Bump the python-dependencies group across 1 directory with 21 updates#26
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the python-dependencies group across 1 directory with 21 updates#26dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the python-dependencies group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.13.0` | | [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.5.20` | | [click](https://github.com/pallets/click) | `8.3.1` | `8.4.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.135.1` | `0.136.3` | | [httptools](https://github.com/MagicStack/httptools) | `0.7.1` | `0.8.0` | | [idna](https://github.com/kjd/idna) | `3.11` | `3.16` | | [importlib-resources](https://github.com/python/importlib_resources) | `6.5.2` | `7.1.0` | | [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` | | [paramiko](https://github.com/paramiko/paramiko) | `4.0.0` | `5.0.0` | | [pillow](https://github.com/python-pillow/Pillow) | `12.1.1` | `12.2.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` | | [pydantic-core](https://github.com/pydantic/pydantic) | `2.42.0` | `2.47.0` | | [pygments](https://github.com/pygments/pygments) | `2.19.2` | `2.20.0` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.29` | | [rich](https://github.com/Textualize/rich) | `14.3.3` | `15.0.0` | | rich-toolkit | `0.19.7` | `0.19.10` | | [setuptools](https://github.com/pypa/setuptools) | `82.0.0` | `82.0.1` | | [starlette](https://github.com/Kludex/starlette) | `0.52.1` | `1.1.0` | | [typer](https://github.com/fastapi/typer) | `0.24.1` | `0.25.1` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.48.0` | | [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.1` | `1.2.0` | Updates `anyio` from 4.12.1 to 4.13.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.12.1...4.13.0) Updates `certifi` from 2026.2.25 to 2026.5.20 - [Commits](certifi/python-certifi@2026.02.25...2026.05.20) Updates `click` from 8.3.1 to 8.4.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.1...8.4.1) Updates `fastapi` from 0.135.1 to 0.136.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.135.1...0.136.3) Updates `httptools` from 0.7.1 to 0.8.0 - [Release notes](https://github.com/MagicStack/httptools/releases) - [Commits](MagicStack/httptools@v0.7.1...v0.8.0) Updates `idna` from 3.11 to 3.16 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](kjd/idna@v3.11...v3.16) Updates `importlib-resources` from 6.5.2 to 7.1.0 - [Release notes](https://github.com/python/importlib_resources/releases) - [Changelog](https://github.com/python/importlib_resources/blob/main/NEWS.rst) - [Commits](python/importlib_resources@v6.5.2...v7.1.0) Updates `markdown-it-py` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/executablebooks/markdown-it-py/releases) - [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md) - [Commits](executablebooks/markdown-it-py@v4.0.0...v4.2.0) Updates `paramiko` from 4.0.0 to 5.0.0 - [Commits](paramiko/paramiko@4.0.0...5.0.0) Updates `pillow` from 12.1.1 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) Updates `pydantic` from 2.12.5 to 2.13.4 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.4) Updates `pydantic-core` from 2.42.0 to 2.47.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/commits) Updates `pygments` from 2.19.2 to 2.20.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.19.2...2.20.0) Updates `python-multipart` from 0.0.22 to 0.0.29 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.22...0.0.29) Updates `rich` from 14.3.3 to 15.0.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.3...v15.0.0) Updates `rich-toolkit` from 0.19.7 to 0.19.10 Updates `setuptools` from 82.0.0 to 82.0.1 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v82.0.0...v82.0.1) Updates `starlette` from 0.52.1 to 1.1.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.52.1...1.1.0) Updates `typer` from 0.24.1 to 0.25.1 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.24.1...0.25.1) Updates `uvicorn` from 0.41.0 to 0.48.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.41.0...0.48.0) Updates `watchfiles` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/samuelcolvin/watchfiles/releases) - [Commits](samuelcolvin/watchfiles@v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: certifi dependency-version: 2026.5.20 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: httptools dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: idna dependency-version: '3.16' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: importlib-resources dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: markdown-it-py dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: paramiko dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pydantic-core dependency-version: 2.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pygments dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: python-multipart dependency-version: 0.0.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: rich-toolkit dependency-version: 0.19.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: setuptools dependency-version: 82.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: starlette dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: typer dependency-version: 0.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: uvicorn dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: watchfiles dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-dependencies group with 21 updates in the / directory:
4.12.14.13.02026.2.252026.5.208.3.18.4.10.135.10.136.30.7.10.8.03.113.166.5.27.1.04.0.04.2.04.0.05.0.012.1.112.2.02.12.52.13.42.42.02.47.02.19.22.20.00.0.220.0.2914.3.315.0.00.19.70.19.1082.0.082.0.10.52.11.1.00.24.10.25.10.41.00.48.01.1.11.2.0Updates
anyiofrom 4.12.1 to 4.13.0Release notes
Sourced from anyio's releases.
Commits
afbe93cBumped up the version33bdf2eRearranged the changelog entries19e09e2Fixed inverted condition in _forcibly_shutdown_process_pool_on_exit (#1074)9369d80Fixed Condition.wait() not handing over notification when cancelled6f122abFixed cancellation exceptions leaking from aCancelScopeon asyncio when th...beaa45a[pre-commit.ci] pre-commit autoupdate (#1097)602f660Widened type annotations to accept IO[bytes] in file streamsb5dcd45Added note about erasing the templated68670b[pre-commit.ci] pre-commit autoupdate (#1090)fc17a22tweak to_thread docs about abandon_on_cancel (#1088)Updates
certififrom 2026.2.25 to 2026.5.20Commits
d7ea1512026.05.20 (#413)5dddfb02026.04.22 (#410)f99eccdBump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#404)918bed0Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#405)0a49067Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#403)acf6ce8Bump actions/download-artifact from 8.0.0 to 8.0.1 (#398)feb0ed2Bump actions/download-artifact from 7.0.0 to 8.0.0 (#397)d9c11a5Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#396)Updates
clickfrom 8.3.1 to 8.4.1Release notes
Sourced from click's releases.
... (truncated)
Changelog
Sourced from click's changelog.
... (truncated)
Commits
6eeb50erelease version 8.4.167921d5change log and doc fixes (#3495)9c41f46Fix changelog and version admonitions6cb3477fix skip condition5ee8e31fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)becbde5pager doesn't close std streamsa5f5aa6Handle empty bytes in echo (#3493)4d3db84handle empty bytes in echod42f15bFixget_parameter_source()during type conversion and eager callbacks (#3484)0baa8dbDocument ctx.params bypass with test and docUpdates
fastapifrom 0.135.1 to 0.136.3Release notes
Sourced from fastapi's releases.
... (truncated)
Commits
8206485🔖 Release version 0.136.3c910e01📝 Update release notes063b5bf♻️ Do not accept underscore headers when usingconvert_underscores=True(th...22b02e2🔖 Release version 0.136.23b252a2📝 Update release notesc7fb785♻️ Validate Server Sent Event fields to avoid applications from sending broke...cb83b83📝 Update release notes00f805c✅ Update tests, don't double dispose the engine (#15587)3675137📝 Update release notes7b57e42📝 Document--entrypointCLI option (#15464)Updates
httptoolsfrom 0.7.1 to 0.8.0Release notes
Sourced from httptools's releases.
Commits
cf10ce6httptools 0.8.0a0283f0security: fix URL truncation issue (#144)05e6b8eci: add freethreading 3.14 to the CI matrix (#146)e3e8d71Bump llhttp to 9.4.1 (#145)a9bda0eFix all typing issues (#134)28d1db1mark cython module as free-threading compatible (#139)c403ad1Allow building with latest setuptools (#138)c398a15Add http-parser and llhttp licenses into the wheels (#135)4cfdabdci: fix release workflow (#132)ef71da9Post-release version bumpUpdates
idnafrom 3.11 to 3.16Changelog
Sourced from idna's changelog.
... (truncated)
Commits
6d1a0deRelease 3.164e6cbe2Demote installation instruction to usage section223533cMerge branch 'readme-simplification' into release-3.16b1640b2Bump version to 3.16rc03a86113Update history for 3.16 released4bc9e7Merge pull request #246 from kjd/python-3.9a21d9fcUpdate deprecation policyb464926Raise minimum Python to 3.9 and modernize typing7f3b15eExplicit example not needed7530c70Remove unnecessary print()Updates
importlib-resourcesfrom 6.5.2 to 7.1.0Changelog
Sourced from importlib-resources's changelog.
Commits
78c697dFinalize5a2bffcA better error message from importlib.resources.files() when module spec is Noned80822aAdd news fragment.6e2183fRevise the test for clarity and traceability.ee94f7cMerge branch 'main' into error-message-none-spec-modulea542188Extract method to encapsulate the validation.74f308aRevert unrelated change towrap_spec.c6773a1Prefer bare asserts. They read better and they render nicer under pytest.935b189Replace UTF-16 BOM handling with a more direct helper.4049971FinalizeUpdates
markdown-it-pyfrom 4.0.0 to 4.2.0Release notes
Sourced from markdown-it-py's releases.
Changelog
Sourced from markdown-it-py's changelog.
Commits
36c5f54🚀 RELEASE v4.2.0 (#395)96cf077✨ Addmake_fence_rule()factory for configurable fence markers (#394)3b4ff6d🚀 RELEASE v4.1.0 (#393)8951f26🔧 Update pre-commit hooks (#392)693bb24✨ Addgfm-like2preset with task lists, alerts, and single-tilde strikethro...df6fd36✨Allow plugins to register inline terminator characters (#391)d4ea0ca👌 Fix quadratic complexity infragments_join/text_join(#389)8933147🔧 Add typing to Scanner (#382)2f6ae10🔧 Add AGENTS.md and copilot-setup-steps workflow (#380)49043e4Add --stdin option to CLI for reading Markdown from standard input (#379)Updates
paramikofrom 4.0.0 to 5.0.0Commits
710cc5cWhat's a few weeks between friends?ea93c59Fix up Ed25519Key so it has non-erroring repr() during fatal errors5b90ef9ruff/isortf3864b6Changelog fixesacd4bc1Replace hardcoded PEM format in PKey.write* with new parameter6fa1556Bump group-exchange kex min_bits to 2048eb87ad3Fix some tests that were incorrectly passing1ecc933Remove GSSAPI support :(9bf5fcaRemove SHA1-based (non-GSS) kex methodsb8f75c7Lintin' ain't easyUpdates
pillowfrom 12.1.1 to 12.2.0Release notes
Sourced from pillow's releases.
... (truncated)
Commits
3c41c0912.2.0 version bumpcdaa29eCheck calloc return value (#9527)585b2f5Check calloc return valueecf011eCheck all allocs in the Arrow tree (#9488)cf6de8cReject non-numeric elements inside list coords (#9526)ffdcedeUpdate 12.2.0 release notes (#9522)7929d77Added security release notes (#149)c4f7aa5Added security release notes22cdb5fMove variable declaration inside define (#9525)fc15b3bResize tall images vertically first (#9524)Updates
pydanticfrom 2.12.5 to 2.13.4Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.