.statusmessage after ~Cursor.executemany() (:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).

Psycopg 3.3.3 ^^^^^^^^^^^^^

  • Retain Error.pgconn when raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).
  • Return a proper error when server sends ErrorResponse for a Sync after a Parse (:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).

... (truncated)

Commits
  • ea542c9 chore: bump psycopg package version to 3.3.5
  • 8d31e47 chore(deps): bump the actions group across 1 directory with 4 updates
  • 268f863 Merge pull request #1370 from Sanjays2402/fix/truncated-binary-copy-error
  • a412fa4 docs: put together different issues fixed around copy parsing
  • f757307 fix: clearer error messages according to truncated copy message part
  • b1f17c4 test: move existing COPY format parsing tests into a single module
  • 21eba57 test: drop useless parametrization of copy binary parsigh test
  • 6780e17 fix(copy): handle truncated binary row headers
  • 2f2fcfb Merge pull request #1364 from DylanYoung/fix_client_encoding_aliases
  • ccc351e refactor: don't store the encodings raw table as a dict
  • Additional commits viewable in compare view

Updates boto3 from 1.43.73 to 1.43.87

Commits
  • d5740c2 Merge branch 'release-1.43.87'
  • 316b72c Bumping version to 1.43.87
  • 17409b4 Add changelog entries from botocore
  • 81ae047 Merge branch 'release-1.43.86'
  • 0e52e63 Merge branch 'release-1.43.86' into develop
  • 938cd05 Bumping version to 1.43.86
  • c20fb35 Add changelog entries from botocore
  • eec256a Merge branch 'release-1.43.85'
  • 11ef970 Merge branch 'release-1.43.85' into develop
  • 359c9b7 Bumping version to 1.43.85
  • Additional commits viewable in compare view

Updates anthropic from 0.121.0 to 1.3.0

Release notes

Sourced from anthropic's releases.

v1.3.0

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)
  • ci: don't hard-wrap detect-breaking-changes output (b5be779)
  • client: derive multipart filename for file tuples passed without one (a9f3fb4)
  • types: remove unused wire aliases from header and path params (dc0a9ab)

Chores

  • internal: drop the unused discriminator argument from PropertyInfo (3dae6fd)
  • internal: drop the unused distro dependency (a47d85f)

Documentation

  • changelog: detail the beta files/skills GA-shape change (#1900) (7c84e13)

Refactors

  • types: mark discriminated unions with UnionDiscriminator instead of PropertyInfo (17df0bf)
  • types: use UnionDiscriminator for more discriminated unions (b44af2c)

v1.2.0

1.2.0 (2026-08-27)

Full Changelog: v1.1.0...v1.2.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (9df4565)

Bug Fixes

  • aws,bedrock: sign raw request bytes so binary file uploads work (#531) (f50e910)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)
  • ci: don't hard-wrap detect-breaking-changes output (b5be779)
  • client: derive multipart filename for file tuples passed without one (a9f3fb4)
  • types: remove unused wire aliases from header and path params (dc0a9ab)

Chores

  • internal: drop the unused discriminator argument from PropertyInfo (3dae6fd)
  • internal: drop the unused distro dependency (a47d85f)

Documentation

  • changelog: detail the beta files/skills GA-shape change (#1900) (7c84e13)

Refactors

  • types: mark discriminated unions with UnionDiscriminator instead of PropertyInfo (17df0bf)
  • types: use UnionDiscriminator for more discriminated unions (b44af2c)

1.2.0 (2026-08-27)

Full Changelog: v1.1.0...v1.2.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (9df4565)

    The beta Files and Skills namespaces (client.beta.files, client.beta.skills) no longer send the files-api-2025-04-14 / skills-2025-10-02 headers and return the same shapes as client.files / client.skills (with Beta-prefixed type names under anthropic.types.beta). Requests that still send those headers on raw HTTP keep receiving the beta shapes.

    Changes in the beta namespaces:

    • client.beta.skills.delete() now deletes a Skill together with all of its versions (previously refused while any version existed). It returns BetaDeletedSkill (was SkillDeleteResponse).
    • Beta Messages type BetaSkill (container skill reference with skill_id, type, version) is renamed BetaContainerSkill; the request-side BetaSkillParams keeps its name. BetaSkill now names the Skill object returned by client.beta.skills.create() / retrieve() / list() (replacing SkillCreateResponse / SkillRetrieveResponse / SkillListResponse), and skill versions are BetaSkillVersion / BetaDeletedSkillVersion (replacing Version*Response).
    • client.beta.files.list() returns SyncPageCursor[BetaFileMetadata] / AsyncPageCursor[BetaFileMetadata] (with data / next_page) and paginates with page= / ids= (was SyncPage / AsyncPage with data, has_more, first_id, last_id and before_id= / after_id=); iterating the result for auto-pagination is unchanged. BetaSkill uses display_name (was display_title, also the create() keyword) and latest_version_id (was latest_version), and BetaSkillVersion is addressed by its skver_… id (the Unix-timestamp version field is gone).

... (truncated)

Commits
  • 370ee92 release: 1.3.0
  • b132569 feat(api): manual updates
  • 665dae8 fix(types): remove unused wire aliases from header and path params
  • 825dbb9 fix(client): derive multipart filename for file tuples passed without one
  • 2d81a47 fix(ci): don't hard-wrap detect-breaking-changes output
  • 23d68ee feat(api): organization compliance settings, user-profile order_by, memory-st...
  • f21982a fix(aws): resolve base_url from aws_region under skip_auth and with_options (...
  • e7e0c00 fix(batches): add results to GA raw/streaming response wrappers
  • 1280f2c chore(internal): drop the unused discriminator argument from PropertyInfo
  • 72cac10 refactor(types): use UnionDiscriminator for more discriminated unions
  • Additional commits viewable in compare view

Updates anthropic[bedrock] to 1.3.0

Release notes

Sourced from anthropic[bedrock]'s releases.

v1.3.0

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)
  • ci: don't hard-wrap detect-breaking-changes output (b5be779)
  • client: derive multipart filename for file tuples passed without one (a9f3fb4)
  • types: remove unused wire aliases from header and path params (dc0a9ab)

Chores

  • internal: drop the unused discriminator argument from PropertyInfo (3dae6fd)
  • internal: drop the unused distro dependency (a47d85f)

Documentation

  • changelog: detail the beta files/skills GA-shape change (#1900) (7c84e13)

Refactors

  • types: mark discrimi...

    Description has been truncated

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
39a08d7 
…th 12 updates

Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn), [sqlmodel](https://github.com/fastapi/sqlmodel), [authlib](https://github.com/authlib/authlib), [httpx2](https://github.com/pydantic/httpx2), [nh3](https://github.com/messense/nh3), [psycopg[binary]](https://github.com/psycopg/psycopg), [boto3](https://github.com/boto/boto3), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [anthropic[bedrock]](https://github.com/anthropics/anthropic-sdk-python), [ruff](https://github.com/astral-sh/ruff), [djlint](https://github.com/djlint/djLint) and [mypy](https://github.com/python/mypy) to permit the latest version.

Updates `uvicorn` from 0.52.2 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.2...0.52.4)

Updates `sqlmodel` from 0.0.39 to 0.0.42
- [Release notes](https://github.com/fastapi/sqlmodel/releases)
- [Changelog](https://github.com/fastapi/sqlmodel/blob/main/docs/release-notes.md)
- [Commits](fastapi/sqlmodel@0.0.39...0.0.42)

Updates `authlib` from 1.7.2 to 1.8.0
- [Release notes](https://github.com/authlib/authlib/releases)
- [Commits](authlib/authlib@v1.7.2...v1.8.0)

Updates `httpx2` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.10.0...v2.12.0)

Updates `nh3` from 0.3.6 to 0.3.7
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.3.6...v0.3.7)

Updates `psycopg[binary]` to 3.3.5
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.3.4...3.3.5)

Updates `boto3` from 1.43.73 to 1.43.87
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.73...1.43.87)

Updates `anthropic` from 0.121.0 to 1.3.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.121.0...v1.3.0)

Updates `anthropic[bedrock]` to 1.3.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.121.0...v1.3.0)

Updates `ruff` from 0.16.2 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.5)

Updates `djlint` from 1.44.2 to 1.45.0
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.44.2...v1.45.0)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: sqlmodel
  dependency-version: 0.0.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: authlib
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: nh3
  dependency-version: 0.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: psycopg[binary]
  dependency-version: 3.3.5
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.43.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: anthropic[bedrock]
  dependency-version: 1.3.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: djlint
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 6, 2026 07:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants