Skip to content

chore(deps): update python dependencies#36

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python-dependencies
Open

chore(deps): update python dependencies#36
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 9, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
PyJWT 2.11.02.12.1 age confidence dependencies minor
cosmic-ray 8.4.38.4.4 age confidence dev patch
fastapi (changelog) 0.128.00.135.1 age confidence dependencies minor
opentelemetry-api 1.39.11.40.0 age confidence dependencies minor
opentelemetry-exporter-otlp 1.39.11.40.0 age confidence dependencies minor
opentelemetry-sdk 1.39.11.40.0 age confidence dependencies minor
pydantic-settings (changelog) 2.12.02.13.1 age confidence dependencies minor
python >=3.11==3.14.3 age confidence dependencies pin
ruff (source, changelog) 0.14.140.15.6 age confidence dev minor
uvicorn (changelog) 0.40.00.41.0 age confidence dependencies minor

Release Notes

jpadilla/pyjwt (PyJWT)

v2.12.1

Compare Source

v2.12.0

Compare Source

Fixed


- Annotate PyJWKSet.keys for pyright by @&#8203;tamird in `#&#8203;1134 <https://github.com/jpadilla/pyjwt/pull/1134>`__
- Close ``HTTPError`` response to prevent ``ResourceWarning`` on Python 3.14 by @&#8203;veeceey in `#&#8203;1133 <https://github.com/jpadilla/pyjwt/pull/1133>`__
- Do not keep ``algorithms`` dict in PyJWK instances by @&#8203;akx in `#&#8203;1143 <https://github.com/jpadilla/pyjwt/pull/1143>`__
- Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @&#8203;dmbs335 in `GHSA-752w-5fwx-jx9f <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f>`__
- Use PyJWK algorithm when encoding without explicit algorithm in `#&#8203;1148 <https://github.com/jpadilla/pyjwt/pull/1148>`__

Added
  • Docs: Add PyJWKClient API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).
fastapi/fastapi (fastapi)

v0.135.1

Compare Source

Fixes
  • 🐛 Fix, avoid yield from a TaskGroup, only as an async context manager, closed in the request async exit stack. PR #​15038 by @​tiangolo.
Docs
Internal

v0.135.0

Compare Source

Features

v0.134.0

Compare Source

Features
  • ✨ Add support for streaming JSON Lines and binary data with yield. PR #​15022 by @​tiangolo.
    • This also upgrades Starlette from >=0.40.0 to >=0.46.0, as it's needed to properly unrwap and re-raise exceptions from exception groups.
    • New docs: Stream JSON Lines.
    • And new docs: Stream Data.
Docs
Internal

v0.133.1

Compare Source

Features
Internal

v0.133.0

Compare Source

v0.132.1

Compare Source

Refactors
Internal

v0.132.0

Compare Source

Breaking Changes
  • 🔒️ Add strict_content_type checking for JSON requests. PR #​14978 by @​tiangolo.
    • Now FastAPI checks, by default, that JSON requests have a Content-Type header with a valid JSON value, like application/json, and rejects requests that don't.
    • If the clients for your app don't send a valid Content-Type header you can disable this with strict_content_type=False.
    • Check the new docs: Strict Content-Type Checking.
Internal

v0.131.0

Compare Source

Breaking Changes

v0.130.0

Compare Source

Features

v0.129.2

Compare Source

Internal

v0.129.1

Compare Source

Fixes
  • ♻️ Fix JSON Schema for bytes, use "contentMediaType": "application/octet-stream" instead of "format": "binary". PR #​14953 by @​tiangolo.
Docs
Translations
Internal

v0.129.0

Compare Source

Breaking Changes
Refactors
Docs
Internal

v0.128.8

Compare Source

Docs
Internal

v0.128.7

Compare Source

Features
Refactors
  • ♻️ Simplify reading files in memory, do it sequentially instead of (fake) parallel. PR #​14884 by @​tiangolo.
Docs
Internal

v0.128.6

Compare Source

Fixes
Translations
Internal

v0.128.5

Compare Source

Refactors
  • ♻️ Refactor and simplify Pydantic v2 (and v1) compatibility internal utils. PR #​14862 by @​tiangolo.
Internal
  • ✅ Add inline snapshot tests for OpenAPI before changes from Pydantic v2. PR #​14864 by @​tiangolo.

v0.128.4

Compare Source

Refactors
  • ♻️ Refactor internals, simplify Pydantic v2/v1 utils, create_model_field, better types for lenient_issubclass. PR #​14860 by @​tiangolo.
  • ♻️ Simplify internals, remove Pydantic v1 only logic, no longer needed. PR #​14857 by @​tiangolo.
  • ♻️ Refactor internals, cleanup unneeded Pydantic v1 specific logic. PR #​14856 by @​tiangolo.
Translations
Internal

v0.128.3

Compare Source

Refactors
  • ♻️ Re-implement on_event in FastAPI for compatibility with the next Starlette, while keeping backwards compatibility. PR #​14851 by @​tiangolo.
Upgrades
  • ⬆️ Upgrade Starlette supported version range to starlette>=0.40.0,<1.0.0. PR #​14853 by @​tiangolo.
Translations
Internal
  • 👷 Run tests with Starlette from git. PR #​14849 by @​tiangolo.
  • 👷 Run tests with lower bound uv sync, upgrade fastapi[all] minimum dependencies: ujson >=5.8.0, orjson >=3.9.3. PR #​14846 by @​tiangolo.

v0.128.2

Compare Source

Features
Fixes
Docs
Translations
Internal

v0.128.1

Compare Source

Features
  • ✨ Add viewport meta tag to improve Swagger UI on mobile devices. PR #​14777 by @​Joab0.
  • 🚸 Improve error message for invalid query parameter type annotations. PR #​14479 by @​retwish.
Fixes
Refactors
Docs
Translations
Internal
open-telemetry/opentelemetry-python (opentelemetry-api)

v1.40.0

Compare Source

  • opentelemetry-sdk: deprecate LoggingHandler in favor of opentelemetry-instrumentation-logging, see opentelemetry-instrumentation-logging documentation
    (#​4919)
  • opentelemetry-sdk: Clarify log processor error handling expectations in documentation
    (#​4915)
  • bump semantic-conventions to v1.40.0
    (#​4941)
  • Add stale PR GitHub Action
    (#​4926)
  • opentelemetry-sdk: Drop unused Jaeger exporter environment variables (exporter removed in 1.22.0)
    (#​4918)
  • opentelemetry-sdk: Clarify timeout units in environment variable documentation
    (#​4906)
  • opentelemetry-exporter-otlp-proto-grpc: Fix re-initialization of gRPC channel on UNAVAILABLE error
    (#​4825)
  • opentelemetry-exporter-prometheus: Fix duplicate HELP/TYPE declarations for metrics with different label sets
    (#​4868)
  • Allow loading all resource detectors by setting OTEL_EXPERIMENTAL_RESOURCE_DETECTORS to *
    (#​4819)
  • opentelemetry-sdk: Fix the type hint of the _metrics_data property to allow None
    (#​4837).
  • Regenerate opentelemetry-proto code with v1.9.0 release
    (#​4840)
  • Add python 3.14 support
    (#​4798)
  • Silence events API warnings for internal users
    (#​4847)
  • opentelemetry-sdk: make it possible to override the default processors in the SDK configurator
    (#​4806)
  • Prevent possible endless recursion from happening in SimpleLogRecordProcessor.on_emit,
    (#​4799) and (#​4867).
  • Implement span start/end metrics
    (#​4880)
  • Add environment variable carriers to API
    (#​4609)
  • Add experimental composable rule based sampler
    (#​4882)
  • Make ConcurrentMultiSpanProcessor fork safe
    (#​4862)
  • opentelemetry-exporter-otlp-proto-http: fix retry logic and error handling for connection failures in trace, metric, and log exporters
    (#​4709)
  • opentelemetry-sdk: avoid RuntimeError during iteration of view instrument match dictionary in MetricReaderStorage.collect()
    (#​4891)
  • Implement experimental TracerConfigurator
    (#​4861)
  • opentelemetry-sdk: Fix instrument creation race condition
    (#​4913)
  • bump semantic-conventions to v1.39.0
    (#​4914)
  • opentelemetry-sdk: automatically generate configuration models using OTel config JSON schema
    (#​4879)
pydantic/pydantic-settings (pydantic-settings)

v2.13.1

Compare Source

v2.13.0

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - "before 6am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dannysauer as a code owner February 9, 2026 05:58
@renovate renovate bot added the dependencies label Feb 9, 2026
@renovate renovate bot enabled auto-merge (squash) February 9, 2026 05:58
@codecov
Copy link

codecov bot commented Feb 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (931443b) to head (4a876db).

Additional details and impacted files
@@            Coverage Diff            @@
##              main       #36   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            9         9           
  Lines          982       982           
  Branches       113       113           
=========================================
  Hits           982       982           
Flag Coverage Δ
unittests 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions
Copy link

github-actions bot commented Feb 9, 2026

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.128.5 chore(deps): update dependency fastapi to v0.128.6 Feb 9, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from f6772f0 to 9fe3fd1 Compare February 9, 2026 18:47
@github-actions
Copy link

github-actions bot commented Feb 9, 2026

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.128.6 chore(deps): update dependency fastapi to v0.128.7 Feb 10, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from 9fe3fd1 to b688577 Compare February 10, 2026 14:38
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.128.7 chore(deps): update python dependencies Feb 10, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from b688577 to e64ba08 Compare February 10, 2026 21:01
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update python dependencies chore(deps): update dependency fastapi to v0.128.7 Feb 11, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from e64ba08 to 1e682c1 Compare February 11, 2026 02:58
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.128.7 chore(deps): update dependency fastapi to v0.128.8 Feb 11, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from 1e682c1 to 027980d Compare February 11, 2026 17:39
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.128.8 chore(deps): update dependency fastapi to v0.129.0 Feb 12, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch from 027980d to b48fc4c Compare February 12, 2026 14:37
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot force-pushed the renovate/python-dependencies branch from b48fc4c to d5d2716 Compare February 15, 2026 13:59
@renovate renovate bot changed the title chore(deps): update dependency fastapi to v0.129.0 chore(deps): update python dependencies Feb 15, 2026
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot force-pushed the renovate/python-dependencies branch from d5d2716 to 9a859db Compare February 17, 2026 01:42
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot force-pushed the renovate/python-dependencies branch from 9a859db to d796be5 Compare February 17, 2026 17:05
@github-actions
Copy link

🐳 Docker image built and pushed: ghcr.io/dannysauer/stampbot:pr-36

@renovate renovate bot force-pushed the renovate/python-dependencies branch 17 times, most recently from ecf6558 to 2909e16 Compare March 1, 2026 21:14
@renovate renovate bot force-pushed the renovate/python-dependencies branch 5 times, most recently from 4a876db to b27e114 Compare March 4, 2026 15:05
@renovate
Copy link
Contributor Author

renovate bot commented Mar 4, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv stampbot-k5xu-svk-py3.14 in /home/ubuntu/.cache/pypoetry/virtualenvs

Because opentelemetry-sdk (1.40.0) depends on opentelemetry-semantic-conventions (0.61b0)
 and opentelemetry-instrumentation-fastapi (0.60b1) depends on opentelemetry-semantic-conventions (0.60b1), opentelemetry-sdk (1.40.0) is incompatible with opentelemetry-instrumentation-fastapi (0.60b1).
And because no versions of opentelemetry-instrumentation-fastapi match >0.60b1,<0.61, opentelemetry-sdk (1.40.0) is incompatible with opentelemetry-instrumentation-fastapi (>=0.60b1,<0.61).
So, because stampbot depends on both opentelemetry-sdk (1.40.0) and opentelemetry-instrumentation-fastapi (^0.60b1), version solving failed.

@renovate renovate bot force-pushed the renovate/python-dependencies branch 2 times, most recently from c3f3efa to 5eaeed3 Compare March 12, 2026 18:39
@renovate renovate bot force-pushed the renovate/python-dependencies branch 3 times, most recently from ac859e7 to c7b4e43 Compare March 13, 2026 05:49
@renovate renovate bot force-pushed the renovate/python-dependencies branch from c7b4e43 to d951cdc Compare March 13, 2026 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants