Skip to content

build: bump the python-deps group across 1 directory with 12 updates#37

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-deps-0adf181742
Open

build: bump the python-deps group across 1 directory with 12 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-deps-0adf181742

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown

Updates the requirements on fastapi, uvicorn, python-dotenv, pydantic, httpx, python-multipart, fpdf2, azure-monitor-opentelemetry, azure-identity, azure-ai-projects, openai and pytest to permit the latest version.
Updates fastapi to 0.136.3

Release notes

Sourced from fastapi's releases.

0.136.3

Refactors

  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @​tiangolo.
Commits
  • 8206485 🔖 Release version 0.136.3
  • c910e01 📝 Update release notes
  • 063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
  • 22b02e2 🔖 Release version 0.136.2
  • 3b252a2 📝 Update release notes
  • c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
  • cb83b83 📝 Update release notes
  • 00f805c ✅ Update tests, don't double dispose the engine (#15587)
  • 3675137 📝 Update release notes
  • 7b57e42 📝 Document --entrypoint CLI option (#15464)
  • Additional commits viewable in compare view

Updates uvicorn to 0.48.0

Release notes

Sourced from uvicorn's releases.

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Changelog

Sourced from uvicorn's changelog.

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

  • Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

  • Eagerly import the ASGI app in the parent process (#2919)

Fixed

  • Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

Changed

  • Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)
  • Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

... (truncated)

Commits
  • 73e84e5 Version 0.48.0 (#2951)
  • 45ea116 Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)
  • dd4394c chore(deps): bump idna from 3.11 to 3.15 (#2941)
  • abe0781 Default ssl_ciphers to None and use OpenSSL defaults (#2940)
  • 479a2c0 Version 0.47.0 (#2937)
  • 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
  • 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
  • f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
  • 8782666 Fix typo in docs/deployment/index.md. (#2932)
  • ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
  • Additional commits viewable in compare view

Updates python-dotenv to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

... (truncated)

Commits

Updates pydantic to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • Additional commits viewable in compare view

Updates httpx to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.
Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

0.28.0 (28th November, 2024)

Be aware that the default JSON request bodies now use a more compact representation. This is generally considered a prefered style, tho may require updates to test suites.

The 0.28 release includes a limited set of deprecations...

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

0.27.2 (27th August, 2024)

Fixed

  • Reintroduced supposedly-private URLTypes shortcut. (#2673)

0.27.1 (27th August, 2024)

Added

  • Support for zstd content decoding using the python zstandard package is added. Installable using httpx[zstd]. (#3139)

Fixed

  • Improved error messaging for InvalidURL exceptions. (#3250)
  • Fix app type signature in ASGITransport. (#3109)

0.27.0 (21st February, 2024)

... (truncated)

Commits

Updates python-multipart to 0.0.30

Release notes

Sourced from python-multipart's releases.

Version 0.0.30

What's Changed

Full Changelog: Kludex/python-multipart@0.0.29...0.0.30

Changelog

Sourced from python-multipart's changelog.

0.0.30 (2026-05-31)

  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

  • Speed up partial-boundary tail scan via bytes.find #281.
  • Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

  • Add multipart header limits #267.
  • Pass parse offsets via constructors #268.

0.0.26 (2026-04-10)

  • Skip preamble before the first multipart boundary more efficiently #262.
  • Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

  • Add MIME content type info to File #143.
  • Handle CTE values case-insensitively #258.
  • Remove custom FormParser classes #257.
  • Add UPLOAD_DELETE_TMP to FormParser config #254.
  • Emit field_end for trailing bare field names on finalize #230.
  • Handle multipart headers case-insensitively #252.
  • Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

  • Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

  • Remove unused trust_x_headers parameter and X-File-Name fallback #196.
  • Return processed length from QuerystringParser._internal_write #229.
  • Cleanup metadata dunders from __init__.py #227.

0.0.22 (2026-01-25)

  • Drop directory path from filename in File 9433f4b.

0.0.21 (2025-12-17)

... (truncated)

Commits

Updates fpdf2 to 2.8.7

Release notes

Sourced from fpdf2's releases.

Several bugfixes

[2.8.7] - 2026-02-28

Fixed

  • types on FPDF.title, FPDF.add_font() and FPDF.output()
  • added missing files to navigation tree in mkdocs.yml - thanks to @​paulsuh

Changed

  • reverted changes to ImageInfo that impacted user-facing API
  • prefer outline glyphs over bitmap if the font has both
Changelog

Sourced from fpdf2's changelog.

[2.8.7] - 2026-02-28

Fixed

  • types on FPDF.title, FPDF.add_font() and FPDF.output()
  • added missing files to navigation tree in mkdocs.yml - thanks to @​paulsuh

Changed

  • reverted changes to ImageInfo that impacted user-facing API
  • prefer outline glyphs over bitmap if the font has both

[2.8.6] - 2026-02-18

Added

  • support for FPDF.transform() context manager to apply geometric transformations (translation, rotation, scaling, skewing) to the current graphics state - thanks to @​RaphaelFLT
  • support for SVG <linearGradient> and <radialGradient> elements - cf. [issue #1580](py-pdf/fpdf2#1580) - thanks to @​Ani07-05
  • mypy and pyright checks in the CI pipeline to enforce strict typing
  • support WOFF and WOFF2 fonts - thanks to @​BharathPESU
  • TTC/OTC face selection via collection_font_number in add_font()
  • CID-keyed CFF font embedding support
  • Microsoft Symbol font remapping for non-Unicode cmaps
  • support for EBDT/EBLC bitmap fonts

Fixed

  • the A5 value that could be specified as page format to the FPDF constructor was slightly incorrect, and the corresponding page dimensions have been fixed. This could lead to a minor change in your documents dimensions if you used this A5 page format. - cf. [issue #1699](py-pdf/fpdf2#1699)
  • a bug when rendering empty tables with INTERNAL layout, that caused an extra border to be rendered due to an erroneous use of list.index() - cf. [issue #1669](py-pdf/fpdf2#1669)
  • edge cases where tiny floating-point drift could trigger incorrect behaviour like [issue #1393](py-pdf/fpdf2#1393)
  • parentheses are now escaped in more places. This fixes embedding a file with a single parenthesis in the filename, but might also have impacts on e.g. section names.
  • parsing markdown sequences with escape character - cf. [issue #1236](py-pdf/fpdf2#1236) - thanks @​amidou-naba

Changed

  • improved performance when rendering paths, SVGs, and opaque raster images with an alpha channel - cf. [PR #1675](py-pdf/fpdf2#1675)
  • typing annotations added across the codebase as part of the strict typing rollout
  • graphics state snapshots now use a GraphicsState dataclass dataclass for clearer usage and stronger typing
  • rotation(), skew(), and mirror() now delegate to transform() for standardized transform application
  • ImageInfo now uses typed dictionaries for clearer usage and stronger typing

[2.8.5] - 2025-10-29

Added

Fixed

... (truncated)

Commits

Updates azure-monitor-opentelemetry to 1.8.8

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.8.8

1.8.8 (2026-05-14)

Features Added

  • Move AZURE_MONITOR_DISTRO_VERSION env var assignment before exporter imports (#46869)
  • Set AZURE_MONITOR_DISTRO_VERSION environment variable to pass distro version to the exporter (#46666)
  • Register GenAI main-agent attribution processors to automatically propagate microsoft.gen_ai.main_agent.* attributes in multi-agent GenAI systems per spec (#46703)

Breaking Changes

Other Changes

  • Remove deprecated events packages. (#45684)
Commits

Updates azure-identity to 1.25.3

Commits

Updates azure-ai-projects to 2.2.0

Updates openai to 2.40.0

Release notes

Sourced from openai's releases.

v2.40.0

2.40.0 (2026-06-01)

Full Changelog: v2.39.0...v2.40.0

Features

  • api: Add Amazon Bedrock Responses support

Bug Fixes

  • api: allow setting bedrock api keys on the client directly (4d5bfde)
Changelog

Sourced from openai's changelog.

2.40.0 (2026-06-01)

Full Changelog: v2.39.0...v2.40.0

Features

  • api: Add Amazon Bedrock Responses support

Bug Fixes

  • api: allow setting bedrock api keys on the client directly (4d5bfde)

2.39.0 (2026-06-01)

Full Changelog: v2.38.0...v2.39.0

Features

  • api: workload identity in audit logs, additional_tools item in responses, fix ActionSearch.query to be optional. (ab60d7a)

2.38.0 (2026-05-21)

Full Changelog: v2.37.0...v2.38.0

Features

  • api: api update (33d1d01)
  • api: manual updates (a21700a)
  • api: update OpenAPI spec or Stainless config (00265c5)

Chores

  • api: docs updates (ee10152)
  • check release PR custom code sync (2638779)
  • remove release automation trigger (bd6eea5)
  • trigger release automation (f62d082)

2.37.0 (2026-05-13)

Full Changelog: v2.36.0...v2.37.0

Features

  • api: add service_tier parameter to responses compact method (625827c)
  • internal/types: support eagerly validating pydantic iterators (7e527bc)
  • Remove unnecessary client_id when using workload identity provider for auth (c39ea8d)

Bug Fixes

... (truncated)

Commits
  • a28a3f6 Merge pull request #3352 from openai/release-please--branches--main--changes-...
  • db6ccaf Update CHANGELOG.md
  • 2264f70 release: 2.40.0
  • 4d5bfde fix(api): allow setting bedrock api keys on the client directly

@dependabot
build: bump the python-deps group across 1 directory with 12 updates
e75f83b 
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [python-dotenv](https://github.com/theskumar/python-dotenv), [pydantic](https://github.com/pydantic/pydantic), [httpx](https://github.com/encode/httpx), [python-multipart](https://github.com/Kludex/python-multipart), [fpdf2](https://github.com/py-pdf/fpdf2), [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python), [azure-identity](https://github.com/Azure/azure-sdk-for-python), azure-ai-projects, [openai](https://github.com/openai/openai-python) and [pytest](https://github.com/pytest-dev/pytest) to permit the latest version.

Updates `fastapi` to 0.136.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.110.0...0.136.3)

Updates `uvicorn` to 0.48.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.29.0...0.48.0)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `pydantic` to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.0...v2.13.4)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.0...0.28.1)

Updates `python-multipart` to 0.0.30
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.9...0.0.30)

Updates `fpdf2` to 2.8.7
- [Release notes](https://github.com/py-pdf/fpdf2/releases)
- [Changelog](https://github.com/py-pdf/fpdf2/blob/master/CHANGELOG.md)
- [Commits](py-pdf/fpdf2@2.8.1...2.8.7)

Updates `azure-monitor-opentelemetry` to 1.8.8
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.6.0...azure-monitor-opentelemetry_1.8.8)

Updates `azure-identity` to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.16.0...azure-identity_1.25.3)

Updates `azure-ai-projects` to 2.2.0

Updates `openai` to 2.40.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.0.0...v2.40.0)

Updates `pytest` to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...9.0.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.48.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.30
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: fpdf2
  dependency-version: 2.8.7
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.8
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.40.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants