chore(deps): update Python (prod)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pydantic (changelog)	~=2.12.5 → ~=2.13.4
pydantic-settings (changelog)	~=2.13.1 → ~=2.14.1
sentry-sdk (changelog)	~=2.58.0 → ~=2.59.0
tomlkit	~=0.14.0 → ~=0.15.0

---

Release Notes

pydantic/pydantic (pydantic)

v2.13.4: 2026-05-06

Compare Source

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #​13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #​13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #​13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3

Compare Source

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #​13096

v2.13.2

Compare Source

v2.13.1: 2026-04-15

Compare Source

v2.13.1 (2026-04-15)

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #​13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0

Compare Source

GitHub release

The highlights of the v2.13 release are available in the blog post.
Several minor changes (considered non-breaking changes according to our versioning policy)
are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

• Allow default factories of private attributes to take validated model data by @​Viicos in #​13013

Changes

• Warn when serializing fixed length tuples with too few items by @​arvindsaripalli in #​13016

Fixes

• Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #​13049
• Fix model equality when using runtime extra configuration by @​Viicos in #​13062

Packaging

• Add zizmor for GitHub Actions workflow linting by @​Viicos in #​13039
• Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #​13064

New Contributors

• @​arvindsaripalli made their first contribution in #​13016

pydantic/pydantic-settings (pydantic-settings)

v2.14.1

Compare Source

What's Changed

• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​850
• Bump the python-packages group with 5 updates by @​dependabot[bot] in #​854
• Bump the github-actions group with 3 updates by @​dependabot[bot] in #​853
• Bump the python-packages group with 2 updates by @​dependabot[bot] in #​856
• Fix field named cls conflicting with classmethod parameter by @​hramezani in #​858
• Prepare release 2.14.1 by @​hramezani in #​859

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

Compare Source

What's Changed

• Fix parsing env vars into Optional Strict types by @​hramezani in #​792
• Fix RecursionError with mutually recursive models in CLI by @​hramezani in #​794
• Fix env_file from model_config ignored in CliApp.run() (#​795) by @​hramezani in #​796
• Update dependencies by @​hramezani in #​798
• Add Dependabot configuration by @​hramezani in #​801
• Bump samuelcolvin/check-python-version from 4.1 to 5 by @​dependabot[bot] in #​802
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​803
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​804
• Bump astral-sh/setup-uv from 5 to 7 by @​dependabot[bot] in #​805
• Bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​806
• Ignore chardet and group GitHub Actions in Dependabot by @​hramezani in #​808
• Bump actions/download-artifact from 4 to 8 in the github-actions group by @​dependabot[bot] in #​809
• Bump the python-packages group with 2 updates by @​dependabot[bot] in #​810
• Support reading .env files from FIFOs (e.g. 1Password Environments) by @​JacobHayes in #​776
• Fix AliasChoices ignored when changing provider priority by @​hramezani in #​813
• fix: resolve KeyError in run_subcommand for underscore field names by @​bradykieffer in #​799
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​814
• Fix Literal[numeric Enum] coercion for CLI and env vars by @​m9810223 in #​811
• Fix nested discriminated unions not discovered by env/CLI providers by @​hramezani in #​816
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​820
• CLI ensure env nested max split internally. by @​kschwab in #​821
• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​824
• Migrate boto3-stubs to types-boto3 by @​hramezani in #​831
• Fix CLI not recognizing field name with validate_by_name and AliasChoices by @​hramezani in #​826
• Allow customisation of the dotevn setting source to filter variables by @​CaselIT in #​832
• Bump the python-packages group with 3 updates by @​dependabot[bot] in #​833
• Introduce yamlfmt by @​Viicos in #​836
• Bump boto3 from 1.42.82 to 1.42.83 in the python-packages group by @​dependabot[bot] in #​837
• Introduce zizmor by @​Viicos in #​838
• Fix CliPositionalArg[list[CustomType]] crash for custom types by @​hramezani in #​839
• Add note about Mypy plugin for BaseSettings.__init__() by @​Viicos in #​842
• Fix cli_ignore_unknown_args=True not working on subcommands by @​hramezani in #​844
• Bump the python-packages group with 4 updates by @​dependabot[bot] in #​847
• Fix CLI descriptions lost under python -OO by falling back to json_schema_extra by @​hramezani in #​843
• Prepare release 2.14.0 by @​hramezani in #​848

New Contributors

• @​dependabot[bot] made their first contribution in #​802
• @​JacobHayes made their first contribution in #​776
• @​bradykieffer made their first contribution in #​799
• @​CaselIT made their first contribution in #​832

Full Changelog: pydantic/pydantic-settings@v2.13.1...v2.14.0

getsentry/sentry-python (sentry-sdk)

v2.59.0

Compare Source

New Features ✨

Langchain

• Record run_name as gen_ai.function_id on Invoke Agent Spans by @​alexander-alderman-webb in #​5926
• Record run_name in on_tool_start by @​alexander-alderman-webb in #​5925
• Record run_name in on_chat_model_start by @​alexander-alderman-webb in #​5924

Other

• (ci) Cancel in-progress PR workflows on new commit push by @​joshuarli in #​5994
• (consts) Add updated span convention constants to SPANDATA by @​ericapisani in #​6093
• (fastapi) Support span streaming in active thread tracking by @​ericapisani in #​6118
• (httpx) Migrate to span first by @​ericapisani in #​6084
• (huggingface_hub) Migrate to span first by @​ericapisani in #​6124
• (mcp) Migrate to span first by @​ericapisani in #​6131
• Add db.driver.name spans to database integrations by @​ericapisani in #​6082

Bug Fixes 🐛

We've put additional data that might contain sensitive information, like GraphQL documents, behind the send_default_pii option.

Httpx

• Consistently early-exit when adding request source by @​alexander-alderman-webb in #​6151
• Set code.namespace and code.function instead of code.function.name in span streaming by @​alexander-alderman-webb in #​6150

Langchain

• Record run_name as gen_ai.function_id for text completions by @​alexander-alderman-webb in #​6073
• Set agent name as gen_ai.agent.name for chat and tool spans by @​alexander-alderman-webb in #​5877

Other

• (asgi) Use inspect.iscoroutinefunction on Python 3.14+ by @​alexander-alderman-webb in #​6135
• (batcher) Reset lock and flusher in child after fork by @​ericapisani in #​6163
• (google_genai) Redact binary data in inline_data and fix multi-part message extraction by @​ericapisani in #​5977
• (grpc) Add isolation_scope to async server interceptor by @​robinvd in #​5940
• (metrics,logs) Don't attach span_id if no active span by @​sentrivana in #​6162
• (monitor) Release Monitor._thread_lock after fork (#​6148) by @​vokracko in #​6159
• (openai-agents) Resolve agent from bindings for openai-agents >= 0.14 by @​ericapisani in #​6102
• (profiler) Stop nulling buffer on teardown by @​ericapisani in #​6075
• (quart) Use inspect.iscoroutinefunction when Quart does by @​alexander-alderman-webb in #​6133
• (security) Prevent GitHub script injection in update-tox workflow by @​fix-it-felix-sentry in #​6171
• (starlette/fastapi) Use inspect.iscoroutinefunction when Starlette does by @​alexander-alderman-webb in #​6134
• (tornado) Make sure context manager doesn't double yield by @​sentrivana in #​6152
• Introduce _get_current_streamed_span() to keep types backwards compatible by @​alexander-alderman-webb in #​6177

Internal Changes 🔧

Stdlib

• Pin timestamps in add_http_request_source() patch by @​alexander-alderman-webb in #​6160
• Stop mocking HTTPSConnection.send in trace header tests by @​alexander-alderman-webb in #​6156

Other

• (batcher) Only flush the bucket that triggered the flush event by @​sentrivana in #​6168
• (celery) Remove unused NoOpMgr from utils by @​sentrivana in #​6078
• (ci) Update outdated pinned action version comments by @​JoshuaMoelans in #​6088
• (fastmcp) Span streaming tests by @​alexander-alderman-webb in #​6167
• (graphql) Update document setting by @​sentrivana in #​6153
• (grpc) Mirror sync interceptor by @​sentrivana in #​6158
• (langchain) Separate test to remove conditional by @​alexander-alderman-webb in #​6076
• (pydantic-ai) Remove dead Model.request patch by @​alexander-alderman-webb in #​5956
• (queues) Update integrations by @​sentrivana in #​6157
• (tests) Replace deprecated enable_tracingwith traces_sample_rate by @​sentrivana in #​6077
• (transport) Remove redundant checks for dsn by @​psh9508 in #​6104
• Rename file by @​sentrivana in #​6194
• 🤖 Update test matrix with new releases (05/04) by @​github-actions in #​6186
• Assert presence of profile chunks after shutdown by @​alexander-alderman-webb in #​6174
• 🤖 Update test matrix with new releases (04/29) by @​github-actions in #​6173
• Limit update-tox action to master branch by @​alexander-alderman-webb in #​6172
• Expand scrubbing by @​sentrivana in #​6161
• Remove Python 2 compat from qualname_from_function by @​ericapisani in #​6137
• Update test matrix with new releases (04/27) by @​alexander-alderman-webb in #​6146
• Raise shutdown timeout in aws lambda tests by @​sentrivana in #​6129
• Join thread in continuous profiler test by @​alexander-alderman-webb in #​6125
• 🤖 Update test matrix with new releases (04/20) by @​github-actions in #​6100
• Set explicit base-branch for codecov action by @​ericapisani in #​5992

python-poetry/tomlkit (tomlkit)

v0.15.0

Changed

• Update parser to support TOML spec v1.1.0. (#​456)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • Between 10:00 PM and 11:59 PM, only on Sunday (* 22-23 * * 0)
  • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.