Skip to content

chore(deps): Bump the python-dependencies group across 1 directory with 16 updates - #123

Merged
astra-ssj merged 1 commit into
mainfrom
dependabot/pip/python-dependencies-3576e8f7a6
Sep 13, 2026
Merged

chore(deps): Bump the python-dependencies group across 1 directory with 16 updates#123
astra-ssj merged 1 commit into
mainfrom
dependabot/pip/python-dependencies-3576e8f7a6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 16 updates in the / directory:

Package From To
pydantic 2.13.4 2.13.5
pypdf 6.16.2 6.18.0
filelock 3.32.4 3.32.5
anthropic 1.0.0 1.4.0
ruff 0.16.4 0.16.6
anyio 4.14.2 4.15.1
ast-serialize 0.8.0 0.11.0
boto3 1.43.79 1.43.89
botocore 1.43.79 1.43.89
click 8.4.2 8.5.0
coverage 7.15.4 7.16.0
lxml 6.1.2 6.1.3
pydantic-core 2.46.4 2.48.0
responses 0.26.2 0.26.3
websockets 17.0.1 17.1
wrapt 2.3.0 2.4.0

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pypdf from 6.16.2 to 6.18.0

Release notes

Sourced from pypdf's releases.

Version 6.18.0, 2026-09-07

What's new

Please note that this release requires users which previously overwrote the default limits to migrate to the new approach: Docs

In short:

  • Use apply_configuration as a context manager to temporarily overwrite configuration values.
  • Use overwrite_configuration to change the configuration values for the whole session.

The old overwrites should continue to work in most cases. If you have migrated successfully and do not need the legacy handling anymore (which can cause some overhead), consider using the temporary disable_legacy_handling setting:

from pypdf import overwrite_configuration
overwrite_configuration(disable_legacy_handling=True)

In case you are experiencing some unexpected issues after the migration, consider opening a new issue (or commenting on an existing one) with the necessary details to reproduce it.

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033) by @​PJBrs

Full Changelog

Version 6.17.0, 2026-09-04

What's new

Security (SEC)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032) by @​PJBrs

Performance Improvements (PI)

Bug Fixes (BUG)

Robustness (ROB)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.18.0, 2026-09-07

Security (SEC)

  • Limit allowed length of indirect object tokens (#4055)

Deprecations (DEP)

  • Rework configuration value handling (#4044)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033)

Full Changelog

Version 6.17.0, 2026-09-04

Security (SEC)

  • Limit value for Roman numerals (#4047)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032)

Performance Improvements (PI)

  • Cache repeated text extraction character lookups (#4036)

Bug Fixes (BUG)

  • Treat an empty /Filter array as no filter when extracting images (#4026)
  • Detect a duplicate dictionary key whose first value is falsy (#4024)
  • Make is_open=False collapse outline items (#3998)

Robustness (ROB)

  • Multiple changes for wrong inputs
  • Skip trailing duplicate %%EOF markers when locating startxref (#4015)
  • Do not crash on a non-array destination (#3976)
  • Handle annotations without subtype during merge (#3999)

Documentation (DOC)

  • Use AnnotationFlag enum instead of plain integers (#3997)

Code Style (STY)

  • Multiple small changes detected from test runs

Full Changelog

Commits
  • 18e4c22 REL: 6.18.0
  • 82501d2 SEC: Limit allowed length of indirect object tokens (#4055)
  • d35834b ENH: Draw borders and backgrounds for appearance streams and annotations (#4033)
  • 4b16bbb STY: Rename variable for readability (#4049)
  • a1ce7fb ROB: Do not crash when a page tree entry is not a dictionary (#4048)
  • 06b97ce DEV: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#4053)
  • d3f790c ROB: Do not crash when the annotations are not an array (#4046)
  • 3dc716e STY: Enforce lowercase function variables (#4045)
  • ec2406f DEP: Rework configuration value handling (#4044)
  • c76eed7 REL: 6.17.0
  • Additional commits viewable in compare view

Updates filelock from 3.32.4 to 3.32.5

Release notes

Sourced from filelock's releases.

3.32.5

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.32.4...3.32.5

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.6 (2026-09-08)

  • SoftFileLease and AsyncSoftFileLease now reject a boolean or non-finite lease_duration, which used to publish an owner record their own owner property reads back as malformed. :pr:723
  • Reject non-finite heartbeat, stale, and polling intervals in SoftReadWriteLock and AsyncSoftReadWriteLock, including cached singleton construction and overflow in the default stale threshold. :pr:724
  • Honor acquisition timeouts and blocking=False during SoftReadWriteLock state-mutex contention, including failed writer cleanup. Cross-host recovery of an abandoned .state marker remains unsupported. :pr:726
  • Allow acquiring existing lock files that grant write access through group permissions or an ACL even when their owner-write mode bit is unset. :pr:728
  • Preserve exception notes and custom attributes when copying or pickling Timeout and SoftFileLockProtocolError. :pr:729

3.32.5 (2026-08-31)

  • SoftFileLease.token and AsyncSoftFileLease.token now read None after a failed acquisition, so a contender turned away by a live holder no longer reports a token for a claim it never published. :pr:721
  • Document that mode has no setter: unlike poll_interval, timeout, blocking and lifetime, it is fixed at construction and lock.mode = ... raises AttributeError. :pr:716

3.32.4 (2026-08-23)

  • StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705
  • WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705
  • Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

3.32.3 (2026-08-13)

  • The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

... (truncated)

Commits
  • 1585dfe Release 3.32.5
  • 00177c3 🐛 fix(lease): clear token after failed acquire (#721)
  • 5aeb9b6 📝 docs: say that mode is read-only in the thread-local section (#716)
  • 2634dd1 [pre-commit.ci] pre-commit autoupdate (#720)
  • 37dccf0 🧪 test(fork): report where a stalled fork stops (#715)
  • See full diff in compare view

Updates anthropic from 1.0.0 to 1.4.0

Release notes

Sourced from anthropic's releases.

v1.4.0

1.4.0 (2026-09-04)

Full Changelog: v1.3.0...v1.4.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (9fce1e4)
  • api: add named types for organization compliance settings state (1de1957)
  • api: add support for sending a workspace ID on more endpoints (d1d2c01)

Bug Fixes

  • client: raise a clear error when an httpx object is passed instead of an httpx2 one (9447099)
  • repair custom-code merge in messages resources (#580) (85454ca)

Chores

  • examples: refresh platform model IDs (#499) (182abb5)
  • internal: bundle the mock server spec and update dev tooling (f9b0cf2)
  • internal: clean up code comments (#578) (d202327)
  • internal: fix mypy unreachable error in detect-breaking-changes script (07834f6)
  • internal: narrower codeowners scope (daca8f1)
  • internal: revert codeowners change (41aa767)
  • tests: remove stale warning filters (ba9bf35)
  • tests: reword the skip reason on the path-level query param tests (6b5046a)

Documentation

  • api: update a few doc strings (26c509d)

v1.3.0

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.4.0 (2026-09-04)

Full Changelog: v1.3.0...v1.4.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (9fce1e4)
  • api: add named types for organization compliance settings state (1de1957)
  • api: add support for sending a workspace ID on more endpoints (d1d2c01)

Bug Fixes

  • client: raise a clear error when an httpx object is passed instead of an httpx2 one (9447099)
  • repair custom-code merge in messages resources (#580) (85454ca)

Chores

  • examples: refresh platform model IDs (#499) (182abb5)
  • internal: bundle the mock server spec and update dev tooling (f9b0cf2)
  • internal: clean up code comments (#578) (d202327)
  • internal: fix mypy unreachable error in detect-breaking-changes script (07834f6)
  • internal: narrower codeowners scope (daca8f1)
  • internal: revert codeowners change (41aa767)
  • tests: remove stale warning filters (ba9bf35)
  • tests: reword the skip reason on the path-level query param tests (6b5046a)

Documentation

  • api: update a few doc strings (26c509d)

1.3.0 (2026-09-01)

Full Changelog: v1.2.0...v1.3.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (74080c3)
  • api: manual updates (1dc3ce0)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (429e719)

Bug Fixes

  • aws: resolve base_url from aws_region under skip_auth and with_options (#564) (b6d1732)
  • batches: add results to GA raw/streaming response wrappers (cbf9715)
  • ci: don't hard-wrap detect-breaking-changes output (b5be779)
  • client: derive multipart filename for file tuples passed without one (a9f3fb4)

... (truncated)

Commits
  • 62de60b Merge pull request #1905 from anthropics/release-please--branches--main--chan...
  • 3be44ac release: 1.4.0
  • 1de1957 feat(api): add named types for organization compliance settings state
  • 6b5046a chore(tests): reword the skip reason on the path-level query param tests
  • 182abb5 chore(examples): refresh platform model IDs (#499)
  • 07834f6 chore(internal): fix mypy unreachable error in detect-breaking-changes script
  • ba9bf35 chore(tests): remove stale warning filters
  • 9fce1e4 feat(api): add Claude Tag category and user breakdowns to usage reports
  • ea8a347 Build SDK
  • f9b0cf2 chore(internal): bundle the mock server spec and update dev tooling
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Commits

Updates anyio from 4.14.2 to 4.15.1

Release notes

Sourced from anyio's releases.

4.15.1

  • Implemented a compatibility fix for supporting direct access of anyio.* submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)

4.15.0

  • Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

    • follow_symlinks on exists() (Python 3.12+)
    • follow_symlinks on is_dir() (Python 3.13+)
    • follow_symlinks on is_file() (Python 3.13+)
    • follow_symlinks on owner() (Python 3.13+)
    • follow_symlinks on group() (Python 3.13+)
    • newline on read_text() (Python 3.13+)

    (#1286, #1293; PR by @​jaideeppyne)

  • Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @​Graeme22)

  • Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @​EmmanuelNiyonshuti)

  • Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @​Vizonex)

  • Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @​nightcityblade)

  • Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @​davidbrochart)

  • Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

  • Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @​gschaffner)

  • Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

  • Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @​EmmanuelNiyonshuti)

  • Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @​c-tonneslan)

  • Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @​Graeme22)

  • Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @​gschaffner)

  • Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @​tapetersen)

  • Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @​Sanjays2402)

  • Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @​alloutflo)

  • Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @​matthewfeickert)

  • Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @​hansu650)

  • Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @​zelinewang)

... (truncated)

Commits
  • ffcd154 Bumped up the version
  • 0ecf5ed Added a workaround for third party code accessing unimported submodules (#1309)
  • 9283662 Bumped up the version
  • d137692 Improved the instructions for AI agents
  • 033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
  • 942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
  • b825c3b Fixed pyproject.toml changes not triggering the test suite
  • 9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
  • b05fe6d Fixed wrong type in move_on_after (#1297)
  • 44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
  • Additional commits viewable in compare view

Updates ast-serialize from 0.8.0 to 0.11.0

Commits
  • 98d1303 Fix syntax error in try/except (#89)
  • 1dac8de Bump version to 0.11.0
  • fdc40ec Fix false negative in Ruff parser in try/except (#88)
  • 0ece21c Special-case empty type comment (#87)
  • a19a7a5 Expose serialize_string_type() in public API (#86)
  • 15364db Bump version to 0.10.0
  • 79b139a Reject invalid type ignores (#83)
  • 3bfe26c Add flag indicating if type comment was used for a function (#85)
  • 0438ee5 Fix compile warnings by deleting unused constants (#84)
  • 3c54841 Add a flag indicating use of (unsupported) unicode surrogates (#82)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.79 to 1.43.89

Commits
  • 1895b95 Merge branch 'release-1.43.89'
  • b85c521 Bumping version to 1.43.89
  • f729083 Add changelog entries from botocore
  • bb429b1 Merge branch 'release-1.43.88'
  • 257465b Merge branch 'release-1.43.88' into develop
  • e373d8d Bumping version to 1.43.88
  • 6ce83de Add changelog entries from botocore
  • d5740c2 Merge branch 'release-1.43.87'
  • bd30961 Merge branch 'release-1.43.87' into develop
  • 316b72c Bumping version to 1.43.87
  • Additional commits viewable in compare view

Updates botocore from 1.43.79 to 1.43.89

Commits
  • acf9b2f Merge branch 'release-1.43.89'
  • b282cbf Bumping version to 1.43.89
  • 6cb9a93 Update to latest models
  • 35b7c03 Merge branch 'release-1.43.88'
  • 6802a24 Merge branch 'release-1.43.88' into develop
  • 5dbc841 Bumping version to 1.43.88
  • 221da70 Update to latest models
  • 6a9e112 Merge customizations for SocialMessaging
  • bab8989 Merge pull request #3791 from Alan4506/docs/presign-sigv2-warning
  • 9f49da7 Address reviewer feedback on readability
  • Additional commits viewable in compare view

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg ...

    Description has been truncated

@dependabot
chore(deps): Bump the python-dependencies group across 1 directory wi…
9ce1aa6 
…th 16 updates

Bumps the python-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.16.2` | `6.18.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.32.4` | `3.32.5` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.0.0` | `1.4.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.6` |
| [anyio](https://github.com/agronholm/anyio) | `4.14.2` | `4.15.1` |
| [ast-serialize](https://github.com/mypyc/ast_serialize) | `0.8.0` | `0.11.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.79` | `1.43.89` |
| [botocore](https://github.com/boto/botocore) | `1.43.79` | `1.43.89` |
| [click](https://github.com/pallets/click) | `8.4.2` | `8.5.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.4` | `7.16.0` |
| [lxml](https://github.com/lxml/lxml) | `6.1.2` | `6.1.3` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.48.0` |
| [responses](https://github.com/getsentry/responses) | `0.26.2` | `0.26.3` |
| [websockets](https://github.com/python-websockets/websockets) | `17.0.1` | `17.1` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.3.0` | `2.4.0` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pypdf` from 6.16.2 to 6.18.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.16.2...6.18.0)

Updates `filelock` from 3.32.4 to 3.32.5
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.32.4...3.32.5)

Updates `anthropic` from 1.0.0 to 1.4.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v1.0.0...v1.4.0)

Updates `ruff` from 0.16.4 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.6)

Updates `anyio` from 4.14.2 to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.14.2...4.15.1)

Updates `ast-serialize` from 0.8.0 to 0.11.0
- [Commits](mypyc/ast_serialize@v0.8.0...v0.11.0)

Updates `boto3` from 1.43.79 to 1.43.89
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.79...1.43.89)

Updates `botocore` from 1.43.79 to 1.43.89
- [Commits](boto/botocore@1.43.79...1.43.89)

Updates `click` from 8.4.2 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.2...8.5.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `lxml` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.2...lxml-6.1.3)

Updates `pydantic-core` from 2.46.4 to 2.48.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.4...core-v2.48.0)

Updates `responses` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](getsentry/responses@0.26.2...0.26.3)

Updates `websockets` from 17.0.1 to 17.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@17.0.1...17.1)

Updates `wrapt` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pypdf
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: filelock
  dependency-version: 3.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ast-serialize
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.43.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: botocore
  dependency-version: 1.43.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lxml
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pydantic-core
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: responses
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: websockets
  dependency-version: '17.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: wrapt
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 11, 2026
@astra-ssj
astra-ssj merged commit 3ceb775 into main Sep 13, 2026
4 of 8 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-3576e8f7a6 branch September 13, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@astra-ssj