Skip to content

chore(deps)(deps): bump the security-updates group across 1 directory with 33 updates#239

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/secbrain/security-updates-98d645aeb3
Closed

chore(deps)(deps): bump the security-updates group across 1 directory with 33 updates#239
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/secbrain/security-updates-98d645aeb3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the security-updates group with 30 updates in the /secbrain directory:

Package From To
typer 0.21.1 0.26.1
pydantic 2.12.5 2.13.4
pydantic-settings 2.12.0 2.14.1
openai 2.14.0 2.38.0
eth-hash 0.7.1 0.8.0
pytest 9.0.2 9.0.3
pytest-asyncio 1.3.0 1.4.0
pytest-cov 7.0.0 7.1.0
ruff 0.14.10 0.15.14
anyio 4.12.1 4.13.0
certifi 2026.1.4 2026.5.20
charset-normalizer 3.4.4 3.4.7
coverage 7.13.0 7.13.1
google-api-core 2.28.1 2.30.3
google-api-python-client 2.187.0 2.196.0
google-auth 2.47.0 2.53.0
google-auth-httplib2 0.3.0 0.4.0
googleapis-common-protos 1.72.0 1.75.0
grpcio 1.76.0 1.80.0
httplib2 0.31.0 0.31.2
idna 3.11 3.16
jiter 0.12.0 0.15.0
markdown-it-py 4.0.0 4.2.0
proto-plus 1.27.0 1.28.0
pyasn1 0.6.1 0.6.3
pyparsing 3.3.1 3.3.2
python-dotenv 1.2.1 1.2.2
requests 2.32.5 2.34.2
tqdm 4.67.1 4.67.3
urllib3 2.6.3 2.7.0

Updates typer from 0.21.1 to 0.26.1

Release notes

Sourced from typer's releases.

0.26.1

Fixes

  • 🐛 Ensure that an envvar set for typer.Option works as expected. PR #1788 by @​svlandeg.

Internal

0.26.0

Breaking Changes

  • ➖ Vendor Click and streamline Typer's functionality and code base. PR #1774 by @​svlandeg.
    • Typer no longer depends on Click as a third party dependency, it vendors (includes the source code of) Click.
    • This simplifies the work done by both Click and Typer teams.
    • It allows Typer to evolve independently, and enables several new planned features.
    • It will solve several dependency conflict situations for projects that use some packages that depend on Click and some that depend on Typer.
    • This also means that Click-specific functionality is no longer supported, like extracting the Click app and adding Click-specific plug-ins, or customizing the field types with Click-specific types.
    • You can read more about it in the docs for Vendored Click.

Docs

Internal

... (truncated)

Changelog

Sourced from typer's changelog.

0.26.1 (2026-05-26)

Fixes

  • 🐛 Ensure that an envvar set for typer.Option works as expected. PR #1788 by @​svlandeg.

Internal

0.26.0 (2026-05-26)

Breaking Changes

  • ➖ Vendor Click and streamline Typer's functionality and code base. PR #1774 by @​svlandeg.
    • Typer no longer depends on Click as a third party dependency, it vendors (includes the source code of) Click.
    • This simplifies the work done by both Click and Typer teams.
    • It allows Typer to evolve independently, and enables several new planned features.
    • It will solve several dependency conflict situations for projects that use some packages that depend on Click and some that depend on Typer.
    • This also means that Click-specific functionality is no longer supported, like extracting the Click app and adding Click-specific plug-ins, or customizing the field types with Click-specific types.
    • You can read more about it in the docs for Vendored Click.

Docs

Internal

... (truncated)

Commits
  • 8c70d49 🔖 Release version 0.26.1
  • 75ee927 📝 Update release notes
  • 3028854 🐛 Ensure that an envvar set for typer.Option works as expected (#1788)
  • 959a356 📝 Update release notes
  • a79de20 ⬆ Bump python-dotenv from 1.2.1 to 1.2.2 (#1714)
  • 8f44149 📝 Update release notes
  • d88415f 📝 Update release notes
  • d31a597 🔖 Release version 0.26.0
  • 6b13660 📝 Update release notes
  • c95e3a4 📝 Update release notes
  • Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.12.0 to 2.14.1

Release notes

Sourced from pydantic-settings's releases.

v2.14.1

What's Changed

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • e95c30b Prepare release 2.14.1 (#859)
  • 0c87345 Fix field named cls conflicting with classmethod parameter (#858)
  • 7bd0072 Bump the python-packages group with 2 updates (#856)
  • b03e573 Bump the github-actions group with 3 updates (#853)
  • eaa3b43 Bump the python-packages group with 5 updates (#854)
  • 9f95615 Bump the python-packages group with 4 updates (#850)
  • 8916bee Prepare release 2.14.0 (#848)
  • 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
  • 9ed7f48 Bump the python-packages group with 4 updates (#847)
  • 617c690 Fix cli_ignore_unknown_args=True not working on subcommands (#844)
  • Additional commits viewable in compare view

Updates openai from 2.14.0 to 2.38.0

Release notes

Sourced from openai's releases.

v2.38.0

2.38.0 (2026-05-21)

Full Changelog: v2.37.0...v2.38.0

Features

  • api: api update (33d1d01)
  • api: manual updates (a21700a)
  • api: update OpenAPI spec or Stainless config (00265c5)

Chores

  • api: docs updates (ee10152)
  • check release PR custom code sync (2638779)
  • remove release automation trigger (bd6eea5)
  • trigger release automation (f62d082)

v2.37.0

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

  • api: add service_tier parameter to responses compact method (625827c)
  • internal/types: support eagerly validating pydantic iterators (7e527bc)
  • Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

  • client: add missing f-string prefix in file type error message (c85ebd9)

v2.36.0

2.36.0 (2026-05-07)

Full Changelog: v2.35.1...v2.36.0

Features

v2.35.1

2.35.1 (2026-05-06)

Full Changelog: v2.35.0...v2.35.1

... (truncated)

Changelog

Sourced from openai's changelog.

2.38.0 (2026-05-21)

Full Changelog: v2.37.0...v2.38.0

Features

  • api: api update (33d1d01)
  • api: manual updates (a21700a)
  • api: update OpenAPI spec or Stainless config (00265c5)

Chores

  • api: docs updates (ee10152)
  • check release PR custom code sync (2638779)
  • remove release automation trigger (bd6eea5)
  • trigger release automation (f62d082)

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

  • api: add service_tier parameter to responses compact method (625827c)
  • internal/types: support eagerly validating pydantic iterators (7e527bc)
  • Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

  • client: add missing f-string prefix in file type error message (c85ebd9)

2.36.0 (2026-05-07)

Full Changelog: v2.35.1...v2.36.0

Features

2.35.1 (2026-05-06)

Full Changelog: v2.35.0...v2.35.1

Bug Fixes

  • api: fix imagegen size enum regression (4484653)

... (truncated)

Commits
  • e757667 release: 2.38.0
  • b85b647 feat(api): api update
  • d881c67 Revert "chore: check release PR custom code sync"
  • d4a3228 chore: check release PR custom code sync
  • 4888838 chore: remove release automation trigger
  • 74978f0 chore: trigger release automation
  • bab18af chore(api): docs updates
  • a6f899a feat(api): manual updates
  • 2897485 feat(api): update OpenAPI spec or Stainless config
  • a2f1d6c codegen metadata
  • Additional commits viewable in compare view

Updates eth-hash from 0.7.1 to 0.8.0

Changelog

Sourced from eth-hash's changelog.

eth-hash v0.8.0 (2026-03-25)

No significant changes.

eth-hash v0.8.0-beta.1 (2025-12-17)

Breaking Changes


- Drop support for Python 3.8 and 3.9 (`[#66](https://github.com/ethereum/eth-hash/issues/66) <https://github.com/ethereum/eth-hash/issues/66>`__)

Features



- Add support for Python 3.14 (`[#66](https://github.com/ethereum/eth-hash/issues/66) &lt;https://github.com/ethereum/eth-hash/issues/66&gt;`__)
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>

<ul>

<li><a href="https://github.com/ethereum/eth-hash/commit/b599a9632c696d0fb63b1903e79b0608f302e4d2&quot;&gt;&lt;code&gt;b599a96&lt;/code&gt;&lt;/a> Bump version: 0.8.0-beta.1 → 0.8.0</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/3651eea939a90c08328bb69fbbc061c1544c34a7&quot;&gt;&lt;code&gt;3651eea&lt;/code&gt;&lt;/a> Compile release notes for v0.8.0</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/fe118e793e1e626762120419bf72548b8f2ec604&quot;&gt;&lt;code&gt;fe118e7&lt;/code&gt;&lt;/a> Bump version: 0.7.1 → 0.8.0-beta.1</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/e2a6b53d8eddb12c4e0ab9534cf31b134c3d2da4&quot;&gt;&lt;code&gt;e2a6b53&lt;/code&gt;&lt;/a> Compile release notes for v0.8.0-beta.1</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/d1b733ecb7ef7ffe86c9701cf333c55bab8bfb80&quot;&gt;&lt;code&gt;d1b733e&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/ethereum/eth-hash/issues/66&quot;&gt;#66&lt;/a> from kclowes/template-upgrade</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/c97025fb0df6c9389feb795b03aa8fca832f6c7c&quot;&gt;&lt;code&gt;c97025f&lt;/code&gt;&lt;/a> Add newsfragments for <a href="https://redirect.github.com/ethereum/eth-hash/issues/66&quot;&gt;#66&lt;/a&gt;&lt;/li>

<li><a href="https://github.com/ethereum/eth-hash/commit/b17284c4c9ea8da04f70c994136dd8aeadfca968&quot;&gt;&lt;code&gt;b17284c&lt;/code&gt;&lt;/a> lint</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/62b4055a18a683e637489699b31b07fcd76c2e28&quot;&gt;&lt;code&gt;62b4055&lt;/code&gt;&lt;/a> Fix typing</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/75a75ab080513d4b15946a6e3ec8ade9b8168f6b&quot;&gt;&lt;code&gt;75a75ab&lt;/code&gt;&lt;/a> Fix docs build</li>

<li><a href="https://github.com/ethereum/eth-hash/commit/cca06391f173d09936352dd9a512c2abb801383b&quot;&gt;&lt;code&gt;cca0639&lt;/code&gt;&lt;/a> Add py314-backend-* jobs to circleci config</li>

<li>Additional commits viewable in <a href="https://github.com/ethereum/eth-hash/compare/v0.7.1...v0.8.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates pytest from 9.0.2 to 9.0.3



Release notes

Sourced from pytest's releases.




9.0.3


pytest 9.0.3 (2026-04-07)


Bug fixes


    

  • 

    #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.
    

    • 

  • 

    #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.
    

    Previously this resulted in an internal assertion failure during plugin loading.
    

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.
    

    • 

  • 

    #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.
    

    • 

  • 

    #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.
    

    • 

  • 

    #14343: Fixed use of insecure temporary directory (CVE-2025-71176).
    

    • 



Improved documentation


    

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
    • 

  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
    • 

  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
    • 

  • #14255: TOML integer log levels must be quoted: Updating reference documentation.
    • 



Contributor-facing changes


    

  • 

    #12689: The test reports are now published to Codecov from GitHub Actions.
The test statistics is visible on the web interface.
    

    -- by aleguy02
    

    • 








Commits






Updates pytest-asyncio from 1.3.0 to 1.4.0



Release notes

Sourced from pytest-asyncio's releases.




pytest-asyncio v1.4.0


1.4.0 - 2026-05-26


Deprecated


    

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)
    • 



Added


    

  • 

    Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.
    

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.
    

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)
    

    • 



Changed


    

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
    • 

  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising
a DeprecationWarning. (#1394)
    • 

  • Updated minimum supported pytest version to v8.4.0. (#1397)
    • 



Fixed


    

  • Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)
    • 



Notes for Downstream Packagers


    

  • Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)
    • 



pytest-asyncio v1.4.0a2


1.4.0a2 - 2026-05-02


Deprecated


    

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)
    • 



Added


    

  • 

    Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.
    

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged on pytest 8.4+.
    

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)
    

    • 



Changed


    

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
    • 

  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising
a DeprecationWarning. (#1394)
    • 






... (truncated)





Commits

    

  • 6e14cd2 chore: Prepare release of v1.4.0.
    • 

  • 4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
    • 

  • ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
    • 

  • a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
    • 

  • e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
    • 

  • fc43340 Build(deps): Bump idna from 3.14 to 3.15
    • 

  • 762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
    • 

  • b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
    • 

  • 9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
    • 

  • 82a393c ci: Remove unnecessary debug output.
    • 

  • Additional commits viewable in compare view
    • 







Updates pytest-cov from 7.0.0 to 7.1.0



Changelog

Sourced from pytest-cov's changelog.




7.1.0 (2026-03-21)


    

  • 

    Fixed total coverage computation to always be consistent, regardless of reporting settings.
Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
reporting options.
See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.
    

    • 

  • 

    Improve handling of ResourceWarning from sqlite3.
    

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
It checks if there is already existing plugin for this message by comparing filter regular expression.
When filter is specified on command line the message is escaped and does not match an expected message.
A check for an escaped regular expression is added to handle this case.
    

    With this fix one can suppress ResourceWarning from sqlite3 from command line::
    

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...
    

    • 

  • 

    Various improvements to documentation.
Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
"vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>.
Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.
    

    • 

  • 

    Fixed some assertions in tests.
Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.
    

    • 

  • 

    Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).
    

    • 








CommitsDescription has been truncated

@dependabot
chore(deps)(deps): bump the security-updates group across 1 directory…
6fac00d 
… with 33 updates

Bumps the security-updates group with 30 updates in the /secbrain directory:

| Package | From | To |
| --- | --- | --- |
| [typer](https://github.com/fastapi/typer) | `0.21.1` | `0.26.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.12.0` | `2.14.1` |
| [openai](https://github.com/openai/openai-python) | `2.14.0` | `2.38.0` |
| [eth-hash](https://github.com/ethereum/eth-hash) | `0.7.1` | `0.8.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.10` | `0.15.14` |
| [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.13.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.5.20` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.4` | `3.4.7` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.0` | `7.13.1` |
| [google-api-core](https://github.com/googleapis/google-cloud-python) | `2.28.1` | `2.30.3` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.187.0` | `2.196.0` |
| [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.47.0` | `2.53.0` |
| [google-auth-httplib2](https://github.com/googleapis/google-cloud-python) | `0.3.0` | `0.4.0` |
| [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.72.0` | `1.75.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.76.0` | `1.80.0` |
| [httplib2](https://github.com/httplib2/httplib2) | `0.31.0` | `0.31.2` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.16` |
| [jiter](https://github.com/pydantic/jiter) | `0.12.0` | `0.15.0` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` |
| [proto-plus](https://github.com/googleapis/google-cloud-python) | `1.27.0` | `1.28.0` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.3` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.3.1` | `3.3.2` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.34.2` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.67.1` | `4.67.3` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |



Updates `typer` from 0.21.1 to 0.26.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.21.1...0.26.1)

Updates `pydantic` from 2.12.5 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.4)

Updates `pydantic-settings` from 2.12.0 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.12.0...v2.14.1)

Updates `openai` from 2.14.0 to 2.38.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.14.0...v2.38.0)

Updates `eth-hash` from 0.7.1 to 0.8.0
- [Changelog](https://github.com/ethereum/eth-hash/blob/main/docs/release_notes.rst)
- [Commits](ethereum/eth-hash@v0.7.1...v0.8.0)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `pytest-asyncio` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `ruff` from 0.14.10 to 0.15.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.10...0.15.14)

Updates `anyio` from 4.12.1 to 4.13.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.12.1...4.13.0)

Updates `certifi` from 2026.1.4 to 2026.5.20
- [Commits](certifi/python-certifi@2026.01.04...2026.05.20)

Updates `charset-normalizer` from 3.4.4 to 3.4.7
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.4...3.4.7)

Updates `coverage` from 7.13.0 to 7.13.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.0...7.13.1)

Updates `google-api-core` from 2.28.1 to 2.30.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-speech-v2.28.1...google-api-core-v2.30.3)

Updates `google-api-python-client` from 2.187.0 to 2.196.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.187.0...v2.196.0)

Updates `google-auth` from 2.47.0 to 2.53.0
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-auth-library-python/commits)

Updates `google-auth-httplib2` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-httplib2-v0.3.0...google-auth-httplib2-v0.4.0)

Updates `googleapis-common-protos` from 1.72.0 to 1.75.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.72.0...googleapis-common-protos-v1.75.0)

Updates `grpcio` from 1.76.0 to 1.80.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.76.0...v1.80.0)

Updates `httplib2` from 0.31.0 to 0.31.2
- [Changelog](https://github.com/httplib2/httplib2/blob/master/CHANGELOG)
- [Commits](httplib2/httplib2@v0.31.0...v0.31.2)

Updates `idna` from 3.11 to 3.16
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.16)

Updates `jiter` from 0.12.0 to 0.15.0
- [Release notes](https://github.com/pydantic/jiter/releases)
- [Commits](pydantic/jiter@v0.12.0...v0.15.0)

Updates `librt` from 0.7.4 to 0.7.7
- [Commits](mypyc/librt@v0.7.4...v0.7.7)

Updates `markdown-it-py` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](executablebooks/markdown-it-py@v4.0.0...v4.2.0)

Updates `pathspec` from 0.12.1 to 1.0.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](cpburnz/python-pathspec@v0.12.1...v1.0.1)

Updates `proto-plus` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-channel-v1.27.0...proto-plus-v1.28.0)

Updates `pyasn1` from 0.6.1 to 0.6.3
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.1...v0.6.3)

Updates `pydantic-core` from 2.41.5 to 2.46.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits/core-v2.46.4)

Updates `pyparsing` from 3.3.1 to 3.3.2
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.3.1...3.3.2)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `requests` from 2.32.5 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.34.2)

Updates `tqdm` from 4.67.1 to 4.67.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.67.1...v4.67.3)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

---
updated-dependencies:
- dependency-name: typer
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: openai
  dependency-version: 2.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: eth-hash
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: ruff
  dependency-version: 0.15.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: anyio
  dependency-version: 4.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: certifi
  dependency-version: 2026.5.20
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: charset-normalizer
  dependency-version: 3.4.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: coverage
  dependency-version: 7.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: google-api-core
  dependency-version: 2.30.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: google-api-python-client
  dependency-version: 2.196.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: google-auth
  dependency-version: 2.53.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: google-auth-httplib2
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: googleapis-common-protos
  dependency-version: 1.75.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: grpcio
  dependency-version: 1.80.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: httplib2
  dependency-version: 0.31.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: idna
  dependency-version: '3.16'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: jiter
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: librt
  dependency-version: 0.7.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: markdown-it-py
  dependency-version: 4.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pathspec
  dependency-version: 1.0.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: security-updates
- dependency-name: proto-plus
  dependency-version: 1.28.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pyasn1
  dependency-version: 0.6.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: pydantic-core
  dependency-version: 2.46.4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: pyparsing
  dependency-version: 3.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: tqdm
  dependency-version: 4.67.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python labels May 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 28, 2026
@dependabot dependabot Bot deleted the dependabot/pip/secbrain/security-updates-98d645aeb3 branch May 28, 2026 23:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants