Skip to content

chore(deps): bump the python-minor group across 1 directory with 8 updates - #22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-fc084f17ba
Open

chore(deps): bump the python-minor group across 1 directory with 8 updates#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-fc084f17ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Bumps the python-minor group with 8 updates in the / directory:

Package From To
boto3 1.43.54 1.43.56
fastapi 0.136.3 0.140.0
langchain-mcp-adapters 0.2.2 0.3.0
langchain-openai 1.2.2 1.4.1
numpy 2.4.6 2.5.1
openai-agents 0.17.4 0.18.3
pytest 9.0.3 9.1.1
ruff 0.15.22 0.16.0

Updates boto3 from 1.43.54 to 1.43.56

Commits
  • 72a153d Merge branch 'release-1.43.56'
  • b1b9ff3 Bumping version to 1.43.56
  • c7d2f6e Add changelog entries from botocore
  • 2a09bb6 Merge branch 'release-1.43.55'
  • cad396b Merge branch 'release-1.43.55' into develop
  • ffe76ba Bumping version to 1.43.55
  • 74d20c9 Add changelog entries from botocore
  • 5e554e5 Merge branch 'release-1.43.54' into develop
  • See full diff in compare view

Updates fastapi from 0.136.3 to 0.140.0

Release notes

Sourced from fastapi's releases.

0.140.0

Refactors

Docs

Internal

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.

0.139.1

Fixes

  • 🐛 Fix frontend fallback support for doted paths like /users/john.doe. PR #16011 by @​tiangolo.

Docs

  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #15995 by @​YuriiMotov.

Translations

... (truncated)

Commits

Updates langchain-mcp-adapters from 0.2.2 to 0.3.0

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0

Commits
  • a61c783 release: 0.3.0 (#542)
  • ef4b4d6 feat: surface MCP tool execution errors as failed tool output (#540)
  • 4f614ad fix: use non-deprecated streamable HTTP client (#541)
  • d62349d build(deps): bump the minor-and-patch group with 4 updates (#534)
  • 20eb39e build(deps-dev): bump mypy from 1.20.0 to 2.1.0 in the major group (#535)
  • 62b48ab build(deps): bump starlette from 0.49.1 to 1.0.1 in /examples/servers/streama...
  • ed77d67 build(deps): bump starlette from 0.50.0 to 1.0.1 (#537)
  • 4f9f7ea build(deps): bump the uv group across 1 directory with 2 updates (#517)
  • e82aa8c build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 in the mi...
  • effc918 build(deps): bump python-multipart from 0.0.26 to 0.0.27 (#504)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.2.2 to 1.4.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.4.1

Changes since langchain-openai==1.4.0

release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

langchain-openai==1.3.5

Changes since langchain-openai==1.3.4

release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762) chore(model-profiles): refresh model profile data (#38774)

langchain-openai==1.3.4

Changes since langchain-openai==1.3.3

release(openai): 1.3.4 (#38731) fix(openai): suppress Pydantic serializer warning on structured output parsed field (#37727) test(openai): skip Codex VCR tests before cassette setup (#38690) chore: bump the minor-and-patch group across 3 directories with 11 updates (#38587) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai (#38476) fix(core): use asyncio.get_running_loop() in async contexts (#38157) test(openai): clarify async API key sync failure trace (#38379)

langchain-openai==1.3.3

Changes since langchain-openai==1.3.2

release(openai): 1.3.3 (#38375) fix(openai): drop response item ids when store is false (#38372) fix(langchain,openai): only set strict=True on tools for OpenAI-compatible models in ProviderStrategy (#38370) test(openai): clarify expected strict schema error (#38338) fix(openai): drop stop from Responses API payload (#38336) chore: bump langsmith from 0.8.5 to 0.8.18 in /libs/partners/openai (#38293) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/partners/openai (#38294) chore(model-profiles): refresh model profile data (#38274) test(openai): vcr embedding raw equivalence tests (#38199)

langchain-openai==1.3.2

Changes since langchain-openai==1.3.1

release(openai): 1.3.2 (#38130)

... (truncated)

Commits

Updates numpy from 2.4.6 to 2.5.1

Release notes

Sourced from numpy's releases.

v2.5.1 (July 4, 2026)

NumPy 2.5.1 Release Notes

The NumPy 2.5.1 is a patch release that fixes bugs discovered after the 2.5.0 release. The most noticeable is the fix is to the numpy datetime cython API which should allow downstream to support NumPy versions older than 2.5. Preparation for Python 3.15 continues along with typing improvements.

This release supports Python versions 3.12-3.14

Changes

  • The minimum supported GCC version has been updated from 9.3.0 to 10.3.0

    (gh-31843)

Contributors

A total of 10 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Adhyan Gupta +
  • Ankit Ahlawat
  • Charles Harris
  • Iason Krommydas
  • Joren Hammudoglu
  • Kumar Aditya
  • Nathan Goldbaum
  • Sebastian Berg
  • Ties Jan Hefting +
  • Vineet Kumar

Pull requests merged

A total of 20 pull requests were merged for this release.

  • #31707: MAINT: Prepare 2.5.x for further development
  • #31721: CI: fix new cython-lint errors (#31711)
  • #31723: MAINT: Update meson to match main
  • #31729: TST: use setup-sde instead of curl to get SDE binaries (#31727)
  • #31829: BUG: Relax finfo to be easier accessible for all user dtypes...
  • #31831: TYP: Fix flatiter.__next__ return type for object_ and...
  • #31832: BUG: avoid deadlocks using NpyString API (#31682)
  • #31833: BUG: fix out array leak in reduceat and accumulate when dtype...
  • #31835: BUG: fix numpy datetime cython APIs to be compatible with older...
  • #31836: TYP: Fix incorrect dtype inference of asarray([]) (#31732)
  • #31837: TYP: Fix np.ma.masked_array 2.5.0 regression
  • #31838: FIX: Refactor error handling in array_setstate to prevent typecode...
  • #31839: TST: xfail multithreaded BLAS test more generously
  • #31840: MAINT: Rename subroutine for crackfortran tests

... (truncated)

Commits
  • 5e1d03f Merge pull request #31863 from charris/prepare-2.5.1
  • ad0b66b REL: Prepare for the NumPy 2.5.1 release.
  • 9df8516 Merge pull request #31858 from charris/backport-31688
  • 4dee265 Merge pull request #31857 from charris/backport-31775
  • dc8d553 Merge pull request #31856 from charris/backport-31846
  • 67cb4a8 fix:Signed integer overflow in datetime.c (#31688)
  • baa2589 TST: Clean up imports, formatting, and assertions
  • 2fe5ba4 TEST: Refactor tests to use np.testing.assert_raises_regex per review
  • bb46581 MAINT: Remove deprecated Python recursion fix
  • 8f34214 MAINT: Move SeedSequence recursion guard to C-layer and add tests
  • Additional commits viewable in compare view

Updates openai-agents from 0.17.4 to 0.18.3

Release notes

Sourced from openai-agents's releases.

v0.18.3

What's Changed

Documentation & Other Changes

New Contributors

Full Changelog: openai/openai-agents-python@v0.18.2...v0.18.3

v0.18.2

What's Changed

... (truncated)

Changelog

Sourced from openai-agents's changelog.

Release process/changelog

The project follows a slightly modified version of semantic versioning using the form 0.Y.Z. The leading 0 indicates the SDK is still evolving rapidly. Increment the components as follows:

Minor (Y) versions

We will increase minor versions Y for breaking changes to any public interfaces that are not marked as beta. For example, going from 0.0.x to 0.1.x might include breaking changes.

If you don't want breaking changes, we recommend pinning to 0.0.x versions in your project.

Patch (Z) versions

We will increment Z for non-breaking changes:

  • Bug fixes
  • New features
  • Changes to private interfaces
  • Updates to beta features

Breaking change changelog

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

  • Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
from agents.sandbox import Manifest, SandboxPathGrant
from agents.sandbox.entries import Dir, LocalDir
This is an absolute host path outside the SDK process base_dir.
TRUSTED_DOCS_ROOT = Path("/opt/my-app/docs")
manifest = Manifest(
extra_path_grants=(
# This host root is outside the SDK process base_dir, so the manifest must grant it.
SandboxPathGrant(path=str(TRUSTED_DOCS_ROOT), read_only=True),
),
entries={
</tr></table>

... (truncated)

Commits
  • 3e788a4 Release 0.18.3 (#3859)
  • d02972e fix: prevent stale prepared-item identity reuse (#3858)
  • 5313a82 fix: preserve streamed session input across model retries (#3857)
  • 5e8d067 docs: make UserContext example runnable in Agents documentation (#3851)
  • 697a46c fix: redact non-tool trace error details (#3848)
  • e29b023 fix(sandbox): avoid redundant E2B workspace root creation (#3845)
  • 585053b fix(computer): isolate provider instances across concurrent runs (#3843)
  • 8ce548e fix: bound $ref expansion in strict JSON schema conversion (#3838)
  • 7369b73 feat: make task and turn tracing spans configurable (#3834)
  • df20e83 fix: parse Google docstrings missing the blank line before a section (#3832)
  • Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates ruff from 0.15.22 to 0.16.0

Release notes

Sourced from ruff's releases.

0.16.0

Release Notes

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new Default Rules page for a full listing of the enabled rules.

  • Ruff can now format Python code blocks in Markdown files and will do this by default. See the documentation for more details.

  • Ruff now supports ruff: ignore comments at the ends of lines, like noqa comments, or on the line preceding a diagnostic. For example, these both suppress an unused-import (F401) diagnostic:

    import math  # ruff: ignore[F401]
ruff: ignore[F401]
import os

  • Fixes are now shown in check and format --check output:

    ❯ ruff format --check .
unformatted: File would be reformatted
 --> try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
1 file would be reformatted

    This example also shows off the Markdown formatting.

  • format --check now supports the same output formats as the linter, including the github and gitlab outputs for rendering annotations in CI:

    ❯ ruff format --check --output-format github .
::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted

    See the CLI help or documentation for the full list of supported formats.

  • The filename, location, end_location, fix.edits[].location, and fix.edits[].end_location fields in the JSON output format may now be null rather than defaulting to the empty string and row 1, column 1, respectively.

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.0

Released on 2026-07-23.

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • Ruff now...

    Description has been truncated

@dependabot
chore(deps): bump the python-minor group across 1 directory with 8 up…
599f6ef 
…dates

Bumps the python-minor group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.54` | `1.43.56` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.3` | `0.140.0` |
| [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters) | `0.2.2` | `0.3.0` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.2.2` | `1.4.1` |
| [numpy](https://github.com/numpy/numpy) | `2.4.6` | `2.5.1` |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.17.4` | `0.18.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.0` |



Updates `boto3` from 1.43.54 to 1.43.56
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.54...1.43.56)

Updates `fastapi` from 0.136.3 to 0.140.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.140.0)

Updates `langchain-mcp-adapters` from 0.2.2 to 0.3.0
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases)
- [Commits](langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0)

Updates `langchain-openai` from 1.2.2 to 1.4.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.2.2...langchain-openai==1.4.1)

Updates `numpy` from 2.4.6 to 2.5.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.6...v2.5.1)

Updates `openai-agents` from 0.17.4 to 0.18.3
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.17.4...v0.18.3)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `ruff` from 0.15.22 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.22...0.16.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: fastapi
  dependency-version: 0.140.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: langchain-mcp-adapters
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: langchain-openai
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: numpy
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: openai-agents
  dependency-version: 0.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants