Skip to content

deps: bump the pip-connectors group in /packages/vendor-connectors with 10 updates#169

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/packages/vendor-connectors/pip-connectors-c2a0842ced
May 20, 2026
Merged

deps: bump the pip-connectors group in /packages/vendor-connectors with 10 updates#169
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/packages/vendor-connectors/pip-connectors-c2a0842ced

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Updates the requirements on requests, boto3, slack-sdk, anthropic, langsmith, crewai, uv, strands-agents, uvicorn and types-requests to permit the latest version.
Updates requests to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates boto3 to 1.43.11

Commits
  • c628e75 Merge branch 'release-1.43.11'
  • ac6f929 Bumping version to 1.43.11
  • bb47b73 Add changelog entries from botocore
  • d8c26e0 Merge branch 'release-1.43.10'
  • 4ed1db8 Merge branch 'release-1.43.10' into develop
  • 413e36a Bumping version to 1.43.10
  • 401448d Add changelog entries from botocore
  • 6d47260 Merge branch 'release-1.43.9'
  • df96d6d Merge branch 'release-1.43.9' into develop
  • 7fb9872 Bumping version to 1.43.9
  • Additional commits viewable in compare view

Updates slack-sdk to 3.42.0

Release notes

Sourced from slack-sdk's releases.

v3.42.0

What's Changed

🚀 Enhancements

🐛 Bug Fixes

📚 Documentation

📦 Other changes

New Contributors

Full Changelog: slackapi/python-slack-sdk@v3.41.0...v3.42.0 Milestone: https://github.com/slackapi/python-slack-sdk/milestone/118?closed=1

Commits
  • 4f7eeee chore(release): version 3.42.0 (#1876)
  • e69ba32 feat: add highlight_type to files.completeUploadExternal and files_upload_v2 ...
  • beecde2 feat(models): add BlockChunk type to chat.{start,append,stop}Stream methods (...
  • 73d255a feat(blocks): add Card, Carousel, and Alert block types (#1865)
  • 60bd43d feat: add authorship arguments to assistant threads and chat stream (#1862)
  • 726538c chore(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#1870)
  • 5338c2d chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 (#1868)
  • 632a205 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1871)
  • bec3906 chore(deps): bump slackapi/slack-github-action from 3.0.1 to 3.0.2 (#1869)
  • 69163d6 fix: resolve OAuth installation store bugs and typos (#1864)
  • Additional commits viewable in compare view

Updates anthropic to 0.103.1

Release notes

Sourced from anthropic's releases.

v0.103.1

0.103.1 (2026-05-19)

Full Changelog: v0.103.0...v0.103.1

Bug Fixes

  • runner: skip tool calls SessionToolRunner does not own (#1817) (9425c6a)
Changelog

Sourced from anthropic's changelog.

0.103.1 (2026-05-19)

Full Changelog: v0.103.0...v0.103.1

Bug Fixes

  • runner: skip tool calls SessionToolRunner does not own (#1817) (9425c6a)

0.103.0 (2026-05-19)

Full Changelog: v0.102.0...v0.103.0

Features

  • client: Add support for self-hosted sandboxes in CMA with sandbox helpers (e5625b0)

0.102.0 (2026-05-13)

Full Changelog: v0.101.0...v0.102.0

Features

  • api: Add BetaManagedAgentsSearchResultBlock types (3681f10)
  • api: Add support for cache diagnostics beta (db51c6c)
  • internal/types: support eagerly validating pydantic iterators (68dabb0)

Chores

0.101.0 (2026-05-11)

Full Changelog: v0.100.0...v0.101.0

Features

  • aws: Add AWS client for Claude Platform on AWS (1e70e3a)

Bug Fixes

  • client: add missing f-string prefix in file type error message (06d109a)

Chores

  • examples: bump tools_runner.py to claude-sonnet-4-5-20250929 (#1473) (1aa8e41)
  • examples: update shebang from poetry to uv (#1497) (ace8f38)

... (truncated)

Commits

Updates langsmith to 0.8.5

Release notes

Sourced from langsmith's releases.

v0.8.5

What's Changed

Full Changelog: langchain-ai/langsmith-sdk@v0.8.4...v0.8.5

Commits
  • ef9fcd5 release(py): 0.8.5 (#2903)
  • 63b402e release(js): 0.7.1 (#2902)
  • 602a27a feat(sandbox): forward client default headers on exec WebSocket (#2899)
  • 126ef52 feat(python): add Client.close() to release session [closes LSDK-183] (#2866)
  • fddf88d feat(js): allow disabling multipart streaming via env variable (#2900)
  • 19bfc57 fix(js): add alias for experimental/sandbox to appease broad peer dep range...
  • 6717def release(js): 0.7.0 (#2890)
  • 273f8f9 release(py): 0.8.4 (#2889)
  • afbf4fb feat(sandbox): make snapshot optional and add TS options overload (#2887)
  • 54da541 sdk(py): drop sandbox alpha/experimental warnings (#2884)
  • Additional commits viewable in compare view

Updates crewai to 1.14.5

Release notes

Sourced from crewai's releases.

1.14.5

What's Changed

Features

  • Deprecate CrewAgentExecutor, default Crew agents to AgentExecutor
  • Improve Daytona sandbox tools
  • Add restore_from_state_id kickoff parameter
  • Add highlights to ExaSearchTool, rename from EXASearchTool

Bug Fixes

  • Fix memory leak in git.py by using cached_property
  • Surface streamed tool calls when available_functions is absent
  • Ensure skills loading events for traces
  • Correct status endpoint path from /{kickoff_id}/status to /status/{kickoff_id}
  • Restore missing code block in pt-BR first-flow guide
  • Prevent result_as_answer from returning hook-block or error messages as final answer
  • Preserve task outputs across async batch flush
  • Always restore task.output_pydantic in finally block
  • Handle BaseModel input in convert_to_model

Documentation

  • Update changelog and version for v1.14.5
  • Add OSS upgrade & crew-to-flow migration guide
  • Document additional env vars for devtools
  • Add docs for TavilyGetResearch

Refactoring

  • Extract CLI into standalone crewai-cli package

Contributors

@​NIK-TIGER-BILL, @​akaKuruma, @​cgoeppinger, @​github-actions[bot], @​greysonlalonde, @​heitorado, @​irfaan101, @​iris-clawd, @​lorenzejay, @​manisrinivasan2k1, @​minasami-pr, @​mislavivanda, @​theCyberTech, @​theishangoswami, @​wishhyt

Commits
  • a4c90b6 docs: update changelog and version for v1.14.5
  • c50da7a feat: bump versions to 1.14.5
  • e8aa870 fix: memory leak in git.py by using cached_property
  • 14cd81e docs: update changelog and version for v1.14.5a7
  • a6225da feat: bump versions to 1.14.5a7
  • 259d334 chore(devtools): skip pinning crewai-files in file-processing extra
  • 42aa8a7 chore: deprecate function_calling_llm field
  • a95d267 docs: update changelog and version for v1.14.5a6 (#5828)
  • 65ec783 feat: bump versions to 1.14.5a6 (#5827)
  • eefe0e4 fix: surface streamed tool calls when available_functions is absent
  • Additional commits viewable in compare view

Updates uv to 0.11.15

Release notes

Sourced from uv's releases.

0.11.15

Release Notes

Released on 2026-05-18.

Security

Enhancements

  • Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)
  • Add support for Azure request signing (#19421)
  • Apply stricter validation to all wheel filename segments (#19364)
  • Reject empty strings as an invalid package name (#19435)
  • Use structured errors for signing authentication failures (#19422)

Preview

  • uv audit: Add JSON output (#19305)

Configuration

  • Respect required-environments in uv pip compile (#19378)

Performance

  • Avoid parsing JSON manifest when local Python is available (#19398)
  • Avoid walking nested directories in linker conflict registration (#19382)
  • Optimize async wheel ZIP writing (#19383)
  • Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

  • Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)
  • Skip empty directories in uv build outputs (#19437)
  • Fix Git submodule handling when using relative paths (#12156)
  • Fix line number reporting in netrc parsing (#19452)

Documentation

  • Move Bazel auth helper setup into integration guide (#19392)

Install uv 0.11.15

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.15/uv-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.15

Released on 2026-05-18.

Security

Enhancements

  • Add TOML v1.1 -> v1.0 backwards compatibility for source distributions (#18741)
  • Add support for Azure request signing (#19421)
  • Apply stricter validation to all wheel filename segments (#19364)
  • Reject empty strings as an invalid package name (#19435)
  • Use structured errors for signing authentication failures (#19422)

Preview

  • uv audit: Add JSON output (#19305)

Configuration

  • Respect required-environments in uv pip compile (#19378)

Performance

  • Avoid parsing JSON manifest when local Python is available (#19398)
  • Avoid walking nested directories in linker conflict registration (#19382)
  • Optimize async wheel ZIP writing (#19383)
  • Fix dead "already trimmed" fast-path in Version::only_release_trimmed (#19425)

Bug fixes

  • Apply workspace-member [tool.uv.sources] credentials under uv sync --frozen (#19423)
  • Skip empty directories in uv build outputs (#19437)
  • Fix Git submodule handling when using relative paths (#12156)
  • Fix line number reporting in netrc parsing (#19452)

Documentation

  • Move Bazel auth helper setup into integration guide (#19392)

0.11.14

Released on 2026-05-12.

Enhancements

  • Add Astral mirror URL override (#19206)

... (truncated)

Commits

Updates strands-agents to 1.40.0

Release notes

Sourced from strands-agents's releases.

v1.40.0

What's Changed

New Contributors

Full Changelog: strands-agents/harness-sdk@v1.39.0...v1.40.0

Commits
  • fa74d80 fix: swarm bug "Failed to detach context" with opentelemetry (#2281)
  • 305a005 fix: set use_native_token_count default to false (#2284)
  • 6b53928 feat: add official Discord link (#2285)
  • b1a3f03 fix(ollama): update return type of latencyMs metric for ollama model provider...
  • 1847fae feat: cache AccessDenied error for count tokens (#2279)
  • f862185 feat: add proactive context compression to conversation managers (#2239)
  • See full diff in compare view

Updates uvicorn to 0.47.0

Release notes

Sourced from uvicorn's releases.

Version 0.47.0

What's Changed

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Changelog

Sourced from uvicorn's changelog.

0.47.0 (May 14, 2026)

Added

  • Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

  • Eagerly import the ASGI app in the parent process (#2919)

Fixed

  • Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

Changed

  • Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)
  • Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

  • Preserve forwarded client ports in proxy headers middleware (#2903)
  • Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)

0.44.0 (April 6, 2026)

Added

  • Implement websocket keepalive pings for websockets-sansio (#2888)

0.43.0 (April 3, 2026)

... (truncated)

Commits
  • 479a2c0 Version 0.47.0 (#2937)
  • 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
  • 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
  • f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
  • 8782666 Fix typo in docs/deployment/index.md. (#2932)
  • ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
  • 6761b2c Remove Hugging Face sponsor block from docs (#2923)
  • 438f648 Surface sponsors on welcome page and sidebar (#2921)
  • 10ddc6d Add ssl_context_factory for custom SSLContext configuration (#2920)
  • b499bc4 Eagerly import the ASGI app in the parent process (#2919)
  • See full diff in compare view

Updates types-requests to 2.33.0.20260518

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [requests](https://github.com/psf/requests), [boto3](https://github.com/boto/boto3), [slack-sdk](https://github.com/slackapi/python-slack-sdk), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [langsmith](https://github.com/langchain-ai/langsmith-sdk), [crewai](https://github.com/crewAIInc/crewAI), [uv](https://github.com/astral-sh/uv), [strands-agents](https://github.com/strands-agents/sdk-python), [uvicorn](https://github.com/Kludex/uvicorn) and [types-requests](https://github.com/python/typeshed) to permit the latest version.

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.34.0...v2.34.2)

Updates `boto3` to 1.43.11
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.6...1.43.11)

Updates `slack-sdk` to 3.42.0
- [Release notes](https://github.com/slackapi/python-slack-sdk/releases)
- [Commits](slackapi/python-slack-sdk@v3.41.0...v3.42.0)

Updates `anthropic` to 0.103.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.101.0...v0.103.1)

Updates `langsmith` to 0.8.5
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.3...v0.8.5)

Updates `crewai` to 1.14.5
- [Release notes](https://github.com/crewAIInc/crewAI/releases)
- [Commits](crewAIInc/crewAI@1.14.4...1.14.5)

Updates `uv` to 0.11.15
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.14...0.11.15)

Updates `strands-agents` to 1.40.0
- [Release notes](https://github.com/strands-agents/sdk-python/releases)
- [Commits](strands-agents/harness-sdk@v1.39.0...v1.40.0)

Updates `uvicorn` to 0.47.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.46.0...0.47.0)

Updates `types-requests` to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  dependency-group: pip-connectors
- dependency-name: boto3
  dependency-version: 1.43.11
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: slack-sdk
  dependency-version: 3.42.0
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: anthropic
  dependency-version: 0.103.1
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: langsmith
  dependency-version: 0.8.5
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: crewai
  dependency-version: 1.14.5
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: uv
  dependency-version: 0.11.15
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: strands-agents
  dependency-version: 1.40.0
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: uvicorn
  dependency-version: 0.47.0
  dependency-type: direct:development
  dependency-group: pip-connectors
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:development
  dependency-group: pip-connectors
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 20, 2026
@dependabot dependabot Bot requested a review from jbdevprimary as a code owner May 20, 2026 00:59
@github-actions github-actions Bot merged commit 2d34fec into main May 20, 2026
7 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/packages/vendor-connectors/pip-connectors-c2a0842ced branch May 20, 2026 00:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pkg:connectors python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants