From 4ce30e2e8c83132097cc9026264a3e1dee114169 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 5 Oct 2026 09:19:40 +0000 Subject: [PATCH] chore(deps): bump the python group across 1 directory with 25 updates Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [starlette](https://github.com/Kludex/starlette), [gitpython](https://github.com/gitpython-developers/GitPython), [uvicorn](https://github.com/Kludex/uvicorn), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [psycopg](https://github.com/psycopg/psycopg), [pydantic](https://github.com/pydantic/pydantic), [pyjwt](https://github.com/jpadilla/pyjwt), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [ansible-core](https://github.com/ansible/ansible), [cryptography](https://github.com/pyca/cryptography), [authlib](https://github.com/authlib/authlib), [idna](https://github.com/kjd/idna), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-sqlalchemy](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-celery](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-redis](https://github.com/open-telemetry/opentelemetry-python-contrib), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [hypothesis](https://github.com/HypothesisWorks/hypothesis) and [mutmut](https://github.com/boxed/mutmut) to permit the latest version. Updates `fastapi` to 0.142.2 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.141.1...0.142.2) Updates `starlette` to 1.7.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.6.0...1.7.0) Updates `gitpython` to 3.2.0 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.59...3.2.0) Updates `uvicorn` to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.52.3...0.54.0) Updates `sqlalchemy` to 2.1.2 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `psycopg` to 3.3.6 - [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst) - [Commits](https://github.com/psycopg/psycopg/compare/3.3.4...3.3.6) Updates `pydantic` to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.13.5) Updates `pyjwt` to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.13.0...2.15.1) Updates `anthropic` to 1.11.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.122.0...v1.11.0) Updates `ansible-core` to 2.21.4 - [Release notes](https://github.com/ansible/ansible/releases) - [Commits](https://github.com/ansible/ansible/compare/v2.21.3...v2.21.4) Updates `cryptography` to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.2) Updates `authlib` to 1.8.0 - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](https://github.com/authlib/authlib/compare/v1.7.2...v1.8.0) Updates `idna` to 3.20 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](https://github.com/kjd/idna/compare/v3.18...v3.20) Updates `opentelemetry-sdk` to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0) Updates `opentelemetry-exporter-otlp-proto-grpc` to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.44.0...v1.45.0) Updates `opentelemetry-instrumentation-fastapi` to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-sqlalchemy` to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-celery` to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-httpx` to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-redis` to 0.66b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `ruff` to 0.16.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.10) Updates `mypy` to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.3.0...v2.4.0) Updates `hypothesis` to 6.168.3 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](https://github.com/HypothesisWorks/hypothesis/compare/v6.165.7...v6.168.3) Updates `mutmut` to 3.8.0 - [Release notes](https://github.com/boxed/mutmut/releases) - [Changelog](https://github.com/boxed/mutmut/blob/main/HISTORY.rst) - [Commits](https://github.com/boxed/mutmut/compare/3.7.0...3.8.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.142.2 dependency-type: direct:production dependency-group: python - dependency-name: starlette dependency-version: 1.7.0 dependency-type: direct:production dependency-group: python - dependency-name: gitpython dependency-version: 3.2.0 dependency-type: direct:production dependency-group: python - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production dependency-group: python - dependency-name: sqlalchemy dependency-version: 2.1.2 dependency-type: direct:production dependency-group: python - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production dependency-group: python - dependency-name: psycopg dependency-version: 3.3.6 dependency-type: direct:production dependency-group: python - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production dependency-group: python - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production dependency-group: python - dependency-name: anthropic dependency-version: 1.11.0 dependency-type: direct:production dependency-group: python - dependency-name: ansible-core dependency-version: 2.21.4 dependency-type: direct:production dependency-group: python - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:production dependency-group: python - dependency-name: authlib dependency-version: 1.8.0 dependency-type: direct:production dependency-group: python - dependency-name: idna dependency-version: '3.20' dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-sdk dependency-version: 1.45.0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-exporter-otlp-proto-grpc dependency-version: 1.45.0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-instrumentation-fastapi dependency-version: 0.66b0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-instrumentation-sqlalchemy dependency-version: 0.66b0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-instrumentation-celery dependency-version: 0.66b0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-instrumentation-httpx dependency-version: 0.66b0 dependency-type: direct:production dependency-group: python - dependency-name: opentelemetry-instrumentation-redis dependency-version: 0.66b0 dependency-type: direct:production dependency-group: python - dependency-name: ruff dependency-version: 0.16.10 dependency-type: direct:development dependency-group: python - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development dependency-group: python - dependency-name: hypothesis dependency-version: 6.168.3 dependency-type: direct:development dependency-group: python - dependency-name: mutmut dependency-version: 3.8.0 dependency-type: direct:development dependency-group: python ... Signed-off-by: dependabot[bot] --- pyproject.toml | 50 +++++++++++++++++++++++++------------------------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index d7089121..1bae8c99 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -7,16 +7,16 @@ name = "fleet-platform" dynamic = ["version"] requires-python = ">=3.13" dependencies = [ - "fastapi>=0.141.1", - "starlette>=1.6.0", # CVE-2026-54282/54283 (transitive via fastapi) - "gitpython>=3.1.59", - "uvicorn[standard]>=0.52.3", - "sqlalchemy>=2.0.52", - "alembic>=1.19.1", - "psycopg[async,binary]>=3.3.4", - "pydantic>=2.13.4", + "fastapi>=0.142.2", + "starlette>=1.7.0", # CVE-2026-54282/54283 (transitive via fastapi) + "gitpython>=3.2.0", + "uvicorn[standard]>=0.54.0", + "sqlalchemy>=2.1.2", + "alembic>=1.20.0", + "psycopg[async,binary]>=3.3.6", + "pydantic>=2.13.5", "pydantic-settings>=2.15.0", # GHSA-4xgf-cpjx-pc3j - "pyjwt[crypto]>=2.13.0", + "pyjwt[crypto]>=2.15.1", "bcrypt>=5.0.0", "celery[redis]>=5.6.3", "redis>=5.3.1", @@ -24,16 +24,16 @@ dependencies = [ "structlog>=26.1.0", "python-multipart>=0.0.32", # CVE-2026-53538/53539/53540 "httpx>=0.28.1", - "anthropic>=0.122.0", + "anthropic>=1.11.0", "slowapi>=0.1.10", "aiofiles>=25.1.0", "email-validator>=2.3.0", "pyyaml>=6.0.3", "ansible-runner>=2.4.3", - "ansible-core>=2.21.3", - "cryptography>=50.0.0", # GHSA-537c-gmf6-5ccf - "authlib>=1.7.2", - "idna>=3.18", # CVE-2026-45409: ReDoS in encode(); fix in 3.15 + "ansible-core>=2.21.4", + "cryptography>=50.0.2", # GHSA-537c-gmf6-5ccf + "authlib>=1.8.0", + "idna>=3.20", # CVE-2026-45409: ReDoS in encode(); fix in 3.15 "asyncssh>=2.24.0", "requests>=2.34.2", "prometheus-client>=0.26.0", @@ -41,13 +41,13 @@ dependencies = [ # OpenTelemetry — wire real distributed tracing so trace_id in logs maps to # spans in Tempo (replaces the random UUID4 fallback in core/logging.py). # Configure via OTEL_EXPORTER_OTLP_ENDPOINT; if unset the SDK is a no-op. - "opentelemetry-sdk>=1.44.0", - "opentelemetry-exporter-otlp-proto-grpc>=1.44.0", - "opentelemetry-instrumentation-fastapi>=0.65b0", - "opentelemetry-instrumentation-sqlalchemy>=0.65b0", - "opentelemetry-instrumentation-celery>=0.65b0", - "opentelemetry-instrumentation-httpx>=0.65b0", - "opentelemetry-instrumentation-redis>=0.65b0", + "opentelemetry-sdk>=1.45.0", + "opentelemetry-exporter-otlp-proto-grpc>=1.45.0", + "opentelemetry-instrumentation-fastapi>=0.66b0", + "opentelemetry-instrumentation-sqlalchemy>=0.66b0", + "opentelemetry-instrumentation-celery>=0.66b0", + "opentelemetry-instrumentation-httpx>=0.66b0", + "opentelemetry-instrumentation-redis>=0.66b0", ] [project.optional-dependencies] @@ -55,18 +55,18 @@ dev = [ "pytest>=9.1.1", "pytest-asyncio>=1.4.0", "pytest-cov>=7.1.0", - "ruff>=0.16.3", - "mypy>=2.3.0", + "ruff>=0.16.10", + "mypy>=2.4.0", "vulture>=2.16", "bandit[toml]>=1.9.4", "pre-commit>=4.6.2", - "hypothesis>=6.165.7", + "hypothesis>=6.168.3", # Pin below 3.6.0: that release renamed the [tool.mutmut] keys # (paths_to_mutate->source_paths, tests_dir folded into # pytest_add_cli_args_test_selection) AND shipped a config-loader bug that # crashes `mutmut results` with "can only concatenate list (not 'str') to # list", failing the mutation CI job. 3.5.0 reads our string-valued config. - "mutmut>=3.7.0,<3.8.0", + "mutmut>=3.8.0,<3.9.0", ] # Only package fleet_platform — exclude playbooks/ and other top-level dirs.