Skip to content

build(deps): bump the minor-patch group across 2 directories with 10 updates#991

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/pip/minor-patch-22a47ce63f
Closed

build(deps): bump the minor-patch group across 2 directories with 10 updates#991
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/pip/minor-patch-22a47ce63f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 17, 2026 •
edited
Loading

Bumps the minor-patch group with 8 updates in the / directory:

Package From To
ddtrace 4.7.0 4.7.1
duckdb 1.5.1 1.5.2
deepeval 3.9.6 3.9.7
unstructured 0.21.5 0.22.21
ruff 0.15.10 0.15.11
boto3-stubs 1.42.88 1.42.91
fastmcp 3.2.3 3.2.4
mkdocstrings 1.0.3 1.0.4

Bumps the minor-patch group with 5 updates in the /django_app directory:

Package From To
duckdb 1.5.1 1.5.2
ruff 0.15.10 0.15.11
boto3-stubs 1.42.88 1.42.91
sentry-sdk 2.57.0 2.58.0
boto3 1.42.88 1.42.91

Updates ddtrace from 4.7.0 to 4.7.1

Release notes

Sourced from ddtrace's releases.

4.7.1

Estimated end-of-life date, accurate to within three months: 06-2027 See the support level definitions for more information.

Bug Fixes

  • CI Visibility: This fix resolves an issue where a failure response from the /search_commits endpoint caused the git metadata upload to fall back to sending the full 30-day commit history instead of aborting. This fallback could trigger cascading write load on the backend. The upload now aborts when search_commits fails, matching the behavior when the /packfile upload itself fails.
  • Fixed a race condition with internal periodic threads that could have caused a rare crash when forking.
  • Fixes an issue where internal background threads could cause crashes or instability in applications that fork (e.g. Gunicorn, uWSGI) or during Python shutdown. Affected applications could experience intermittent crashes or hangs on exit.
  • CI Visibility: This fix resolves an issue where pytest-xdist worker crashes (os._exit, SIGKILL, segfault) caused buffered test events to be lost. To enable eager flushing, set DD_TRACE_PARTIAL_FLUSH_MIN_SPANS=1.
Commits
  • 65fecc4 chore: update system tests ref sha [4.7 branch] (#17534)
  • e0b3fd1 fix(ci_visibility): abort git upload when search_commits fails [backport #173...
  • 11a06a5 chore: bump version in 4.7 branch to 4.7.1 (#17512)
  • 6670bdb fix: periodic thread start race [backport 4.7] (#17497)
  • b135340 fix: use shared event to avoid post-finalisation RAII [backport 4.7] (#17451)
  • f966e0c chore: pin serverless-tools to a specific branch (#17466)
  • 19267a4 fix(ci_visibility): mitigate xdist worker crash data loss with eager event fl...
  • See full diff in compare view

Updates duckdb from 1.5.1 to 1.5.2

Release notes

Sourced from duckdb's releases.

v1.5.2 Bugfix Release

See the DuckDB core release notes here: https://github.com/duckdb/duckdb/releases/tag/v1.5.2

What's Changed in duckdb-python

Commits
  • 2aea44e pin submodule at release hash
  • 3aa2bf2 Fix stubs for path_or_buffer param (#425)
  • 018fe05 Fix stubs for path_or_buffer param
  • 0ef05d6 Fix segfault on join with None (#422)
  • 4acb9f7 Fix segfault on join
  • 6f161de Cache arrow schema for streaming types (#423)
  • 87d6a31 Add CLAUDE.md
  • ae356cb Cache the arrow schema for streams so we don't need an active client context
  • b71639f Test that client context stays open on arrow streams
  • 305d114 fix spark test (#421)
  • Additional commits viewable in compare view

Updates deepeval from 3.9.6 to 3.9.7

Release notes

Sourced from deepeval's releases.

🎉 Metrics for AI agents, multi-turn synthetic data generation, and more!

Full support for agentic evals :)

If you're building agents, DeepEval can now analyze and give you metric scores based on the trace of your LLM app.

🎯 1. Task Completion

Evaluate whether an agent actually completes the intended task, not just whether its final output “looks correct.”

Captures:

  • Goal completion
  • Intermediate step correctness
  • Error recovery
  • Procedural accuracy

Docs: https://deepeval.com/docs/metrics-task-completion

🔧 2. Tool Correctness

Evaluates whether tools were invoked correctly, meaningfully, and in the right order.

Captures:

  • Correct tool usage
  • Correct argument formatting
  • Avoiding hallucinated tools
  • Using tools only when needed

Docs: https://deepeval.com/docs/metrics-tool-correctness

🧩 3. Argument Correctness

Evaluates whether the agent’s arguments to tools are valid, structured, and aligned to the task.

Captures:

  • Correct parameter selection
  • Type/format adherence
  • Logical argument formation
  • Avoiding semantically incorrect inputs

Docs: https://deepeval.com/docs/metrics-argument-correctness

⚡ 4. Step Efficiency

Measures how efficiently an agent completes a task — rewarding fewer unnecessary steps and penalizing detours.

Captures:

  • Optimality of step count
  • Redundant tool calls

... (truncated)

Commits

Updates unstructured from 0.21.5 to 0.22.21

Release notes

Sourced from unstructured's releases.

0.22.21

What's Changed

Full Changelog: Unstructured-IO/unstructured@0.22.20...0.22.21

0.22.20

What's Changed

New Contributors

Full Changelog: Unstructured-IO/unstructured@0.22.18...0.22.20

0.22.18

What's Changed

Full Changelog: Unstructured-IO/unstructured@0.22.16...0.22.18

0.22.16

Enhancements

  • Formula markdown export (element_to_md / elements_to_md): New keyword-only formula_markdown_style ("auto", "display_math", "plain"; default "auto"). In "auto", display math ($$ ... $$) is used only when the text looks like notation (heuristic score) and contains no $/$$ (avoids breaking Markdown and noisy OCR captions). "display_math" wraps whenever safe (still falls back to plain if $ would corrupt fences). "plain" emits text only. Optional normalize_formula (default True) maps common Unicode operators to LaTeX-like tokens; normalize_formula stays before keyword-only options so positional encoding / no_group_by_page callers are unchanged. Unicode √ is never mapped to \\sqrt{}. Module constants: FORMULA_MARKDOWN_AUTO, FORMULA_MARKDOWN_DISPLAY_MATH, FORMULA_MARKDOWN_PLAIN.

0.22.15

Security

  • security: fix(deps): upgrade vulnerable transitive dependencies [security]

0.22.14

Enhancements

  • Deduplicate PDF rendering: Remove _render_pdf_pages and delegate to unstructured-inference's convert_pdf_to_image (which already has lazy per-page rendering). Peak memory for path_only=True drops from O(n_pages) to O(1 page) — 97% reduction on a 100-page PDF. Bumps inference dep to >=1.6.2.

0.22.13

Enhancements

  • Speed up standardize_quotes: Replace loop-based character replacement with a single str.translate() call using a pre-computed translation table. Also fixes a pre-existing bug where left smart quotes were never normalized due to duplicate dictionary keys.

0.22.12

What's Changed

... (truncated)

Changelog

Sourced from unstructured's changelog.

0.22.21

Enhancements

  • Skip table chunking option: Add skip_table_chunking to basic/title chunking options. When True, Table elements are passed through unchanged without being split into TableChunk elements, regardless of their size. Defaults to False to preserve existing behavior.

0.22.20

Enhancements

  • Auto-detect vertical text for rotated PDFs: Add detect_vertical field to PDFMinerConfig and auto-enable it when rendered pages have /Rotate metadata, so pdfminer groups rotated text into proper words instead of per-character regions

0.22.19

Security

  • security: fix(deps): upgrade vulnerable transitive dependencies [security]

0.22.18

Fixes

  • Make ingest-test-fixtures-update-pr CI job also update the markdown versions of the fixtures.

Enhancements

  • Add page number support to v1 HTML parser: The v1 HTML parser now reads data-page-number attributes from ancestor elements and includes the page number in element metadata, consistent with the v2 parser behavior.

0.22.17

Fixes

  • Preserve semantic table headers across carried chunks: Carried rows in split table chunks now keep original header semantics (th stays th, including section header rows and wrapped header text), preventing header cells from degrading to data cells in continuation chunks.

0.22.16

Enhancements

  • Formula markdown export (element_to_md / elements_to_md): New keyword-only formula_markdown_style ("auto", "display_math", "plain"; default "auto"). In "auto", display math ($$ ... $$) is used only when the text looks like notation (heuristic score) and contains no $/$$ (avoids breaking Markdown and noisy OCR captions). "display_math" wraps whenever safe (still falls back to plain if $ would corrupt fences). "plain" emits text only. Optional normalize_formula (default True) maps common Unicode operators to LaTeX-like tokens; normalize_formula stays before keyword-only options so positional encoding / no_group_by_page callers are unchanged. Unicode √ is never mapped to \\sqrt{}. Module constants: FORMULA_MARKDOWN_AUTO, FORMULA_MARKDOWN_DISPLAY_MATH, FORMULA_MARKDOWN_PLAIN.

0.22.15

Security

  • security: fix(deps): upgrade vulnerable transitive dependencies [security]

0.22.14

Enhancements

... (truncated)

Commits
  • 3ac4443 feat: add option to skip table chunking (#4338)
  • dfb1653 Enable vertical text detection for rotated images (#4328)
  • d0aa8eb feat: add GHA workflow to build opencv wheels without ffmpeg (#4335)
  • 029f491 fix(deps): upgrade vulnerable transitive dependencies [security] (#4334)
  • 2437078 Fix fixtures update CI to regenerate markdown (#4332)
  • d299095 feat: add page number support to v1 html partition (#4327)
  • 615782a fix(chunking): preserve semantic headers in carried table chunks (#4313)
  • 264d569 feat: render Formula elements as $$ blocks with optional normalization (#4308)
  • 051b358 fix(deps): upgrade vulnerable transitive dependencies [security] (#4318)
  • affb9d6 refactor: deduplicate PDF rendering by delegating to unstructured-inference (...
  • Additional commits viewable in compare view

Updates ruff from 0.15.10 to 0.15.11

Release notes

Sourced from ruff's releases.

0.15.11

Release Notes

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

Bug fixes

  • [flake8-async] Omit overridden methods for ASYNC109 (#24648)

Documentation

  • [flake8-async] Add override mention to ASYNC109 docs (#24666)
  • Update Neovim config examples to use vim.lsp.config (#24577)

Contributors

Install ruff 0.15.11

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.11/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.11/ruff-installer.ps1 | iex"

Download ruff 0.15.11

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

Bug fixes

  • [flake8-async] Omit overridden methods for ASYNC109 (#24648)

Documentation

  • [flake8-async] Add override mention to ASYNC109 docs (#24666)
  • Update Neovim config examples to use vim.lsp.config (#24577)

Contributors

Commits

Updates boto3-stubs from 1.42.88 to 1.42.91

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates fastmcp from 3.2.3 to 3.2.4

Release notes

Sourced from fastmcp's releases.

v3.2.4: Patch Me If You Can

A grab bag of fixes, hardening, and polish.

The headline behavior change: background tasks are now scoped to the authorization context rather than the MCP session, so a task kicked off by an authenticated user survives session churn and stays tied to who started it. This is a breaking change for anyone relying on the old session-scoped semantics.

Security got three meaningful upgrades. FileUpload now validates actual decoded base64 size instead of trusting the client-reported number, so an attacker can't claim "10 bytes" and deliver 10MB. The proxy client stops forwarding inbound HTTP headers to unrelated remote servers — previously a header meant for server A could leak to server B. And AuthKit now auto-binds token audience to the resource URL per RFC 8707, closing a token-reuse gap across MCP resources.

Schema handling had a rough-edges pass. json_schema_to_type no longer crashes on Python keywords, boolean schemas, empty enums, or name collisions, and we added a 232K-schema crash test from APIs.guru to keep it honest. Gemini 2.5 Flash compatibility is fixed by stripping title fields the model rejects. Parameter descriptions are now extracted from docstrings automatically, so your tool signatures document themselves.

Plus a Keycloak OAuth provider for enterprise auth, improvements to ctx.elicit() (new response_title/response_description, deprecation warning when called without response_type), and dozens of smaller fixes across transforms, retry middleware, resource templates, and client disconnect handling.

What's Changed

Breaking Changes ⚠️

Enhancements ✨

Security 🔒

Fixes 🐞

... (truncated)

Commits
  • 7d76074 Stop pydantic 2.13 from leaking _WrappedResult docstring into tool output sch...
  • b732a4a Overhaul apps docs (#3915)
  • 5c2ff1b chore: Update SDK documentation (#3914)
  • f4f2ec0 Deprecate ctx.elicit() without response_type (#3916)
  • 338b80c chore(deps): bump the uv group across 2 directories with 1 update (#3913)
  • 110cd3a Add response_title and response_description to ctx.elicit() (#3912)
  • 3117846 chore: Update SDK documentation (#3909)
  • 031c7e0 Fix RetryMiddleware not retrying tool errors (#3858)
  • 200d79e Enable PERF and T20 ruff rules (#3845)
  • 82f310f AuthKit: auto-bind token audience to resource URL (RFC 8707) (#3905)
  • Additional commits viewable in compare view

Updates mkdocstrings from 1.0.3 to 1.0.4

Release notes

Sourced from mkdocstrings's releases.

1.0.4

1.0.4 - 2026-04-15

Compare with 1.0.3

Bug Fixes

  • Add timeout when downloading inventories (10 seconds) (3d1969a by Simon Lloyd). Issue-819
Changelog

Sourced from mkdocstrings's changelog.

1.0.4 - 2026-04-15

Compare with 1.0.3

Bug Fixes

  • Add timeout when downloading inventories (10 seconds) (3d1969a by Simon Lloyd). Issue-819
Commits
  • a938528 chore: Prepare release 1.0.4
  • 1eaa224 ci: Lint and type-check
  • 80e090d Merge branch 'main' of github.com:mkdocstrings/mkdocstrings
  • 5f82a58 chore: Template upgrade
  • 3d1969a fix: Add timeout when downloading inventories (10 seconds)
  • a0c47b9 docs: Fix broken link in README
  • e500a2b chore: Update sponsors section in README
  • See full diff in compare view

Updates ddtrace from 4.7.0 to 4.7.1

Release notes

Sourced from ddtrace's releases.

4.7.1

Estimated end-of-life date, accurate to within three months: 06-2027 See the support level definitions for more information.

Bug Fixes

  • CI Visibility: This fix resolves an issue where a failure response from the /search_commits endpoint caused the git metadata upload to fall back to sending the full 30-day commit history instead of aborting. This fallback could trigger cascading write load on the backend. The upload now aborts when search_commits fails, matching the behavior when the /packfile upload itself fails.
  • Fixed a race condition with internal periodic threads that could have caused a rare crash when forking.
  • Fixes an issue where internal background threads could cause crashes or instability in applications that fork (e.g. Gunicorn, uWSGI) or during Python shutdown. Affected applications could experience intermittent crashes or hangs on exit.
  • CI Visibility: This fix resolves an issue where pytest-xdist worker crashes (os._exit, SIGKILL, segfault) caused buffered test events to be lost. To enable eager flushing, set DD_TRACE_PARTIAL_FLUSH_MIN_SPANS=1.
Commits
  • 65fecc4 chore: update system tests ref sha [4.7 branch] (#17534)
  • e0b3fd1 fix(ci_visibility): abort git upload when search_commits fails [backport #173...
  • 11a06a5 chore: bump version in 4.7 branch to 4.7.1 (#17512)
  • 6670bdb fix: periodic thread start race [backport 4.7] (#17497)
  • b135340 fix: use shared event to avoid post-finalisation RAII [backport 4.7] (#17451)
  • f966e0c chore: pin serverless-tools to a specific branch (#17466)
  • 19267a4 fix(ci_visibility): mitigate xdist worker crash data loss with eager event fl...
  • See full diff in compare view

Updates duckdb from 1.5.1 to 1.5.2

Release notes

Sourced from duckdb's releases.

v1.5.2 Bugfix Release

See the DuckDB core release notes here: https://github.com/duckdb/duckdb/releases/tag/v1.5.2

What's Changed in duckdb-python

Commits
  • 2aea44e pin submodule at release hash
  • 3aa2bf2 Fix stubs for path_or_buffer param (#425)
  • 018fe05 Fix stubs for path_or_buffer param
  • 0ef05d6 Fix segfault on join with None (#422)
  • 4acb9f7 Fix segfault on join
  • 6f161de Cache arrow schema for streaming types (#423)
  • 87d6a31 Add CLAUDE.md
  • ae356cb Cache the arrow schema for streams so we don't need an active client context
  • b71639f Test that client context stays open on arrow streams
  • 305d114 fix spark test (#421)
  • Additional commits viewable in compare view

Updates unstructured from 0.21.5 to 0.22.21

Release notes

Sourced from unstructured's releases.

0.22.21

What's Changed

Full Changelog: Unstructured-IO/unstructured@0.22.20...0.22.21

0.22.20

What's Changed

New Contributors

Full Changelog: Unstructured-IO/unstructured@0.22.18...0.22.20

0.22.18

What's Changed

Full Changelog: Unstructured-IO/unstructured@0.22.16...0.22.18

0.22.16

Enhancements

  • Formula markdown export (element_to_md / elements_to_md): New keyword-only formula_markdown_style ("auto", "display_math", "plain"; default "auto"). In "auto", display math ($$ ... $$) is used only when the text looks like notation (heuristic score) and contains no $/$$ (avoids breaking Markdown and noisy OCR captions). "display_math" wraps whenever safe (still falls back to plain if $ would corrupt fences). "plain" emits text only. Optional normalize_formula (default True) maps common Unicode operators to LaTeX-like tokens; normalize_formula stays before keyword-only options so positional encoding / no_group_by_page callers are unchanged. Unicode √ is never mapped to \\sqrt{}. Module constants: FORMULA_MARKDOWN_AUTO, FORMULA_MARKDOWN_DISPLAY_MATH, FORMULA_MARKDOWN_PLAIN.

0.22.15

Security

  • security: fix(deps): upgrade vulnerable transitive dependencies [security]

0.22.14

Enhancements

  • Deduplicate PDF rendering: Remove _render_pdf_pages and delegate to unstructured-inference's convert_pdf_to_image (which already has lazy per-page rendering). Peak memory for path_only=True drops from O(n_pages) to O(1 page) — 97% reduction on a 100-page PDF. Bumps inference dep to >=1.6.2.

0.22.13

Enhancements

  • Speed up standardize_quotes: Replace loop-based character replacement with a single str.translate() call using a pre-computed translation table. Also fixes a pre-existing bug where left smart quotes were never normalized due to duplicate dictionary keys.

0.22.12

What's Changed

... (truncated)

Changelog

Sourced from unstructured's changelog.

0.22.21

Enhancements

  • Skip table chunking option: Add skip_table_chunking to basic/title chunking options. When True, Table elements are passed through unchanged without being split into TableChunk elements, regardless of their size. Defaults to False to preserve existing behavior.

0.22.20

Enhancements

  • Auto-detect vertical text for rotated PDFs: Add detect_vertical field to PDFMinerConfig and auto-enable it when rendered pages have /Rotate metadata, so pdfminer groups rotated text into proper words instead of per-character regions

0.22.19

Security

  • security: fix(deps): upgrade vulnerable transitive dependencies [security]

0.22.18

Fixes

  • Make ingest-test-fixtures-update-pr CI job also update the markdown versions of the fixtures.

Enhancements

  • Add page number support to v1 HTML parser: The v1 HTML parser now reads data-page-number attributes from ancestor elements and includes the page number in element metadata, consistent with the v2 parser behavior.

0.22.17

Fixes

  • Preserve semantic table headers across carried chunks: Carried rows in split table chunks now keep original header semantics (th stays th, including section header rows and wrapped header text), preventing header cells from degrading to data cells in continuation chunks.

0.22.16

Enhancements

  • Formula markdown export (element_to_md / elements_to_md): New keyword-only formula_markdown_style ("auto", "display_math", "plain"; default "auto"). In "auto", display math ($$ ... $$) is used only when the text looks like notation (heuristic score) and contains no $/$$ (avoids breaking Markdown and noisy OCR captions). "display_math" wraps whenever safe (still falls back to plain if $ would corrupt fences). Description has been truncated

@dependabot
build(deps): bump the minor-patch group across 2 directories with 10 …
b854e80 
…updates

Bumps the minor-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ddtrace](https://github.com/DataDog/dd-trace-py) | `4.7.0` | `4.7.1` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.1` | `1.5.2` |
| [deepeval](https://github.com/confident-ai/deepeval) | `3.9.6` | `3.9.7` |
| [unstructured](https://github.com/Unstructured-IO/unstructured) | `0.21.5` | `0.22.21` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.10` | `0.15.11` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.42.88` | `1.42.91` |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.2.3` | `3.2.4` |
| [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings) | `1.0.3` | `1.0.4` |

Bumps the minor-patch group with 5 updates in the /django_app directory:

| Package | From | To |
| --- | --- | --- |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.1` | `1.5.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.10` | `0.15.11` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.42.88` | `1.42.91` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.57.0` | `2.58.0` |
| [boto3](https://github.com/boto/boto3) | `1.42.88` | `1.42.91` |



Updates `ddtrace` from 4.7.0 to 4.7.1
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v4.7.0...v4.7.1)

Updates `duckdb` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.1...v1.5.2)

Updates `deepeval` from 3.9.6 to 3.9.7
- [Release notes](https://github.com/confident-ai/deepeval/releases)
- [Commits](confident-ai/deepeval@v3.9.6...v3.9.7)

Updates `unstructured` from 0.21.5 to 0.22.21
- [Release notes](https://github.com/Unstructured-IO/unstructured/releases)
- [Changelog](https://github.com/Unstructured-IO/unstructured/blob/main/CHANGELOG.md)
- [Commits](Unstructured-IO/unstructured@0.21.5...0.22.21)

Updates `ruff` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.11)

Updates `boto3-stubs` from 1.42.88 to 1.42.91
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `fastmcp` from 3.2.3 to 3.2.4
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.2.3...v3.2.4)

Updates `mkdocstrings` from 1.0.3 to 1.0.4
- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)
- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/mkdocstrings@1.0.3...1.0.4)

Updates `ddtrace` from 4.7.0 to 4.7.1
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v4.7.0...v4.7.1)

Updates `duckdb` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.1...v1.5.2)

Updates `unstructured` from 0.21.5 to 0.22.21
- [Release notes](https://github.com/Unstructured-IO/unstructured/releases)
- [Changelog](https://github.com/Unstructured-IO/unstructured/blob/main/CHANGELOG.md)
- [Commits](Unstructured-IO/unstructured@0.21.5...0.22.21)

Updates `ruff` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.11)

Updates `boto3-stubs` from 1.42.88 to 1.42.91
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `duckdb` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.1...v1.5.2)

Updates `ruff` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.11)

Updates `boto3-stubs` from 1.42.88 to 1.42.91
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `sentry-sdk` from 2.57.0 to 2.58.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.57.0...2.58.0)

Updates `boto3` from 1.42.88 to 1.42.91
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.88...1.42.91)

Updates `duckdb` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.1...v1.5.2)

Updates `ruff` from 0.15.10 to 0.15.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.15.11)

Updates `boto3-stubs` from 1.42.88 to 1.42.91
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: deepeval
  dependency-version: 3.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: unstructured
  dependency-version: 0.22.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.42.91
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: fastmcp
  dependency-version: 3.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: mkdocstrings
  dependency-version: 1.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ddtrace
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: unstructured
  dependency-version: 0.22.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.42.91
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.42.91
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: sentry-sdk
  dependency-version: 2.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: boto3
  dependency-version: 1.42.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-version: 0.15.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.42.91
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 17, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 17, 2026 22:44
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 17, 2026
github-actions[bot]
github-actions bot approved these changes Apr 17, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Dependabot patch/minor update

@github-actions github-actions bot enabled auto-merge (squash) April 17, 2026 22:45
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 17, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
See the Details below.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
pip/boto3 1.42.91 🟢 7.7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
pip/boto3-stubs 1.42.91 UnknownUnknown
pip/botocore 1.42.91 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST🟢 10SAST tool is run on all commits
pip/duckdb 1.5.2 UnknownUnknown
pip/ruff 0.15.11 UnknownUnknown
pip/sentry-sdk 2.58.0 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 9Found 23/25 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/boto3 1.42.91 🟢 7.7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
pip/boto3-stubs 1.42.91 UnknownUnknown
pip/botocore 1.42.91 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
SAST🟢 10SAST tool is run on all commits
pip/ddtrace 4.7.1 UnknownUnknown
pip/deepeval 3.9.7 UnknownUnknown
pip/djangorestframework 3.17.1 UnknownUnknown
pip/duckdb 1.5.2 UnknownUnknown
pip/fastmcp 3.2.4 UnknownUnknown
pip/mkdocstrings 1.0.4 UnknownUnknown
pip/openai-whisper 20250625 UnknownUnknown
pip/opentelemetry-api 1.41.0 UnknownUnknown
pip/opentelemetry-sdk 1.41.0 UnknownUnknown
pip/opentelemetry-semantic-conventions 0.62b0 UnknownUnknown
pip/pandas 2.3.3 UnknownUnknown
pip/posthog 7.12.0 UnknownUnknown
pip/pytz 2026.1.post1 UnknownUnknown
pip/requests 2.33.1 UnknownUnknown
pip/ruff 0.15.11 UnknownUnknown
pip/sentry-sdk 2.58.0 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 9Found 23/25 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/tiktoken 0.12.0 UnknownUnknown
pip/unstructured 0.22.21 UnknownUnknown
pip/unstructured-inference 1.6.6 UnknownUnknown
pip/wrapt 2.1.2 UnknownUnknown

Scanned Files

  • django_app/poetry.lock
  • poetry.lock

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 21, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 21, 2026
auto-merge was automatically disabled April 21, 2026 00:05

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/minor-patch-22a47ce63f branch April 21, 2026 00:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants