Skip to content

chore(deps)(deps): bump the backend-patch group in /backend with 73 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/backend/backend-patch-4e4bddaf03
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/backend/backend-patch-4e4bddaf03

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown

Bumps the backend-patch group in /backend with 73 updates:

Package From To
aiohttp 3.14.4 3.14.5
aiosqlite 0.19.0 0.22.1
alembic 1.13.1 1.20.1
amqp 5.4.1 5.4.2
anyio 4.15.1 4.16.0
billiard 4.3.1 4.3.2
celery 5.3.6 5.7.0
certifi 2026.7.22 2026.10.23
click 8.5.0 8.5.1
dnspython 2.9.0 2.9.2
fastapi 0.109.0 0.162.2
filelock 4.1.0 4.2.10
fonttools 4.66.1 4.68.0
googleapis-common-protos 1.75.5 1.76.0
grpcio 1.84.0 1.85.1
hf-xet 1.7.0 1.8.0
httpcore2 2.13.1 2.16.0
httpx2 2.13.1 2.16.0
httpx 0.26.0 0.28.1
huggingface-hub 2.2.0 2.4.0
jiter 0.17.0 0.19.0
jsonpatch 1.34 1.45
jsonpointer 3.2.0 3.10
kombu 5.6.2 5.7.0
kubernetes 37.0.1 37.0.2
langchain-community 0.0.17 0.4.2
langchain-protocol 0.0.19 0.0.21
langgraph-checkpoint 4.2.0 4.3.1
langgraph-prebuilt 1.1.0 1.1.1
langgraph-sdk 0.4.6 0.4.14
langgraph 1.2.14 1.2.20
langsmith 0.14.7 0.14.17
lunar-python 1.4.8 1.4.9
numpy 2.5.3 2.5.4
oauthlib 4.0.0 4.0.1
onnxruntime 1.31.0 1.31.1
openpyxl 3.1.2 3.1.5
opentelemetry-api 1.45.1 1.45.2
opentelemetry-exporter-otlp-proto-common 1.45.1 1.45.2
opentelemetry-exporter-otlp-proto-grpc 1.45.1 1.45.2
opentelemetry-proto 1.45.1 1.45.2
opentelemetry-sdk 1.45.1 1.45.2
ormsgpack 1.12.2 1.13.1
pandas 3.0.6 3.1.1
pluggy 1.6.0 1.7.0
pyasn1 0.6.4 0.6.5
pycparser 3.11 3.12
pydantic-settings 2.1.0 2.16.2
pydantic 2.5.3 2.14.3
pydantic-core 2.50.0 2.50.4
pypdfium2 5.14.0 5.15.2
python-docx 1.1.0 1.2.0
python-dotenv 1.0.0 1.2.4
python-jose 3.3.0 3.5.0
python-multipart 0.0.6 0.0.33
regex 2026.9.29 2026.11.9
reportlab 5.0.1 5.1.0
sqlalchemy 2.0.25 2.1.8
starlette 1.7.0 1.10.0
truststore 0.10.4 0.10.5
typer 0.27.3 0.29.0
typing-inspection 0.4.4 0.4.5
tzdata 2026.5 2026.6
tzlocal 5.4.4 5.4.5
uvicorn 0.27.0 0.54.0
wcwidth 0.9.2 0.9.4
xlsxwriter 3.2.9 3.3.1
xxhash 4.0.1 4.1.0
pytest-timeout 2.2.0 2.4.0
asyncpg 0.29.0 0.32.0
pgvector 0.2.3 0.5.1
faiss-cpu 1.7.4 1.15.1
playwright 1.41.0 1.65.0

Updates aiohttp from 3.14.4 to 3.14.5
Updates aiosqlite from 0.19.0 to 0.22.1

Changelog

Sourced from aiosqlite's changelog.

v0.22.1

Bug fix release

NOTE: Starting with v0.22.0, the aiosqlite.Connection object no longer inherits from threading.Thread. If not using aiosqlite as a context manager, clients must await connection.close() or call connection.stop() to ensure the helper thread is completed and terminated correctly. A ResourceWarning will be emitted for any connection that is garbage collected without being closed or stopped.

  • Added synchronous stop() method to aiosqlite.Connection to enable safe cleanup and termination of the background thread without dependence on having an active event loop (#370)
$ git shortlog -s v0.22.0...v0.22.1
     2	Amethyst Reese

v0.22.0

Feature release

  • Support set_authorizer query access controls (#349)
  • Wait for transaction queue to complete when closing connection (#305)
  • Emit warning when connection goes out of scope without being closed (#355)
  • Remove dependency on typing_extensions (#365)
$ git shortlog -s v0.21.0...v0.22.0
     1	Alec Berryman
     1	Amethyst Reese
     1	David Andreoletti
     1	Markus Heidelberg
     1	beerpsi
    19	dependabot[bot]

v0.21.0

Maintenance release

  • Fix: close connection correctly when BaseException raised in connection (#317)
  • Metadata improvements

... (truncated)

Commits

Updates alembic from 1.13.1 to 1.20.1

Release notes

Sourced from alembic's releases.

1.20.1

Released: October 21, 2026

bug

  • [bug] [autogenerate] Fixed issue where a table or column comment set to an empty string would cause autogenerate to detect a comment change on every run. As most backends, including PostgreSQL, MySQL, MariaDB and Oracle, don't store an empty string comment distinctly from no comment, autogenerate now treats an empty string comment the same as None when comparing comments. Additionally, an empty string comment is now rendered in op.create_table() and op.add_column() directives, where it was previously omitted. Pull request courtesy vineoy.

    References: #1085

  • [bug] [autogenerate] [postgresql] Fixed rendering of the PostgreSQL ~sqlalchemy.dialects.postgresql.DOMAIN type in autogenerated migration scripts. Previously the type was rendered using repr(), which omitted the check, not_null, default, collation, constraint_name, schema and create_type arguments and did not apply a dialect prefix to the underlying data type. The full set of arguments is now rendered and the underlying data type is rendered using the standard type-rendering logic. Pull request courtesy Sebastian Cao.

    References: #1360

  • [bug] [autogenerate] [postgresql] Fixed false-positive "Computed default cannot be modified" warning emitted during autogenerate when comparing PostgreSQL Computed columns whose reflected SQL expression includes type cast specifiers such as ::regconfig or ::text, which PostgreSQL adds to the expression as stored. These cast specifiers are now stripped before comparison so that otherwise equivalent expressions no longer trigger the warning. Pull request courtesy Sebastian Cao.

    References: #1462

  • [bug] [autogenerate] [postgresql] Fixed issue where autogenerate would detect an unchanged PostgreSQL expression-based index as modified when the expression included type casts, such as a cast to a type with a length or precision, a nested cast, or a cast followed by a DESC modifier.

  • [bug] [postgresql] Fixed bug where Operations.alter_column() against a PostgreSQL identity column would render an incomplete, invalid ALTER TABLE ... ALTER COLUMN statement with no clause at all when existing_server_default was omitted, even if there were no existing server default. Pull request courtesy Riti Grover.

... (truncated)

Commits

Updates amqp from 5.4.1 to 5.4.2

Release notes

Sourced from amqp's releases.

v5.4.2

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.4.1...v5.4.2

Changelog

Sourced from amqp's changelog.

5.4.2

:release-date: 2026-11-02 :release-by: Asif Saif Uddin (@​auvipy)

  • Fix publisher confirm state after channel revive (#477).
  • Fix non-UTF-8 field-table keys.
  • Always return the consumer tag from basic_consume (#481).
  • Forget no_ack consumers cancelled by the broker - #483.
  • Send the content header for empty bodies on the slow write path.
  • Flush pending bits around timestamp and byte array fields (#484).

.. _version-5.4.1:

Commits
  • 9d4a51a Bump version: 5.4.1 → 5.4.2
  • 2c70aa8 added changelog for v5.4.2 release
  • 970fa13 Flush pending bits around timestamp and byte array fields (#484)
  • 31a4602 Send the content header for empty bodies on the slow write path
  • b432643 Forget no_ack consumers cancelled by the broker
  • a259045 Always return the consumer tag from basic_consume (#481)
  • e58240b Fix non-UTF-8 field-table keys
  • 15fb95f Fix publisher confirm state after channel revive (#477)
  • 5324feb docs: fix Sphinx warnings in documentation (#362)
  • See full diff in compare view

Updates anyio from 4.15.1 to 4.16.0

Release notes

Sourced from anyio's releases.

4.16.0

New features

  • Added BlockingPortal.call_async() for asynchronously calling into an event loop with optional abandonment on cancellation (#1342; PR by @​davidbrochart)
  • Added SOCK_SEQPACKET support to connect_unix() and create_unix_listener() (#1349; PR by @​theunkn0wn1)

Other changes

  • Changed UDP sockets on the asyncio backend to make send() wait until the datagram has been passed to the operating system (#1294; PR by @​graingert)

Bug fixes

  • Fixed documentation implying that use_uvloop=True falls back to the standard event loop when uvloop (winloop on Windows) is not installed, and showed how to skip the corresponding pytest backend variant when the dependency is missing (#645; PR by @​GruffElixir)
  • Fixed get_current_task() on the asyncio backend raising an opaque TypeError: cannot create weak reference to 'NoneType' object instead of a clear error when called from a callback scheduled via loop.call_soon_threadsafe() (e.g. from within from_thread.run_sync()), where asyncio.current_task() is legitimately None (#773; PR by @​AmirF194)
  • Fixed CancelScope on the asyncio backend swallowing a native Task.cancel() that was delivered in the same event loop iteration as the scope's own cancellation (such as a move_on_after() deadline expiring), which left the host task with a pending cancellation request that never raised CancelledError (#1214)
  • Fixed UDP socket closing hanging if a datagram send was still in flight (#1237; PR by @​graingert)
  • Fixed concurrent aclose_forcefully() calls on asyncio socket streams returning before the underlying socket was closed (#1273; PR by @​graingert)
  • Fixed aclose() on sockets not checkpointing, and thus failing to raise a cancellation exception when called inside a cancelled scope (affected UNIX socket streams and UNIX datagram sockets on asyncio, and all sockets on Trio) (#1288; PR by @​graingert)
  • Fixed aclose() on asyncio TCP socket listeners not checkpointing, and leaking the listening socket if cancelled while another task was waiting in accept() (#1289; PR by @​graingert)
  • Fixed accept() on asyncio UNIX socket listeners hanging forever, and leaving the listening socket registered with the event loop, when the listener was closed by another task (#1289; PR by @​graingert)
  • Fixed send() on asyncio TCP and UDP sockets returning normally, despite the data being discarded, when the socket was closed by another task (or, for TCP, the connection was lost) while send() was waiting for the operating system to accept the data (#1289; PR by @​graingert)
  • Fixed SocketStream.send() on the asyncio backend handing its data to a paused transport after a previous send() was cancelled (#1299; PR by @​graingert)
  • Fixed sleep() treating a negative delay (including -inf) inconsistently across backends (asyncio returned immediately; Trio raised ValueError) by raising ValueError on all backends (#1306; PR by @​BetterAndBetterII)
  • Fixed create_tcp_listener() occasionally failing with a message like Could not create 2 listeners with a consistent port when an ephemeral port is requested and IPv6 is enabled and the dual-stack path is not available or a specific local host name was given (#1313)
  • Fixed AsyncFile not shielding against cancellation while closing (#1314)
  • Fixed TemporaryDirectory.cleanup() reacting to cancellation prematurely when the host task was already cancelled, causing the actual cleanup operation to be skipped (#1316; PR by @​Yasser-Ameur)
  • Fixed a NaN deadline being accepted on asyncio while Trio raised ValueError, which silently disabled the timeout (fail_after(math.nan) returned instead of raising TimeoutError); CancelScope now rejects it on both backends (#1317; PR by @​dylanpulver)
  • Fixed FileReadStream and FileWriteStream leaving files open when cancelled during context manager exit, including unflushed writes (#1318; PR by @​Kuang-xianxin)
  • Fixed Condition.notify() and Condition.notify_all() failing when the underlying lock was acquired directly rather than through the condition (#1319; PR by @​GruffElixir)
  • Fixed importing AnyIO with loaders that do not provide __file__, such as PyOxidizer, raising TypeError instead of falling back to eager imports (#1322; PR by @​skulitom)
  • Fixed text receive streams silently discarding incomplete characters at end-of-file instead of applying the configured decoding error handler (#1339; PR by @​Aurelucien)
  • Fixed Semaphore(fast_acquire=True) losing its fast-acquire behavior when instantiated outside a running event loop (#1348; PR by @​feiiiiii5)
  • Fixed BlockingPortalProvider permanently failing with an AttributeError on every subsequent use if the first attempt to start its blocking portal failed (#1350; PR by @​Yasser-Ameur)
  • Fixed create_udp_socket() silently ignoring the local_port argument when local_host was omitted, making the socket bind to a random ephemeral port instead of the requested one (#1351; PR by @​januththedev)
  • Fixed worker threads on the asyncio backend never returning to the idle pool (and thus never being reused or pruned) when a to_thread.run_sync() call was cancelled after it had been queued for the worker but before the worker thread had picked it up (#1352; PR by @​Zac-HD)
  • Fixed pytest plugin running Hypothesis async tests only on the first parametrized backend instead of each backend (#1353; PR by @​DYNOSuprovo)
  • Fixed TypeError when subclassing an existing TypedAttributeSet subclass, and this subclass contains type annotations (#1358; PR by @​pasmud)
  • Fixed Lock.locked() (and Condition.locked()) raising NoEventLoopError when the lock was created outside a running event loop (#1362; PR by @​00200200)
  • Fixed connect_tcp() leaking a connected socket when an enclosing cancel scope was cancelled before the connection attempt task group exited (#1364; PR by @​charan-rathore)
  • Fixed create_connected_udp_socket() silently ignoring local_port when local_host was not given: the local address was left unset, so the OS picked an ephemeral port instead of the requested one (#1365; PR by @​feiiiiii5)
  • Fixed BlockingPortalProvider not passing the exception raised in its with block on to the start_blocking_portal() context manager it wraps (#1366; PR by @​feiiiiii5)
  • Fixed anyio.itertools.islice() not consuming the first start items when stop <= start (#1372; PR by @​Rodrigo-Palma)
  • Fixed BufferedByteReceiveStream.receive_exactly() and receive_until() returning buffered data after explicit closure instead of raising ClosedResourceError (#1378; PR by @​kokotatan)
  • Fixed a TLS stream sending records the peer could no longer decrypt after a cancelled send() lost an already-encrypted record; the stream now raises BrokenResourceError on further use instead (#1385; PR by @​Kayvan-Zahiri)
  • Fixed close() on memory object streams not waking up tasks blocked in send() or receive() on the same stream (#1391)
  • Fixed anyio.itertools.product() acquiring and consuming unused input iterables when repeat=0 (#1394; PR by @​sricharanreddycheruku)
  • Fixed SpooledTemporaryFile rolling over to disk on writes when max_size is zero (the default) (#1397; PR by @​fhgffy)
  • Fixed Trio UDP sockets remaining open when initialization failed or was cancelled (#1400; PR by @​adenzhou1350)
  • Fixed SpooledTemporaryFile.rollover() moving the current file position to the end of the file (#1401; PR by @​fhgffy)
  • Fixed cancellation during temporary directory creation leaving the directory behind while its context manager is retained (#1403; PR by @​adenzhou1350)

... (truncated)

Commits
  • 0ddd02d Released version 4.16.0
  • 576892e Fixed certain pending tasks not woken up by the closing of memory object stre...
  • 02ff4f8 Added BlockingPortal.call_async() (#1343)
  • 1af29a4 Moved documentation code snippets into separate, checked files (#1445)
  • f01c041 [pre-commit.ci] pre-commit autoupdate (#1448)
  • 95a0143 Test with blockbuster and uvloop on Python 3.15 too
  • 4d51154 Modernized the memory object stream tests
  • 1e4b448 Fixed the as_connectable() example in the networking docs (#1442)
  • cd21b36 Fixed TypedAttributeSet not collecting annotations from superclasses (#1358)
  • b7f8c68 [pre-commit.ci] pre-commit autoupdate (#1431)
  • Additional commits viewable in compare view

Updates billiard from 4.3.1 to 4.3.2

Release notes

Sourced from billiard's releases.

v4.3.2

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.3.1...v4.3.2

Changelog

Sourced from billiard's changelog.

4.3.2 - 2026-11-02

  • Fix flaky timeout and context availability in test_on_ready_counter_is_synchronized.
  • Fix spawn when the main module is a script (#470).
  • Fix AttributeError on Windows when terminating worker on hard timeout (#471).
  • Allow a pool to start with zero processes (#477).
  • Credit READY to the worker that ran the task (#474).
  • Fix pool terminate() hang when a worker dies holding the outqueue lock (#479).
  • Raise the task's exception from imap() iterators (#480).
  • Reject non-positive chunksize in Pool.imap() and Pool.imap_unordered(), including when Python runs with optimization enabled.
Commits
  • 895817a Bump version: 4.3.1 → 4.3.2
  • 3a9eb78 updated security guideline
  • b20dd15 added changelog for v4.3.2 release
  • 17cddec Raise the task's exception from imap() iterators (#480)
  • 7d2fcd2 Reject nonpositive chunksizes in pool imap methods
  • 3a806fb Fix pool terminate() hang when a worker dies holding the outqueue lock (#479)
  • fe23965 Credit READY to the worker that ran the task (#474)
  • 7efd773 Allow a pool to start with zero processes (#477)
  • 531c3ae Fix AttributeError on Windows when terminating worker on hard timeout (#471)
  • 40a82b1 Fix spawn when the main module is a script (#470)
  • Additional commits viewable in compare view

Updates celery from 5.3.6 to 5.7.0

Release notes

Sourced from celery's releases.

v5.7.0

Celery 5.7.0

We're pleased to announce Celery 5.7.0, a new stable release of Celery.

This release brings substantial improvements to task workflows, worker reliability, result handling, scheduling, and broker connectivity. It also includes new integrations, improved Python compatibility, performance optimizations, and a large number of bug fixes contributed by the community.

A significant part of this release focuses on making complex Canvas workflows more reliable and efficient, improving worker behavior during broker disconnections and shutdown, and making result-backend state handling more consistent.

Highlights

  • More reliable Canvas workflows: Improved chains, groups, chords, nested workflows, callbacks, errbacks, and failure propagation. Several fixes also reduce unnecessary message growth in complex chains and chords.
  • Improved worker reliability: Better connection recovery, graceful shutdown, prefork process management, autoscaling, and handling of worker-process loss.
  • More predictable task results: Improved result-state consistency, retry handling, ignore_result behavior, and concurrent AsyncResult tracking.
  • Timezone and scheduling improvements: More reliable ETA, countdown, expiration, crontab, solar schedules, and Celery Beat behavior across daylight-saving-time transitions.
  • New Pydantic integration behavior: Tasks configured with pydantic=True can accept Pydantic model instances.
  • New pymemcache result backend support: Adds support for using pymemcache as a result backend.
  • Improved Redis result backend: New expiration settings for chord and failure results, improved Pub/Sub handling, and more reliable chord accounting.
  • Better Python compatibility: Python 3.10 is now the minimum supported version, with compatibility work for newer Python versions, including Python 3.14.
  • Improved worker operations: Cgroup-aware automatic concurrency detection and additional worker-management improvements.

What's New

Canvas, Chains, Groups, and Chords

Celery 5.7 includes extensive improvements to Canvas execution and composition, particularly for nested workflows and complex chains and chords.

  • Fixed failure propagation through chained tasks into chord bodies.
  • Improved chord failure handling when a chord header or a chained chord fails.
  • Fixed chord error handling when the chord body is itself a chain.
  • Improved handling of empty groups and chains, including empty groups inside chains and group headers.
  • Chains are now constructed in a single pass instead of repeatedly folding signatures with the | operator.
  • Reduced unnecessary message growth in chains of chords, chains of groups, implicit chords, and standalone chord bodies.
  • Improved nested group handling and preservation of group IDs.
  • Fixed duplicate nodes in GroupResult.as_tuple() after groups in chains.
  • Improved GroupResult fan-out behavior in chains.
  • Fixed eager execution behavior for chains containing Ignore or Reject.
  • Avoided unnecessary result-backend access when eagerly applying groups inside chains.
  • Improved task replacement with chains containing groups, including cases that previously could hang.
  • Improved callback execution when a task is replaced by a chain, ensuring callbacks are not invoked repeatedly.
  • Fixed eager-chain callback behavior so that chain links are dispatched once at the appropriate point.
  • Improved propagation of task options, ETA, and countdown values to chord headers.
  • Corrected the handling of link and link_error options on chords so they are applied to the chord body.
  • Improved errback argument classification and handling of new-style errback calls.
  • Preserved group errback mutability and improved stamped-header merging and revocation.
  • Improved signature cloning and option isolation, preventing cloned signatures from sharing mutable keyword arguments with their originals.
  • Fixed argument forwarding through nested chains during eager execution.
  • Improved map and starmap option merging.

These changes make complex Canvas compositions more predictable and reduce unnecessary broker traffic and message growth.

... (truncated)

Changelog

Sourced from celery's changelog.

5.7.0

:release-date: 2026-11-05 :release-by: Asif Saif Uddin

Celery v5.7.0 Stable Release is now available for testing and deploy to production. Please help us test this version and report any issues.

What's Changed Since 5.7.0rc1

This section summarizes the changes made since the Celery 5.7.0rc1 pre-release.

Canvas, Chains, Groups, and Chords

  • Run a replaced task's callbacks once when it is replaced with a chain (:ghpull:10927`).
  • Fix chord link and link-error options so they are passed to the body only (:ghpull:10778`).
  • Fix stamped header revocation (:ghpull:10884`).
  • Count each chord header task only once in the Redis backend (:ghpull:10919`).
  • Fix Redis chord claim cleanup ownership (:ghpull:10998`).
  • Fail the chord when chord_unlock retry is refused by the broker (:ghpull:10959`).

Task Execution and Result Handling

  • Fix retry argument conflicts when switching calling conventions (:ghpull:10895`).
  • Pass values to backend hooks by position again (:ghpull:10918`).
  • Don't mark a task REVOKED while another worker is running it (:ghpull:10922`).
  • Keep the first SUCCESS in the database, MongoDB, and Cassandra backends (:ghpull:10920, :ghpull:10944, :ghpull:10945`).
  • Don't record FAILURE when on_success raises after SUCCESS was stored (:ghpull:10759`).
  • Don't fail a task whose SUCCESS was stored before the worker was lost (:ghpull:10752`).
  • Fix a worker hang in WorkerLostError when result_backend_always_retry=True (:ghpull:10960`).
  • Fix send_task() overriding ignore_result defaults (:ghpull:10953`).
  • Preserve ignore_result overrides across task retries (:ghpull:10958`).
  • Make Task.apply() respect the task.ignore_result default (:ghpull:11001`).
  • Don't store RETRY for an ignored result when retrying after a lost worker (:ghpull:11009`).
  • Track every AsyncResult waiting on a task ID (:ghpull:10956`).
  • Allow ResultSet.add() after the set's results are ready (:ghpull:10930`).
  • Use the documented retry defaults in the database backend (:ghpull:10921`).
  • Fix Manager warning output during retries (:ghpull:10948`).
  • Wait between retries when the broker refuses a callback publish (:ghpull:10975`).
  • Merge signature options in map and starmap apply_async() (:ghpull:10787`).
  • Stop gating task publishing signals on cached receiver lists (:ghpull:10791`).

Worker Operations

... (truncated)

Commits
  • 6fcdbf9 Bump version: 5.7.0rc1 → 5.7.0 (#11025)
  • 4a1d6f4 Make beat's pidbox stop test tolerate slow runners (#11024)
  • 6a80d47 Added changelog and new features for celery v5.7.0 stable version (#11016)
  • 6b67b23 Fix dead Akismet and vine zipball links in the docs (#11021)
  • e82fa93 Chore(deps): Bump azure-identity from 1.26.0 to 1.27.0
  • 2fe0ead Chore(deps): Bump google-cloud-storage from 3.15.0 to 3.17.1 (#11013)
  • 89ce900 Fix#10997 - redis chord claim cleanup ownership (#10998)
  • 5d83c46 Don't store RETRY for an ignored result when retrying after a lost worker (#1...
  • 1f435e5 Use Cuba's 2025 fall-back in the midnight DST tests
  • 98b7ba9 Update kombu version to 5.7.0 (#11007)
  • Additional commits viewable in compare view

Updates certifi from 2026.7.22 to 2026.10.23

Commits

Updates click from 8.5.0 to 8.5.1

Release notes

Sourced from click's releases.

8.5.1

This is the Click 8.5.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.5.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-1 Milestone: https://github.com/pallets/click/milestone/66

  • Fix copy.deepcopy() and pickle on a Parameter, Option or Command. #3805
  • A KeyboardInterrupt arriving while Command.main() reports an abort or an error, or while it exits, no longer escapes as an unhandled traceback. The command still exits with the intended code; only the message may be lost. #3802
  • Add Option.get_help_spec(), which returns the option's left help column even when the option is hidden. Option.get_help_record() still returns None for hidden options, so help screens are unchanged. #3821
  • The Positional arguments help section lists every argument of the command, not only the documented ones. An argument with no help gets an empty description, the same way an option with no help does. #3860
  • Argument.get_help_record() always returns a tuple. It used to return None for an argument with no help. #3860
  • Document which types are inferred from default, and what an unrecognized type callable does to a command-line value. #3036 #3808
  • path_type narrows the converted value's type for convert and prompt. #3822 #3858
  • Parameter accepts a new help argument, and Option and Argument inherit it. Parameter.to_info_dict() now reports help for every kind of parameter. #3861
  • A command's short help no longer stops at an abbreviation such as vs. or e.g. inside the first sentence. A period ends the sentence only when it closes the text or the next word does not start in lowercase. #3865
  • With show_envvar=True, an option's error message now prints all variables of an envvar sequence instead of the repr of the sequence. #3884
  • An empty envvar, such as [] or "", shows the same help and error message as no envvar when show_envvar=True. The help screen used to show [env var: ]. #3884
  • Align command's deprecated help text to options and arguments: do not translate the command's own help text, only the (DEPRECATED) label. #3901
Changelog

Sourced from click's changelog.

Version 8.5.1

Released 2026-11-09

  • Fix copy.deepcopy() and pickle on a Parameter, Option or Command. {pr}3805
  • A KeyboardInterrupt arriving while Command.main() reports an abort or an error, or while it exits, no longer escapes as an unhandled traceback. The command still exits with the intended code; only the message may be lost. {issue}3802
  • Add {meth}Option.get_help_spec, which returns the option's left help column even when the option is hidden. {meth}Option.get_help_record still returns None for hidden options, so help screens are unchanged. {pr}3821
  • The Positional arguments help section lists every argument of the command, not only the documented ones. An argument with no help gets an empty description, the same way an option with no help does. {pr}3860
  • {meth}Argument.get_help_record always returns a tuple. It used to return None for an argument with no help. {pr}3860
  • Document which types are inferred from default, and what an unrecognized type callable does to a command-line value. {issue}3036 {pr}3808
  • path_type narrows the converted value's type for convert and prompt. {issue}3822 {pr}3858
  • {class}Parameter accepts a new help argument and {class}Option and {class}Argument inherits it. {meth}Parameter.to_info_dict now reports help for every kind of parameter. {pr}3861
  • A command's short help no longer stops at an abbreviation such as vs. or e.g. inside the first sentence. A period ends the sentence only when it closes the text or the next word does not start in lowercase. {pr}3865
  • With show_envvar=True, an option's error message now prints all variables of an envvar sequence instead of the repr of the sequence. {pr}3884
  • An empty envvar, such as [] or "", shows the same help and error message as no envvar when show_envvar=True. The help screen used to show [env var: ]. {pr}3884
  • Align command's deprecated help text to options and arguments: do not translate the command's own help text, only the (DEPRECATED) label. {pr}3901
Commits
  • cf19179 Release version 8.5.1
  • 1ff766d Remove documentation changelog entry.
  • 16da191 Add a standalone application guide for Nuitka (#3897)
  • 473f652 Remove issue and PR references outside the changelog (#3905)
  • df7fe0b Remove issue and PR references outside the changelog
  • 4fd4206 Bump pypa/gh-action-pypi-publish to v1.14.3 (#3906)
  • 9048ab0 Bump pypa/gh-action-pypi-publish to v1.14.3
  • ff0c369 Add a standalon...

    Description has been truncated

Bumps the backend-patch group in /backend with 73 updates:

| Package | From | To |
| --- | --- | --- |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.4` | `3.14.5` |
| [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.19.0` | `0.22.1` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.20.1` |
| [amqp](https://github.com/celery/py-amqp) | `5.4.1` | `5.4.2` |
| [anyio](https://github.com/agronholm/anyio) | `4.15.1` | `4.16.0` |
| [billiard](https://github.com/celery/billiard) | `4.3.1` | `4.3.2` |
| [celery](https://github.com/celery/celery) | `5.3.6` | `5.7.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.7.22` | `2026.10.23` |
| [click](https://github.com/pallets/click) | `8.5.0` | `8.5.1` |
| [dnspython](https://github.com/rthalley/dnspython) | `2.9.0` | `2.9.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.109.0` | `0.162.2` |
| [filelock](https://github.com/tox-dev/filelock) | `4.1.0` | `4.2.10` |
| [fonttools](https://github.com/fonttools/fonttools) | `4.66.1` | `4.68.0` |
| [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.75.5` | `1.76.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.84.0` | `1.85.1` |
| [hf-xet](https://github.com/huggingface/xet-core) | `1.7.0` | `1.8.0` |
| [httpcore2](https://github.com/pydantic/httpx2) | `2.13.1` | `2.16.0` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.13.1` | `2.16.0` |
| [httpx](https://github.com/encode/httpx) | `0.26.0` | `0.28.1` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `2.2.0` | `2.4.0` |
| [jiter](https://github.com/pydantic/jiter) | `0.17.0` | `0.19.0` |
| [jsonpatch](https://github.com/stefankoegl/python-json-patch) | `1.34` | `1.45` |
| [jsonpointer](https://github.com/stefankoegl/python-json-pointer) | `3.2.0` | `3.10` |
| [kombu](https://github.com/celery/kombu) | `5.6.2` | `5.7.0` |
| [kubernetes](https://github.com/kubernetes-client/python) | `37.0.1` | `37.0.2` |
| [langchain-community](https://github.com/langchain-ai/langchain-community) | `0.0.17` | `0.4.2` |
| [langchain-protocol](https://github.com/langchain-ai/agent-protocol) | `0.0.19` | `0.0.21` |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `4.2.0` | `4.3.1` |
| [langgraph-prebuilt](https://github.com/langchain-ai/langgraph) | `1.1.0` | `1.1.1` |
| [langgraph-sdk](https://github.com/langchain-ai/langgraph) | `0.4.6` | `0.4.14` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.14` | `1.2.20` |
| [langsmith](https://github.com/langchain-ai/langsmith-python) | `0.14.7` | `0.14.17` |
| [lunar-python](https://github.com/6tail/lunar-python) | `1.4.8` | `1.4.9` |
| [numpy](https://github.com/numpy/numpy) | `2.5.3` | `2.5.4` |
| [oauthlib](https://github.com/oauthlib/oauthlib) | `4.0.0` | `4.0.1` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.31.0` | `1.31.1` |
| [openpyxl](https://openpyxl.readthedocs.io) | `3.1.2` | `3.1.5` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` |
| [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` |
| [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` |
| [ormsgpack](https://github.com/ormsgpack/ormsgpack) | `1.12.2` | `1.13.1` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.6` | `3.1.1` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.4` | `0.6.5` |
| [pycparser](https://github.com/eliben/pycparser) | `3.11` | `3.12` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.1.0` | `2.16.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.5.3` | `2.14.3` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.50.0` | `2.50.4` |
| [pypdfium2](https://github.com/pypdfium2-team/pypdfium2) | `5.14.0` | `5.15.2` |
| [python-docx](https://github.com/python-openxml/python-docx) | `1.1.0` | `1.2.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.0` | `1.2.4` |
| [python-jose](https://github.com/mpdavis/python-jose) | `3.3.0` | `3.5.0` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.6` | `0.0.33` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.9.29` | `2026.11.9` |
| [reportlab](https://www.reportlab.com/) | `5.0.1` | `5.1.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.25` | `2.1.8` |
| [starlette](https://github.com/Kludex/starlette) | `1.7.0` | `1.10.0` |
| [truststore](https://github.com/sethmlarson/truststore) | `0.10.4` | `0.10.5` |
| [typer](https://github.com/fastapi/typer) | `0.27.3` | `0.29.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.4` | `0.4.5` |
| [tzdata](https://github.com/python/tzdata) | `2026.5` | `2026.6` |
| [tzlocal](https://github.com/regebro/tzlocal) | `5.4.4` | `5.4.5` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.27.0` | `0.54.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.9.2` | `0.9.4` |
| [xlsxwriter](https://github.com/jmcnamara/XlsxWriter) | `3.2.9` | `3.3.1` |
| [xxhash](https://github.com/ifduyue/python-xxhash) | `4.0.1` | `4.1.0` |
| [pytest-timeout](https://github.com/pytest-dev/pytest-timeout) | `2.2.0` | `2.4.0` |
| [asyncpg](https://github.com/MagicStack/asyncpg) | `0.29.0` | `0.32.0` |
| [pgvector](https://github.com/pgvector/pgvector-python) | `0.2.3` | `0.5.1` |
| [faiss-cpu](https://github.com/facebookresearch/faiss) | `1.7.4` | `1.15.1` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.41.0` | `1.65.0` |


Updates `aiohttp` from 3.14.4 to 3.14.5

Updates `aiosqlite` from 0.19.0 to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.19.0...v0.22.1)

Updates `alembic` from 1.13.1 to 1.20.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `amqp` from 5.4.1 to 5.4.2
- [Release notes](https://github.com/celery/py-amqp/releases)
- [Changelog](https://github.com/celery/py-amqp/blob/main/Changelog)
- [Commits](celery/py-amqp@v5.4.1...v5.4.2)

Updates `anyio` from 4.15.1 to 4.16.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.15.1...4.16.0)

Updates `billiard` from 4.3.1 to 4.3.2
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.3.1...v4.3.2)

Updates `celery` from 5.3.6 to 5.7.0
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.3.6...v5.7.0)

Updates `certifi` from 2026.7.22 to 2026.10.23
- [Commits](certifi/python-certifi@2026.07.22...2026.10.23)

Updates `click` from 8.5.0 to 8.5.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.5.0...8.5.1)

Updates `dnspython` from 2.9.0 to 2.9.2
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst)
- [Commits](rthalley/dnspython@v2.9.0...v2.9.2)

Updates `fastapi` from 0.109.0 to 0.162.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.109.0...0.162.2)

Updates `filelock` from 4.1.0 to 4.2.10
- [Release notes](https://github.com/tox-dev/filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@4.1.0...4.2.10)

Updates `fonttools` from 4.66.1 to 4.68.0
- [Release notes](https://github.com/fonttools/fonttools/releases)
- [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst)
- [Commits](fonttools/fonttools@4.66.1...4.68.0)

Updates `googleapis-common-protos` from 1.75.5 to 1.76.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.75.5...googleapis-common-protos-v1.76.0)

Updates `grpcio` from 1.84.0 to 1.85.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.84.0...v1.85.1)

Updates `hf-xet` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/huggingface/xet-core/releases)
- [Commits](huggingface/xet-core@v1.7.0...v1.8.0)

Updates `httpcore2` from 2.13.1 to 2.16.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Commits](pydantic/httpx2@v2.13.1...v2.16.0)

Updates `httpx2` from 2.13.1 to 2.16.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.13.1...v2.16.0)

Updates `httpx` from 0.26.0 to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.26.0...0.28.1)

Updates `huggingface-hub` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v2.2.0...v2.4.0)

Updates `jiter` from 0.17.0 to 0.19.0
- [Release notes](https://github.com/pydantic/jiter/releases)
- [Commits](pydantic/jiter@v0.17.0...v0.19.0)

Updates `jsonpatch` from 1.34 to 1.45
- [Release notes](https://github.com/stefankoegl/python-json-patch/releases)
- [Commits](stefankoegl/python-json-patch@v1.34...v1.45)

Updates `jsonpointer` from 3.2.0 to 3.10
- [Release notes](https://github.com/stefankoegl/python-json-pointer/releases)
- [Commits](stefankoegl/python-json-pointer@v3.2.0...v3.10)

Updates `kombu` from 5.6.2 to 5.7.0
- [Release notes](https://github.com/celery/kombu/releases)
- [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst)
- [Commits](celery/kombu@v5.6.2...v5.7.0)

Updates `kubernetes` from 37.0.1 to 37.0.2
- [Release notes](https://github.com/kubernetes-client/python/releases)
- [Changelog](https://github.com/kubernetes-client/python/blob/v37.0.2/CHANGELOG.md)
- [Commits](kubernetes-client/python@v37.0.1...v37.0.2)

Updates `langchain-community` from 0.0.17 to 0.4.2
- [Release notes](https://github.com/langchain-ai/langchain-community/releases)
- [Commits](https://github.com/langchain-ai/langchain-community/commits/libs/community/v0.4.2)

Updates `langchain-protocol` from 0.0.19 to 0.0.21
- [Release notes](https://github.com/langchain-ai/agent-protocol/releases)
- [Commits](langchain-ai/agent-protocol@langchain-protocol==0.0.19...langchain-protocol==0.0.21)

Updates `langgraph-checkpoint` from 4.2.0 to 4.3.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.2.0...checkpoint==4.3.1)

Updates `langgraph-prebuilt` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.1.0...1.1.1)

Updates `langgraph-sdk` from 0.4.6 to 0.4.14
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.4.6...cli==0.4.14)

Updates `langgraph` from 1.2.14 to 1.2.20
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.14...1.2.20)

Updates `langsmith` from 0.14.7 to 0.14.17
- [Release notes](https://github.com/langchain-ai/langsmith-python/releases)
- [Changelog](https://github.com/langchain-ai/langsmith-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/langchain-ai/langsmith-python/commits/v0.14.17)

Updates `lunar-python` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/6tail/lunar-python/releases)
- [Changelog](https://github.com/6tail/lunar-python/blob/master/CHANGELOG.md)
- [Commits](6tail/lunar-python@v1.4.8...v1.4.9)

Updates `numpy` from 2.5.3 to 2.5.4
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.3...v2.5.4)

Updates `oauthlib` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/oauthlib/oauthlib/releases)
- [Changelog](https://github.com/oauthlib/oauthlib/blob/v4.0.1/CHANGELOG.rst)
- [Commits](oauthlib/oauthlib@v4.0.0...v4.0.1)

Updates `onnxruntime` from 1.31.0 to 1.31.1
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md)
- [Commits](microsoft/onnxruntime@v1.31.0...v1.31.1)

Updates `openpyxl` from 3.1.2 to 3.1.5

Updates `opentelemetry-api` from 1.45.1 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.1...v1.45.2)

Updates `opentelemetry-exporter-otlp-proto-common` from 1.45.1 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.1...v1.45.2)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.45.1 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.1...v1.45.2)

Updates `opentelemetry-proto` from 1.45.1 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.1...v1.45.2)

Updates `opentelemetry-sdk` from 1.45.1 to 1.45.2
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.1...v1.45.2)

Updates `ormsgpack` from 1.12.2 to 1.13.1
- [Release notes](https://github.com/ormsgpack/ormsgpack/releases)
- [Changelog](https://github.com/ormsgpack/ormsgpack/blob/master/docs/changelog.rst)
- [Commits](ormsgpack/ormsgpack@1.12.2...1.13.1)

Updates `pandas` from 3.0.6 to 3.1.1
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.6...v3.1.1)

Updates `pluggy` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.6.0...1.7.0)

Updates `pyasn1` from 0.6.4 to 0.6.5
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.4...v0.6.5)

Updates `pycparser` from 3.11 to 3.12
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v3.11...release_v3.12)

Updates `pydantic-settings` from 2.1.0 to 2.16.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.1.0...v2.16.2)

Updates `pydantic` from 2.5.3 to 2.14.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.5.3...v2.14.3)

Updates `pydantic-core` from 2.50.0 to 2.50.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.50.0...core-v2.50.4)

Updates `pypdfium2` from 5.14.0 to 5.15.2
- [Release notes](https://github.com/pypdfium2-team/pypdfium2/releases)
- [Commits](pypdfium2-team/pypdfium2@5.14.0...5.15.2)

Updates `python-docx` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/python-openxml/python-docx/blob/master/HISTORY.rst)
- [Commits](python-openxml/python-docx@v1.1.0...v1.2.0)

Updates `python-dotenv` from 1.0.0 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.4)

Updates `python-jose` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)

Updates `python-multipart` from 0.0.6 to 0.0.33
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.6...0.0.33)

Updates `regex` from 2026.9.29 to 2026.11.9
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.9.29...2026.11.9)

Updates `reportlab` from 5.0.1 to 5.1.0

Updates `sqlalchemy` from 2.0.25 to 2.1.8
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `starlette` from 1.7.0 to 1.10.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.7.0...1.10.0)

Updates `truststore` from 0.10.4 to 0.10.5
- [Release notes](https://github.com/sethmlarson/truststore/releases)
- [Changelog](https://github.com/sethmlarson/truststore/blob/main/CHANGELOG.md)
- [Commits](sethmlarson/truststore@v0.10.4...v0.10.5)

Updates `typer` from 0.27.3 to 0.29.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.27.3...0.29.0)

Updates `typing-inspection` from 0.4.4 to 0.4.5
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](pydantic/typing-inspection@v0.4.4...v0.4.5)

Updates `tzdata` from 2026.5 to 2026.6
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.5...2026.6)

Updates `tzlocal` from 5.4.4 to 5.4.5
- [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt)
- [Commits](regebro/tzlocal@5.4.4...5.4.5)

Updates `uvicorn` from 0.27.0 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.27.0...0.54.0)

Updates `wcwidth` from 0.9.2 to 0.9.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.9.2...0.9.4)

Updates `xlsxwriter` from 3.2.9 to 3.3.1
- [Changelog](https://github.com/jmcnamara/XlsxWriter/blob/main/Changes)
- [Commits](jmcnamara/XlsxWriter@RELEASE_3.2.9...RELEASE_3.3.1)

Updates `xxhash` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v4.0.1...v4.1.0)

Updates `pytest-timeout` from 2.2.0 to 2.4.0
- [Commits](pytest-dev/pytest-timeout@2.2.0...2.4.0)

Updates `asyncpg` from 0.29.0 to 0.32.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.29.0...v0.32.0)

Updates `pgvector` from 0.2.3 to 0.5.1
- [Changelog](https://github.com/pgvector/pgvector-python/blob/master/CHANGELOG.md)
- [Commits](pgvector/pgvector-python@v0.2.3...v0.5.1)

Updates `faiss-cpu` from 1.7.4 to 1.15.1
- [Release notes](https://github.com/facebookresearch/faiss/releases)
- [Changelog](https://github.com/facebookresearch/faiss/blob/main/CHANGELOG.md)
- [Commits](facebookresearch/faiss@v1.7.4...v1.15.1)

Updates `playwright` from 1.41.0 to 1.65.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.41.0...v1.65.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: alembic
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: amqp
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: anyio
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: billiard
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: celery
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: click
  dependency-version: 8.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: dnspython
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: fastapi
  dependency-version: 0.162.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: filelock
  dependency-version: 4.2.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: fonttools
  dependency-version: 4.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: googleapis-common-protos
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: grpcio
  dependency-version: 1.85.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: hf-xet
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: httpcore2
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: httpx2
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: huggingface-hub
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: jiter
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: jsonpatch
  dependency-version: '1.45'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: jsonpointer
  dependency-version: '3.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: kombu
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: kubernetes
  dependency-version: 37.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: langchain-community
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: langchain-protocol
  dependency-version: 0.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: langgraph-checkpoint
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: langgraph-prebuilt
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: langgraph-sdk
  dependency-version: 0.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: langgraph
  dependency-version: 1.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: langsmith
  dependency-version: 0.14.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: lunar-python
  dependency-version: 1.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: numpy
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: oauthlib
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: onnxruntime
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: openpyxl
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: opentelemetry-api
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: opentelemetry-exporter-otlp-proto-common
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: opentelemetry-proto
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: opentelemetry-sdk
  dependency-version: 1.45.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: ormsgpack
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pandas
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pluggy
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pyasn1
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: pycparser
  dependency-version: '3.12'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pydantic-settings
  dependency-version: 2.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pydantic
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pydantic-core
  dependency-version: 2.50.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: pypdfium2
  dependency-version: 5.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: python-docx
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: python-jose
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: python-multipart
  dependency-version: 0.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: regex
  dependency-version: 2026.11.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: reportlab
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: sqlalchemy
  dependency-version: 2.1.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: starlette
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: truststore
  dependency-version: 0.10.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: typer
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: typing-inspection
  dependency-version: 0.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: tzdata
  dependency-version: '2026.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: tzlocal
  dependency-version: 5.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: uvicorn
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: wcwidth
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-patch
- dependency-name: xlsxwriter
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: xxhash
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pytest-timeout
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: asyncpg
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: pgvector
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: faiss-cpu
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
- dependency-name: playwright
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added backend 后端(FastAPI / 数据库) dependencies 依赖更新与升级 labels Nov 13, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backend 后端(FastAPI / 数据库) dependencies 依赖更新与升级

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants