From 99a41b3e7bb536e37a30122a6202c93f0ac5c37c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 09:20:26 +0000 Subject: [PATCH] chore(deps): bump the python group across 1 directory with 16 updates Updates the requirements on [gitpython](https://github.com/gitpython-developers/GitPython), [uvicorn](https://github.com/Kludex/uvicorn), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [psycopg](https://github.com/psycopg/psycopg), [pydantic](https://github.com/pydantic/pydantic), [pyjwt](https://github.com/jpadilla/pyjwt), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [ansible-core](https://github.com/ansible/ansible), [cryptography](https://github.com/pyca/cryptography), [authlib](https://github.com/authlib/authlib), [idna](https://github.com/kjd/idna), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [hypothesis](https://github.com/HypothesisWorks/hypothesis) and [mutmut](https://github.com/boxed/mutmut) to permit the latest version. Updates `gitpython` to 3.1.62 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.59...3.1.62) Updates `uvicorn` to 0.53.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.52.3...0.53.0) Updates `sqlalchemy` to 2.0.54 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `psycopg` to 3.3.5 - [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst) - [Commits](https://github.com/psycopg/psycopg/compare/3.3.4...3.3.5) Updates `pydantic` to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.13.5) Updates `pyjwt` to 2.14.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0) Updates `anthropic` to 1.6.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.122.0...v1.6.0) Updates `ansible-core` to 2.21.4 - [Release notes](https://github.com/ansible/ansible/releases) - [Commits](https://github.com/ansible/ansible/compare/v2.21.3...v2.21.4) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1) Updates `authlib` to 1.8.0 - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](https://github.com/authlib/authlib/compare/v1.7.2...v1.8.0) Updates `idna` to 3.20 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](https://github.com/kjd/idna/compare/v3.18...v3.20) Updates `ruff` to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.8) Updates `mypy` to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.3.0...v2.3.1) Updates `hypothesis` to 6.168.0 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.165.7...v6.168.0) Updates `mutmut` to 3.8.0 - [Release notes](https://github.com/boxed/mutmut/releases) - [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst) - [Commits](https://github.com/boxed/mutmut/compare/3.7.0...3.8.0) --- updated-dependencies: - dependency-name: gitpython dependency-version: 3.1.62 dependency-type: direct:production dependency-group: python - dependency-name: uvicorn dependency-version: 0.53.0 dependency-type: direct:production dependency-group: python - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production dependency-group: python - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production dependency-group: python - dependency-name: psycopg dependency-version: 3.3.5 dependency-type: direct:production dependency-group: python - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production dependency-group: python - dependency-name: pyjwt dependency-version: 2.14.0 dependency-type: direct:production dependency-group: python - dependency-name: anthropic dependency-version: 1.6.0 dependency-type: direct:production dependency-group: python - dependency-name: ansible-core dependency-version: 2.21.4 dependency-type: direct:production dependency-group: python - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: python - dependency-name: authlib dependency-version: 1.8.0 dependency-type: direct:production dependency-group: python - dependency-name: idna dependency-version: '3.20' dependency-type: direct:production dependency-group: python - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:development dependency-group: python - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:development dependency-group: python - dependency-name: hypothesis dependency-version: 6.168.0 dependency-type: direct:development dependency-group: python - dependency-name: mutmut dependency-version: 3.8.0 dependency-type: direct:development dependency-group: python ... Signed-off-by: dependabot[bot] --- pyproject.toml | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index d7089121..d2d12e7a 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -9,14 +9,14 @@ requires-python = ">=3.13" dependencies = [ "fastapi>=0.141.1", "starlette>=1.6.0", # CVE-2026-54282/54283 (transitive via fastapi) - "gitpython>=3.1.59", - "uvicorn[standard]>=0.52.3", - "sqlalchemy>=2.0.52", - "alembic>=1.19.1", - "psycopg[async,binary]>=3.3.4", - "pydantic>=2.13.4", + "gitpython>=3.1.62", + "uvicorn[standard]>=0.53.0", + "sqlalchemy>=2.0.54", + "alembic>=1.20.0", + "psycopg[async,binary]>=3.3.5", + "pydantic>=2.13.5", "pydantic-settings>=2.15.0", # GHSA-4xgf-cpjx-pc3j - "pyjwt[crypto]>=2.13.0", + "pyjwt[crypto]>=2.14.0", "bcrypt>=5.0.0", "celery[redis]>=5.6.3", "redis>=5.3.1", @@ -24,16 +24,16 @@ dependencies = [ "structlog>=26.1.0", "python-multipart>=0.0.32", # CVE-2026-53538/53539/53540 "httpx>=0.28.1", - "anthropic>=0.122.0", + "anthropic>=1.6.0", "slowapi>=0.1.10", "aiofiles>=25.1.0", "email-validator>=2.3.0", "pyyaml>=6.0.3", "ansible-runner>=2.4.3", - "ansible-core>=2.21.3", - "cryptography>=50.0.0", # GHSA-537c-gmf6-5ccf - "authlib>=1.7.2", - "idna>=3.18", # CVE-2026-45409: ReDoS in encode(); fix in 3.15 + "ansible-core>=2.21.4", + "cryptography>=50.0.1", # GHSA-537c-gmf6-5ccf + "authlib>=1.8.0", + "idna>=3.20", # CVE-2026-45409: ReDoS in encode(); fix in 3.15 "asyncssh>=2.24.0", "requests>=2.34.2", "prometheus-client>=0.26.0", @@ -55,18 +55,18 @@ dev = [ "pytest>=9.1.1", "pytest-asyncio>=1.4.0", "pytest-cov>=7.1.0", - "ruff>=0.16.3", - "mypy>=2.3.0", + "ruff>=0.16.8", + "mypy>=2.3.1", "vulture>=2.16", "bandit[toml]>=1.9.4", "pre-commit>=4.6.2", - "hypothesis>=6.165.7", + "hypothesis>=6.168.0", # Pin below 3.6.0: that release renamed the [tool.mutmut] keys # (paths_to_mutate->source_paths, tests_dir folded into # pytest_add_cli_args_test_selection) AND shipped a config-loader bug that # crashes `mutmut results` with "can only concatenate list (not 'str') to # list", failing the mutation CI job. 3.5.0 reads our string-valued config. - "mutmut>=3.7.0,<3.8.0", + "mutmut>=3.8.0,<3.9.0", ] # Only package fleet_platform — exclude playbooks/ and other top-level dirs.