Skip to content

chore(deps): bump the python group across 1 directory with 15 updates#67

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-c991f407b9
Open

chore(deps): bump the python group across 1 directory with 15 updates#67
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-c991f407b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on lancedb, pylance, pyarrow, pathspec, tree-sitter, tqdm, fastapi, uvicorn, mcp, openai, onnxruntime-gpu, anthropic, ruff, pytest and setuptools to permit the latest version.
Updates lancedb to 0.34.0

Release notes

Sourced from lancedb's releases.

Python LanceDB v0.34.0

🛠 Breaking Changes

🎉 New Features

🐛 Bug Fixes

... (truncated)

Commits
  • 1545bd4 Bump version: 0.34.0-beta.7 → 0.34.0
  • 589331d Bump version: 0.34.0-beta.6 → 0.34.0-beta.7
  • 56f8565 feat: update lance dependency to v8.0.0
  • 37466a0 Bump version: 0.31.0-beta.5 → 0.31.0-beta.6
  • bfce8a5 Bump version: 0.34.0-beta.5 → 0.34.0-beta.6
  • a1261e6 fix(python): average MRR reciprocal ranks over all rankings (#3599)
  • 17c4991 docs(python): add missing parameter documentation for when_matched_update_all...
  • d889321 fix!: combine repeated where filters with AND instead of replacing (#3585)
  • 8a37f2a feat(rust): re-export arrow and datafusion crates from lancedb (#3576)
  • f94673a ci: update deprecated GitHub Actions to latest versions (Fixes #3577) (#3608)
  • Additional commits viewable in compare view

Updates pylance to 8.0.0

Release notes

Sourced from pylance's releases.

v8.0.0

What's Changed

Breaking Changes 🛠

Critical Fixes ‼️

New Features 🎉

... (truncated)

Commits
  • 15f2ff5 chore: release version 8.0.0
  • 4288807 chore: release candidate 8.0.0-rc.2
  • eea4095 chore: release candidate 8.0.0-rc.1
  • 5fd0659 chore: release beta version 8.0.0-beta.19
  • c4e6564 feat: support mixed-language FTS stop words (#7324)
  • 838f78b fix: avoid versioned describe table for namespace opens (#7250)
  • 6484a0b chore(deps): bump geoarrow-rust-core from 0.6.1 to 0.6.3 in /python (#7342)
  • 1f87111 chore(deps): bump lance-namespace from 0.8.5 to 0.8.6 in /python (#7343)
  • 909dea1 chore: release beta version 8.0.0-beta.18
  • 0f2745d chore: release beta version 8.0.0-beta.17
  • Additional commits viewable in compare view

Updates pyarrow to 24.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 24.0.0

Release Notes URL: https://arrow.apache.org/release/24.0.0.html

Commits
  • 31b4b6c MINOR: [Release] Update versions for 24.0.0
  • 06dbc17 MINOR: [Release] Update .deb/.rpm changelogs for 24.0.0
  • a021d80 MINOR: [Release] Update CHANGELOG.md for 24.0.0
  • 2d6b12c GH-49716: [C++] FixedShapeTensorType::Deserialize should strictly validate se...
  • a74cb6a GH-49697: [C++][CI] Check IPC file body bounds are in sync with decoder outco...
  • 871a0c6 GH-49676: [Python][Packaging] Fix gRPC docker image layer being too big for h...
  • f9203b3 GH-49586: [C++][CI] StructToStructSubset test failure with libc++ 22.1.1 (#49...
  • fe298b4 GH-49628: [Python][Interchange protocol] Suppress warnings for pandas 4.0.0 a...
  • 1f94910 GH-49252: [GLib] Deprecate Feather features (#49673)
  • 5ba5c3c GH-49671: [CI][Docs] Don't run jobs for push by Dependabot (#49672)
  • Additional commits viewable in compare view

Updates pathspec to 1.1.1

Release notes

Sourced from pathspec's releases.

v1.1.1

Release v1.1.1. See CHANGES.rst.

Changelog

Sourced from pathspec's changelog.

1.1.1 (2026-04-26)

Improvements:

  • Improved type checking with mypy and pyright.

Bug fixes:

  • Fixed typing on PathSpec[TPattern] to PathSpec[TPattern_co].
  • Added missing variant type-hint type[Pattern] to PathSpec.from_lines() parameter pattern_factory.
  • Fixed possible type error when using + and += operators on PathSpec.

1.1.0 (2026-04-22)

New features:

  • Issue [#108](https://github.com/cpburnz/python-pathspec/issues/108)_: Specialize pattern type for PathSpec as PathSpec[TPattern] for better debugging of PathSpec().patterns.

Bug fixes:

  • Issue [#93](https://github.com/cpburnz/python-pathspec/issues/93)_: Git discards invalid range notation. GitIgnoreSpecPattern now discards patterns with invalid range notation like Git.
  • Pull [#106](https://github.com/cpburnz/python-pathspec/issues/106)_: Fix escape() not escaping backslash characters.

Improvements:

  • Pull [#110](https://github.com/cpburnz/python-pathspec/issues/110)_: Nicer debug print outs (and str for regex pattern).

.. _Pull [#106](https://github.com/cpburnz/python-pathspec/issues/106): cpburnz/python-pathspec#106 .. _Issue [#108](https://github.com/cpburnz/python-pathspec/issues/108): cpburnz/python-pathspec#108 .. _Pull [#110](https://github.com/cpburnz/python-pathspec/issues/110): cpburnz/python-pathspec#110

1.0.4 (2026-01-26)

Bug fixes:

  • Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103)_: Using re2 fails if pyre2 is also installed.

.. _Issue [#103](https://github.com/cpburnz/python-pathspec/issues/103): cpburnz/python-pathspec#103

1.0.3 (2026-01-09)

Bug fixes:

... (truncated)

Commits

Updates tree-sitter to 0.26.0

Release notes

Sourced from tree-sitter's releases.

v0.26.0

What's Changed

New Contributors

Full Changelog: tree-sitter/py-tree-sitter@v0.25.2...v0.26.0

Commits
  • a9e753e ci(pypi): skip riscv64 tests properly
  • eeababc chore: release 0.26.0
  • dac834e fix(node): fix reference leak
  • bdddb61 build: bump tree-sitter-rust from 0.24.1 to 0.24.2
  • baa5fd8 ci: bump the actions group across 1 directory with 2 updates
  • c680e3b build: bump tree_sitter/core from cd5b087 to 7f53486
  • 2d3fb3a ci: bump actions/upload-pages-artifact from 4 to 5 in the actions group
  • bae0829 build: bump tree-sitter-rust from 0.24.0 to 0.24.1
  • d99f796 build: bump tree_sitter/core from 6f2e8a6 to cd5b087
  • a9282df build: bump tree_sitter/core from cd4b6e2 to 6f2e8a6
  • Additional commits viewable in compare view

Updates tqdm to 4.68.4

Release notes

Sourced from tqdm's releases.

tqdm v4.68.4 stable

  • trim to ncols even when '{bar}' not in bar_format (#1717, #1767 <- #1658)
  • fix tqdm.write when stdout=None (#1768)
Commits
  • 53d096e bump version, merge pull request #1768 from its-Sohan/fix/write-stdout-none
  • 74ff992 fix: prevent tqdm.write from crashing when sys.stdout is none
  • 3757d0d Merge pull requests #1717 and #1767 (fixes #1658)
  • 55156ce fix: apply disp_trim to all format_meter return paths (#1658)
  • 9aff609 bump version, merge pull request #1763 from tqdm/jupyterlite
  • 9872f80 drop date from snap version str to fix pydantic
  • b829334 support QtConsole, Spyder, JupyterLite
  • 6fa4867 delay os.get_terminal_size
  • 748e107 lint
  • e6e29eb move tox.ini -> pyproject.toml
  • Additional commits viewable in compare view

Updates fastapi to 0.139.0

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn to 0.50.2

Changelog

Sourced from uvicorn's changelog.

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

  • Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

  • Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
  • Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
  • Default --ws auto to websockets-sansio when websockets is installed (#2985)
  • Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
  • Build a fresh asgi scope dict per request (#2977)
  • Cache the asgi scope sub-dict per connection (#2976)
  • Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
  • Memoize trusted host checks in ProxyHeadersMiddleware (#2970)
  • Replace click.style with an internal ANSI style helper (#2981)

Deprecated

  • Deprecate the legacy websockets implementation; use websockets-sansio or wsproto instead (#2985)

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

... (truncated)

Commits
  • a1b570c Version 0.50.2 (#3022)
  • 83c7da7 Require websockets>=13.0 for the default sansio implementation (#3021)
  • b4d0116 Version 0.50.1 (#3020)
  • 2a9151d Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansi...
  • 1bf3ab4 Cover the excluded-directory branch in FileFilter with a direct test (#3014)
  • 837b5f9 Deflake multiprocess, reload, and signal supervisor tests (#2975)
  • 21d2c16 Version 0.50.0 (#3013)
  • 6c42e8d Skip the eager app import in the parent when spawning workers (#3012)
  • 56a4631 Exit with a dedicated code on startup failure and stop the supervisor when a ...
  • 3314dfc chore(deps): bump the github-actions group with 4 updates (#3007)
  • Additional commits viewable in compare view

Updates mcp to 1.28.1

Commits
  • 777b8d0 [v1.x] Support TransportSecuritySettings in the WebSocket server transport (#...
  • 4720467 [v1.x] Set Development Status classifier to Production/Stable (#2976)
  • 6df3d73 [v1.x] Buffer per-request StreamableHTTP streams; store priming event before ...
  • 32d3290 [v1.x] Pass a list to parametrize in test_docs_examples (pytest 9.1.0 compat)...
  • 0dca751 [v1.x] Deflake the child process cleanup tests (#2839)
  • 52258a9 [v1.x] Add a v2 status banner to the README (#2835)
  • b8f4917 [v1.x] Deprecate the WebSocket transport and the experimental tasks entry poi...
  • 2309e5e fix: omit null optional fields from task result payloads (#2809)
  • 494eb11 [v1.x] Support Python 3.14 (#2769)
  • 6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
  • Additional commits viewable in compare view

Updates openai to 2.44.0

Release notes

Sourced from openai's releases.

v2.44.0

2.44.0 (2026-06-24)

Full Changelog: v2.43.0...v2.44.0

Bug Fixes

  • auth: prioritize first auth header (797e336)
Changelog

Sourced from openai's changelog.

2.44.0 (2026-06-24)

Full Changelog: v2.43.0...v2.44.0

Bug Fixes

  • auth: prioritize first auth header (797e336)

2.43.0 (2026-06-17)

Full Changelog: v2.42.0...v2.43.0

Features

  • api: update OpenAPI spec or Stainless config (2254235)

2.42.0 (2026-06-16)

Full Changelog: v2.41.1...v2.42.0

Features

  • api: admin spend_alerts (6134198)
  • api: manual updates (f337bf4)
  • api: update OpenAPI spec or Stainless config (7015158)

Build System

2.41.1 (2026-06-05)

Full Changelog: v2.41.0...v2.41.1

Build System

  • Remove scheduled release workflow trigger (

Updates the requirements on [lancedb](https://github.com/lancedb/lancedb), [pylance](https://github.com/lance-format/lance), [pyarrow](https://github.com/apache/arrow), [pathspec](https://github.com/cpburnz/python-pathspec), [tree-sitter](https://github.com/tree-sitter/py-tree-sitter), [tqdm](https://github.com/tqdm/tqdm), [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn), [mcp](https://github.com/modelcontextprotocol/python-sdk), [openai](https://github.com/openai/openai-python), [onnxruntime-gpu](https://github.com/microsoft/onnxruntime), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [ruff](https://github.com/astral-sh/ruff), [pytest](https://github.com/pytest-dev/pytest) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `lancedb` to 0.34.0
- [Release notes](https://github.com/lancedb/lancedb/releases)
- [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md)
- [Commits](lancedb/lancedb@python-v0.33.0...python-v0.34.0)

Updates `pylance` to 8.0.0
- [Release notes](https://github.com/lance-format/lance/releases)
- [Changelog](https://github.com/lance-format/lance/blob/main/release_process.md)
- [Commits](lance-format/lance@v0.10.0...v8.0.0)

Updates `pyarrow` to 24.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v16.0.0...apache-arrow-24.0.0)

Updates `pathspec` to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](cpburnz/python-pathspec@v0.12.0...v1.1.1)

Updates `tree-sitter` to 0.26.0
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](tree-sitter/py-tree-sitter@v0.25.2...v0.26.0)

Updates `tqdm` to 4.68.4
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.2...v4.68.4)

Updates `fastapi` to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.137.1...0.139.0)

Updates `uvicorn` to 0.50.2
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.49.0...0.50.2)

Updates `mcp` to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.9.0...v1.28.1)

Updates `openai` to 2.44.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.41.1...v2.44.0)

Updates `onnxruntime-gpu` to 1.27.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.17.0...v1.27.0)

Updates `anthropic` to 0.116.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.109.2...v0.116.0)

Updates `ruff` to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.17...0.15.20)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.0...9.1.1)

Updates `setuptools` to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v83.0.0)

---
updated-dependencies:
- dependency-name: lancedb
  dependency-version: 0.34.0
  dependency-type: direct:production
  dependency-group: python
- dependency-name: pylance
  dependency-version: 8.0.0
  dependency-type: direct:production
  dependency-group: python
- dependency-name: pyarrow
  dependency-version: 24.0.0
  dependency-type: direct:production
  dependency-group: python
- dependency-name: pathspec
  dependency-version: 1.1.1
  dependency-type: direct:production
  dependency-group: python
- dependency-name: tree-sitter
  dependency-version: 0.26.0
  dependency-type: direct:production
  dependency-group: python
- dependency-name: tqdm
  dependency-version: 4.68.4
  dependency-type: direct:production
  dependency-group: python
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:development
  dependency-group: python
- dependency-name: uvicorn
  dependency-version: 0.50.2
  dependency-type: direct:development
  dependency-group: python
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: direct:development
  dependency-group: python
- dependency-name: openai
  dependency-version: 2.44.0
  dependency-type: direct:development
  dependency-group: python
- dependency-name: onnxruntime-gpu
  dependency-version: 1.27.0
  dependency-type: direct:development
  dependency-group: python
- dependency-name: anthropic
  dependency-version: 0.116.0
  dependency-type: direct:development
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  dependency-group: python
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: python
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:development
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 7, 2026
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant