Skip to content

chore(deps): bump the dev-dependencies group across 1 directory with 40 updates - #161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dev-dependencies-8f28f6b21a
Open

chore(deps): bump the dev-dependencies group across 1 directory with 40 updates#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dev-dependencies-8f28f6b21a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic, starlette, uvicorn, python-multipart, sqlalchemy, alembic, argon2-cffi, testcontainers, pika, beanie, aio-pika, fastapi, granian, redis, gitpython, grpcio, websockets, boto3, azure-storage-blob, prometheus-client, opentelemetry-api, opentelemetry-sdk, opentelemetry-instrumentation-starlette, structlog, croniter, presidio-analyzer, presidio-anonymizer, pyjwt, cryptography, pyotp, click, pytest, pytest-asyncio, coverage, mypy, ruff, respx, aiosmtpd, opentelemetry-exporter-otlp-proto-http and mkdocs-material to permit the latest version.
Updates pydantic to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

... (truncated)

Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates starlette to 1.6.0

Release notes

Sourced from starlette's releases.

Version 1.6.0

What's Changed

New Contributors

Full Changelog: Kludex/starlette@1.5.1...1.6.0

Changelog

Sourced from starlette's changelog.

1.6.0 (August 8, 2026)

Added

  • Add max_body_size to Starlette and route classes #3431.
  • Expose http.response.debug information via response extensions #3130.

1.5.1 (August 8, 2026)

Fixed

  • Reject inverted single-byte ranges in FileResponse #3389.
  • Limit FileResponse to 100 ranges #3430.

1.5.0 (August 8, 2026)

Added

  • Add exclude_content_types parameter to GZipMiddleware #3418.

Changed

  • Expand default excluded content types in GZipMiddleware #3421.

Fixed

  • Flush GZip output for each streamed chunk #3419.
  • Skip compression of partial responses in GZipMiddleware #3420.

1.4.1 (August 5, 2026)

Fixed

  • Default thread_minimum_size to 128 KiB in GZipResponder, keeping it usable without the new keyword argument #3415.

1.4.0 (August 5, 2026)

Added

  • Offload large GZip compression to a worker thread, keeping the event loop responsive. GZipMiddleware accepts a new thread_minimum_size parameter (default 128 KiB) controlling the minimum body chunk size compressed in a thread #3410.

Changed

  • Use zlib.compressobj instead of GzipFile in GZipMiddleware, reducing memory usage during compression #3411.
  • Lazily allocate GZipMiddleware compression resources, avoiding compressor allocation for responses that are never compressed #3407.

1.3.1 (June 12, 2026)

Fixed

... (truncated)

Commits
  • 4f250d6 Version 1.6.0 (#3434)
  • 9eea41a Expose http.response.debug info via response extensions (#3130)
  • 38f8999 Add max_body_size to Starlette and route classes (#3431)
  • c41236c Version 1.5.1 (#3432)
  • 9c500db Limit FileResponse to 100 ranges (#3430)
  • 78ae82c Reject inverted single-byte Range like bytes=5-4 (#3389)
  • c1d6eda chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 (#3429)
  • ee66ca4 chore(deps): bump the python-packages group across 1 directory with 8 updates...
  • 00d1016 fix(tests): skip test_staticfiles_filename_too_long on Windows where os.pathc...
  • d96887e Add Pydantic Logfire banner to the docs (#3428)
  • Additional commits viewable in compare view

Updates uvicorn to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

... (truncated)

Commits

Updates python-multipart to 0.0.32

Release notes

Sourced from python-multipart's releases.

Version 0.0.32

What's Changed

Full Changelog: Kludex/python-multipart@0.0.31...0.0.32

Changelog

Sourced from python-multipart's changelog.

0.0.32 (2026-06-04)

  • Speed up partial-boundary scanning for CR/LF-dense part data #300.

0.0.31 (2026-06-04)

  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form #297.

0.0.30 (2026-05-31)

  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

  • Speed up partial-boundary tail scan via bytes.find #281.
  • Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

  • Add multipart header limits #267.
  • Pass parse offsets via constructors #268.

0.0.26 (2026-04-10)

  • Skip preamble before the first multipart boundary more efficiently #262.
  • Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

  • Add MIME content type info to File #143.
  • Handle CTE values case-insensitively #258.
  • Remove custom FormParser classes #257.
  • Add UPLOAD_DELETE_TMP to FormParser config #254.
  • Emit field_end for trailing bare field names on finalize #230.
  • Handle multipart headers case-insensitively #252.
  • Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

  • Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

... (truncated)

Commits
  • 238ead6 Version 0.0.32 (#302)
  • 8672979 Replace per-byte partial-boundary scan with rfind lookbehind (#300)
  • 8190779 Bump the python-packages group with 7 updates (#301)
  • 0d3c086 Use uv package ecosystem for Dependabot (#299)
  • 4cffc68 Version 0.0.31 (#298)
  • c814948 Reject negative Content-Length in parse_form (#297)
  • 6b837d4 Bound header field name size before validating (#296)
  • e0c4f9d Bump the github-actions group with 3 updates (#294)
  • b8a01bb Bump the python-packages group with 3 updates (#293)
  • 6732164 Speed up multipart header parsing and callback dispatch (#295)
  • Additional commits viewable in compare view

Updates sqlalchemy to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

  • [platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

    References: #13477

orm

  • [orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

    References: #13439

  • [orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

    References: #13485

  • [orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

Updates alembic to 1.19.2

Release notes

Sourced from alembic's releases.

1.19.2

Released: September 4, 2026

changed

  • [changed] [autogenerate] The autogenerate plugin for CHECK constraint detection by name, added in 1.19.0. for #508, is no longer enabled by default. It has been renamed from alembic.autogenerate.checkconstraint_byname to alembic.ext.checkconstraint_byname and no longer matches on the "alembic.autogenerate.*" wildcard, which remains the default plugin specification. The previous name will still function as well if placed in the plugins list explicitly, both to enable the plugin and within a "~" exclusion, so that an env.py written against 1.19.0 or 1.19.1 requires no change.

    The plugin is now recommended only for schemas that ensure the naming of all constraints using a client side naming convention, otherwise there's a persistent risk of false positives. See autogenerate_check_constraints for background on things to be aware of when using this plugin.

    As part of this change "type bound" CHECK constraints, which include constraints generated for the Boolean and Enum datatypes when the create_constraint parameter is set to True, are no longer ignored in the metadata side, so that normal name-based matching can occur for these constraints.

    References: #1859

usecase

  • [usecase] [autogenerate] [batch] The target of a ~sqlalchemy.schema.ForeignKey is now located using the ForeignKey.target_tokens and ForeignKey.target_table_key accessors added in SQLAlchemy 2.1, rather than by splitting the dotted string form of that target on ".". As a dot inside a schema, table or column name cannot be told apart from the separator between those names, a foreign key whose target name contained a dot was previously mis-parsed by autogenerate rendering as well as by batch migrations. The dotted string continues to be split when running against SQLAlchemy 2.0, where these accessors are not present. Thanks to Gyanu Mayank for the initial pull request.

    References: #1860

Commits

Updates argon2-cffi to 25.1.0

Release notes

Sourced from argon2-cffi's releases.

25.1.0

Highlights

This release is mostly about smoothing out packaging metadata and improve support for Pyodide / WebAssembly environments.

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Doist (@Doist), nate nowack (@zzstoatzz), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Moving Content AG (@moving-content), ProteinQure (@ProteinQure), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Not to forget 14 more amazing humans who chose to be generous but anonymous!

Full Changelog

Added

  • Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

  • Python 3.7 is not supported anymore. #186

Changed

  • argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

  • Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190


This release contains contributions from @​alarmfox, @​hynek, @​isidroas, @​ngoldbaum, @​peterc-s, and @​twm.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

... (truncated)

Changelog

Sourced from argon2-cffi's changelog.

25.1.0 - 2025-06-03

Added

  • Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

  • Python 3.7 is not supported anymore. #186

Changed

  • argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

  • Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190

23.1.0 - 2023-08-15

Removed

  • Python 3.6 is not supported anymore.

Deprecated

  • The InvalidHash exception is deprecated in favor of InvalidHashError. No plans for removal currently exist and the names can (but shouldn't) be used interchangeably.

  • argon2.hash_password(), argon2.hash_password_raw(), and argon2.verify_password() that have been soft-deprecated since 2016 are now hard-deprecated. They now raise DeprecationWarnings and will be removed in 2024.

Added

  • Official support for Python 3.11 and 3.12. No code changes were necessary.

  • argon2.exceptions.InvalidHashError as a replacement for InvalidHash.

  • salt parameter to argon2.PasswordHasher.hash() to allow for custom salts. This is only useful for specialized use-cases -- leave it on None unless you know exactly what you are doing. #153

... (truncated)

Commits

Updates testcontainers to 4.15.0
Updates pika to 1.4.4

Release notes

Sourced from pika's releases.

1.4.4

https://pypi.org/project/pika/1.4.4/ | GitHub milestone

Changelog

Sourced from pika's changelog.

1.4.4 (2026-08-06)

Full Changelog

Merged pull requests:

  • Revert "Fix callLater typing by passing keyword arguments" #1678 (jeremycline)

1.4.2 (2026-07-23)

Full Changelog

Closed issues:

  • Importing pika.adapters can break asyncio subprocesses on Windows #1639

Merged pull requests:

  • Stop mutating global asyncio event loop policy on import #1642 (lukebakken)

1.4.1 (2026-05-22)

Merged pull requests:

  • Fix Channel.close() for channels with multiple consumers #1596 (gbenson)

1.4.0 (2026-05-06)

Full Changelog

Implemented enhancements:

Closed issues:

  • Add Hatch scripts to standardize developer commands #1578
  • Fix outdated and broken documentation across the project #1568
  • Update Codecov default branch and badge #1563
  • GitHub actions workflows and test code need updates for RabbitMQ 4.3 #1547
  • datetime.datetime.utcfromtimestamp() is deprecated #1539
  • URLParameters这个类有bug #1533
  • Custom transport #1532
  • x-delay value is being returned in the header as a UINT64 and not a SINT16 #1531
  • Pika should advertise the exchange_exchange_bindings client capability #1530
  • Missing type annotations #1523
  • There is no info about return type of queue_declare() method of pika.channel #1522
  • Getting the user who sent the message #1510

... (truncated)

Commits
  • 60fee42 pika 1.4.4
  • c1a768e Revert callLater keyword arguments and type _reactor as Any
  • ff4eae1 pika 1.4.3
  • 3c9b50d Merge pull request #1658 from pika/pika-1.4.2
  • c5da6ff pika 1.4.2
  • c538d43 Merge pull request #1642 from pika/fix/gh-1639-windows-event-loop-policy-1.4.x
  • 79efa49 Fix callLater typing by passing keyword arguments
  • 7cb3661 Drain extra loop turn to await Tornado selector bootstrap
  • b3b8819 Replace deprecated event loop policy in tests with helper
  • c1c9651 Raise clear error when Windows loop lacks selector support
  • Additional commits viewable in compare view

Updates beanie to 2.2.0

Release notes

Sourced from beanie's releases.

2.2.0

Add distinct() to chained find queries

Optimize FindQuery.exists()

Fix underscore-prefixed event hooks

Fix typing for find_one() upsert results

Fix logical Not operator type hint

Fix existing MongoDB indexes with float directions

Documentation and examples

Documentation: clarify SetRevisionId usage

Changelog

Sourced from beanie's changelog.

2.2.0 - 2026-08-07

Add distinct() to chained find queries

Optimize FindQuery.exists()

Fix underscore-prefixed event hooks

Fix typing for find_one() upsert results

Fix logical Not operator type hint

Fix existing MongoDB indexes with float directions

Documentation and examples

Documentation: clarify SetRevisionId usage

[2.1.0] - 2026-03-20

Drop EOL Python 3.9, MongoDB 4.4/5.0/6.0, Pydantic v1

Speed up init by avoiding duplicate db commands

Improve class filter and is/is not for enum comparison

Fix OperationFailure when saving with keep_nulls=False and no None values

Fix FindQuery.count() ignoring pymongo_kwargs

Add Beanie version to handshake metadata

Docs: clarify state management description

... (truncated)

Commits
  • aa290b5 docs: remove stale project announcements (#1349)
  • 4f7321d Fix index direction float-to-int conversion for existing MongoDB indexes (#1343)
  • f01dbf3 build: verify release artifact version (#1348)
  • 8a65098 release: 2.2.0
  • c90c732 docs: add context7.json for LLM documentation indexing (#1334)
  • 45618ef logical operators: add bool to Not's expression type hint (#1345)
  • 25b1918 docs: document computed fields and custom serializers limitation (#1341)
  • 12f38d2 fix(typing): preserve awaitable type for find-one upsert (#1346)
  • 00c0f74 Merge pull request #1306 from khelanmodi/main
  • f75167a feat: add distinct() method to FindMany for find() chain support (#1301)
  • Additional commits viewable in compare view

Updates aio-pika to 10.0.1

Release notes

Sourced from aio-pika's releases.

10.0.1

What's Changed

New Contributors

Full Changelog: mosquito/aio-pika@10.0.0...10.0.1

Changelog

Sourced from aio-pika's changelog.

9.6.0

  • Fixed callback-based consumers not resuming after connection reconnection #588
  • Fixed queue iterators raising StopAsyncIteration on channel reconnection #540
  • Added close_called property to AbstractConnection and Connection to distinguish intentional vs. automatic connection closures
  • Migrated build tooling from Poetry to UV
  • Migrated linting from Pylama to Ruff
  • Improved logging: split log.exception calls into error-level message and debug-level traceback #693
  • Removed testcontainers dependency from tests

9.5.5

  • Replace WeakSet with set for robust channels tracking #666 by shushpanov

9.5.4

  • fix: RobustChannel should not reopen after close() call #658

9.5.3

  • python3.8-eol #657
  • self-hosted docs

9.5.2

  • Fix documentation links

9.5.1

  • Fix documentation links

9.5.0

  • Fix two bugs by adding more type hints to CallbackCollection. @​Darsstar
  • Dropped python 3.7 @​Darsstar
  • QueueIterator raises StopAsyncIteration when channel is closed. @​Darsstar

9.4.3

  • fix: raise ChannelInvalidStateError at exchange.publish with closed channel #637

9.4.2

... (truncated)

Commits
  • a6c69f6 Merge pull request #699 from hasansezertasan/fix/generic-connect-return-types
  • 4c60f43 Merge pull request #702 from decaz/aiormq-update
  • 723e76a Update aiormq and get rid of Python 3.10
  • Description has been truncated

…40 updates

Updates the requirements on [pydantic](https://github.com/pydantic/pydantic), [starlette](https://github.com/Kludex/starlette), [uvicorn](https://github.com/Kludex/uvicorn), [python-multipart](https://github.com/Kludex/python-multipart), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [argon2-cffi](https://github.com/hynek/argon2-cffi), [testcontainers](https://github.com/testcontainers/testcontainers-python), [pika](https://github.com/pika/pika), [beanie](https://github.com/BeanieODM/beanie), [aio-pika](https://github.com/mosquito/aio-pika), [fastapi](https://github.com/fastapi/fastapi), [granian](https://github.com/emmett-framework/granian), [redis](https://github.com/redis/redis-py), [gitpython](https://github.com/gitpython-developers/GitPython), [grpcio](https://github.com/grpc/grpc), [websockets](https://github.com/python-websockets/websockets), [boto3](https://github.com/boto/boto3), [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python), [prometheus-client](https://github.com/prometheus/client_python), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-starlette](https://github.com/open-telemetry/opentelemetry-python-contrib), [structlog](https://github.com/hynek/structlog), [croniter](https://github.com/pallets-eco/croniter), [presidio-analyzer](https://github.com/data-privacy-stack/presidio), [presidio-anonymizer](https://github.com/data-privacy-stack/presidio), [pyjwt](https://github.com/jpadilla/pyjwt), [cryptography](https://github.com/pyca/cryptography), [pyotp](https://github.com/pyauth/pyotp), [click](https://github.com/pallets/click), [pytest](https://github.com/pytest-dev/pytest), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio), [coverage](https://github.com/coveragepy/coveragepy), [mypy](https://github.com/python/mypy), [ruff](https://github.com/astral-sh/ruff), [respx](https://github.com/lundberg/respx), [aiosmtpd](https://github.com/aio-libs/aiosmtpd), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) and [mkdocs-material](https://github.com/squidfunk/mkdocs-material) to permit the latest version.

Updates `pydantic` to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.3...v2.13.5)

Updates `starlette` to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.0...1.6.0)

Updates `uvicorn` to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.46.0...0.52.4)

Updates `python-multipart` to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.27...0.0.32)

Updates `sqlalchemy` to 2.0.52
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `alembic` to 1.19.2
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `argon2-cffi` to 25.1.0
- [Release notes](https://github.com/hynek/argon2-cffi/releases)
- [Changelog](https://github.com/hynek/argon2-cffi/blob/main/CHANGELOG.md)
- [Commits](hynek/argon2-cffi@23.1.0...25.1.0)

Updates `testcontainers` to 4.15.0
- [Release notes](https://github.com/testcontainers/testcontainers-python/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-python/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-python@testcontainers-v4.0.0...testcontainers-v4.15.0)

Updates `pika` to 1.4.4
- [Release notes](https://github.com/pika/pika/releases)
- [Changelog](https://github.com/pika/pika/blob/1.4.4/CHANGELOG.md)
- [Commits](pika/pika@1.3.0...1.4.4)

Updates `beanie` to 2.2.0
- [Release notes](https://github.com/BeanieODM/beanie/releases)
- [Changelog](https://github.com/BeanieODM/beanie/blob/main/docs/changelog.md)
- [Commits](BeanieODM/beanie@2.1.0...2.2.0)

Updates `aio-pika` to 10.0.1
- [Release notes](https://github.com/mosquito/aio-pika/releases)
- [Changelog](https://github.com/mosquito/aio-pika/blob/master/CHANGELOG.md)
- [Commits](mosquito/aio-pika@9.6.2...10.0.1)

Updates `fastapi` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.1...0.141.1)

Updates `granian` to 2.8.2
- [Release notes](https://github.com/emmett-framework/granian/releases)
- [Commits](emmett-framework/granian@v2.7.4...v2.8.2)

Updates `redis` to 8.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.4.0...v8.1.0)

Updates `gitpython` to 3.1.61
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.0...3.1.61)

Updates `grpcio` to 1.83.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.60.0...v1.83.1)

Updates `websockets` to 17.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@12.0...17.1)

Updates `boto3` to 1.43.89
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.34.0...1.43.89)

Updates `azure-storage-blob` to 12.30.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.19.0...azure-storage-blob_12.30.1)

Updates `prometheus-client` to 0.26.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.25.0...v0.26.0)

Updates `opentelemetry-api` to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0)

Updates `opentelemetry-sdk` to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0)

Updates `opentelemetry-instrumentation-starlette` to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `structlog` to 26.1.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.5.0...26.1.0)

Updates `croniter` to 6.2.4
- [Release notes](https://github.com/pallets-eco/croniter/releases)
- [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst)
- [Commits](pallets-eco/croniter@6.2.2...6.2.4)

Updates `presidio-analyzer` to 2.2.364
- [Release notes](https://github.com/data-privacy-stack/presidio/releases)
- [Changelog](https://github.com/data-privacy-stack/presidio/blob/main/CHANGELOG.md)
- [Commits](data-privacy-stack/presidio@2.2.0...2.2.364)

Updates `presidio-anonymizer` to 2.2.364
- [Release notes](https://github.com/data-privacy-stack/presidio/releases)
- [Changelog](https://github.com/data-privacy-stack/presidio/blob/main/CHANGELOG.md)
- [Commits](data-privacy-stack/presidio@2.2.0...2.2.364)

Updates `pyjwt` to 2.13.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.12.1...2.13.0)

Updates `cryptography` to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...50.0.1)

Updates `pyotp` to 2.10.0
- [Release notes](https://github.com/pyauth/pyotp/releases)
- [Changelog](https://github.com/pyauth/pyotp/blob/main/Changes.rst)
- [Commits](pyauth/pyotp@v2.9.0...v2.10.0)

Updates `click` to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.3.3...8.5.0)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pytest-asyncio` to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `coverage` to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.5...7.16.0)

Updates `mypy` to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.2...v2.3.1)

Updates `ruff` to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.12...0.16.6)

Updates `respx` to 0.23.1
- [Release notes](https://github.com/lundberg/respx/releases)
- [Changelog](https://github.com/lundberg/respx/blob/master/CHANGELOG.md)
- [Commits](lundberg/respx@0.21.0...0.23.1)

Updates `aiosmtpd` to 1.4.6
- [Release notes](https://github.com/aio-libs/aiosmtpd/releases)
- [Changelog](https://github.com/aio-libs/aiosmtpd/blob/master/release.py)
- [Commits](aio-libs/aiosmtpd@1.4.0...v1.4.6)

Updates `opentelemetry-exporter-otlp-proto-http` to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0)

Updates `mkdocs-material` to 9.7.7
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.5.0...9.7.7)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  dependency-group: dev-dependencies
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.52
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: alembic
  dependency-version: 1.19.2
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: argon2-cffi
  dependency-version: 25.1.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: testcontainers
  dependency-version: 4.15.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: pika
  dependency-version: 1.4.4
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: beanie
  dependency-version: 2.2.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: aio-pika
  dependency-version: 10.0.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: granian
  dependency-version: 2.8.2
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: gitpython
  dependency-version: 3.1.61
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: grpcio
  dependency-version: 1.83.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: websockets
  dependency-version: '17.1'
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: boto3
  dependency-version: 1.43.89
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: azure-storage-blob
  dependency-version: 12.30.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: prometheus-client
  dependency-version: 0.26.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.44.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.44.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: opentelemetry-instrumentation-starlette
  dependency-version: 0.65b0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: structlog
  dependency-version: 26.1.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: croniter
  dependency-version: 6.2.4
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: presidio-analyzer
  dependency-version: 2.2.364
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: presidio-anonymizer
  dependency-version: 2.2.364
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: pyotp
  dependency-version: 2.10.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: respx
  dependency-version: 0.23.1
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: aiosmtpd
  dependency-version: 1.4.6
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.44.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:production
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants