build(deps): bump the patch group with 6 updates

[dependabot]

Bumps the patch group with 6 updates:

Package	From	To
boto3	1.43.82	1.43.88
claude-agent-sdk	0.2.147	0.2.152
weave	0.53.7	0.53.8
xgboost	3.4.0	3.4.1
pydantic	2.13.4	2.13.5
cachetools	7.1.7	7.1.8

Updates boto3 from 1.43.82 to 1.43.88

Commits

• bb429b1 Merge branch 'release-1.43.88'
• e373d8d Bumping version to 1.43.88
• 6ce83de Add changelog entries from botocore
• d5740c2 Merge branch 'release-1.43.87'
• bd30961 Merge branch 'release-1.43.87' into develop
• 316b72c Bumping version to 1.43.87
• 17409b4 Add changelog entries from botocore
• 81ae047 Merge branch 'release-1.43.86'
• 0e52e63 Merge branch 'release-1.43.86' into develop
• 938cd05 Bumping version to 1.43.86
• Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.147 to 0.2.152

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.152

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.259

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.152/

pip install claude-agent-sdk==0.2.152

v0.2.151

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.258

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.151/

pip install claude-agent-sdk==0.2.151

v0.2.150

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.257

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.150/

pip install claude-agent-sdk==0.2.150

v0.2.149

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.252

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.152

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.259

0.2.151

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.258

0.2.150

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.257

0.2.149

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.252

0.2.148

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.251

Commits

• a8b1e28 docs: update changelog for v0.2.152
• 0b41fb4 chore: release v0.2.152
• ed1718f chore: bump bundled CLI version to 2.1.259
• 16606a3 docs: update changelog for v0.2.151
• dbe3998 chore: release v0.2.151
• 637906e chore: bump bundled CLI version to 2.1.258
• 1539d2a docs: update changelog for v0.2.150
• 23ca647 chore: release v0.2.150
• 036a35a chore: bump bundled CLI version to 2.1.257
• 9597fc9 docs: update changelog for v0.2.149
• Additional commits viewable in compare view

Updates weave from 0.53.7 to 0.53.8

Commits

• ad35cc3 Release version: 0.53.8-dev0 → 0.53.8
• a169bb7 chore(weave): bind completions create in the Stainless client (#7836)
• 817ffea chore(weave): refresh vendored trace-server clients (#7834)
• 25b2df4 chore(weave): exclude eval traces from agent insights (#7833)
• 04ed4b4 chore(weave): bind 29 already-generated routes in the Stainless client (#7830)
• 499eaba feat(weave): federated identity support for weave (#7726)
• 91ca8e9 chore(weave): refresh vendored trace-server clients (#7823)
• 452449b fix(weave): mark usage response defaults required in the serialization schema...
• 625a824 chore(weave): refresh vendored trace-server clients (#7822)
• e84dec4 chore(weave): refresh model costs (#7817)
• Additional commits viewable in compare view

Updates xgboost from 3.4.0 to 3.4.1

Release notes

Sourced from xgboost's releases.

3.4.1 Patch Release

What's Changed

• [jvm] Fix batch predict for SparseVector features (#12347)
• Fix model slicing with category container. (#12462)

Full Changelog: dmlc/xgboost@v3.4.0...v3.4.1

Additional artifacts

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check

34a5cb99a67bb98b44f204767eeeae642b65a86b2ecfca60082e4d74fd4d169a  xgboost-src-3.4.1.tar.gz
2514d394f989d6e990e67898d7f5e530c7c1867222c497ea454ffc18a31cb096  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

• xgboost_r_gpu_linux.tar.gz: Download

Source tarball

• xgboost-src-3.4.1.tar.gz: Download

Commits

• 6fe8c54 Bump version to 3.4.1. (#12468)
• 00213fc 3.4.1 news. (#12469)
• 565ba56 [backport] Fix model slicing with category container. (#12462) (#12465)
• d84f7c4 [backport][jvm] Fix batch predict for SparseVector features (#12347) (#12466)
• See full diff in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Commits

• 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
• 558379f Bump twine to v7.0.0
• 2cfd5d3 Do not check for docs build
• a735bee Fix more Clippy lints
• 7eed4a1 Fix Clippy 0.1.95 warnings
• b353bbb Prepare release v2.13.5
• 63d2ccc Count validated model fields once in smart unions
• a53ec2e Speed up PyPy CI tests
• d65e0f9 Workaround circular import error in Mypy
• 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
• Additional commits viewable in compare view

Updates cachetools from 7.1.7 to 7.1.8

Changelog

Sourced from cachetools's changelog.

v7.1.8 (2026-08-31)

• Reject negative maxsize in Cache.__init__.

Commits

• 4500e3d Release v7.1.8.
• 6e49bef Update copilot instructions and review.
• defc58b Prepare v7.1.8.
• a39180b Remove somewhat superfluous and slightly incorrect documentation note regardi...
• dd181c5 Reject negative maxsize in Cache.init
• b43b953 Use monthly batches for dependabot updates.
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.