Skip to content

Bump the python-deps group with 40 updates#10

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-deps-b267d8dfd6
Open

Bump the python-deps group with 40 updates#10
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-deps-b267d8dfd6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026 •
edited
Loading

Updates the requirements on fastapi, uvicorn, sqlalchemy, asyncpg, alembic, pydantic-settings, python-dotenv, pyjwt, httpx, workos, daytona-sdk, python-multipart, sse-starlette, websockets, openai, serpapi, pgvector, tiktoken, cohere, pandas, openpyxl, pypdf, trafilatura, opentelemetry-api, opentelemetry-sdk, opentelemetry-instrumentation-fastapi, opentelemetry-instrumentation-sqlalchemy, opentelemetry-instrumentation-httpx, opentelemetry-exporter-otlp, prometheus-client, redis, aiosmtplib, croniter, pytest, pytest-asyncio, pytest-cov, ruff, mypy, pre-commit and aiosqlite to permit the latest version.
Updates fastapi to 0.135.3

Release notes

Sourced from fastapi's releases.

0.135.3

Features

Docs

  • ✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #14946 by @​bysiber.

Internal

Commits

Updates uvicorn to 0.44.0

Release notes

Sourced from uvicorn's releases.

Version 0.44.0

What's Changed

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

Changelog

Sourced from uvicorn's changelog.

0.44.0 (April 6, 2026)

Added

  • Implement websocket keepalive pings for websockets-sansio (#2888)

0.43.0 (April 3, 2026)

You can quit Uvicorn now. We heard you, @​pamelafox - all 47 of your Ctrl+C's (thanks for flagging it, and thanks to @​tiangolo for the fix 🙏). See the tweet.

Changed

  • Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#2829)
  • Use native context parameter for create_task on Python 3.11+ (#2859)
  • Drop cast in ASGI types (#2875)

0.42.0 (March 16, 2026)

Changed

  • Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

  • Escape brackets and backslash in httptools HEADER_RE regex (#2824)
  • Fix multiple issues in websockets sans-io implementation (#2825)

0.41.0 (February 16, 2026)

Added

  • Add --limit-max-requests-jitter to stagger worker restarts (#2707)
  • Add socket path to scope["server"] (#2561)

Changed

  • Rename LifespanOn.error_occured to error_occurred (#2776)

Fixed

  • Ignore permission denied errors in watchfiles reloader (#2817)
  • Ensure lifespan shutdown runs when should_exit is set during startup (#2812)
  • Reduce the log level of 'request limit exceeded' messages (#2788)

0.40.0 (December 21, 2025)

Remove

  • Drop support for Python 3.9 (#2772)

... (truncated)

Commits
  • edb54c4 Version 0.44.0 (#2890)
  • 029be08 Implement websocket keepalive pings for websockets-sansio (#2888)
  • 8d397c7 Version 0.43.0 (#2885)
  • 587042d 🐛 Emit http.disconnect ASGI receive() event on server shutting down for s...
  • c9a75fb chore(deps): bump the github-actions group with 3 updates (#2878)
  • 84fd578 chore(deps): bump pygments from 2.19.2 to 2.20.0 (#2877)
  • cd52d34 Use native context parameter for create_task on Python 3.11+ (#2859)
  • 5211880 Drop cast in ASGI types (#2875)
  • 1cb8e74 Add websocket 500 fallback header test (#2874)
  • 28efbb2 chore(deps-dev): bump cryptography from 46.0.5 to 46.0.6 (#2873)
  • Additional commits viewable in compare view

Updates sqlalchemy to 2.0.49

Release notes

Sourced from sqlalchemy's releases.

2.0.49

Released: April 3, 2026

orm

  • [orm] [bug] Fixed issue where _orm.Session.get() would bypass the identity map and emit unnecessary SQL when with_for_update=False was passed, rather than treating it equivalently to the default of None. Pull request courtesy of Joshua Swanson.

    References: #13176

  • [orm] [bug] Fixed issue where chained _orm.joinedload() options would not be applied correctly when the final relationship in the chain is declared on a base mapper and accessed through a subclass mapper in a _orm.with_polymorphic() query. The path registry now correctly computes the natural path when a property declared on a base class is accessed through a path containing a subclass mapper, ensuring the loader option can be located during query compilation.

    References: #13193

  • [orm] [bug] [inheritance] Fixed issue where using _orm.Load.options() to apply a chained loader option such as _orm.joinedload() or _orm.selectinload() with _orm.PropComparator.of_type() for a polymorphic relationship would not generate the necessary clauses for the polymorphic subclasses. The polymorphic loading strategy is now correctly propagated when using a call such as joinedload(A.b).options(joinedload(B.c.of_type(poly))) to match the behavior of direct chaining e.g. joinedload(A.b).joinedload(B.c.of_type(poly)).

    References: #13202

  • [orm] [bug] [inheritance] Fixed issue where using chained loader options such as _orm.selectinload() after _orm.joinedload() with _orm.PropComparator.of_type() for a polymorphic relationship would not properly apply the chained loader option. The loader option is now correctly applied when using a call such as joinedload(A.b.of_type(poly)).selectinload(poly.SubClass.c) to eagerly load related objects.

    References: #13209

typing

  • [typing] [bug] Fixed a typing issue where the typed members of :data:.func would return the appropriate class of the same name, however this creates an issue for

... (truncated)

Commits

Updates asyncpg to 0.31.0

Release notes

Sourced from asyncpg's releases.

v0.31.0

Enable Python 3.14 with experimental subinterpreter/freethreading support.

Improvements

  • Add Python 3.14 support, experimental subinterpreter/freethreading support (#1279) (by @​elprans in 9e42642b)

  • Avoid performing type introspection on known types (#1243) (by @​elprans in 5c9986c4)

  • Make prepare() not use named statements by default when cache is disabled (#1245) (by @​elprans in 5b14653e)

  • Implement connection service file functionality (#1223) (by @​AndrewJackson2020 in 1d63bb15)

Fixes

Other

Commits

Updates alembic to 1.18.4

Release notes

Sourced from alembic's releases.

1.18.4

Released: February 10, 2026

bug

  • [bug] [operations] Reverted the behavior of Operations.add_column() that would automatically render the "PRIMARY KEY" keyword inline when a Column with primary_key=True is added. The automatic behavior, added in version 1.18.2, is now opt-in via the new Operations.add_column.inline_primary_key parameter. This change restores the ability to render a PostgreSQL SERIAL column, which is required to be primary_key=True, while not impacting the ability to render a separate primary key constraint. This also provides consistency with the Operations.add_column.inline_references parameter and gives users explicit control over SQL generation.

    To render PRIMARY KEY inline, use the Operations.add_column.inline_primary_key parameter set to True:

    op.add_column( "my_table", Column("id", Integer, primary_key=True), inline_primary_key=True )References: #1232

Commits

Updates pydantic-settings to 2.13.1

Commits

Updates python-dotenv to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

... (truncated)

Commits

Updates pyjwt to 2.12.1

Release notes

Sourced from pyjwt's releases.

2.12.1

What's Changed

Full Changelog: jpadilla/pyjwt@2.12.0...2.12.1

Changelog

Sourced from pyjwt's changelog.

v2.12.1 <https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1>__

Fixed


- Add missing ``typing_extensions`` dependency for Python < 3.11 in `[#1150](https://github.com/jpadilla/pyjwt/issues/1150) <https://github.com/jpadilla/pyjwt/issues/1150>`__

v2.12.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0&gt;__


Fixed

  • Annotate PyJWKSet.keys for pyright by @​tamird in [#1134](https://github.com/jpadilla/pyjwt/issues/1134) <https://github.com/jpadilla/pyjwt/pull/1134>__
  • Close HTTPError response to prevent ResourceWarning on Python 3.14 by @​veeceey in [#1133](https://github.com/jpadilla/pyjwt/issues/1133) <https://github.com/jpadilla/pyjwt/pull/1133>__
  • Do not keep algorithms dict in PyJWK instances by @​akx in [#1143](https://github.com/jpadilla/pyjwt/issues/1143) <https://github.com/jpadilla/pyjwt/pull/1143>__
  • Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @​dmbs335 in GHSA-752w-5fwx-jx9f <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f>__
  • Use PyJWK algorithm when encoding without explicit algorithm in [#1148](https://github.com/jpadilla/pyjwt/issues/1148) <https://github.com/jpadilla/pyjwt/pull/1148>__

Added


- Docs: Add ``PyJWKClient`` API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).

v2.11.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0&gt;__


Fixed

  • Enforce ECDSA curve validation per RFC 7518 Section 3.4.
  • Fix build system warnings by @​kurtmckee in [#1105](https://github.com/jpadilla/pyjwt/issues/1105) <https://github.com/jpadilla/pyjwt/pull/1105>__
  • Validate key against allowed types for Algorithm family in [#964](https://github.com/jpadilla/pyjwt/issues/964) <https://github.com/jpadilla/pyjwt/pull/964>__
  • Add iterator for JWKSet in [#1041](https://github.com/jpadilla/pyjwt/issues/1041) <https://github.com/jpadilla/pyjwt/pull/1041>__
  • Validate iss claim is a string during encoding and decoding by @​pachewise in [#1040](https://github.com/jpadilla/pyjwt/issues/1040) <https://github.com/jpadilla/pyjwt/pull/1040>__
  • Improve typing/logic for options in decode, decode_complete by @​pachewise in [#1045](https://github.com/jpadilla/pyjwt/issues/1045) <https://github.com/jpadilla/pyjwt/pull/1045>__
  • Declare float supported type for lifespan and timeout by @​nikitagashkov in [#1068](https://github.com/jpadilla/pyjwt/issues/1068) <https://github.com/jpadilla/pyjwt/pull/1068>__
  • Fix SyntaxWarning\s/DeprecationWarning\s caused by invalid escape sequences by @​kurtmckee in [#1103](https://github.com/jpadilla/pyjwt/issues/1103) <https://github.com/jpadilla/pyjwt/pull/1103>__
  • Development: Build a shared wheel once to speed up test suite setup times by @​kurtmckee in [#1114](https://github.com/jpadilla/pyjwt/issues/1114) <https://github.com/jpadilla/pyjwt/pull/1114>__
  • Development: Test type annotations across all supported Python versions, increase the strictness of the type checking, and remove the mypy pre-commit hook by @​kurtmckee in [#1112](https://github.com/jpadilla/pyjwt/issues/1112) <https://github.com/jpadilla/pyjwt/pull/1112>__

Added


- Support Python 3.14, and test against PyPy 3.10 and 3.11 by @kurtmckee in `[#1104](https://github.com/jpadilla/pyjwt/issues/1104) <https://github.com/jpadilla/pyjwt/pull/1104>`__
- Development: Migrate to ``build`` to test package building in CI by @kurtmckee in `[#1108](https://github.com/jpadilla/pyjwt/issues/1108) <https://github.com/jpadilla/pyjwt/pull/1108>`__
- Development: Improve coverage config and eliminate unused test suite code by @kurtmckee in `[#1115](https://github.com/jpadilla/pyjwt/issues/1115) <https://github.com/jpadilla/pyjwt/pull/1115>`__
</tr></table>

... (truncated)

Commits

Updates httpx to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.
Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

0.28.0 (28th November, 2024)

Be aware that the default JSON request bodies now use a more compact representation. This is generally considered a prefered style, tho may require updates to test suites.

The 0.28 release includes a limited set of deprecations...

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

0.27.2 (27th August, 2024)

Fixed

  • Reintroduced supposedly-private URLTypes shortcut. (#2673)

0.27.1 (27th August, 2024)

Added

  • Support for zstd content decoding using the python zstandard package is added. Installable using httpx[zstd]. (#3139)

Fixed

  • Improved error messaging for InvalidURL exceptions. (#3250)
  • Fix app type signature in ASGITransport. (#3109)

0.27.0 (21st February, 2024)

... (truncated)

Commits

Updates workos to 6.0.2

Updates daytona-sdk to 0.165.0

Updates python-multipart to 0.0.26

Release notes

Sourced from python-multipart's releases.

Version 0.0.26

What's Changed

Full Changelog: Kludex/python-multipart@0.0.25...0.0.26

Changelog

Sourced from python-multipart's changelog.

0.0.26 (2026-04-10)

  • Skip preamble before the first multipart boundary more efficiently #262.
  • Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

  • Add MIME content type info to File #143.
  • Handle CTE values case-insensitively #258.
  • Remove custom FormParser classes #257.
  • Add UPLOAD_DELETE_TMP to FormParser config #254.
  • Emit field_end for trailing bare field names on finalize #230.
  • Handle multipart headers case-insensitively #252.
  • Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

  • Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

  • Remove unused trust_x_headers parameter and X-File-Name fallback #196.
  • Return processed length from QuerystringParser._internal_write #229.
  • Cleanup metadata dunders from __init__.py #227.

0.0.22 (2026-01-25)

  • Drop directory path from filename in File 9433f4b.

0.0.21 (2025-12-17)

  • Add support for Python 3.14 and drop EOL 3.8 and 3.9 #216.

0.0.20 (2024-12-16)

  • Handle messages containing only end boundary #142.

0.0.19 (2024-11-30)

  • Don't warn when CRLF is found after last boundary on MultipartParser #193.

0.0.18 (2024-11-28)

  • Hard break if found data after last boundary on MultipartParser #189.

0.0.17 (2024-10-31)

  • Handle PermissionError in fallback code for old import name #182.

0.0.16 (2024-10-27)

... (truncated)

Commits

Updates sse-starlette to 3.3.4

Release notes

Sourced from sse-starlette's releases.

v3.3.4

What's Changed

Full Changelog: sysid/sse-starlette@v3.3.3...v3.3.4

Commits
  • c938db3 Bump version to 3.3.4
  • eefd6dc Merge pull request #179 from sysid/dependabot/uv/cryptography-46.0.6
  • d9e9b82 chore(deps): bump cryptography from 46.0.5 to 46.0.6
  • 28cd775 Merge pull request #178 from sysid/dependabot/uv/requests-2.33.0
  • 2e52732 Merge pull request #176 from sysid/dependabot/uv/ujson-5.12.0
  • bac335e Merge pull request #177 from sysid/dependabot/uv/cbor2-5.9.0
  • d465468 chore(deps): bump requests from 2.32.5 to 2.33.0
  • 7434cd3 chore(deps): bump cbor2 from 5.8.0 to 5.9.0
  • fc2455a chore(deps): bump ujson from 5.11.0 to 5.12.0
  • 5f84539 Bump version to 3.3.3
  • Additional commits viewable in compare view

Updates websockets to 16.0

Release notes

Sourced from websockets's releases.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • d4303a5 Release version 16.0.
  • 851bcd7 Bump pypa/cibuildwheel from 3.3.0 to 3.3.1
  • 740c8d3 Temporarily remove the trio implementation.
  • 92ea055 Add missing changelog entry.
  • ba74244 Document bug fix.
  • 9410483 Pin sphinx to avoid error in sphinxcontrib-trio.
  • 8e4d408 Document asyncio's TLS read buffer.
  • cb3500b Stop referring to the asyncio implementation as new.
  • 6563a9c The threading implementation supports max_queue.
  • 9f17e92 Clarify that protocol_mutex protects pending_pings.
  • Additional commits viewable in compare view

Updates openai to 2.31.0

Release notes

Sourced from openai's releases.

v2.31.0

2.31.0 (2026-04-08)

Full Changelog: v2.30.0...v2.31.0

Features

  • api: add phase field to conversations message (3e5834e)
  • api: add web_search_call.results to ResponseIncludable type (ffd8741)
  • client: add support for short-lived tokens (#1608) (22fe722)
  • client: support sending raw data over websockets (f1bc52e)
  • internal: implement indices array format for query and form serialization (49194cf)

Bug Fixes

  • client: preserve hardcoded query params when merging with user params (92e109c)
  • types: remove web_search_call.results from ResponseIncludable (d3cc401)

Chores

  • tests: bump steady to v0.20.1 (d60e2ee)
  • tests: bump steady to v0.20.2 (

@dependabot
Bump the python-deps group with 40 updates
23df24a 
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [asyncpg](https://github.com/MagicStack/asyncpg), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-dotenv](https://github.com/theskumar/python-dotenv), [pyjwt](https://github.com/jpadilla/pyjwt), [httpx](https://github.com/encode/httpx), [workos](https://workos.com/docs/sdks/python), daytona-sdk, [python-multipart](https://github.com/Kludex/python-multipart), [sse-starlette](https://github.com/sysid/sse-starlette), [websockets](https://github.com/python-websockets/websockets), [openai](https://github.com/openai/openai-python), [serpapi](https://github.com/serpapi/serpapi-python), [pgvector](https://github.com/pgvector/pgvector-python), [tiktoken](https://github.com/openai/tiktoken), [cohere](https://github.com/cohere-ai/cohere-python), [pandas](https://github.com/pandas-dev/pandas), [openpyxl](https://openpyxl.readthedocs.io), [pypdf](https://github.com/py-pdf/pypdf), [trafilatura](https://github.com/adbar/trafilatura), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-sqlalchemy](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python), [prometheus-client](https://github.com/prometheus/client_python), [redis](https://github.com/redis/redis-py), [aiosmtplib](https://github.com/cole/aiosmtplib), [croniter](https://github.com/pallets-eco/croniter), [pytest](https://github.com/pytest-dev/pytest), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [pre-commit](https://github.com/pre-commit/pre-commit) and [aiosqlite](https://github.com/omnilib/aiosqlite) to permit the latest version.

Updates `fastapi` to 0.135.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.135.3)

Updates `uvicorn` to 0.44.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.34.0...0.44.0)

Updates `sqlalchemy` to 2.0.49
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `asyncpg` to 0.31.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.30.0...v0.31.0)

Updates `alembic` to 1.18.4
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `pydantic-settings` to 2.13.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.7.0...v2.13.1)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `pyjwt` to 2.12.1
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.10.0...2.12.1)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.28.0...0.28.1)

Updates `workos` to 6.0.2

Updates `daytona-sdk` to 0.165.0

Updates `python-multipart` to 0.0.26
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.18...0.0.26)

Updates `sse-starlette` to 3.3.4
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v2.2.0...v3.3.4)

Updates `websockets` to 16.0
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@14.0...16.0)

Updates `openai` to 2.31.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.60.0...v2.31.0)

Updates `serpapi` to 1.0.2
- [Release notes](https://github.com/serpapi/serpapi-python/releases)
- [Changelog](https://github.com/serpapi/serpapi-python/blob/master/HISTORY.md)
- [Commits](serpapi/serpapi-python@v0.1.5...v1.0.2)

Updates `pgvector` to 0.4.2
- [Changelog](https://github.com/pgvector/pgvector-python/blob/master/CHANGELOG.md)
- [Commits](pgvector/pgvector-python@v0.3.0...v0.4.2)

Updates `tiktoken` to 0.12.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.8.0...0.12.0)

Updates `cohere` to 6.1.0
- [Release notes](https://github.com/cohere-ai/cohere-python/releases)
- [Commits](cohere-ai/cohere-python@5.0.0...6.1.0)

Updates `pandas` to 3.0.2
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.0.0...v3.0.2)

Updates `openpyxl` to 3.1.5

Updates `pypdf` to 6.10.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.0.0...6.10.1)

Updates `trafilatura` to 2.0.0
- [Release notes](https://github.com/adbar/trafilatura/releases)
- [Changelog](https://github.com/adbar/trafilatura/blob/master/HISTORY.md)
- [Commits](adbar/trafilatura@v1.12.0...v2.0.0)

Updates `opentelemetry-api` to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.28.0...v1.41.0)

Updates `opentelemetry-sdk` to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.28.0...v1.41.0)

Updates `opentelemetry-instrumentation-fastapi` to 0.62b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-sqlalchemy` to 0.62b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-httpx` to 0.62b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-exporter-otlp` to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.28.0...v1.41.0)

Updates `prometheus-client` to 0.25.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.21.0...v0.25.0)

Updates `redis` to 7.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.0...v7.4.0)

Updates `aiosmtplib` to 5.1.0
- [Release notes](https://github.com/cole/aiosmtplib/releases)
- [Changelog](https://github.com/cole/aiosmtplib/blob/main/CHANGELOG.rst)
- [Commits](cole/aiosmtplib@v3.0.0...v5.1.0)

Updates `croniter` to 6.2.2
- [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst)
- [Commits](pallets-eco/croniter@2.0.0...6.2.2)

Updates `pytest` to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...9.0.3)

Updates `pytest-asyncio` to 1.3.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v0.24.0...v1.3.0)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.0.0...v7.1.0)

Updates `ruff` to 0.15.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.0...0.15.10)

Updates `mypy` to 1.20.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.13.0...v1.20.1)

Updates `pre-commit` to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.0.0...v4.5.1)

Updates `aiosqlite` to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.20.0...v0.22.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.44.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: sqlalchemy
  dependency-version: 2.0.49
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: alembic
  dependency-version: 1.18.4
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic-settings
  dependency-version: 2.13.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pyjwt
  dependency-version: 2.12.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: workos
  dependency-version: 6.0.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: daytona-sdk
  dependency-version: 0.165.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.26
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: sse-starlette
  dependency-version: 3.3.4
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: websockets
  dependency-version: '16.0'
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.31.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: serpapi
  dependency-version: 1.0.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pgvector
  dependency-version: 0.4.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: tiktoken
  dependency-version: 0.12.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: cohere
  dependency-version: 6.1.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pandas
  dependency-version: 3.0.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openpyxl
  dependency-version: 3.1.5
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pypdf
  dependency-version: 6.10.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: trafilatura
  dependency-version: 2.0.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.41.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-sqlalchemy
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-httpx
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.41.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: prometheus-client
  dependency-version: 0.25.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: aiosmtplib
  dependency-version: 5.1.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: croniter
  dependency-version: 6.2.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pytest-asyncio
  dependency-version: 1.3.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.15.10
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 1.20.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants