Skip to content

build(cogstack-es): bump the pip-deps group in /cogstack-es with 2 updates#479

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cogstack-es/pip-deps-44f7d01d9a
Closed

build(cogstack-es): bump the pip-deps group in /cogstack-es with 2 updates#479
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cogstack-es/pip-deps-44f7d01d9a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Updates the requirements on elasticsearch and opensearch-py to permit the latest version.
Updates elasticsearch to 9.4.0

Release notes

Sourced from elasticsearch's releases.

9.4.0

Enhancements

  • ES|QL updates for 9.4 and Serverless (#3384)
  • Added server_mode parameter to the client’s constructor

API

  • Added inference.embedding API
  • Added inference.put_fireworksai API
  • Added project.create_many_routing, project.create_routing, project.delete_routing, project.get_many_routing and project.get_routing APIs
  • Added security.clone_api_key API
  • Added group_by parameter to reindex_rethrottle API
  • Added return_intermediate_results parameter to async_search.get API
  • Added project_routing and time_zone parameters to esql.async_query and esql.query APIs
  • Removed master_timeout parameter from searchable_snapshots.cache_stats API
  • Added name parameter to streams.logs_enable and streams.logs_disable APIs
  • Added should_parse_recursively parameter to text_structure.find_field_structure, text_structure.find_message_structure and text_structure.find_structure APIs

DSL

  • Data stream support (#3413)
  • Handle document attributes that have a name collision with a method (#3364)
  • Added es_name parameter to mapped_field function
  • Added _es_name parameter to all subclasses of Field
  • Added script attribute to MultiTermLookup type
  • Added lookup attribute to QueryVectorBuilder type
Commits

Updates opensearch-py to 3.2.0

Release notes

Sourced from opensearch-py's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: opensearch-project/opensearch-py@v3.1.0...v3.2.0

Changelog

Sourced from opensearch-py's changelog.

[3.2.0]

Added

  • Add dependency on opensearch-protobufs to provide client libraries for gRPC transport (#977)
  • Add ML Commons plugin documentation (#992)

Updated APIs

Changed

Deprecated

Removed

Fixed

  • Fixed AWSV4Signer.sign() not passing custom headers to AWSRequest, causing x-amz-* headers to be excluded from SigV4 signature (#1034)
  • Fixed AWSV4Signer.sign() not setting X-Amz-Content-SHA256 before SigV4Auth.add_auth(), causing the header to be absent from SignedHeaders in the Authorization header. The fix uses a guarded assignment that preserves caller-provided values (e.g., UNSIGNED-PAYLOAD, precomputed hashes) (#1038, #1039)
  • Fixed the linkchecker CI step (#987)

Security

Dependencies

  • Bump pytest-asyncio from <=1.2.0 to <=1.3.0 (#984)
  • Bump actions/checkout from 5 to 6 (#986)
  • Bump codecov/codecov-action from 4 to 5 (#985)
  • Bump actions/upload-artifact from 5 to 6 (#989)
  • Bump actions/download-artifact from 6 to 7 (#988)
  • Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • Bump opensearch-protobufs from 0.19.0 to 1.2.0 (#1000)

[3.1.0]

Added

Updated APIs

Changed

  • Rename DenseVector field type to KnnVector (925)

Deprecated

  • Deprecate python 3.8 and 3.9 support which are end of life. (966)

Removed

Fixed

  • Moved client tests to dedicated files to ensure they are run (944)
  • Fix Async request signer (932)
  • Fix memory leak in parallel_bulk (981)

Security

Dependencies

  • Bumps aiohttp from >=3.9.4,<4 to >=3.10.11,<4 (#920)
  • Bumps aiohttp from >=3.10.11 to >=3.12.14 (#966)
  • Bump pytest-asyncio from <=0.25.1 to <=1.2.0 (#936, #950)
  • Bumps lycheeverse/lychee-action from 1.9.3 to 2.7.0 (#946, #980)
  • Bump actions/download-artifact from 4 to 6 (#957, #968)
  • Bump actions/cache from 3 to 4 (#958)

... (truncated)

Commits
  • 8991792 fix(signer): Include X-Amz-Content-SHA256 in SignedHeaders (#1038) (#1039)
  • d8a8c57 Fix AWSV4Signer.sign() not passing headers to AWSRequest (#1035)
  • 6551595 Bump opensearch protobufs - 1.2.0. (#1000)
  • 94ae310 Fix CI failures due to API spec updates (#1007)
  • 1ce5b46 fix(docs): use keyword arguments in security API examples (#1004)
  • 9b6d240 Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • 02c5dcc Bump actions/download-artifact from 6 to 7 (#988)
  • fa8a862 Bump actions/upload-artifact from 5 to 6 (#989)
  • f5ef694 Updated opensearch-py to reflect the latest OpenSearch API spec (2026-01-22) ...
  • 10ab792 ci: fix mypy type ignore for untyped decorator in tests (#993)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(cogstack-es): bump the pip-deps group
41d23c8 
Updates the requirements on [elasticsearch](https://github.com/elastic/elasticsearch-py) and [opensearch-py](https://github.com/opensearch-project/opensearch-py) to permit the latest version.

Updates `elasticsearch` to 9.4.0
- [Release notes](https://github.com/elastic/elasticsearch-py/releases)
- [Commits](https://github.com/elastic/elasticsearch-py/commits/v9.4.0)

Updates `opensearch-py` to 3.2.0
- [Release notes](https://github.com/opensearch-project/opensearch-py/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-py/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/opensearch-py@v2.0.0...v3.2.0)

---
updated-dependencies:
- dependency-name: elasticsearch
  dependency-version: 9.4.0
  dependency-type: direct:development
  dependency-group: pip-deps
- dependency-name: opensearch-py
  dependency-version: 3.2.0
  dependency-type: direct:development
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 14, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 14, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/cogstack-es/pip-deps-44f7d01d9a branch May 14, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alhendrickson