Bump the pip-all group with 7 updates#376
Merged
Merged
Conversation
Bumps the pip-all group with 7 updates: | Package | From | To | | --- | --- | --- | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.46.0` | `0.47.0` | | [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` | | [langchain](https://github.com/langchain-ai/langchain) | `1.2.18` | `1.3.1` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.3.3` | `1.4.0` | | [resvg-py](https://github.com/baseplate-admin/resvg-py) | `0.3.1` | `0.3.2` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.27` | `0.0.28` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.12` | `0.15.13` | Updates `uvicorn` from 0.46.0 to 0.47.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.46.0...0.47.0) Updates `requests` from 2.33.1 to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.33.1...v2.34.2) Updates `langchain` from 1.2.18 to 1.3.1 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.2.18...langchain==1.3.1) Updates `langchain-core` from 1.3.3 to 1.4.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.3.3...langchain-core==1.4.0) Updates `resvg-py` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/baseplate-admin/resvg-py/releases) - [Commits](baseplate-admin/resvg-py@0.3.1...0.3.2) Updates `python-multipart` from 0.0.27 to 0.0.28 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.27...0.0.28) Updates `ruff` from 0.15.12 to 0.15.13 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.12...0.15.13) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: langchain dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: langchain-core dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: resvg-py dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-all - dependency-name: python-multipart dependency-version: 0.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-all - dependency-name: ruff dependency-version: 0.15.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-all ... Signed-off-by: dependabot[bot] <support@github.com>
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the pip-all group with 7 updates:
0.46.00.47.02.33.12.34.21.2.181.3.11.3.31.4.00.3.10.3.20.0.270.0.280.15.120.15.13Updates
uvicornfrom 0.46.0 to 0.47.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
Commits
479a2c0Version 0.47.0 (#2937)89347fdAdd 7-day cooldown for dependency resolution via uv exclude-newer (#2936)767315bDrop unused contents/actions permissions from zizmor workflow (#2935)f25ee43chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)8782666Fix typo indocs/deployment/index.md. (#2932)ad5ff87Treatfd=0as a valid file descriptor with reload/workers (#2927)6761b2cRemove Hugging Face sponsor block from docs (#2923)438f648Surface sponsors on welcome page and sidebar (#2921)10ddc6dAddssl_context_factoryfor customSSLContextconfiguration (#2920)b499bc4Eagerly import the ASGI app in the parent process (#2919)Updates
requestsfrom 2.33.1 to 2.34.2Release notes
Sourced from requests's releases.
... (truncated)
Changelog
Sourced from requests's changelog.
Commits
6e83187v2.34.284d10f0Move Request.headers back to Mapping (#7441)b7b549bv2.34.1e511bc7Fix mutability issues with headers input types (#7431)5691f59Update JsonType containers to read-based collections (#7436)2144213Constrain Response.reason to str (#7437)6404f34Fixprepare_bodystream detection for__getattr__-based file wrappers (#7...0b401c7v2.34.086b378dAlign Session.get parameters with requests.get (#7429)a4f9a59Port bpo-39057 to Requests (#7427)Updates
langchainfrom 1.2.18 to 1.3.1Release notes
Sourced from langchain's releases.
... (truncated)
Commits
b6b769brelease(langchain): 1.3.1 (#37454)36c381bfix(langchain): alias Bedrock providers in summarization token check (#37453)0831e44docs(openai): documentbase_urlenv var fallback chain (#37436)e208f38chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/xai (#37411)a4a2be9chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/qdrant (#37412)f5322d9chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/perplexity (#37413)5d9ac69chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/openrouter (#37414)f42d80cfix(core): preserve chunkadditional_kwargsacross v3 stream assembly (#37435)649d82ffix(core): preserve reasoning blocks alongside tool_call in v3 stream (#37434)9f9a8a7chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/ollama (#37415)Updates
langchain-corefrom 1.3.3 to 1.4.0Release notes
Sourced from langchain-core's releases.
... (truncated)
Commits
70e66a1chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/openrouter (#37352)da380bcchore(infra): merge v1.4 into master (#37350)bbd10fechore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/anthropic (#37343)11bbfb7chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/fireworks (#37339)7fd61d2chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/mistralai (#37338)5c096bbchore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/nomic (#37334)ac47d54chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/chroma (#37333)7e5c570chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/partners/qdrant (#37332)2086b91chore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/core (#37329)407e33achore: bump urllib3 from 2.6.3 to 2.7.0 in /libs/langchain (#37327)Updates
resvg-pyfrom 0.3.1 to 0.3.2Release notes
Sourced from resvg-py's releases.
Commits
cee9438Update Cargo.toml33c6644feat: cache system fontdb to avoid repeated disk I/O (#140)1309ae1chore(deps): lock file maintenance (#138)bbadf9bchore(deps): lock file maintenance (#137)7f23323chore(deps): update astral-sh/setup-uv action to v8 (#136)9ee4ea7chore(deps): lock file maintenance (#135)897f23bchore(deps): lock file maintenance (#134)8fb123cchore(deps): update softprops/action-gh-release action to v3 (#133)1c21802chore(deps): update softprops/action-gh-release action to v2 (#132)8d11e9dchore(deps): update github artifact actions (#131)Updates
python-multipartfrom 0.0.27 to 0.0.28Release notes
Sourced from python-multipart's releases.
Changelog
Sourced from python-multipart's changelog.
Commits
7d8d28bVersion 0.0.28 (#284)b0dd125Cap multipart boundary length at 256 bytes (#282)d1b5739Speed up partial-boundary tail scan viabytes.find(#281)09cb8c3Make the long_boundary benchmark dominated by the patched code path (#280)a6467c9Revert "Switch CodSpeed benchmarks to walltime mode" (#279)9a96900Switch CodSpeed benchmarks to walltime mode (#278)1fc7a62Make benchmark coverage trigger the partial-boundary fallback (#277)03df045Add CodSpeed benchmark suite for parser hot paths (#276)79a7c61Bump the python-packages group with 3 updates (#273)bd29332Bump the github-actions group with 5 updates (#274)Updates
rufffrom 0.15.12 to 0.15.13Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
2afb467Bump 0.15.13 (#25157)3008796[ty] classify TypeVar semantic tokens as type parameters (#24891)79470e3[isort] Avoid constructingglob::Patterns for literal known modules (#25123)2522549Remove shellcheck from prek (#25154)7db7170[ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...bb3dd53[ty] Run full iteration analysis on narrowed typevars (#25143)828cdb7[ty] Isolate file-watching test environment (#25151)89e1d86[ty] Preserve TypedDict keys through dict unpacking (#24523)86f3064[ty] Avoid accessingargs[0]forstatic_assert(#25149)ed819f9[ty] Treat custom enum__new__values as dynamic (#25136)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions