From cf05b3fbd321563cbf03cabfe0fc3f63296aa219 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 16:55:34 +0000 Subject: [PATCH] chore(deps): bump the python-runtime group across 1 directory with 13 updates Bumps the python-runtime group with 13 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.140.8` | `0.141.1` | | [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.6.0` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.4` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [openai](https://github.com/openai/openai-python) | `2.49.0` | `3.6.0` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.14.2` | `6.16.2` | | [yt-dlp](https://github.com/yt-dlp/yt-dlp) | `2026.7.4` | `2026.8.19` | | [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` | | [sse-starlette](https://github.com/sysid/sse-starlette) | `3.4.6` | `3.4.8` | | [httpx2](https://github.com/pydantic/httpx2) | `2.9.1` | `2.12.0` | | [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` | Updates `fastapi` from 0.140.8 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.140.8...0.141.1) Updates `starlette` from 1.3.1 to 1.6.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.3.1...1.6.0) Updates `uvicorn` from 0.51.0 to 0.52.4 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.4) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3) Updates `openai` from 2.49.0 to 3.6.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/openai/openai-python/compare/v2.49.0...v3.6.0) Updates `pypdf` from 6.14.2 to 6.16.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/py-pdf/pypdf/compare/6.14.2...6.16.2) Updates `yt-dlp` from 2026.7.4 to 2026.8.19 - [Release notes](https://github.com/yt-dlp/yt-dlp/releases) - [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md) - [Commits](https://github.com/yt-dlp/yt-dlp/compare/2026.07.04...2026.08.19) Updates `cryptography` from 50.0.0 to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.13.5) Updates `pydantic-settings` from 2.14.2 to 2.15.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.2...v2.15.0) Updates `sse-starlette` from 3.4.6 to 3.4.8 - [Release notes](https://github.com/sysid/sse-starlette/releases) - [Commits](https://github.com/sysid/sse-starlette/compare/v3.4.6...v3.4.8) Updates `httpx2` from 2.9.1 to 2.12.0 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md) - [Commits](https://github.com/pydantic/httpx2/compare/v2.9.1...v2.12.0) Updates `playwright` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](https://github.com/microsoft/playwright-python/compare/v1.61.0...v1.62.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: starlette dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: uvicorn dependency-version: 0.52.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-runtime - dependency-name: openai dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-runtime - dependency-name: pypdf dependency-version: 6.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: yt-dlp dependency-version: 2026.8.19 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-runtime - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-runtime - dependency-name: pydantic-settings dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: sse-starlette dependency-version: 3.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-runtime - dependency-name: httpx2 dependency-version: 2.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime ... Signed-off-by: dependabot[bot] --- backend/requirements-dev.txt | 2 +- backend/requirements-e2e.txt | 2 +- backend/requirements.txt | 22 +++++++++++----------- 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt index b05f261..74624fc 100644 --- a/backend/requirements-dev.txt +++ b/backend/requirements-dev.txt @@ -3,4 +3,4 @@ pip-audit==2.10.1 pytest==9.1.1 pytest-asyncio==1.4.0 -httpx2==2.9.1 +httpx2==2.12.0 diff --git a/backend/requirements-e2e.txt b/backend/requirements-e2e.txt index 30c75f1..ac65232 100644 --- a/backend/requirements-e2e.txt +++ b/backend/requirements-e2e.txt @@ -1,4 +1,4 @@ -r requirements-dev.txt # 手工浏览器端到端测试；普通 pytest/CI 不需要安装浏览器运行时。 -playwright==1.61.0 +playwright==1.62.0 diff --git a/backend/requirements.txt b/backend/requirements.txt index 07c3598..a4ef484 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -2,30 +2,30 @@ # reproducible. Dependabot keeps these pins current. # API and server -fastapi==0.140.8 -starlette==1.3.1 -uvicorn[standard]==0.51.0 +fastapi==0.141.1 +starlette==1.6.0 +uvicorn[standard]==0.52.4 python-multipart==0.0.32 -python-dotenv==1.2.2 +python-dotenv==1.2.3 # LLM and local ASR -openai==2.49.0 +openai==3.6.0 faster-whisper==1.2.1 # Media, PDF, and export Pillow==12.3.0 -pypdf==6.14.2 +pypdf==6.16.2 xmind==1.2.0 -yt-dlp==2026.7.4 +yt-dlp==2026.8.19 # Configuration and validation -cryptography==50.0.0 -pydantic==2.13.4 -pydantic-settings==2.14.2 +cryptography==50.0.1 +pydantic==2.13.5 +pydantic-settings==2.15.0 PyYAML==6.0.3 # HTTP, files, SSE, and rate limiting aiofiles==25.1.0 requests==2.34.2 slowapi==0.1.10 -sse-starlette==3.4.6 +sse-starlette==3.4.8