build(deps): bump the python-deps group across 1 directory with 9 updates

[dependabot]

Bumps the python-deps group with 9 updates in the /apps/api directory:

Package	From	To
pydantic-settings	2.14.2	2.15.0
jsonschema-rs	0.49.6	0.49.9
anthropic	0.120.2	0.122.0
globus-sdk	4.8.1	4.9.0
diff-cover	10.4.1	10.5.0
ruff	0.16.1	0.16.3
httpx2	2.9.1	2.10.0
pre-commit	4.6.1	4.6.2
hypothesis	6.165.2	6.165.7

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

• case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
• Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
• Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

• Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
• PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
• toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
• Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
• GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

• Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
• Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
• Fix AliasPath on nested model fields not JSON-decoding env values (#898).
• Fix case-insensitive matching for optional nested models (#905).
• Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
• Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
• Fix Secret subclasses crashing when loaded from the environment (#920).
• Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
• An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
• NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
• GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
• AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

• Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
• Recommend an async settings loading pattern (#908).
• Clarify behavior when an unprefixed value is present in a dotenv file (#895).
• Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

• Update documentation link for Pydantic settings by @​hramezani in pydantic/pydantic-settings#863
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#865
• docs: clarify environment variable helper descriptions by @​vip892766gma in pydantic/pydantic-settings#867
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#870
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#875
• Skip list_secrets call when case_sensitive=True by @​ecerulm in pydantic/pydantic-settings#862
• GoogleSecretManagerSettingsSource: read project_id from previous sources by @​ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

• f725ca1 Prepare release 2.15.0 (#930)
• 28f35c2 Bump the python-packages group with 4 updates (#929)
• 9056db0 test: move function-local imports to the top of test modules (#927)
• f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
• ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
• 798dcea Bump the python-packages group with 4 updates (#924)
• a190041 Bump the github-actions group with 4 updates (#925)
• 5d93332 Bump the python-packages group with 4 updates (#921)
• d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
• 2256a4e Bump the python-packages group with 3 updates (#915)
• Additional commits viewable in compare view

Updates jsonschema-rs from 0.49.6 to 0.49.9

Release notes

Sourced from jsonschema-rs's releases.

[Python] Release 0.49.9

Added

• Canonicalization of a oneOf whose branches name object targets a required constant tells apart, which degrades to a union.

Changed

• CanonicalSchema.to_json_schema on a definition emits only the definitions that one names, not the whole document's.

Fixed

• Canonicalization running without end on a conjunction over unions; past a ceiling on the meets it takes, the document stays unmodeled.

[Ruby] Release 0.49.9

Added

• Canonicalization of a oneOf whose branches name object targets a required constant tells apart, which degrades to a union.

Changed

• CanonicalSchema#to_json_schema on a definition emits only the definitions that one names, not the whole document's.

Fixed

• Canonicalization running without end on a conjunction over unions; past a ceiling on the meets it takes, the document stays unmodeled.

[Rust] Release 0.49.9

Added

• Canonicalization of a oneOf whose branches name object targets a required constant tells apart, which degrades to a union.

Changed

• CanonicalSchema::to_json_schema on a definition emits only the definitions that one names, not the whole document's.

Fixed

• Canonicalization running without end on a conjunction over unions; past a ceiling on the meets it takes, the document stays unmodeled.

[Python] Release 0.49.8

Performance

• Up to 380x faster canonicalization of a oneOf whose overlapping branches carry many properties, which no longer removes shared regions the exactly-one spelling discards.

Fixed

• Draft detection treating the version-less http://json-schema.org/schema meta-schema URI as a custom dialect, where it names the current draft.
• A patternProperties entry matching every key leaving additionalProperties: false spelled as a key constraint, where it forbids nothing.

[Ruby] Release 0.49.8

... (truncated)

Changelog

Sourced from jsonschema-rs's changelog.

[0.49.9] - 2026-08-09

Added

• Canonicalization of a oneOf whose branches name object targets a required constant tells apart, which degrades to a union.

Changed

• CanonicalSchema::to_json_schema on a definition emits only the definitions that one names, not the whole document's.

Fixed

• Canonicalization running without end on a conjunction over unions; past a ceiling on the meets it takes, the document stays unmodeled.

[0.49.8] - 2026-08-08

Performance

• Up to 380x faster canonicalization of a oneOf whose overlapping branches carry many properties, which no longer removes shared regions the exactly-one spelling discards.

Fixed

• Draft detection treating the version-less http://json-schema.org/schema meta-schema URI as a custom dialect, where it names the current draft.
• A patternProperties entry matching every key leaving additionalProperties: false spelled as a key constraint, where it forbids nothing.
• unevaluatedProperties/unevaluatedItems set to true forcing the whole document to stay unmodeled beside an unresolved applicator, where the keyword rejects nothing regardless of the evaluated set.
• unevaluatedProperties/unevaluatedItems beside a $ref forcing the whole document to stay unmodeled, where the reference's own evaluated properties or items are known once it is resolved.

[0.49.7] - 2026-08-07

Added

• CanonicalizeOptions::with_retriever to fetch external resources absent from the registry.
• CanonicalizeOptions::with_base_uri to resolve relative references in the root schema.
• Canonicalization of a oneOf whose branches name disjoint targets, which degrades to a union.
• Canonicalization of a vacuous patternProperties entry beside schema-valued additionalProperties, where matching keys escape its value constraint.
• Canonicalization of a Draft 4 closed pattern map with a reference nested under a property.
• Canonicalization of Draft 4 closed pattern maps that meet through an applicator.
• The complement of a reference back to a target already being negated, which stays symbolic instead of declining.
• CanonicalSchema::definition resolving # to the document the handle was read against.

Performance

• Up to 150x faster canonicalization of not over a union of many branches.
• 2% faster emission of canonical schemas, which no longer formats copied string values.
• 5% faster emission of canonical schemas, which no longer formats object keys while copying them.
• Up to 12% faster canonicalization of schemas that repeatedly intersect the same branches.
• 13% faster canonicalization of a non-dynamic OpenAPI document, which no longer scans every schema object for dynamic references.
• Faster canonicalization of schemas with local $defs references, which avoid decoding unescaped definition names.
• 23% faster canonicalization of an object whose keys a finite property-name set spells.
• 3% faster intersection of schemas where one side constrains nothing.

... (truncated)

Commits

• 07484f9 chore(ruby): Release 0.49.9
• 4aba49f chore(python): Release 0.49.9
• 4ad1722 chore(rust): Release 0.49.9
• 0f114ee fix: Canonicalization running without end on a conjunction over unions; past ...
• 8d4d60c chore: CanonicalSchema::to_json_schema on a definition emits only the defin...
• bed4553 feat: Canonicalization of a oneOf whose branches name object targets a requ...
• 0c310f4 chore(ruby): Release 0.49.8
• bd6836d chore(python): Release 0.49.8
• 71de156 chore(rust): Release 0.49.8
• a90819b feat: Extend support for unevaluated* keywords in canonicalization
• Additional commits viewable in compare view

Updates anthropic from 0.120.2 to 0.122.0

Release notes

Sourced from anthropic's releases.

v0.122.0

0.122.0 (2026-08-13)

Full Changelog: v0.121.0...v0.122.0

Features

• api: add output_behavior to dream creation (create a new memory store or update the input store in place) (852c4bb)

Bug Fixes

• bedrock,aws: run SigV4 signing off the event loop in async clients (#334) (2bae6c8)
• bedrock: expose beta.messages.parse, stream and tool_runner (#366) (6eca7bb)
• client: add models (52e9d94)
• client: keep token exchange bound per client across copy() (#388) (c13e6e3)
• client: read PathLike contents passed inside a file tuple (070f953)
• client: treat empty ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN as unset (#341) (76a2e68)
• streaming: add context to malformed tool input JSON errors in the non-beta accumulator (#339) (a343e17)
• streaming: apply all message_delta fields when accumulating streamed messages (#380) (fc1599b)
• streaming: emit input_json events for server tool use blocks (#336) (ccfc8e1)
• streaming: keep omitted content block fields unset in accumulated messages (#346) (cd40aab)
• streaming: run the request transform once in messages.stream() (#347) (81a92da)
• streaming: silence pydantic serializer warnings on message_stop events (#338) (41f9cdc)
• tools: reject symlink loops in tool paths and skip special skill-archive members (#322) (43e8669)
• vertex: expose beta.messages.parse and tool_runner (#367) (96723a0)

Chores

• ci: run breaking-change detection as a ci.yml job on every push (6dfd16e)
• examples: update messages_stream.py shebang from rye to uv (#1519) (7d72364)
• internal: codegen related update (21a0e3d)
• internal: drop remaining references to black (13df390)
• internal: remove misc things (d6ee99e)
• tests: use pytest monkeypatch and fakes instead of unittest.mock (55d246f)
• tests: use pytest monkeypatch instead of unittest.mock (e0c6488)

Documentation

• api: clarify that user profile name is optional for resold profiles (b8f9f61)
• fix fulfillment typos in session runner (#1795) (009b035)
• fix incorrect docstring in AsyncAnthropicFoundry.models (#1592) (f1f5e9b)

Refactors

• use the not_given singleton instead of the legacy NOT_GIVEN alias (eeb4d74)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.122.0 (2026-08-13)

Full Changelog: v0.121.0...v0.122.0

Features

• api: add output_behavior to dream creation (create a new memory store or update the input store in place) (852c4bb)

Bug Fixes

• bedrock,aws: run SigV4 signing off the event loop in async clients (#334) (2bae6c8)
• bedrock: expose beta.messages.parse, stream and tool_runner (#366) (6eca7bb)
• client: add models (52e9d94)
• client: keep token exchange bound per client across copy() (#388) (c13e6e3)
• client: read PathLike contents passed inside a file tuple (070f953)
• client: treat empty ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN as unset (#341) (76a2e68)
• streaming: add context to malformed tool input JSON errors in the non-beta accumulator (#339) (a343e17)
• streaming: apply all message_delta fields when accumulating streamed messages (#380) (fc1599b)
• streaming: emit input_json events for server tool use blocks (#336) (ccfc8e1)
• streaming: keep omitted content block fields unset in accumulated messages (#346) (cd40aab)
• streaming: run the request transform once in messages.stream() (#347) (81a92da)
• streaming: silence pydantic serializer warnings on message_stop events (#338) (41f9cdc)
• tools: reject symlink loops in tool paths and skip special skill-archive members (#322) (43e8669)
• vertex: expose beta.messages.parse and tool_runner (#367) (96723a0)

Chores

• ci: run breaking-change detection as a ci.yml job on every push (6dfd16e)
• examples: update messages_stream.py shebang from rye to uv (#1519) (7d72364)
• internal: codegen related update (21a0e3d)
• internal: drop remaining references to black (13df390)
• internal: remove misc things (d6ee99e)
• tests: use pytest monkeypatch and fakes instead of unittest.mock (55d246f)
• tests: use pytest monkeypatch instead of unittest.mock (e0c6488)

Documentation

• api: clarify that user profile name is optional for resold profiles (b8f9f61)
• fix fulfillment typos in session runner (#1795) (009b035)
• fix incorrect docstring in AsyncAnthropicFoundry.models (#1592) (f1f5e9b)

Refactors

• use the not_given singleton instead of the legacy NOT_GIVEN alias (eeb4d74)

0.121.0 (2026-08-07)

... (truncated)

Commits

• ad53cac release: 0.122.0
• c71b2f5 chore(tests): use pytest monkeypatch instead of unittest.mock
• 932488d chore(internal): drop remaining references to black
• de9fe77 docs(api): clarify that user profile name is optional for resold profiles
• db4581d refactor: use the not_given singleton instead of the legacy NOT_GIVEN alias
• 36cbc3a chore(tests): use pytest monkeypatch and fakes instead of unittest.mock
• 05cdf07 chore(ci): run breaking-change detection as a ci.yml job on every push
• fd3eaa6 fix(client): keep token exchange bound per client across copy() (#388)
• c18fcbf chore(internal): codegen related update
• 57bc2ce fix(streaming): keep omitted content block fields unset in accumulated messag...
• Additional commits viewable in compare view

Updates globus-sdk from 4.8.1 to 4.9.0

Release notes

Sourced from globus-sdk's releases.

4.9.0

Added

• Add Web Input-related methods to the FlowsClient class. (#1410) The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

• Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (#1417)

Changed

• The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (#1414)

Documentation

• Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (#1408)

• Update the URL to the Flows API documentation. (#1409)

Security

• GitHub Actions security is now checked with zizmor (#1402)

Development

• globus-sdk testing now leverages Sphinx doctest to make select examples testable. (#1406)

Changelog

Sourced from globus-sdk's changelog.

v4.9.0 (2026-08-10)

Added

• Add Web Input-related methods to the FlowsClient class. (:pr:1410)

  The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

• Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (:pr:1417)

Changed

• The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (:pr:1414)

Documentation

• Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (:pr:1408)

• Update the URL to the Flows API documentation. (:pr:1409)

Security

• GitHub Actions security is now checked with zizmor <https://zizmor.sh>_ (:pr:1402)

Development

• globus-sdk testing now leverages Sphinx doctest to make select examples testable. (:pr:1406)

.. _changelog-4.8.1:

Commits

• 68229cc Release v4.9.0 (#1418)
• 4872dc3 (actions) update PR references
• 227c770 Update the auth management example scripts (#1417)
• 3e5a748 Update the create-and-run-flow example scripts (#1416)
• 3f45ff2 Inline FlowsClient construction in examples
• 7b08829 Update the auth management example scripts
• 6736880 Update the create-and-run-flow example scripts
• a3aed17 Introduce GlobusApp.logout(sweep=True) (#1415)
• 297d710 Introduce GlobusApp.logout(sweep=True)
• b5142ae (actions) update PR references
• Additional commits viewable in compare view

Updates diff-cover from 10.4.1 to 10.5.0

Release notes

Sourced from diff-cover's releases.

Version 10.5.0

What's Changed

• Support PHPUnit clover reports (silently reported as zero coverage) by @​Eljees in Bachmann1234/diff_cover#617

New Contributors

• @​Eljees made their first contribution in Bachmann1234/diff_cover#617

Full Changelog: Bachmann1234/diff_cover@v10.4.2...v10.5.0

Version 10.4.2

What's Changed

• fix(config): honor format option from config file by @​Sanjays2402 in Bachmann1234/diff_cover#612
• fix(plugins): accept reports/options in diff_cover_report_quality hookspec by @​Sanjays2402 in Bachmann1234/diff_cover#613

New Contributors

• @​Sanjays2402 made their first contribution in Bachmann1234/diff_cover#612

Dependencies

• Bump github/codeql-action from 4 to 4.37.3 by @​dependabot[bot] in Bachmann1234/diff_cover#616
• Bump ruff from 0.15.20 to 0.16.0 by @​dependabot[bot] in Bachmann1234/diff_cover#615
• Bump actions/setup-python from 6 to 7 by @​dependabot[bot] in Bachmann1234/diff_cover#614

Full Changelog: Bachmann1234/diff_cover@v10.4.1...v10.4.2

Changelog

Sourced from diff-cover's changelog.

8/16/2026 v10.5.1

• Improve performance by indexing clover files PR 618 Thanks @​Eljees
• Fixes unclear error when git is not on path PR 620 Thanks @​Eljees

8/08/2026 v10.5.0

• Support PHPUnit clover reports PR 617 Thanks @​Eljees

8/06/2026 v10.4.2

• Honor format option from config file- PR 612 Thanks @​Sanjays2402

• Accept reports/options in diff_cover_report_quality hookspec- PR 613 Thanks @​Sanjays2402

7/23/2026 v10.4.1

• Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 PR 611 (bachmann1234)

7/21/2026 v10.4.0

• Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @​mofr

05/30/2026 v10.3.0

• Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @​duxiaocheng

• Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

• Fix --help hiding most CLI options in diff-cover/diff-quality PR 599 Thanks @​duxiaocheng

01/08/2026 v10.2.0

• Fixes issue where diff quality could not be run from subfolders PR 574 Issue 573 Thanks @​eacherkan-via

12/30/2025 v10.1.0

• Add support for floating-point total percentage in reports PR 565 thanks @​tilaven

12/09/2025 v10.0.0

• Remove python 3.9 support
• Add python 3.14 support
• Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

... (truncated)

Commits

• e34eec3 Version 10.5.0
• 5fc9e82 Support PHPUnit clover reports (silently reported as zero coverage) (#617)
• f6a43b7 Version 10.4.2
• 3fdbf40 fix(plugins): accept reports/options in diff_cover_report_quality hookspec (#...
• 4c44508 fix(config): honor format option from config file (#612)
• b490adc Bump actions/setup-python from 6 to 7 (#614)
• 19da277 Bump ruff from 0.15.20 to 0.16.0 (#615)
• 8f80569 Bump github/codeql-action from 4 to 4.37.3 (#616)
• See full diff in compare view

Updates ruff from 0.16.1 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc

... (truncated)

Commits

• b0e4702 Bump 0.16.3 (#27723)
• ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
• 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
• 59196ba [ty] Unify polarity-aware relation construction (#27707)
• b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
• 2b0d210 [ty] Centralize matched argument relations (#27705)
• a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
• c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
• 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
• 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
• Additional commits viewable in compare view

Updates httpx2 from 2.9.1 to 2.10.0

Release notes

Sourced from httpx2's releases.

v2.10.0

Highlights

🚀 Performance and memory improvements

• Sending large HTTP/2 request bodies no longer copies the body quadratically - sending a 256 MiB body went from ~36s to under 0.1s (pydantic/httpx2#1127).
• SSE parsing is up to 35x faster on highly fragmented streams (pydantic/httpx2#1117).
• Cookie extraction is now skipped for responses without a Set-Cookie header, making typical requests roughly 8% faster (pydantic/httpx2#1107).

🕸️ WebAssembly / Emscripten support

httpx2 now runs on Pyodide / Emscripten, using a JavaScript fetch-based transport defined in httpx2-jsfetch (pydantic/httpx2#1119, pydantic/httpx2#1114). Thanks @​hoodmane!

httpx2

Added

• Add support for running on WebAssembly / Emscripten via Pyodide by @​hoodmane in pydantic/httpx2#1119
• Add max_event_size to cap SSE event buffering by @​Kludex in pydantic/httpx2#1071
• Add RFC 9110 status code constants by @​mbeijen in pydantic/httpx2#1069
• Add support for Python 3.15 by @​hugovk in pydantic/httpx2#1090

Changed

• Improve SSE chunk buffering performance by @​Kludex in pydantic/httpx2#1117
• Skip cookie extraction without ...

  Description has been truncated

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.