build(deps): bump the patch group across 1 directory with 7 updates

[dependabot]

Bumps the patch group with 7 updates in the / directory:

Package	From	To
boto3	1.43.82	1.43.89
claude-agent-sdk	0.2.110	0.2.152
weave	0.53.7	0.53.8
xgboost	3.4.0	3.4.1
pydantic	2.13.4	2.13.5
alembic	1.19.1	1.19.2
cachetools	7.1.7	7.1.8

Updates boto3 from 1.43.82 to 1.43.89

Commits

• 1895b95 Merge branch 'release-1.43.89'
• b85c521 Bumping version to 1.43.89
• f729083 Add changelog entries from botocore
• bb429b1 Merge branch 'release-1.43.88'
• 257465b Merge branch 'release-1.43.88' into develop
• e373d8d Bumping version to 1.43.88
• 6ce83de Add changelog entries from botocore
• d5740c2 Merge branch 'release-1.43.87'
• bd30961 Merge branch 'release-1.43.87' into develop
• 316b72c Bumping version to 1.43.87
• Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.110 to 0.2.152

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.152

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.259

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.152/

pip install claude-agent-sdk==0.2.152

v0.2.151

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.258

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.151/

pip install claude-agent-sdk==0.2.151

v0.2.150

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.257

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.150/

pip install claude-agent-sdk==0.2.150

v0.2.149

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.252

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.152

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.259

0.2.151

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.258

0.2.150

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.257

0.2.149

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.252

0.2.148

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.251

0.2.147

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.250

0.2.146

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.248

0.2.145

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.247

0.2.144

... (truncated)

Commits

• a8b1e28 docs: update changelog for v0.2.152
• 0b41fb4 chore: release v0.2.152
• ed1718f chore: bump bundled CLI version to 2.1.259
• 16606a3 docs: update changelog for v0.2.151
• dbe3998 chore: release v0.2.151
• 637906e chore: bump bundled CLI version to 2.1.258
• 1539d2a docs: update changelog for v0.2.150
• 23ca647 chore: release v0.2.150
• 036a35a chore: bump bundled CLI version to 2.1.257
• 9597fc9 docs: update changelog for v0.2.149
• Additional commits viewable in compare view

Updates weave from 0.53.7 to 0.53.8

Commits

• ad35cc3 Release version: 0.53.8-dev0 → 0.53.8
• a169bb7 chore(weave): bind completions create in the Stainless client (#7836)
• 817ffea chore(weave): refresh vendored trace-server clients (#7834)
• 25b2df4 chore(weave): exclude eval traces from agent insights (#7833)
• 04ed4b4 chore(weave): bind 29 already-generated routes in the Stainless client (#7830)
• 499eaba feat(weave): federated identity support for weave (#7726)
• 91ca8e9 chore(weave): refresh vendored trace-server clients (#7823)
• 452449b fix(weave): mark usage response defaults required in the serialization schema...
• 625a824 chore(weave): refresh vendored trace-server clients (#7822)
• e84dec4 chore(weave): refresh model costs (#7817)
• Additional commits viewable in compare view

Updates xgboost from 3.4.0 to 3.4.1

Release notes

Sourced from xgboost's releases.

3.4.1 Patch Release

What's Changed

• [jvm] Fix batch predict for SparseVector features (#12347)
• Fix model slicing with category container. (#12462)

Full Changelog: dmlc/xgboost@v3.4.0...v3.4.1

Additional artifacts

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check

34a5cb99a67bb98b44f204767eeeae642b65a86b2ecfca60082e4d74fd4d169a  xgboost-src-3.4.1.tar.gz
2514d394f989d6e990e67898d7f5e530c7c1867222c497ea454ffc18a31cb096  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

• xgboost_r_gpu_linux.tar.gz: Download

Source tarball

• xgboost-src-3.4.1.tar.gz: Download

Commits

• 6fe8c54 Bump version to 3.4.1. (#12468)
• 00213fc 3.4.1 news. (#12469)
• 565ba56 [backport] Fix model slicing with category container. (#12462) (#12465)
• d84f7c4 [backport][jvm] Fix batch predict for SparseVector features (#12347) (#12466)
• See full diff in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Commits

• 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
• 558379f Bump twine to v7.0.0
• 2cfd5d3 Do not check for docs build
• a735bee Fix more Clippy lints
• 7eed4a1 Fix Clippy 0.1.95 warnings
• b353bbb Prepare release v2.13.5
• 63d2ccc Count validated model fields once in smart unions
• a53ec2e Speed up PyPy CI tests
• d65e0f9 Workaround circular import error in Mypy
• 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
• Additional commits viewable in compare view

Updates alembic from 1.19.1 to 1.19.2

Release notes

Sourced from alembic's releases.

1.19.2

Released: September 4, 2026

changed

• [changed] [autogenerate] The autogenerate plugin for CHECK constraint detection by name, added in 1.19.0. for #508, is no longer enabled by default. It has been renamed from alembic.autogenerate.checkconstraint_byname to alembic.ext.checkconstraint_byname and no longer matches on the "alembic.autogenerate.*" wildcard, which remains the default plugin specification. The previous name will still function as well if placed in the plugins list explicitly, both to enable the plugin and within a "~" exclusion, so that an env.py written against 1.19.0 or 1.19.1 requires no change.

  The plugin is now recommended only for schemas that ensure the naming of all constraints using a client side naming convention, otherwise there's a persistent risk of false positives. See autogenerate_check_constraints for background on things to be aware of when using this plugin.

  As part of this change "type bound" CHECK constraints, which include constraints generated for the Boolean and Enum datatypes when the create_constraint parameter is set to True, are no longer ignored in the metadata side, so that normal name-based matching can occur for these constraints.

  References: #1859

usecase

• [usecase] [autogenerate] [batch] The target of a ~sqlalchemy.schema.ForeignKey is now located using the ForeignKey.target_tokens and ForeignKey.target_table_key accessors added in SQLAlchemy 2.1, rather than by splitting the dotted string form of that target on ".". As a dot inside a schema, table or column name cannot be told apart from the separator between those names, a foreign key whose target name contained a dot was previously mis-parsed by autogenerate rendering as well as by batch migrations. The dotted string continues to be split when running against SQLAlchemy 2.0, where these accessors are not present. Thanks to Gyanu Mayank for the initial pull request.

  References: #1860

Commits

• See full diff in compare view

Updates cachetools from 7.1.7 to 7.1.8

Changelog

Sourced from cachetools's changelog.

v7.1.8 (2026-08-31)

• Reject negative maxsize in Cache.__init__.

Commits

• 4500e3d Release v7.1.8.
• 6e49bef Update copilot instructions and review.
• defc58b Prepare v7.1.8.
• a39180b Remove somewhat superfluous and slightly incorrect documentation note regardi...
• dd181c5 Reject negative maxsize in Cache.init
• b43b953 Use monthly batches for dependabot updates.
• See full diff in compare view