Merged
Conversation
* vertexai.Part & co. will be replaced soon by genai.Part & co. * It's better to use the more specifically named variants of `Task` and `Status`: `A2aTask` and `A2aTaskStatus`. For #751
Bumps the github-actions group with 4 updates: [actions/download-artifact](https://github.com/actions/download-artifact), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/github-script](https://github.com/actions/github-script) and [actions/checkout](https://github.com/actions/checkout). Updates `actions/download-artifact` from 4 to 8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>v8 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.</p> </blockquote> <blockquote> <p>[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).</p> </blockquote> <h3>Direct downloads</h3> <p>To support direct uploads in <code>actions/upload-artifact</code>, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the <code>Content-Type</code> header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new <code>skip-decompress</code> parameter to <code>true</code>.</p> <h3>Enforced checks (breaking)</h3> <p>A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the <code>digest-mismatch</code> parameter. To be secure by default, we are now defaulting the behavior to <code>error</code> which will fail the workflow run.</p> <h3>ESM</h3> <p>To support new versions of the @actions/* packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Don't attempt to un-zip non-zipped downloads by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/460">actions/download-artifact#460</a></li> <li>Add a setting to specify what to do on hash mismatch and default it to <code>error</code> by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/461">actions/download-artifact#461</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v7...v8.0.0">https://github.com/actions/download-artifact/compare/v7...v8.0.0</a></p> <h2>v7.0.0</h2> <h2>v7 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li> <li>Download Artifact Node24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li> <li>fix: update <code>@actions/artifact</code> to fix Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/451">actions/download-artifact#451</a></li> <li>prepare release v7.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/452">actions/download-artifact#452</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0">https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p> <h2>v6.0.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"><code>3e5f45b</code></a> Add regression tests for CJK characters (<a href="https://redirect.github.com/actions/download-artifact/issues/471">#471</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd"><code>e6d03f6</code></a> Add a regression test for artifact name + content-type mismatches (<a href="https://redirect.github.com/actions/download-artifact/issues/472">#472</a>)</li> <li><a href="https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3"><code>70fc10c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/461">#461</a> from actions/danwkennedy/digest-mismatch-behavior</li> <li><a href="https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62"><code>f258da9</code></a> Add change docs</li> <li><a href="https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c"><code>ccc058e</code></a> Fix linting issues</li> <li><a href="https://github.com/actions/download-artifact/commit/bd7976ba57ecea96e6f3df575eb922d11a12a9fd"><code>bd7976b</code></a> Add a setting to specify what to do on hash mismatch and default it to <code>error</code></li> <li><a href="https://github.com/actions/download-artifact/commit/ac21fcf45e0aaee541c0f7030558bdad38d77d6c"><code>ac21fcf</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/460">#460</a> from actions/danwkennedy/download-no-unzip</li> <li><a href="https://github.com/actions/download-artifact/commit/15999bff51058bc7c19b50ebbba518eaef7c26c0"><code>15999bf</code></a> Add note about package bumps</li> <li><a href="https://github.com/actions/download-artifact/commit/974686ed5098c7f9c9289ec946b9058e496a2561"><code>974686e</code></a> Bump the version to <code>v8</code> and add release notes</li> <li><a href="https://github.com/actions/download-artifact/commit/fbe48b1d2756394be4cd4358ed3bc1343b330e75"><code>fbe48b1</code></a> Update test names to make it clearer what they do</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v4...v8">compare view</a></li> </ul> </details> <br /> Updates `actions/upload-artifact` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762">actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764">actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link"><code>@Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0">https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> <h2>v6.0.0</h2> <h2>v6 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Upload Artifact Node 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/719">actions/upload-artifact#719</a></li> <li>fix: update <code>@actions/artifact</code> for Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/744">actions/upload-artifact#744</a></li> <li>prepare release v6.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/745">actions/upload-artifact#745</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0">https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR"><code>@GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764">#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296"><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762">#762</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/47309c993abb98030a35d55ef7ff34b7fa1074b5"><code>47309c9</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/754">#754</a> from actions/Link-/add-proxy-integration-tests</li> <li><a href="https://github.com/actions/upload-artifact/commit/02a8460834e70dab0ce194c64360c59dc1475ef0"><code>02a8460</code></a> Add proxy integration test</li> <li><a href="https://github.com/actions/upload-artifact/commit/b7c566a772e6b6bfb58ed0dc250532a479d7789f"><code>b7c566a</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/745">#745</a> from actions/upload-artifact-v6-release</li> <li><a href="https://github.com/actions/upload-artifact/commit/e516bc8500aaf3d07d591fcd4ae6ab5f9c391d5b"><code>e516bc8</code></a> docs: correct description of Node.js 24 support in README</li> <li><a href="https://github.com/actions/upload-artifact/commit/ddc45ed9bca9b38dbd643978d88e3981cdc91415"><code>ddc45ed</code></a> docs: update README to correct action name for Node.js 24 support</li> <li><a href="https://github.com/actions/upload-artifact/commit/615b319bd27bb32c3d64dca6b6ed6974d5fbe653"><code>615b319</code></a> chore: release v6.0.0 for Node.js 24 support</li> <li><a href="https://github.com/actions/upload-artifact/commit/017748b48f8610ca8e6af1222f4a618e84a9c703"><code>017748b</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/744">#744</a> from actions/fix-storage-blob</li> <li><a href="https://github.com/actions/upload-artifact/commit/38d4c7997f5510fcc41fc4aae2a6b97becdbe7fc"><code>38d4c79</code></a> chore: rebuild dist</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v7">compare view</a></li> </ul> </details> <br /> Updates `actions/github-script` from 6 to 8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/github-script/releases">actions/github-script's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update Node.js version support to 24.x by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li> <li>README for updating actions/github-script from v7 to v8 by <a href="https://github.com/sneha-krip"><code>@sneha-krip</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li> </ul> <h2>⚠️ Minimum Compatible Runner Version</h2> <p><strong>v2.327.1</strong><br /> <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Release Notes</a></p> <p>Make sure your runner is updated to this version or newer to use this release.</p> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/637">actions/github-script#637</a></li> <li><a href="https://github.com/sneha-krip"><code>@sneha-krip</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/653">actions/github-script#653</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/github-script/compare/v7.1.0...v8.0.0">https://github.com/actions/github-script/compare/v7.1.0...v8.0.0</a></p> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>Upgrade husky to v9 by <a href="https://github.com/benelan"><code>@benelan</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li> <li>Add workflow file for publishing releases to immutable action package by <a href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li> <li>Upgrade IA Publish by <a href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/486">actions/github-script#486</a></li> <li>Fix workflow status badges by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/497">actions/github-script#497</a></li> <li>Update usage of <code>actions/upload-artifact</code> by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/512">actions/github-script#512</a></li> <li>Clear up package name confusion by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/514">actions/github-script#514</a></li> <li>Update dependencies with <code>npm audit fix</code> by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/515">actions/github-script#515</a></li> <li>Specify that the used script is JavaScript by <a href="https://github.com/timotk"><code>@timotk</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li> <li>chore: Add Dependabot for NPM and Actions by <a href="https://github.com/nschonni"><code>@nschonni</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/472">actions/github-script#472</a></li> <li>Define <code>permissions</code> in workflows and update actions by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/531">actions/github-script#531</a></li> <li>chore: Add Dependabot for .github/actions/install-dependencies by <a href="https://github.com/nschonni"><code>@nschonni</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/532">actions/github-script#532</a></li> <li>chore: Remove .vscode settings by <a href="https://github.com/nschonni"><code>@nschonni</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/533">actions/github-script#533</a></li> <li>ci: Use github/setup-licensed by <a href="https://github.com/nschonni"><code>@nschonni</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/473">actions/github-script#473</a></li> <li>make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by <a href="https://github.com/iamstarkov"><code>@iamstarkov</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li> <li>Remove <code>octokit</code> README updates for v7 by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/557">actions/github-script#557</a></li> <li>docs: add "exec" usage examples by <a href="https://github.com/neilime"><code>@neilime</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li> <li>Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/github-script/pull/563">actions/github-script#563</a></li> <li>Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/github-script/pull/575">actions/github-script#575</a></li> <li>Clearly document passing inputs to the <code>script</code> by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/603">actions/github-script#603</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/benelan"><code>@benelan</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/482">actions/github-script#482</a></li> <li><a href="https://github.com/Jcambass"><code>@Jcambass</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/485">actions/github-script#485</a></li> <li><a href="https://github.com/timotk"><code>@timotk</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/478">actions/github-script#478</a></li> <li><a href="https://github.com/iamstarkov"><code>@iamstarkov</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/508">actions/github-script#508</a></li> <li><a href="https://github.com/neilime"><code>@neilime</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/546">actions/github-script#546</a></li> <li><a href="https://github.com/nebuk89"><code>@nebuk89</code></a> made their first contribution in <a href="https://redirect.github.com/actions/github-script/pull/610">actions/github-script#610</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/github-script/compare/v7...v7.1.0">https://github.com/actions/github-script/compare/v7...v7.1.0</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/github-script/commit/ed597411d8f924073f98dfc5c65a23a2325f34cd"><code>ed59741</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/653">#653</a> from actions/sneha-krip/readme-for-v8</li> <li><a href="https://github.com/actions/github-script/commit/2dc352e4baefd91bec0d06f6ae2f1045d1687ca3"><code>2dc352e</code></a> Bold minimum Actions Runner version in README</li> <li><a href="https://github.com/actions/github-script/commit/01e118c8d0d22115597e46514b5794e7bc3d56f1"><code>01e118c</code></a> Update README for Node 24 runtime requirements</li> <li><a href="https://github.com/actions/github-script/commit/8b222ac82eda86dcad7795c9d49b839f7bf5b18b"><code>8b222ac</code></a> Apply suggestion from <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a></li> <li><a href="https://github.com/actions/github-script/commit/adc0eeac992408a7b276994ca87edde1c8ce4d25"><code>adc0eea</code></a> README for updating actions/github-script from v7 to v8</li> <li><a href="https://github.com/actions/github-script/commit/20fe497b3fe0c7be8aae5c9df711ac716dc9c425"><code>20fe497</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/637">#637</a> from actions/node24</li> <li><a href="https://github.com/actions/github-script/commit/e7b7f222b11a03e8b695c4c7afba89a02ea20164"><code>e7b7f22</code></a> update licenses</li> <li><a href="https://github.com/actions/github-script/commit/2c81ba05f308415d095291e6eeffe983d822345b"><code>2c81ba0</code></a> Update Node.js version support to 24.x</li> <li><a href="https://github.com/actions/github-script/commit/f28e40c7f34bde8b3046d885e986cb6290c5673b"><code>f28e40c</code></a> Merge pull request <a href="https://redirect.github.com/actions/github-script/issues/610">#610</a> from actions/nebuk89-patch-1</li> <li><a href="https://github.com/actions/github-script/commit/1ae9958572fde544457e4d51aed5ea044e8936f3"><code>1ae9958</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/actions/github-script/compare/v6...v8">compare view</a></li> </ul> </details> <br /> Updates `actions/checkout` from 4 to 6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>v6-beta by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li> <li>update readme/changelog for v6 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p> <h2>v6-beta</h2> <h2>What's Changed</h2> <p>Updated persist-credentials to store the credentials under <code>$RUNNER_TEMP</code> instead of directly in the local git config.</p> <p>This requires a minimum Actions Runner version of <a href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a> to access the persisted credentials for <a href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker container action</a> scenarios.</p> <h2>v5.0.1</h2> <h2>What's Changed</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> <li>Prepare v5.0.0 release by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li> </ul> <h2>⚠️ Minimum Compatible Runner Version</h2> <p><strong>v2.327.1</strong><br /> <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Release Notes</a></p> <p>Make sure your runner is updated to this version or newer to use this release.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p> <h2>v4.3.1</h2> <h2>What's Changed</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4...v4.3.1">https://github.com/actions/checkout/compare/v4...v4.3.1</a></p> <h2>v4.3.0</h2> <h2>What's Changed</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>v4.2.0</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>- <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>, <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>v4.1.7</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> <li>Pin actions/checkout's own workflows to a known, good, stable version. by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li> </ul> <h2>v4.1.6</h2> <ul> <li>Check platform to set archive extension appropriately by <a href="https://github.com/cory-miller"><code>@cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"><code>de0fac2</code></a> Fix tag handling: preserve annotations and explicit fetch-tags (<a href="https://redirect.github.com/actions/checkout/issues/2356">#2356</a>)</li> <li><a href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"><code>064fe7f</code></a> Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...</li> <li><a href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"><code>8e8c483</code></a> Clarify v6 README (<a href="https://redirect.github.com/actions/checkout/issues/2328">#2328</a>)</li> <li><a href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"><code>033fa0d</code></a> Add worktree support for persist-credentials includeIf (<a href="https://redirect.github.com/actions/checkout/issues/2327">#2327</a>)</li> <li><a href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"><code>c2d88d3</code></a> Update all references from v5 and v4 to v6 (<a href="https://redirect.github.com/actions/checkout/issues/2314">#2314</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"><code>1af3b93</code></a> update readme/changelog for v6 (<a href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li> <li><a href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"><code>71cf226</code></a> v6-beta (<a href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li> <li><a href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"><code>069c695</code></a> Persist creds to a separate file (<a href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"><code>ff7abcd</code></a> Update README to include Node.js 24 support details and requirements (<a href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li> <li><a href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a> Prepare v5.0.0 release (<a href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v4...v6">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the all group with 19 updates: | Package | From | To | | --- | --- | --- | | [google-api-core](https://github.com/googleapis/google-cloud-python) | `2.30.0` | `2.30.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.135.1` | `0.135.2` | | [sse-starlette](https://github.com/sysid/sse-starlette) | `3.3.2` | `3.3.4` | | [starlette](https://github.com/Kludex/starlette) | `0.52.1` | `1.0.0` | | [cryptography](https://github.com/pyca/cryptography) | `46.0.5` | `46.0.6` | | [grpcio](https://github.com/grpc/grpc) | `1.78.0` | `1.80.0` | | [grpcio-tools](https://github.com/grpc/grpc) | `1.78.0` | `1.80.0` | | [grpcio-reflection](https://grpc.io) | `1.78.0` | `1.80.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.11.0` | `2.12.1` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.140.0` | `1.144.0` | | [datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator) | `0.54.0` | `0.55.0` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.8` | | [uv-dynamic-versioning](https://github.com/ninoseki/uv-dynamic-versioning) | `0.13.0` | `0.14.0` | | [types-requests](https://github.com/python/typeshed) | `2.32.4.20260107` | `2.33.0.20260327` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.42.0` | Updates `google-api-core` from 2.30.0 to 2.30.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-cloud-python/releases">google-api-core's releases</a>.</em></p> <blockquote> <h2>grpc-google-iam-v1: v0.14.4</h2> <h2><a href="https://github.com/googleapis/google-cloud-python/compare/grpc-google-iam-v1-v0.14.3...grpc-google-iam-v1-v0.14.4">v0.14.4</a> (2026-03-31)</h2> <h2>google-cloud-compute-v1beta: v0.10.0</h2> <h2><a href="https://github.com/googleapis/google-cloud-python/compare/google-cloud-compute-v1beta-v0.9.0...google-cloud-compute-v1beta-v0.10.0">v0.10.0</a> (2026-03-26)</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/googleapis/google-cloud-python/commit/4e80530190d3e3d7d0dec26b8daf97c2db15c2df"><code>4e80530</code></a> chore: create a release (<a href="https://redirect.github.com/googleapis/google-cloud-python/issues/16193">#16193</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/0f8d933cfeca182e00eb589da2ab0df61579c6f1"><code>0f8d933</code></a> chore: add gapic-generator integration test presubmit (<a href="https://redirect.github.com/googleapis/google-cloud-python/issues/16465">#16465</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/ab44f7e4224b554e9365aafbd4ecb559ed975aa6"><code>ab44f7e</code></a> chore(deps): update dependency requests to v2.33.0 [security] (<a href="https://redirect.github.com/googleapis/google-cloud-python/issues/16464">#16464</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/943a979f14b1f39608cdb2658823f087a599e418"><code>943a979</code></a> chore(migration): Migrate code from googleapis/sphinx-docfx-yaml into package...</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/8c6703da295ed30200bb38f637b745b64f34d690"><code>8c6703d</code></a> chore(migration): Migrate code from googleapis/gapic-generator-python into pa...</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/e3731d58d5371f166e75742e257e2524d21e83cb"><code>e3731d5</code></a> Merge branch 'main' into migration.gapic-generator-python.migration.2026-03-2...</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/20f57241d9f690abc31c1a19ee5a0d33c667f300"><code>20f5724</code></a> Trigger CI</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/76a8b58e1f73328243ff838a4652bdcc4ead31b5"><code>76a8b58</code></a> chore: skip spanner django presubmits using dorny filter (<a href="https://redirect.github.com/googleapis/google-cloud-python/issues/16196">#16196</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/7a05a34dc0d4bd9ded9ab3ce97b5e61f2780e081"><code>7a05a34</code></a> chore: create a release (<a href="https://redirect.github.com/googleapis/google-cloud-python/issues/16191">#16191</a>)</li> <li><a href="https://github.com/googleapis/google-cloud-python/commit/46ee8a094fdb121f49fa600f91d1b8c0818a9253"><code>46ee8a0</code></a> fix presubmit</li> <li>Additional commits viewable in <a href="https://github.com/googleapis/google-cloud-python/compare/google-api-core-v2.30.0...google-api-core-v2.30.1">compare view</a></li> </ul> </details> <br /> Updates `fastapi` from 0.135.1 to 0.135.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastapi/fastapi/releases">fastapi's releases</a>.</em></p> <blockquote> <h2>0.135.2</h2> <h3>Upgrades</h3> <ul> <li>⬆️ Increase lower bound to <code>pydantic >=2.9.0.</code> and fix the test suite. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15139">#15139</a> by <a href="https://github.com/svlandeg"><code>@svlandeg</code></a>.</li> </ul> <h3>Docs</h3> <ul> <li>📝 Add missing last release notes dates. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15202">#15202</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>📝 Update docs for contributors and team members regarding translation PRs. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15200">#15200</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>💄 Fix code blocks in reference docs overflowing table width. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15094">#15094</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>📝 Fix duplicated words in docstrings. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15116">#15116</a> by <a href="https://github.com/AhsanSheraz"><code>@AhsanSheraz</code></a>.</li> <li>📝 Add docs for <code>pyproject.toml</code> with <code>entrypoint</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15075">#15075</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>📝 Update links in docs to no longer use the classes external-link and internal-link. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15061">#15061</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🔨 Add JS and CSS handling for automatic <code>target=_blank</code> for links in docs. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15063">#15063</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>💄 Update styles for internal and external links in new tab. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15058">#15058</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>📝 Add documentation for the FastAPI VS Code extension. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15008">#15008</a> by <a href="https://github.com/savannahostrowski"><code>@savannahostrowski</code></a>.</li> <li>📝 Fix doctrings for <code>max_digits</code> and <code>decimal_places</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/14944">#14944</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>📝 Add dates to release notes. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15001">#15001</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> </ul> <h3>Translations</h3> <ul> <li>🌐 Update translations for zh (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15177">#15177</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh-hant (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15178">#15178</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh-hant (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15176">#15176</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15175">#15175</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ja (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15171">#15171</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ko (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15170">#15170</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for tr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15172">#15172</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ko (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15168">#15168</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ja (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15167">#15167</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for tr (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15169">#15169</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for fr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15165">#15165</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for fr (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15163">#15163</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for uk (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15160">#15160</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for uk (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15158">#15158</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for pt (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15157">#15157</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for pt (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15159">#15159</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for es (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15155">#15155</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for es (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15154">#15154</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for de (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15156">#15156</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ru (update-and-add). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15152">#15152</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for de (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15153">#15153</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Internal</h3> <ul> <li>🔨 Exclude spam comments from statistics in <code>scripts/people.py</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15088">#15088</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>⬆ Bump authlib from 1.6.7 to 1.6.9. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15128">#15128</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>⬆ Bump pyasn1 from 0.6.2 to 0.6.3. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15143">#15143</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>⬆ Bump ujson from 5.11.0 to 5.12.0. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15150">#15150</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>🔨 Tweak translation workflow and translation fixer tool. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15166">#15166</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastapi/fastapi/commit/25a3697cedc6e7dfb84e93c8ff965801486f00f4"><code>25a3697</code></a> 🔖 Release version 0.135.2</li> <li><a href="https://github.com/fastapi/fastapi/commit/ab125daa4034435777853a2c5a6c47451414f9aa"><code>ab125da</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/122b6d490f844b6f716855d55a3e11237b7fb61f"><code>122b6d4</code></a> 📝 Add missing last release notes dates (<a href="https://redirect.github.com/fastapi/fastapi/issues/15202">#15202</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/68ac0ab91e9b14c418013790fc0e420a827686b5"><code>68ac0ab</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/ea6e287eb398afe6a82c3ef71780e8451813f674"><code>ea6e287</code></a> 📝 Update docs for contributors and team members regarding translation PRs (<a href="https://redirect.github.com/fastapi/fastapi/issues/1">#1</a>...</li> <li><a href="https://github.com/fastapi/fastapi/commit/d0a6f208c5cb5daaa1de5ea5187729e3789d1dce"><code>d0a6f20</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/fd9e192cf4fae399c0d51dd23e2a137052eb6087"><code>fd9e192</code></a> 💄 Fix code blocks in reference docs overflowing table width (<a href="https://redirect.github.com/fastapi/fastapi/issues/15094">#15094</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/fce9460f865928eb7d0393d8809bbc472e0c21cd"><code>fce9460</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/0227991a01e61bf5cdd93cc00e9e243f52b47a4a"><code>0227991</code></a> 🔨 Exclude spam comments from statistics in <code>scripts/people.py</code> (<a href="https://redirect.github.com/fastapi/fastapi/issues/15088">#15088</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/cbd64b09a32681d3b0ea097608bc62eb0d1587e0"><code>cbd64b0</code></a> 📝 Update release notes</li> <li>Additional commits viewable in <a href="https://github.com/fastapi/fastapi/compare/0.135.1...0.135.2">compare view</a></li> </ul> </details> <br /> Updates `sse-starlette` from 3.3.2 to 3.3.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sysid/sse-starlette/releases">sse-starlette's releases</a>.</em></p> <blockquote> <h2>v3.3.4</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump cbor2 from 5.8.0 to 5.9.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/177">sysid/sse-starlette#177</a></li> <li>chore(deps): bump ujson from 5.11.0 to 5.12.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/176">sysid/sse-starlette#176</a></li> <li>chore(deps): bump requests from 2.32.5 to 2.33.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/178">sysid/sse-starlette#178</a></li> <li>chore(deps): bump cryptography from 46.0.5 to 46.0.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/179">sysid/sse-starlette#179</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sysid/sse-starlette/compare/v3.3.3...v3.3.4">https://github.com/sysid/sse-starlette/compare/v3.3.3...v3.3.4</a></p> <h2>v3.3.3</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump astral-sh/setup-uv from 6 to 7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/172">sysid/sse-starlette#172</a></li> <li>chore(deps): bump pyopenssl from 25.3.0 to 26.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/174">sysid/sse-starlette#174</a></li> <li>chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sysid/sse-starlette/pull/175">sysid/sse-starlette#175</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sysid/sse-starlette/compare/v0.0.0...v3.3.3">https://github.com/sysid/sse-starlette/compare/v0.0.0...v3.3.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sysid/sse-starlette/commit/c938db3f6ea262f5f087c75d8631c3aab9cbf0ad"><code>c938db3</code></a> Bump version to 3.3.4</li> <li><a href="https://github.com/sysid/sse-starlette/commit/eefd6dcb106784960af02505a56686b362e9caab"><code>eefd6dc</code></a> Merge pull request <a href="https://redirect.github.com/sysid/sse-starlette/issues/179">#179</a> from sysid/dependabot/uv/cryptography-46.0.6</li> <li><a href="https://github.com/sysid/sse-starlette/commit/d9e9b822224b09c275c1905aaeb3cbab6c29f4f7"><code>d9e9b82</code></a> chore(deps): bump cryptography from 46.0.5 to 46.0.6</li> <li><a href="https://github.com/sysid/sse-starlette/commit/28cd775f51f138726d6c27f42ff4fdae91f482f0"><code>28cd775</code></a> Merge pull request <a href="https://redirect.github.com/sysid/sse-starlette/issues/178">#178</a> from sysid/dependabot/uv/requests-2.33.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/2e52732f92665dd7ed83250af840bdef0ef1bc98"><code>2e52732</code></a> Merge pull request <a href="https://redirect.github.com/sysid/sse-starlette/issues/176">#176</a> from sysid/dependabot/uv/ujson-5.12.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/bac335e7dce0ee11f6585d6cfc1379079756b22c"><code>bac335e</code></a> Merge pull request <a href="https://redirect.github.com/sysid/sse-starlette/issues/177">#177</a> from sysid/dependabot/uv/cbor2-5.9.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/d4654686c68f18e71d09f580a4acb10199858abc"><code>d465468</code></a> chore(deps): bump requests from 2.32.5 to 2.33.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/7434cd326b055077719df224b12d0d7ace3e4cfd"><code>7434cd3</code></a> chore(deps): bump cbor2 from 5.8.0 to 5.9.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/fc2455af95ec26822d7ca0420c2c115f7489b7c4"><code>fc2455a</code></a> chore(deps): bump ujson from 5.11.0 to 5.12.0</li> <li><a href="https://github.com/sysid/sse-starlette/commit/5f845398db25a50889ef7a0f8214aa931aed7ac0"><code>5f84539</code></a> Bump version to 3.3.3</li> <li>Additional commits viewable in <a href="https://github.com/sysid/sse-starlette/compare/v3.3.2...v3.3.4">compare view</a></li> </ul> </details> <br /> Updates `starlette` from 0.52.1 to 1.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/starlette/releases">starlette's releases</a>.</em></p> <blockquote> <h2>Version 1.0.0</h2> <p>Starlette 1.0 is here! 🎉</p> <p>After nearly eight years since its creation, Starlette has reached its first stable release.</p> <p>A special thank you to <a href="https://github.com/lovelydinosaur"><code>@lovelydinosaur</code></a>, the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped to lay the foundation for the modern async Python ecosystem. 🙏</p> <p>Thank you to <a href="https://github.com/adriangb"><code>@adriangb</code></a>, <a href="https://github.com/graingert"><code>@graingert</code></a>, <a href="https://github.com/agronholm"><code>@agronholm</code></a>, <a href="https://github.com/florimondmanca"><code>@florimondmanca</code></a>, <a href="https://github.com/aminalaee"><code>@aminalaee</code></a>, <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>, <a href="https://github.com/alex-oleshkevich"><code>@alex-oleshkevich</code></a>, <a href="https://github.com/abersheeran"><code>@abersheeran</code></a>, and <a href="https://github.com/uSpike"><code>@uSpike</code></a> for helping make Starlette what it is today. And to all my sponsors - especially <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>, <a href="https://github.com/huggingface"><code>@huggingface</code></a>, and <a href="https://github.com/elevenlabs"><code>@elevenlabs</code></a> - thank you for your support!</p> <p>Thank you to all <a href="https://github.com/encode/starlette/graphs/contributors">290+ contributors</a> who have shaped Starlette over the years! ❤️</p> <p>Read more on the <a href="https://marcelotryle.com/blog/2026/03/22/starlette-10-is-here/">blog post</a>.</p> <p>Check out the full release notes at <a href="https://www.starlette.io/release-notes/#100-march-22-2026">https://www.starlette.io/release-notes/#100-march-22-2026</a></p> <hr /> <p><strong>Full Changelog</strong>: <a href="https://github.com/encode/starlette/compare/1.0.0rc1...1.0.0">https://github.com/encode/starlette/compare/1.0.0rc1...1.0.0</a></p> <h2>Version 1.0.0rc1</h2> <p>We're ready! 🚀</p> <p>The first release candidate for Starlette 1.0 is here! After years on ZeroVer, we're finally making the jump.</p> <p>This release removes all deprecated features marked for 1.0.0, along with some last-minute bug fixes.</p> <p>A special thank you to <a href="https://github.com/lovelydinosaur"><code>@lovelydinosaur</code></a>, the creator of Starlette, Uvicorn, HTTPX and MkDocs, whose work helped to lay the foundation for the modern async Python ecosystem. 🙏</p> <p>Thank you to <a href="https://github.com/adriangb"><code>@adriangb</code></a>, <a href="https://github.com/graingert"><code>@graingert</code></a>, <a href="https://github.com/agronholm"><code>@agronholm</code></a>, <a href="https://github.com/florimondmanca"><code>@florimondmanca</code></a>, <a href="https://github.com/aminalaee"><code>@aminalaee</code></a>, <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>, <a href="https://github.com/alex-oleshkevich"><code>@alex-oleshkevich</code></a>, and <a href="https://github.com/abersheeran"><code>@abersheeran</code></a> for helping make Starlette what it is today. And to all my sponsors - especially <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>, <a href="https://github.com/huggingface"><code>@huggingface</code></a>, and <a href="https://github.com/elevenlabs"><code>@elevenlabs</code></a> - thank you for your support!</p> <p>Thank you to all <a href="https://github.com/encode/starlette/graphs/contributors">290+ contributors</a> who have shaped Starlette over the years!</p> <p>Check out the full release notes at <a href="https://www.starlette.io/release-notes/#100rc1-february-23-2026">https://www.starlette.io/release-notes/#100rc1-february-23-2026</a></p> <hr /> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/starlette/compare/0.52.1...1.0.0rc1">https://github.com/Kludex/starlette/compare/0.52.1...1.0.0rc1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kludex/starlette/blob/main/docs/release-notes.md">starlette's changelog</a>.</em></p> <blockquote> <h2>1.0.0 (March 22, 2026)</h2> <p>Starlette 1.0 is here!</p> <p>After nearly eight years since its creation, Starlette has reached its first stable release. Thank you to everyone who tested the release candidate and reported issues.</p> <p>You can read more on the <a href="https://marcelotryle.com/blog/2026/03/22/starlette-10-is-here/">blog post</a>.</p> <h4>Added</h4> <ul> <li>Track session access and modification in <code>SessionMiddleware</code> <a href="https://redirect.github.com/encode/starlette/pull/3166">#3166</a>.</li> </ul> <h4>Fixed</h4> <ul> <li>Handle websocket denial responses in <code>StreamingResponse</code> and <code>FileResponse</code> <a href="https://redirect.github.com/encode/starlette/pull/3189">#3189</a>.</li> <li>Use <code>bytearray</code> for field accumulation in <code>FormParser</code> <a href="https://redirect.github.com/encode/starlette/pull/3179">#3179</a>.</li> <li>Move <code>parser.finalize()</code> inside try/except in <code>MultiPartParser.parse()</code> <a href="https://redirect.github.com/encode/starlette/pull/3153">#3153</a>.</li> </ul> <h2>1.0.0rc1 (February 23, 2026)</h2> <p>We're ready! I'm thrilled to announce the first release candidate for Starlette 1.0.</p> <p>Starlette was created in June 2018 by Tom Christie, and has been on ZeroVer for years. Today, it's downloaded almost <a href="https://pypistats.org/packages/starlette">10 million times a day</a>, serves as the foundation for FastAPI, and has inspired many other frameworks. In the age of AI, Starlette continues to play an important role as a dependency of the Python MCP SDK.</p> <p>This release focuses on removing deprecated features that were marked for removal in 1.0.0, along with some last minute bug fixes. It's a release candidate, so we can gather feedback from the community before the final 1.0.0 release soon.</p> <p>A huge thank you to all the contributors who have helped make Starlette what it is today. In particular, I'd like to recognize:</p> <ul> <li><a href="https://github.com/lovelydinosaur">Kim Christie</a> - The original creator of Starlette, Uvicorn, and MkDocs, and the current maintainer of HTTPX. Kim's work helped lay the foundation for the modern async Python ecosystem.</li> <li><a href="https://github.com/adriangb">Adrian Garcia Badaracco</a> - One of the smartest people I know, whom I have the pleasure of working with at Pydantic.</li> <li><a href="https://github.com/graingert">Thomas Grainger</a> - My async teacher, always ready to help with questions.</li> <li><a href="https://github.com/agronholm">Alex Grönholm</a> - Another async mentor, always prompt to help with questions.</li> <li><a href="https://github.com/florimondmanca">Florimond Manca</a> - Always present in the early days of both Starlette and Uvicorn, and helped a lot in the ecosystem.</li> <li><a href="https://github.com/aminalaee">Amin Alaee</a> - Contributed a lot with file-related PRs.</li> <li><a href="https://github.com/tiangolo">Sebastián Ramírez</a> - Maintains FastAPI upstream, and always in contact to help with upstream issues.</li> <li><a href="https://github.com/alex-oleshkevich">Alex Oleshkevich</a> - Helped a lot on templates and many discussions.</li> <li><a href="https://github.com/abersheeran">abersheeran</a> - My go-to person when I need help on many subjects.</li> </ul> <p>I'd also like to thank my sponsors for their support. A special thanks to <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>, <a href="https://github.com/huggingface"><code>@huggingface</code></a>, and <a href="https://github.com/elevenlabs"><code>@elevenlabs</code></a> for their generous sponsorship, and to all my other sponsors:</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Kludex/starlette/commit/0e88e92b592bfa11fd92e331869a8d49ba34b541"><code>0e88e92</code></a> Version 1.0.0 (<a href="https://redirect.github.com/Kludex/starlette/issues/3178">#3178</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/9ee951980bae776103715b66305f807d9e8245da"><code>9ee9519</code></a> Handle websocket denial responses in streaming and file responses (<a href="https://redirect.github.com/Kludex/starlette/issues/3189">#3189</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/a0bcc26612c9c344737cd59fb4ef847326adf37a"><code>a0bcc26</code></a> chore(deps-dev): bump black from 26.1.0 to 26.3.1 (<a href="https://redirect.github.com/Kludex/starlette/issues/3183">#3183</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/79b3f26a9a38791af14d15c058c0e8c54cd9b11e"><code>79b3f26</code></a> chore(deps-dev): bump the python-packages group with 7 updates (<a href="https://redirect.github.com/Kludex/starlette/issues/3168">#3168</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/789b9269fd3f3d6ab28781624f151e44432463cd"><code>789b926</code></a> Use <code>bytearray</code> for field accumulation in <code>FormParser</code> (<a href="https://redirect.github.com/Kludex/starlette/issues/3179">#3179</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/a1fd9d822dc49857e9f39ea5b0970aeed6c8f669"><code>a1fd9d8</code></a> docs: fix typo in routing.md (<a href="https://redirect.github.com/Kludex/starlette/issues/3176">#3176</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/c14d0f778010940ac40f97dbc23d8dbf99e87e23"><code>c14d0f7</code></a> Document session cookie security flags (<a href="https://redirect.github.com/Kludex/starlette/issues/3169">#3169</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/c2e28786d1e73da045fa84e622f65c314a7171c1"><code>c2e2878</code></a> Move parser.finalize() inside try/except in MultiPartParser.parse() (<a href="https://redirect.github.com/Kludex/starlette/issues/3153">#3153</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/89630a8658ab8aac7cca8a0d6ec4b78dcc2fcb46"><code>89630a8</code></a> chore(deps): bump the github-actions group with 3 updates (<a href="https://redirect.github.com/Kludex/starlette/issues/3167">#3167</a>)</li> <li><a href="https://github.com/Kludex/starlette/commit/4647e532bbed7a5f60c9972ddba3f5fb4a79e1f9"><code>4647e53</code></a> Track session access and modification in <code>SessionMiddleware</code> (<a href="https://redirect.github.com/Kludex/starlette/issues/3166">#3166</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Kludex/starlette/compare/0.52.1...1.0.0">compare view</a></li> </ul> </details> <br /> Updates `cryptography` from 46.0.5 to 46.0.6 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p> <blockquote> <p>46.0.6 - 2026-03-25</p> <pre><code> * **SECURITY ISSUE**: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for reporting the issue. **CVE-2026-34073** <p>.. _v46-0-5:<br /> </code></pre></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pyca/cryptography/commit/91d728897bdad30cd5c79a2b23e207f1f050d587"><code>91d7288</code></a> Cherry-pick <a href="https://redirect.github.com/pyca/cryptography/issues/14542">#14542</a> (<a href="https://redirect.github.com/pyca/cryptography/issues/14543">#14543</a>)</li> <li>See full diff in <a href="https://github.com/pyca/cryptography/compare/46.0.5...46.0.6">compare view</a></li> </ul> </details> <br /> Updates `grpcio` from 1.78.0 to 1.80.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc/releases">grpcio's releases</a>.</em></p> <blockquote> <h2>Release v1.80.0</h2> <p>This is release 1.80.0 (<a href="https://github.com/grpc/grpc/blob/master/doc/g_stands_for.md">glimmering</a>) of gRPC Core.</p> <p>For gRPC documentation, see <a href="https://grpc.io/">grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases">Releases</a>.</p> <p>This release contains refinements, improvements, and bug fixes, with highlights listed below.</p> <h2>Core</h2> <ul> <li>[ssl] Implement TLS private key signer in Python. (<a href="https://redirect.github.com/grpc/grpc/pull/41701">#41701</a>)</li> <li>[TLS Credentials]: Private Key Offload Implementation. (<a href="https://redirect.github.com/grpc/grpc/pull/41606">#41606</a>)</li> <li>Fix max sockaddr struct size on OpenBSD. (<a href="https://redirect.github.com/grpc/grpc/pull/40454">#40454</a>)</li> <li>[core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (<a href="https://redirect.github.com/grpc/grpc/pull/41432">#41432</a>)</li> <li>[TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (<a href="https://redirect.github.com/grpc/grpc/pull/41484">#41484</a>)</li> <li>[Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (<a href="https://redirect.github.com/grpc/grpc/pull/41324">#41324</a>)</li> <li>[EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (<a href="https://redirect.github.com/grpc/grpc/pull/41502">#41502</a>)</li> <li>[RR and WRR] enable change to connect from a random index. (<a href="https://redirect.github.com/grpc/grpc/pull/41472">#41472</a>)</li> <li>[xds] Implement gRFC A101. (<a href="https://redirect.github.com/grpc/grpc/pull/41051">#41051</a>)</li> </ul> <h2>C++</h2> <ul> <li>[C++] Add SNI override option to C++ channel credentials options API. (<a href="https://redirect.github.com/grpc/grpc/pull/41460">#41460</a>)</li> </ul> <h2>C#</h2> <ul> <li>[C# tools] Option to append Async to server side method names <a href="https://redirect.github.com/grpc/grpc/issues/39010">#39010</a>. (<a href="https://redirect.github.com/grpc/grpc/pull/39797">#39797</a>)</li> <li>[C# tools] Fix Grpc.Tools 2.69.0 stops working on ARM64 (<a href="https://redirect.github.com/grpc/grpc/pull/41543">#41543</a>)</li> </ul> <h2>Objective-C</h2> <ul> <li>[Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (<a href="https://redirect.github.com/grpc/grpc/pull/41357">#41357</a>)</li> </ul> <h2>PHP</h2> <ul> <li>[PHP] Disable php infinite recursion check for callback from Core to PHP. (<a href="https://redirect.github.com/grpc/grpc/pull/41835">#41835</a>)</li> <li>[PHP] Fix runtime error with PHp8.5 alpha because zend_exception_get_defaul…. (<a href="https://redirect.github.com/grpc/grpc/pull/40337">#40337</a>)</li> </ul> <h2>Python</h2> <ul> <li>[Python] Fix <code>GRPC_TRACE</code> not working when absl log initialized in cython. (<a href="https://redirect.github.com/grpc/grpc/pull/41814">#41814</a>)</li> <li>Revert "[Python] Align GRPC_ENABLE_FORK_SUPPORT env defaults in core and python (<a href="https://redirect.github.com/grpc/grpc/issues/41455">#41455</a>)". (<a href="https://redirect.github.com/grpc/grpc/pull/41769">#41769</a>)</li> <li>[Python] Fix AsyncIO Server maximum_concurrent_rpcs enforcement preventing negative active_rpcs count. (<a href="https://redirect.github.com/grpc/grpc/pull/41532">#41532</a>)</li> <li>[Python] Docs: correct <code>grpc.Compression</code> references. (<a href="https://redirect.github.com/grpc/grpc/pull/41705">#41705</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc/commit/f5e2d6e856176c2f6b7691032adfefe21e5f64c1"><code>f5e2d6e</code></a> [Release] Bump version to 1.80.0 (on v1.80.x branch) (<a href="https://redirect.github.com/grpc/grpc/issues/41857">#41857</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/938cfecaebfc28b5e6bcdb95d55aba3962d9b55b"><code>938cfec</code></a> [subchannel connection scaling] fix when we reset backoff (<a href="https://redirect.github.com/grpc/grpc/issues/41935">#41935</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/91778bec667d7310864420f2b32aeb2e41e1b51c"><code>91778be</code></a> [Backport][v1.80.x][Python] New <code>_create</code> method for aio.Metadata (<a href="https://redirect.github.com/grpc/grpc/issues/41888">#41888</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/f10b9f26933703c5fe3e080f50ef19c858d773e0"><code>f10b9f2</code></a> [bzlmod] upgrade rules_swift to avoid BCR CI breakage on Windows with bazel 7...</li> <li><a href="https://github.com/grpc/grpc/commit/be4c1c55b69493868241bfffd4bc318d3d592656"><code>be4c1c5</code></a> [subchannel] fix crash in connection scaling code (<a href="https://redirect.github.com/grpc/grpc/issues/41853">#41853</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/a71df73eafb18fa0210a13dd6a2ce2cb6594d427"><code>a71df73</code></a> [Release] Bump version to 1.80.0-pre1 (on v1.80.x branch) (<a href="https://redirect.github.com/grpc/grpc/issues/41844">#41844</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/3ca09e4818f4362e75c9c224f1d4c2065db75a0a"><code>3ca09e4</code></a> [Python] Fix GRPC_TRACE and add test to check the GRPC_TRACE logs print (<a href="https://redirect.github.com/grpc/grpc/issues/41814">#41814</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/260c6fd37c502e984836a446c5d90e4a1298036d"><code>260c6fd</code></a> [PHP] Disable php infinite recursion check for callback from Core to PHP (<a href="https://redirect.github.com/grpc/grpc/issues/41">#41</a>...</li> <li><a href="https://github.com/grpc/grpc/commit/50957c5c47de1c85637fc9dafe6d4eb4c1224f6b"><code>50957c5</code></a> [Flakiness] Delete flaky iomgr fd_conservation_posix_test and create an Event...</li> <li><a href="https://github.com/grpc/grpc/commit/e1e1d0a8150b5178d4b75e15f4856a4d825a8999"><code>e1e1d0a</code></a> [Bzlmod] Turn off bzlmod for PSM python tests. (<a href="https://redirect.github.com/grpc/grpc/issues/41810">#41810</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc/compare/v1.78.0...v1.80.0">compare view</a></li> </ul> </details> <br /> Updates `grpcio-tools` from 1.78.0 to 1.80.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc/releases">grpcio-tools's releases</a>.</em></p> <blockquote> <h2>Release v1.80.0</h2> <p>This is release 1.80.0 (<a href="https://github.com/grpc/grpc/blob/master/doc/g_stands_for.md">glimmering</a>) of gRPC Core.</p> <p>For gRPC documentation, see <a href="https://grpc.io/">grpc.io</a>. For previous releases, see <a href="https://github.com/grpc/grpc/releases">Releases</a>.</p> <p>This release contains refinements, improvements, and bug fixes, with highlights listed below.</p> <h2>Core</h2> <ul> <li>[ssl] Implement TLS private key signer in Python. (<a href="https://redirect.github.com/grpc/grpc/pull/41701">#41701</a>)</li> <li>[TLS Credentials]: Private Key Offload Implementation. (<a href="https://redirect.github.com/grpc/grpc/pull/41606">#41606</a>)</li> <li>Fix max sockaddr struct size on OpenBSD. (<a href="https://redirect.github.com/grpc/grpc/pull/40454">#40454</a>)</li> <li>[core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (<a href="https://redirect.github.com/grpc/grpc/pull/41432">#41432</a>)</li> <li>[TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (<a href="https://redirect.github.com/grpc/grpc/pull/41484">#41484</a>)</li> <li>[Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (<a href="https://redirect.github.com/grpc/grpc/pull/41324">#41324</a>)</li> <li>[EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (<a href="https://redirect.github.com/grpc/grpc/pull/41502">#41502</a>)</li> <li>[RR and WRR] enable change to connect from a random index. (<a href="https://redirect.github.com/grpc/grpc/pull/41472">#41472</a>)</li> <li>[xds] Implement gRFC A101. (<a href="https://redirect.github.com/grpc/grpc/pull/41051">#41051</a>)</li> </ul> <h2>C++</h2> <ul> <li>[C++] Add SNI override option to C++ channel credentials options API. (<a href="https://redirect.github.com/grpc/grpc/pull/41460">#41460</a>)</li> </ul> <h2>C#</h2> <ul> <li>[C# tools] Option to append Async to server side method names <a href="https://redirect.github.com/grpc/grpc/issues/39010">#39010</a>. (<a href="https://redirect.github.com/grpc/grpc/pull/39797">#39797</a>)</li> <li>[C# tools] Fix Grpc.Tools 2.69.0 stops working on ARM64 (<a href="https://redirect.github.com/grpc/grpc/pull/41543">#41543</a>)</li> </ul> <h2>Objective-C</h2> <ul> <li>[Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (<a href="https://redirect.github.com/grpc/grpc/pull/41357">#41357</a>)</li> </ul> <h2>PHP</h2> <ul> <li>[PHP] Disable php infinite recursion check for callback from Core to PHP. (<a href="https://redirect.github.com/grpc/grpc/pull/41835">#41835</a>)</li> <li>[PHP] Fix runtime error with PHp8.5 alpha because zend_exception_get_defaul…. (<a href="https://redirect.github.com/grpc/grpc/pull/40337">#40337</a>)</li> </ul> <h2>Python</h2> <ul> <li>[Python] Fix <code>GRPC_TRACE</code> not working when absl log initialized in cython. (<a href="https://redirect.github.com/grpc/grpc/pull/41814">#41814</a>)</li> <li>Revert "[Python] Align GRPC_ENABLE_FORK_SUPPORT env defaults in core and python (<a href="https://redirect.github.com/grpc/grpc/issues/41455">#41455</a>)". (<a href="https://redirect.github.com/grpc/grpc/pull/41769">#41769</a>)</li> <li>[Python] Fix AsyncIO Server maximum_concurrent_rpcs enforcement preventing negative active_rpcs count. (<a href="https://redirect.github.com/grpc/grpc/pull/41532">#41532</a>)</li> <li>[Python] Docs: correct <code>grpc.Compression</code> references. (<a href="https://redirect.github.com/grpc/grpc/pull/41705">#41705</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc/commit/f5e2d6e856176c2f6b7691032adfefe21e5f64c1"><code>f5e2d6e</code></a> [Release] Bump version to 1.80.0 (on v1.80.x branch) (<a href="https://redirect.github.com/grpc/grpc/issues/41857">#41857</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/a71df73eafb18fa0210a13dd6a2ce2cb6594d427"><code>a71df73</code></a> [Release] Bump version to 1.80.0-pre1 (on v1.80.x branch) (<a href="https://redirect.github.com/grpc/grpc/issues/41844">#41844</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/1299baa1d49383c92bd462cba0360838bba092b8"><code>1299baa</code></a> [Python] Add language features to exported proto files (<a href="https://redirect.github.com/grpc/grpc/issues/41501">#41501</a>)</li> <li><a href="https://github.com/grpc/grpc/commit/522dbbbb25ab793ec65f5ec02de362a63c26e36a"><code>522dbbb</code></a> [Release] Bump version to 1.79.0-dev (on master branch) (<a href="https://redirect.github.com/grpc/grpc/issues/41291">#41291</a>)</li> <li>See full diff in <a href="https://github.com/grpc/grpc/compare/v1.78.0...v1.80.0">compare view</a></li> </ul> </details> <br /> Updates `grpcio-reflection` from 1.78.0 to 1.80.0 Updates `opentelemetry-api` from 1.39.1 to 1.40.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-api's changelog</a>.</em></p> <blockquote> <h2>Version 1.40.0/0.61b0 (2026-03-04)</h2> <ul> <li><code>opentelemetry-sdk</code>: deprecate <code>LoggingHandler</code> in favor of <code>opentelemetry-instrumentation-logging</code>, see <code>opentelemetry-instrumentation-logging</code> documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4919">#4919</a>)</li> <li><code>opentelemetry-sdk</code>: Clarify log processor error handling expectations in documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4915">#4915</a>)</li> <li>bump semantic-conventions to v1.40.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4941">#4941</a>)</li> <li>Add stale PR GitHub Action (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4926">#4926</a>)</li> <li><code>opentelemetry-sdk</code>: Drop unused Jaeger exporter environment variables (exporter removed in 1.22.0) (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4918">#4918</a>)</li> <li><code>opentelemetry-sdk</code>: Clarify timeout units in environment variable documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4906">#4906</a>)</li> <li><code>opentelemetry-exporter-otlp-proto-grpc</code>: Fix re-initialization of gRPC channel on UNAVAILABLE error (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4825">#4825</a>)</li> <li><code>opentelemetry-exporter-prometheus</code>: Fix duplicate HELP/TYPE declarations for metrics with different label sets (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4868">#4868</a>)</li> <li>Allow loading all resource detectors by setting <code>OTEL_EXPERIMENTAL_RESOURCE_DETECTORS</code> to <code>*</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4819">#4819</a>)</li> <li><code>opentelemetry-sdk</code>: Fix the type hint of the <code>_metrics_data</code> property to allow <code>None</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4837">#4837</a>).</li> <li>Regenerate opentelemetry-proto code with v1.9.0 release (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4840">#4840</a>)</li> <li>Add python 3.14 support (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4798">#4798</a>)</li> <li>Silence events API warnings for internal users (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4847">#4847</a>)</li> <li>opentelemetry-sdk: make it possible to override the default processors in the SDK configurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4806">#4806</a>)</li> <li>Prevent possible endless recursion from happening in <code>SimpleLogRecordProcessor.on_emit</code>, (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4799">#4799</a>) and (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4867">#4867</a>).</li> <li>Implement span start/end metrics (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4880">#4880</a>)</li> <li>Add environment variable carriers to API (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4609">#4609</a>)</li> <li>Add experimental composable rule based sampler (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4882">#4882</a>)</li> <li>Make ConcurrentMultiSpanProcessor fork safe (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4862">#4862</a>)</li> <li><code>opentelemetry-exporter-otlp-proto-http</code>: fix retry logic and error handling for connection failures in trace, metric, and log exporters (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4709">#4709</a>)</li> <li><code>opentelemetry-sdk</code>: avoid RuntimeError during iteration of view instrument match dictionary in MetricReaderStorage.collect() (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4891">#4891</a>)</li> <li>Implement experimental TracerConfigurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4861">#4861</a>)</li> <li><code>opentelemetry-sdk</code>: Fix instrument creation race condition (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4913">#4913</a>)</li> <li>bump semantic-conventions to v1.39.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4914">#4914</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/dd2202172982d1b3cc896ddecc2bef27d7956acb"><code>dd22021</code></a> Prepare release 1.40.0/0.61b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4949">#4949</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/26c716602cd5927a4ad1e36a77baefdeba5457a5"><code>26c7166</code></a> api: add docstrings to core metrics instrument abstract methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4923">#4923</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/c17ba89fdf62e39221211c2110816daff09e4238"><code>c17ba89</code></a> opentelemetry-sdk: deprecate logging handler (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4919">#4919</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6ea15ffa5da5c4fa0b599e1c0c54644e42be20b3"><code>6ea15ff</code></a> docs: Clarify log processor error handling expectations (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4915">#4915</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/24f4fb0ead320b8a1196f01612ce94b1ea959838"><code>24f4fb0</code></a> bump semconv to v1.40.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4941">#4941</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/2308baf3ee7053d70ca3db8b9ba02a2387ef2aeb"><code>2308baf</code></a> maint: Add stale github action (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4926">#4926</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/99b47df940a624523aecad88f54d7721beec6559"><code>99b47df</code></a> config: generate model code from json schema (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4879">#4879</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/9a658ac86376a13ccf3a67d245a9f3edc5f19043"><code>9a658ac</code></a> Add Lukas to approvers (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4939">#4939</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/1c64c149681d47c42506ccc7e9840aad049c755e"><code>1c64c14</code></a> opentelemetry-sdk: change sdk metrics related parameters as named (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4937">#4937</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/7247af7f0f131541df5f3509e5ecd7e4f90f18c2"><code>7247af7</code></a> opentelemetry-sdk: change sdk metrics related parameters as named (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4937">#4937</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-python/compare/v1.39.1...v1.40.0">compare view</a></li> </ul> </details> <br /> Updates `opentelemetry-sdk` from 1.39.1 to 1.40.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-sdk's changelog</a>.</em></p> <blockquote> <h2>Version 1.40.0/0.61b0 (2026-03-04)</h2> <ul> <li><code>opentelemetry-sdk</code>: deprecate <code>LoggingHandler</code> in favor of <code>opentelemetry-instrumentation-logging</code>, see <code>opentelemetry-instrumentation-logging</code> documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4919">#4919</a>)</li> <li><code>opentelemetry-sdk</code>: Clarify log processor error handling expectations in documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4915">#4915</a>)</li> <li>bump semantic-conventions to v1.40.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4941">#4941</a>)</li> <li>Add stale PR GitHub Action (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4926">#4926</a>)</li> <li><code>opentelemetry-sdk</code>: Drop unused Jaeger exporter environment variables (exporter removed in 1.22.0) (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4918">#4918</a>)</li> <li><code>opentelemetry-sdk</code>: Clarify timeout units in environment variable documentation (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4906">#4906</a>)</li> <li><code>opentelemetry-exporter-otlp-proto-grpc</code>: Fix re-initialization of gRPC channel on UNAVAILABLE error (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4825">#4825</a>)</li> <li><code>opentelemetry-exporter-prometheus</code>: Fix duplicate HELP/TYPE declarations for metrics with different label sets (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4868">#4868</a>)</li> <li>Allow loading all resource detectors by setting <code>OTEL_EXPERIMENTAL_RESOURCE_DETECTORS</code> to <code>*</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4819">#4819</a>)</li> <li><code>opentelemetry-sdk</code>: Fix the type hint of the <code>_metrics_data</code> property to allow <code>None</code> (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4837">#4837</a>).</li> <li>Regenerate opentelemetry-proto code with v1.9.0 release (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4840">#4840</a>)</li> <li>Add python 3.14 support (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4798">#4798</a>)</li> <li>Silence events API warnings for internal users (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4847">#4847</a>)</li> <li>opentelemetry-sdk: make it possible to override the default processors in the SDK configurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4806">#4806</a>)</li> <li>Prevent possible endless recursion from happening in <code>SimpleLogRecordProcessor.on_emit</code>, (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4799">#4799</a>) and (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4867">#4867</a>).</li> <li>Implement span start/end metrics (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4880">#4880</a>)</li> <li>Add environment variable carriers to API (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4609">#4609</a>)</li> <li>Add experimental composable rule based sampler (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4882">#4882</a>)</li> <li>Make ConcurrentMultiSpanProcessor fork safe (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4862">#4862</a>)</li> <li><code>opentelemetry-exporter-otlp-proto-http</code>: fix retry logic and error handling for connection failures in trace, metric, and log exporters (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4709">#4709</a>)</li> <li><code>opentelemetry-sdk</code>: avoid RuntimeError during iteration of view instrument match dictionary in MetricReaderStorage.collect() (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4891">#4891</a>)</li> <li>Implement experimental TracerConfigurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4861">#4861</a>)</li> <li><code>opentelemetry-sdk</code>: Fix instrument creation race condition (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4913">#4913</a>)</li> <li>bump semantic-conventions to v1.39.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4914">#4914</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/dd2202172982d1b3cc896ddecc2bef27d7956acb"><code>dd22021</code></a> Prepare release 1.40.0/0.61b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4949">#4949</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/26c716602cd5927a4ad1e36a77baefdeba5457a5"><code>26c7166</code></a> api: add docstrings to core metrics instrument abstract methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4923">#4923</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/c17ba89fdf62e39221211c2110816daff09e4238"><code>c17ba89</code></a> opentelemetry-sdk: deprecate logging handler (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4919">#4919</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6ea15ffa5da5c4fa0b599e1c0c54644e42be20b3"><code>6ea15ff</code></a> docs: Clarify log processor error handling expectations (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4915">#4915</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/24f4fb0ead320b8a1196f01612ce94b1ea959838"><code>24f4fb0</code></a> bump semconv to v1.40.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4941">#4941</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/2308baf3ee7053d70ca3db8b9ba02a2387ef2aeb"><code>2308baf</code></a> maint: Add stale github action (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4926">#4926</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/99b47df940a624523aecad88f54d7721beec6559"><code>99b47df</code></a> config: generate model code from json schema (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4879">#4879</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/9a658ac86376a13ccf3a67d245a9f3edc5f19043"><code>9a658ac</code></a> Add Lukas to approvers (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4939">#4939</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/1c64c149681d47c42506ccc7e9840aad049c755e"><code>1c64c14</code></a> opentelemetry-sdk: change sdk metrics related parameters as named (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4937">#4937</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/7247af7f0f131541df5f3509e5ecd7e4f90f18c2"><code>7247af7</code></a> opentelemetry-sdk: change sdk metrics related parameters as named (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4937">#4937</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-python/compare/v1.39.1...v1.40.0">compare view</a></li> </ul> </details> <br /> Updates `pyjwt` from 2.11.0 to 2.12.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p> <blockquote> <h2>2.12.1</h2> <h2>What's Changed</h2> <ul> <li>Add typing_extensions dependency for Python < 3.11 by <a href="https://github.com/jpadilla"><code>@jpadilla</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1151">jpadilla/pyjwt#1151</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1">https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1</a></p> <h2>2.12.0</h2> <h2>Security</h2> <ul> <li>Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by <a href="https://github.com/dmbs335"><code>@dmbs335</code></a> in <a href="https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f">GHSA-752w-5fwx-jx9f</a></li> </ul> <h2>What's Changed</h2> <ul> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1132">jpadilla/pyjwt#1132</a></li> <li>chore(docs): fix docs build by <a href="https://github.com/tamird"><code>@tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1137">jpadilla/pyjwt#1137</a></li> <li>Annotate PyJWKSet.keys for pyright by <a href="https://github.com/tamird"><code>@tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1134">jpadilla/pyjwt#1134</a></li> <li>fix: close HTTPError to prevent ResourceWarning on Python 3.14 by <a href="https://github.com/veeceey"><code>@veeceey</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1133">jpadilla/pyjwt#1133</a></li> <li>chore: remove superfluous constants by <a href="https://github.com/tamird"><code>@tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1136">jpadilla/pyjwt#1136</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1135">jpadilla/pyjwt#1135</a></li> <li>chore(tests): enable mypy by <a href="https://github.com/tamird"><code>@tamird</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1138">jpadilla/pyjwt#1138</a></li> <li>Bump actions/download-artifact from 7 to 8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1142">jpadilla/pyjwt#1142</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1141">jpadilla/pyjwt#1141</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1145">jpadilla/pyjwt#1145</a></li> <li>fix: do not store reference to algorithms dict on PyJWK by <a href="https://github.com/akx"><code>@akx</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1143">jpadilla/pyjwt#1143</a></li> <li>Use PyJWK algorithm when encoding without explicit algorithm by <a href="https://github.com/jpadilla"><code>@jpadilla</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1148">jpadilla/pyjwt#1148</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tamird"><code>@tamird</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1137">jpadilla/pyjwt#1137</a></li> <li><a href="https://github.com/veeceey"><code>@veeceey</code></a> made their first contribution in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1133">jpadilla/pyjwt#1133</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0">https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p> <blockquote> <h2><code>v2.12.1 <https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1></code>__</h2> <p>Fixed</p> <pre><code> - Add missing ``typing_extensions`` dependency for Python < 3.11 in `[#1150](https://github.com/jpadilla/pyjwt/issues/1150) <https://github.com/jpadilla/pyjwt/issues/1150>`__ <h2><code>v2.12.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0&gt;</code>__</h2> <p>Fixed </code></pre></p> <ul> <li>Annotate PyJWKSet.keys for pyright by <a href="https://github.com/tamird"><code>@tamird</code></a> in <code>[#1134](https://github.com/jpadilla/pyjwt/issues/1134) <https://github.com/jpadilla/pyjwt/pull/1134></code>__</li> <li>Clo…
Bumps [requests](https://github.com/psf/requests) from 2.32.4 to 2.33.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/releases">requests's releases</a>.</em></p> <blockquote> <h2>v2.33.0</h2> <h2>2.33.0 (2026-03-25)</h2> <p><strong>Announcements</strong></p> <ul> <li>📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at <a href="https://redirect.github.com/psf/requests/issues/7271">#7271</a>. Give it a try, and report any gaps or feedback you may have in the issue. 📣</li> </ul> <p><strong>Security</strong></p> <ul> <li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Migrated to a PEP 517 build system using setuptools. (<a href="https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li> </ul> <p><strong>Bugfixes</strong></p> <ul> <li>Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (<a href="https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Dropped support for Python 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li> </ul> <p><strong>Documentation</strong></p> <ul> <li>Various typo fixes and doc improvements.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/M0d3v1"><code>@M0d3v1</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6865">psf/requests#6865</a></li> <li><a href="https://github.com/aminvakil"><code>@aminvakil</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7220">psf/requests#7220</a></li> <li><a href="https://github.com/E8Price"><code>@E8Price</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6960">psf/requests#6960</a></li> <li><a href="https://github.com/mitre88"><code>@mitre88</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7244">psf/requests#7244</a></li> <li><a href="https://github.com/magsen"><code>@magsen</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/6553">psf/requests#6553</a></li> <li><a href="https://github.com/Rohan5commit"><code>@Rohan5commit</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7227">psf/requests#7227</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25">https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25</a></p> <h2>v2.32.5</h2> <h2>2.32.5 (2025-08-18)</h2> <p><strong>Bugfixes</strong></p> <ul> <li>The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Added support for Python 3.14.</li> <li>Dropped support for Python 3.8 following its end of support.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's changelog</a>.</em></p> <blockquote> <h2>2.33.0 (2026-03-25)</h2> <p><strong>Announcements</strong></p> <ul> <li>📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at <a href="https://redirect.github.com/psf/requests/issues/7271">#7271</a>. Give it a try, and report any gaps or feedback you may have in the issue. 📣</li> </ul> <p><strong>Security</strong></p> <ul> <li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.</li> </ul> <p><strong>Improvements</strong></p> <ul> <li>Migrated to a PEP 517 build system using setuptools. (<a href="https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li> </ul> <p><strong>Bugfixes</strong></p> <ul> <li>Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (<a href="https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Dropped support for Python 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li> </ul> <p><strong>Documentation</strong></p> <ul> <li>Various typo fixes and doc improvements.</li> </ul> <h2>2.32.5 (2025-08-18)</h2> <p><strong>Bugfixes</strong></p> <ul> <li>The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.</li> </ul> <p><strong>Deprecations</strong></p> <ul> <li>Added support for Python 3.14.</li> <li>Dropped support for Python 3.8 following its end of support.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761"><code>bc04dfd</code></a> v2.33.0</li> <li><a href="https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"><code>66d21cb</code></a> Merge commit from fork</li> <li><a href="https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028"><code>8b9bc8f</code></a> Move badges to top of README (<a href="https://redirect.github.com/psf/requests/issues/7293">#7293</a>)</li> <li><a href="https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286"><code>e331a28</code></a> Remove unused extraction call (<a href="https://redirect.github.com/psf/requests/issues/7292">#7292</a>)</li> <li><a href="https://github.com/psf/requests/commit/753fd08c5eacce0aa0df73fe47e49525c67e0a29"><code>753fd08</code></a> docs: fix FAQ grammar in httplib2 example</li> <li><a href="https://github.com/psf/requests/commit/774a0b837a194ee885d4fdd9ca947900cc3daf71"><code>774a0b8</code></a> docs(socks): same block as other sections</li> <li><a href="https://github.com/psf/requests/commit/9c72a41bec8597f948c9d8caa5dc3f12273b3303"><code>9c72a41</code></a> Bump github/codeql-action from 4.33.0 to 4.34.1</li> <li><a href="https://github.com/psf/requests/commit/ebf71906798ec82f34e07d3168f8b8aecaf8a3be"><code>ebf7190</code></a> Bump github/codeql-action from 4.32.0 to 4.33.0</li> <li><a href="https://github.com/psf/requests/commit/0e4ae38f0c93d4f92a96c774bd52c069d12a4798"><code>0e4ae38</code></a> docs: exclude Response.is_permanent_redirect from API docs (<a href="https://redirect.github.com/psf/requests/issues/7244">#7244</a>)</li> <li><a href="https://github.com/psf/requests/commit/d568f47278492e630cc990a259047c67991d007a"><code>d568f47</code></a> docs: clarify Quickstart POST example (<a href="https://redirect.github.com/psf/requests/issues/6960">#6960</a>)</li> <li>Additional commits viewable in <a href="https://github.com/psf/requests/compare/v2.32.4...v2.33.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
See #922, `pull_request_target` apparently requires pushing to `main`.
Use check-spelling/check-spelling#103 (comment) to workaround "Unsafe Permissions" failure ([example](https://github.com/a2aproject/a2a-python/actions/runs/23900666340)).
Contributor
|
Note Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported. |
🧪 Code Coverage (vs
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.