chore(deps-dev): bump the python-dependencies group across 1 directory with 10 updates#852
Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
Open
Conversation
…y with 10 updates Updates the requirements on [uvicorn](https://github.com/Kludex/uvicorn), [boto3](https://github.com/boto/boto3), [pypdf](https://github.com/py-pdf/pypdf), [langchain](https://github.com/langchain-ai/langchain), [langchain-core](https://github.com/langchain-ai/langchain), [langchain-openai](https://github.com/langchain-ai/langchain), [cachetools](https://github.com/tkem/cachetools), [moto[proxy]](https://github.com/getmoto/moto), [pyjwt](https://github.com/jpadilla/pyjwt) and [black](https://github.com/psf/black) to permit the latest version. Updates `uvicorn` to 0.42.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.31.1...0.42.0) Updates `boto3` from 1.42.59 to 1.42.69 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.59...1.42.69) Updates `pypdf` from 6.7.5 to 6.9.0 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.7.5...6.9.0) Updates `langchain` from 1.2.10 to 1.2.12 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.2.10...langchain==1.2.12) Updates `langchain-core` from 1.2.17 to 1.2.19 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.2.17...langchain-core==1.2.19) Updates `langchain-openai` from 1.1.10 to 1.1.11 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.1.10...langchain-openai==1.1.11) Updates `cachetools` from 7.0.2 to 7.0.5 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.0.2...v7.0.5) Updates `moto[proxy]` from 5.1.21 to 5.1.22 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.1.21...5.1.22) Updates `pyjwt` from 2.11.0 to 2.12.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.11.0...2.12.1) Updates `black` from 26.1.0 to 26.3.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.1.0...26.3.1) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.42.0 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: boto3 dependency-version: 1.42.69 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pypdf dependency-version: 6.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: langchain dependency-version: 1.2.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: langchain-core dependency-version: 1.2.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: langchain-openai dependency-version: 1.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: cachetools dependency-version: 7.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: moto[proxy] dependency-version: 5.1.22 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pyjwt dependency-version: 2.12.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on uvicorn, boto3, pypdf, langchain, langchain-core, langchain-openai, cachetools, moto[proxy], pyjwt and black to permit the latest version.
Updates
uvicornto 0.42.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
... (truncated)
Commits
02bed6fVersion 0.42.0 (#2852)d8f2501chore: pre-create Config objects in benchmarks to measure protocol hot paths ...9dbb783Add WebSocket protocol benchmarks for wsproto and websockets-sansio (#2849)b3c69daUse bytearray for request body accumulation (#2845)3f3ebeeDisablepytest-xdistfor CodSpeed benchmark runs (#2847)d072de7Add fragmented body benchmark for chunked body accumulation (#2846)e300c2cAdd CodSpeed benchmark suite for HTTP protocol hot paths (#2844)1fa6976Escape brackets and backslash in httptools HEADER_RE regex (#2824)59ec1deFix multiple issues in websockets sansio implementation (#2825)2fc0efcClarify Windows asyncio event loop selection in docs (#2843)Updates
boto3from 1.42.59 to 1.42.69Commits
3f60ae5Merge branch 'release-1.42.69'e1a1595Bumping version to 1.42.691eb051cAdd changelog entries from botocorefbfa858Bump github/codeql-action from 4.32.1 to 4.33.0 (#4735)6b10acdMerge branch 'release-1.42.68'4b02b3cMerge branch 'release-1.42.68' into develop0b7dcefBumping version to 1.42.685754b6fAdd changelog entries from botocoreb1ff6b0Merge branch 'release-1.42.67'd62e89bMerge branch 'release-1.42.67' into developUpdates
pypdffrom 6.7.5 to 6.9.0Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
8f1f4aaREL: 6.9.05a9a0daBUG: Avoid sharing array-based content streams between pages (#3681)a3451e8ENH: Expose /Perms verification result on Encryption object (#3672)3a4e913PI: Fix O(n²) performance in NameObject read/write (#3679)cf2e518PI: Batch-parse all objects in ObjStm on first access (#3677)2cfcd7eBUG: Avoid accessing invalid page when inserting blank page under some condit...a869eceREL: 6.8.03c550b3SEC: Limit allowed/Lengthvalue of stream (#3675)5dae0e2MAINT: Document and test XMP security (#3674)b9f66abDEV: Change toloadfilestrategy for PyPy in CI (#3671)Updates
langchainfrom 1.2.10 to 1.2.12Release notes
Sourced from langchain's releases.
Commits
2a137bfrelease(langchain_v1): 1.2.12 (#35770)25f94eefeat: tracing for wrap model + tool call (#35765)f9dbd22fix(openai): typo (#35763)70cd1bdci: allow bot bypass (#35762)3e4c0d5chore(model-profiles): refresh model profile data (#35754)7cef35bchore: add reference docs MCP (#35737)057c484release(langchain_v1): 1.2.11 (#35723)cb50fedci: bypass issue-link gate for trusted contributors (#35720)292d0bddocs(huggingface): add [full] install guidance and sentence-transformers>=5.2...3e459beci: use app token for external PR label to trigger downstream workflows (#35710)Updates
langchain-corefrom 1.2.17 to 1.2.19Release notes
Sourced from langchain-core's releases.
Commits
41cca20release(core): 1.2.19 (#35832)307cdcachore(core): move BaseCrossEncoder to langchain-core (#35809)cee6430refactor(xai): remove redundantlc_attributesoverride (#35791)6b9b4c6feat(xai): supportbase_urlalias andXAI_API_BASEenv var (#35790)b676167fix(deepseek): acceptbase_urlas alias forapi_base(#35789)5d9568bfeat(model-profiles): new fields +Makefiletarget (#35788)1891d41chore: bump tornado from 6.5.2 to 6.5.5 in /libs/text-splitters (#35774)1d954bcchore: bump tornado from 6.5.2 to 6.5.5 in /libs/langchain (#35773)261b1d5chore: bump tornado from 6.5.2 to 6.5.5 in /libs/core (#35775)9521c67fix(openai): close PIL Image handles in token counting to prevent fd leak (#3...Updates
langchain-openaifrom 1.1.10 to 1.1.11Release notes
Sourced from langchain-openai's releases.
Commits
fcca6e2fix(openai): bump min core version (#35705)6b25cafrelease(core): 1.2.18 (#35704)6371450release(openai): 1.1.11 (#35703)ee64597ci: auto-reopen external PRs after issue link requirement is satisfied (#35699)1a39508ci: update PR template (#35698)5b1b37eci: auto-close external PRs failingissue-linkcheck (#35697)de5d68cci: require PR author is assigned to linked issue (#35692)225bb5bci(infra): require issue link for external PRs (#35690)360e016ci: add contributor tier labels, PR size labels, and backfill job (#35687)527fc02chore(model-profiles): refresh model profile data (#35681)Updates
cachetoolsfrom 7.0.2 to 7.0.5Changelog
Sourced from cachetools's changelog.
Commits
5dce86fRelease v7.0.5.af5e688Minor@cachedmethodperformance improvements.0ca75e6Relase v7.0.4.5b1fa39Prepare v7.0.4.18e5930Fix #218: Fix and properly document@cachedmethod.cache_key handling.98ec79fDrop "class method" from@cachedmethoddocstring.93822a3Release v7.0.3.57d2e48Fix #387: Handle obj=None case for inspection in _DescriptorBase.Updates
moto[proxy]from 5.1.21 to 5.1.22Changelog
Sourced from moto[proxy]'s changelog.
Commits
28d5ca8Pre-Release: Up Version Numberf58dc18Prep release 5.1.22 (#9824)84cbb40chore: update SSM default parameters (#9828)2f32dc1chore: update EC2 Instance Types (#9827)2a1c7cachore: update EC2 Instance Offerings (#9826)e063c5achore: update EMR Instance Types (#9825)681b47aAPI Gateway: implement DeleteModel operation (#9823)d652e4aSTS: implement GetAccessKeyInfo operation (#9822)40a6520Implement AthenaTagResourceandUntagResource(#9796)dc425e8Modernize Java tests (#9817)Updates
pyjwtfrom 2.11.0 to 2.12.1Release notes
Sourced from pyjwt's releases.
Changelog
Sourced from pyjwt's changelog.
Commits
a4e1a3dAdd typing_extensions dependency for Python < 3.11 (#1151)bd9700cUse PyJWK algorithm when encoding without explicit algorithm (#1148)051ea34Merge commit from fork1451d70fix: do not store reference to algorithms dict on PyJWK (#1143)f3ba74c[pre-commit.ci] pre-commit autoupdate (#1145)0318ffa[pre-commit.ci] pre-commit autoupdate (#1141)a52753dBump actions/download-artifact from 7 to 8 (#1142)b85050fchore(tests): enable mypy (#1138)1272b26[pre-commit.ci] pre-commit autoupdate (#1135)99a8728chore: remove superfluous constants (#1136)Updates
blackfrom 26.1.0 to 26.3.1Release notes
Sourced from black's releases.
... (truncated)
Changelog
Sourced from black's changelog.
... (truncated)
Commits
c6755bbPrepare release 26.3.1 (#5046)69973fdHarden blackd browser-facing request handling (#5039)4937fe6Fix some shenanigans with the cache file and IPython (#5038)2e641d1docs: remove outdated Black Playground references (#5044)c014b22Remove unused internal code (#5041)0dae20bAdd new changelog (#5036)c5c1cbdMinor release patches (#5035)7e5a828docs: clarify relationship between Black style and PEP 8 (#5025)69705dedocs: add clearer pyproject configuration guidance (#5026)35ea679Prepare release 26.3.0 (#5032)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions