Skip to content

chore(deps): weekly safe pypi updates · 3 packages#155

Open
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-pypi-20260608
Open

chore(deps): weekly safe pypi updates · 3 packages#155
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-pypi-20260608

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Packages bumped

Package Old constraint New constraint Type
websockets <16.0.0 <17.0.0 runtime
asgi-correlation-id >=4.3.4,<5.0.0 >=4.3.4 dev
llama-index-llms-mistralai >=0.4.0,<0.10.0 >=0.4.0,<0.11.0 optional (llamaindex)
Per-package detail

websockets (<16.0.0<17.0.0)

  • Latest unblocked: 16.0.0 (released 2026-01-10, 149 days old)
  • Changelog highlights: Python 3.10+ required (already our minimum), improved message/fragment size handling, HTTP/1.0 proxy support. No public API breaking changes.
  • Impact: Used in src/blaxel/core/mcp/client.py and server.py via websockets.asyncio.client.connect and websockets.asyncio.server.serve. These APIs are unchanged in v16.

asgi-correlation-id (>=4.3.4,<5.0.0>=4.3.4)

  • Latest unblocked: 5.0.0 (released 2026-05-31, 8 days old)
  • Changelog highlights: Python 3.10+ required, Celery extension removed, UUID validator loosened.
  • Impact: Not imported or used anywhere in this codebase — purely a declared dev dependency. No code touches this package.

llama-index-llms-mistralai (>=0.4.0,<0.10.0>=0.4.0,<0.11.0)

  • Latest unblocked: 0.10.2 (released 2026-05-04, 35 days old)
  • Changelog highlights: Python 3.10+ required, mistralai SDK bumped to >=1.12.1, added Azure AI Foundry support, improved reasoning model streaming.
  • Impact: Used in src/blaxel/llamaindex/model.py via MistralAI(model=..., api_key=..., endpoint=..., **kwargs). This constructor interface is unchanged in 0.10.x.

Files modified

  • pyproject.toml
Skipped this ecosystem
Package Reason
openapi-python-client (==0.25.3 → 0.29.0) Exact-pinned code generation tool; upgrading requires full client regeneration with different output (union syntax, path encoding, date handling changes). Separate risky PR needed.
ruff (>=0.8.2) Constraint already allows latest; no upper bound to relax.
fastapi (>=0.115.12) Constraint already allows latest; no upper bound to relax.
pytest (>=8.0.0) Constraint already allows latest; no upper bound to relax.
pytest-asyncio (>=0.24.0) Constraint already allows latest; no upper bound to relax.
mcp (>=1.9.4) Constraint already allows latest; no upper bound to relax.

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

- websockets: relax <16.0.0 → <17.0.0
- asgi-correlation-id: remove <5.0.0 upper bound
- llama-index-llms-mistralai: relax <0.10.0 → <0.11.0
@mendral-app mendral-app Bot requested a review from a team June 8, 2026 09:13
@mendral-app mendral-app Bot marked this pull request as ready for review June 8, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants