[dependabot]

Updates the requirements on jvspatial, litellm, typesense, deepgram-sdk and elevenlabs to permit the latest version.
Updates jvspatial from 0.1.1 to 0.2.2

Release notes

Sourced from jvspatial's releases.

jvspatial 0.2.2

What's Changed

🚀 Features | Bug Fixes 🐛 | Refactor 🔄

• Fix transaction read parity and cache isolation; release 0.2.2 by @​eldonm in TrueSelph/jvspatial#59

Full Changelog: TrueSelph/jvspatial@v0.2.1...v0.2.2

jvspatial 0.2.1

What's Changed

🚀 Features | Bug Fixes 🐛 | Refactor 🔄

• fix(db): quiet routine timing logs and prepare 0.2.1 by @​eldonm in TrueSelph/jvspatial#58

Full Changelog: TrueSelph/jvspatial@v0.2.0...v0.2.1

jvspatial 0.2.0

What's Changed

🚀 Features | Bug Fixes 🐛 | Refactor 🔄

• ci(deps): bump dawidd6/action-download-artifact from 25 to 27 by @​dependabot[bot] in TrueSelph/jvspatial#53
• Add bounded graph projections for language-model context by @​eldonm in TrueSelph/jvspatial#54
• Improve query correctness and bound I/O across database adapters by @​eldonm in TrueSelph/jvspatial#55
• Promote graph context and I/O hardening from dev by @​eldonm in TrueSelph/jvspatial#56
• Release 0.2.0 by @​eldonm in TrueSelph/jvspatial#57

Full Changelog: TrueSelph/jvspatial@v0.1.1...v0.2.0

Changelog

Sourced from jvspatial's changelog.

[0.2.2] - 2026-10-13

Fixed

• Transaction reads now expose find_one, count, find_ids, find_many, find_iter and incident-edge counts through the shared transaction contract. PostgreSQL uses its held connection for native reads; MongoDB fallbacks retain their session. Unsupported backends still advertise no native transactions.

• PostgreSQL transaction operations serialize access to their connection, reject use after completion, retain tenant scope, and bootstrap new collections within the same transaction without acquiring a second connection. Collection bootstrap caches are promoted only after commit.

• Graph transactions no longer reuse entities bound to an outer context or populate shared process caches with uncommitted data. Parent-cache invalidation remains in place after commit and rollback.

• Graph transaction activation now fails closed when a deployment returns no transaction handle. Shared transaction contexts roll back on cancellation, and MongoDB commit/rollback await asynchronous session cleanup.

Changed

• Successful database observations produce no log records, including slow calls and DEBUG-enabled runs. Failures emit structured ERROR records; operation and slow-call metrics remain available. Successful calls also skip log-payload construction and message formatting.
• Updated transaction, paging, observability and backend support documentation; corrected stale specification and roadmap claims and refreshed the docs index.

[0.2.1] - 2026-10-12

Fixed

• Routine database operation timings now log at DEBUG instead of INFO, reducing noise in application logs. Slow operations and failures remain visible at WARNING; metrics and structured fields are unchanged.

[0.2.0] - 2026-10-11

Added

• Added a tag-triggered TestPyPI workflow for publishing release candidates independently of stable PyPI releases.

• Optional rich graph-context format 2 via ProjectionContextConfig, ProjectionField, ProjectionEvidence, and ProjectionRelation: per-type detail profiles, recorded same-record provenance, qualified relationship rules, explicit missing/null/truncated states, and authorized coverage metadata. Legacy format 1 defaults are preserved; enrichment adds no database operations versus equivalent selected fields. Includes a rooted operational example and paired capture/rendering performance probes.

... (truncated)

Commits

• fdd03fe fix(db): complete native transaction reads and release 0.2.2 (#59)
• 4cc06dd Merge pull request #58 from TrueSelph/codex/db-operation-debug-logging
• c734238 chore(release): bump jvspatial to 0.2.1
• 6271fd3 fix(db): log routine operation timings at debug
• cf94297 Merge pull request #57 from TrueSelph/codex/release-0.2.0
• b66ca6a Merge pull request #56 from TrueSelph/dev
• e08bcc3 chore(release): prepare 0.2.0
• f45f8a0 fix: recover stalled index and validation hardening
• fcd89ef ci: add isolated TestPyPI release-candidate publishing
• 7d0853c feat(core): add configurable rich graph context
• Additional commits viewable in compare view

Updates litellm to 1.105.1

Release notes

Sourced from litellm's releases.

v1.105.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.105.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(proxy): backport #44243 and #44508 to stable/1.105.x for v1.105.1 by @​kerry-berri in BerriAI/litellm#46313

Full Changelog: BerriAI/litellm@v1.105.0...v1.105.1

Commits

• d665dc1 Merge pull request #46313 from BerriAI/litellm_backport_44243_44508_stable_1_...
• 5ad0bf1 bump: version 1.105.1
• 1c183a5 fix(logging): log spend once for large non-streaming requests on the chat to ...
• 8980f37 perf(proxy): batch daily model usage writes instead of upserting per request ...
• 80b9556 Merge pull request #45927 from BerriAI/litellm_ui_bundle_rc_1_105_0
• 919f027 chore: update Next.js build artifacts (2026-10-11 06:00 UTC, node v24.19.0)
• f15af9b feat(ui): backport decision auto-router setup to 1.105 (#45915)
• 2616b1a Merge pull request #45905 from BerriAI/litellm_backport_decisions_rc_1_105_0
• fcbb022 chore(backport): merge rc/1.105.0 and move supported_decisions_providers to l...
• 23fec69 test(unit): flush queued logging tasks after each test so systemone callback ...
• Additional commits viewable in compare view

Updates typesense to 2.1.0

Release notes

Sourced from typesense's releases.

v2.1.0

Features

• Streaming conversation search over SSE for the sync and async clients, via search_stream / perform_stream, with a new stream_read_timeout_seconds option (#123)
• Connection pool configuration: pool_timeout_seconds, max_connections, max_keepalive_connections and max_concurrent_requests (#149)
• Accept a user-supplied httpx or httpx2 client (#151)
• verify now accepts a CA bundle path or an ssl.SSLContext (#142, #136)
• Typesense v30.2 types for curation stem and synonyms (#133)

Fixes

• Wait retry_interval_seconds between retries, and honor the deprecated timeout_seconds option (#141)
• Don't fail over on client-local HTTP errors (#153)
• Retry 5xx responses without a dedicated exception on another node (#150)
• Mark the node that answered as healthy (#148)
• Honor TLS verification settings in the HTTP clients (#142)
• Type fixes: synonym_sets is List[str] (#137), Highlight gains snippets and indices (#138), document deletion types (#109)

Behaviour changes

• Retries now actually sleep retry_interval_seconds, client errors no longer trigger failover, and 5xx responses do fail over.
• Strict type-checkers may surface new errors from the corrected synonym_sets and curation set types.

Contributors

• Thanks to @​santichausis, @​abhinavrastogi2627 and @​jaideeppyne

Full Changelog: typesense/typesense-python@v2.0.0...v2.1.0

Commits

• 8727d2b chore: bump version
• a058c0d Merge pull request #123 from tharropoulos/stream-convo
• c96ae12 fix(streaming): open streams with client.stream so httpx2 type-checks
• 7fdb0fa docs(examples): show iterating a search stream
• 7095aa6 test(streaming): cover stream failover, cleanup and callbacks
• 58167d9 feat(streaming): rework streaming as search_stream and perform_stream iterators
• 132c141 feat(streaming): let streams hold a concurrency slot until closed
• 7975c39 feat(streaming): add spec-compliant sse decoder
• f85b356 feat(config): add stream_read_timeout_seconds for streaming requests
• 0a0f1a6 refactor: share request kwargs and status checks in request handler
• Additional commits viewable in compare view

Updates deepgram-sdk to 7.13.0

Release notes

Sourced from deepgram-sdk's releases.

v7.13.0

7.13.0 (2026-10-08)

Features

• Listen V1: Reconfigure active Nova-3 streams without reconnecting with connection.send_configure(ListenV1Configure(...)), including keyterms and numerals. Configure rejections arrive as typed ListenV1Error responses.
• Voice Agent: Exchange experimental custom Think-provider payloads with send_custom_to_think_provider(AgentV1CustomToThinkProvider(...)) and AgentV1CustomFromThinkProvider responses. This requires a configured custom Think-provider WebSocket endpoint.

Validation

• poetry run pytest -rP --cov=deepgram --cov-branch --cov-report=xml --cov-report=term-missing . (1,075 passed, 4 skipped; 94.63% coverage)
• Ruff, mypy, and example compilation passed.
• Live smoke verified Listen V1 Configure plus Voice Agent settings, KeepAlive, and prompt updates.
• examples/19-transcription-live-reconfigure.py completed against the live API.

Changelog

Sourced from deepgram-sdk's changelog.

7.13.0 (2026-10-08)

Features

• Listen V1: Reconfigure an active Nova-3 stream without reconnecting with connection.send_configure(ListenV1Configure(...)), including keyterms and the numerals formatting feature. Server-side Configure rejections arrive as typed ListenV1Error responses; send an empty keyterms list to clear all active keyterms. (#799) (dce6960)
• Voice Agent: Exchange custom Think-provider payloads with send_custom_to_think_provider(AgentV1CustomToThinkProvider(...)) and AgentV1CustomFromThinkProvider responses. This experimental capability requires a configured custom Think-provider WebSocket endpoint; payloads preserve nested JSON values. (#799) (dce6960)

7.12.0 (2026-10-01)

Features

• Speak v2 (Flux TTS): Add inline pause markers for batch requests and IPA pronunciation overrides for Flux batch, Flux WebSocket, and Aura-2 requests. Pronunciation is Early Access; pause markers are Flux batch-only. See Speed, Pause, Pronunciation. (#797) (d2b5514)
• TextBuilder: Emit the Flux marker syntax the API accepts: pauses as \{pause:500ms\} and pronunciations as \{"word": "...", "pronounce": "<IPA>"\}. The 7.11.0 markers ({pause:500} and the unescaped pronunciation form) are rejected by /v2/speak with BREAK_SYNTAX_INVALID or ignored, so upgrade to use TextBuilder with Flux TTS. Limits now match Flux batch: pauses 500-3000 ms in 100 ms steps (was 500-5000) and at most 8 per request (was 50). pause(), from_ssml(), and build() raise ValueError for out-of-range or off-grid durations (previously rounded), for malformed markers, and for pause-plus-pronunciation combinations, instead of sending a request the API would reject.
• Listen v2 (Flux): Add typed Warning responses while preserving dict-style response access during the 7.x transition.

Compatibility

• Topics and Intents: SharedTopics and SharedIntents now type the direct segments response shape returned by the API. Deprecated results facades, legacy import paths, and legacy construction remain available in v7.

7.11.0 (2026-09-23)

Features

• Listen v2 (Flux): change numerals during an active connection with connection.send_configure(ListenV2Configure(numerals=True)). Numerals convert written numbers to numerical format for turns transcribed after the update. (#794) (c7c1b3f)

7.10.0 (2026-09-17)

Features

• Voice Agent: Add typed FunctionCallCancelled WebSocket events. Events identify function calls that are no longer valid; do not send a FunctionCallResponse for the listed call IDs. (#790) (7f5b642)
• Voice Agent: Add the optional defer_until_eot function setting. When enabled, it holds a function call until the user's turn is confirmed and discards the deferred call if the turn resumes. Defaults to false. (#790) (7f5b642)

7.9.0 (2026-09-14)

Features

• Voice Agent: Adds send_force_end_turn() and typed ForceEndTurn messages for V2 Flux listen providers. (#783) (ff49864)
• Voice Agent: Adds integer expressivity from -2 through 2 for Deepgram Flux TTS providers. (#783) (ff49864)
• Flux TTS: speed accepts 0.5 through 1.5 in 0.05 increments, replacing the previously documented 0.85 through 1.15 range. (#783) (ff49864)

Model Catalog

• Speak V1: Removes aura-2-perseo-it from model literals. The API never served the model and returns 400 No such model/version combination found for it. (#783) (ff49864)

7.8.1 (2026-09-03)

... (truncated)

Commits

• fa6d29b chore(main): release 7.13.0 (#800)
• dce6960 feat(regen): add listen v1 configure and agent custom think provider messages...
• 5c2f3af chore(main): release 7.12.0 (#798)
• d2b5514 feat(regen): add Flux TTS Controls (#797)
• a379a7f chore(main): release 7.11.0 (#795)
• c7c1b3f feat(regen): add Flux numerals configuration (#794)
• e11283c chore(main): release 7.10.0 (#791)
• 7f5b642 feat(regen): agent function cancellation and defer-until-EOT (#790)
• See full diff in compare view

Updates elevenlabs to 2.72.0

Release notes

Sourced from elevenlabs's releases.

v2.72.0

What's Changed

• fix(play): accept any iterable of audio chunks in play() and save() by @​aniruddhaadak80 in elevenlabs/elevenlabs-python#877
• feat(realtime): include close code and reason in RealtimeEvents.CLOSE by @​breken-ai in elevenlabs/elevenlabs-python#864
• SDK regeneration by @​fern-api[bot] in elevenlabs/elevenlabs-python#891

New Contributors

• @​aniruddhaadak80 made their first contribution in elevenlabs/elevenlabs-python#877
• @​breken-ai made their first contribution in elevenlabs/elevenlabs-python#864

Full Changelog: elevenlabs/elevenlabs-python@v2.71.0...v2.72.0

Commits

• fa6eec2 SDK regeneration (#891)
• fbe5daf feat(realtime): include close code and reason in RealtimeEvents.CLOSE (#864)
• 4b47fdd fix(play): accept any iterable of audio chunks in play() and save() (#877)
• f9490be SDK regeneration (#888)
• 963b4a5 SDK regeneration (#881)
• 39d7bc9 SDK regeneration (#879)
• 916322f Add transcript_edit to the realtime speech-to-text wrapper (#871)
• fd6d5c2 fix(speech-engine): strip residency suffix from API key before JWT verificati...
• 06db161 fix(play): raise when ffplay exits with an error (#869)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.