Skip to content

build(deps): bump the python-deps group across 1 directory with 13 updates - #91

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-deps-47a8a72dab
Open

build(deps): bump the python-deps group across 1 directory with 13 updates#91
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-deps-47a8a72dab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group with 13 updates in the / directory:

Package From To
annotated-doc 0.0.4 0.0.5
cffi 2.1.0 2.1.1
cryptography 49.0.0 50.0.0
curl-cffi 0.15.0 0.16.0
fastapi 0.140.7 0.141.1
openai 2.48.0 2.53.0
pydantic-core 2.46.4 2.47.0
python-engineio 4.13.3 4.13.4
redis 8.0.1 8.1.0
sse-starlette 3.4.6 3.4.8
starlette 1.3.1 1.4.1
uvicorn 0.51.0 0.52.1
websockets 16.1.1 17.0.1

Updates annotated-doc from 0.0.4 to 0.0.5

Release notes

Sourced from annotated-doc's releases.

0.0.5

Breaking Changes

Upgrades

Docs

Internal

... (truncated)

Changelog

Sourced from annotated-doc's changelog.

0.0.5 (2026-07-28)

Breaking Changes

Upgrades

Docs

Internal

... (truncated)

Commits
  • ef48d6a 🔖 Release version 0.0.5 (#93)
  • c628000 📝 Update release notes
  • e0b4579 ➖ Drop support for Python 3.8 (#36)
  • ef956b4 📝 Update release notes
  • 84bf1e5 ⬆️ Upgrade latest-changes to 0.7.1 (#92)
  • cf773e1 📝 Update release notes
  • 1375d6e ⬆ Bump the github-actions group across 1 directory with 3 updates (#91)
  • cd37365 📝 Update release notes
  • f9f3b69 ⬆ Bump the python-packages group across 1 directory with 3 updates (#90)
  • 8420844 📝 Update release notes
  • Additional commits viewable in compare view

Updates cffi from 2.1.0 to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

Commits

Updates cryptography from 49.0.0 to 50.0.0

Changelog

Sourced from cryptography's changelog.

50.0.0 - 2026-07-31


* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
</tr></table>

... (truncated)

Commits

Updates curl-cffi from 0.15.0 to 0.16.0

Release notes

Sourced from curl-cffi's releases.

v0.16.0

🎉 Yet another release with huge updates!

Highlights

  • The packaged curl was updated to 8.21 with curl-impersonate 2.0
  • More http/3 specific options
  • More fingerprints update through the API at https://impersonate.pro
  • New option for setting the http header order

This release focuses on bugfixes and cleanup, especially for http3 and underlying curl-impersonate. Preset fingerprints will be added in next version: 0.16.1 or 0.17.

What's Changed

New Contributors

... (truncated)

Commits
  • 965508e Add http3 fingerprints testing
  • 0f4a5bb Bump version
  • 49566d7 Rename cache to _cache to make downstream happy
  • f4389cb Removed the toggle_extension function, which should be managed by boringssl
  • 380dc66 Do not set http_version from fingerprint class
  • 61845d6 Add support for redirect history (#806)
  • ae07e99 Add the --quiet option for CLI, close #791
  • 277abba feat(requests): stream request body from iterables and file-like objects (#773)
  • 835843c Add testing coverage for async stream, close #185
  • a1978de Add environment variable for downloaded libcurl-impersonate dependency, close...
  • Additional commits viewable in compare view

Updates fastapi from 0.140.7 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates openai from 2.48.0 to 2.53.0

Release notes

Sourced from openai's releases.

v2.53.0

2.53.0 (2026-08-03)

Features

  • api: Add gpt-5.5 and tool name/namespace to Responses types (#3569) (dd1202d)

Bug Fixes

  • ci: avoid NumPy source builds and duplicate HTTPX coverage (#3573) (b58332f)

v2.52.1

2.52.1 (2026-07-31)

Full Changelog: v2.52.0...v2.52.1

Chores

  • ci: pin setup-uv v5 to its underlying commit (#3560) (cbdc98b)

v2.52.0

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

  • api: content provenance checks (1d6c118)

Bug Fixes

  • client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

v2.51.0

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

2.53.0 (2026-08-03)

Features

  • api: Add gpt-5.5 and tool name/namespace to Responses types (#3569) (dd1202d)

Bug Fixes

  • ci: avoid NumPy source builds and duplicate HTTPX coverage (#3573) (b58332f)

2.52.1 (2026-07-31)

Full Changelog: v2.52.0...v2.52.1

Chores

  • ci: pin setup-uv v5 to its underlying commit (#3560) (cbdc98b)

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

  • api: content provenance checks (1d6c118)

Bug Fixes

  • client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

Bug Fixes

  • api: add fast tier to helper methods (6064126)

... (truncated)

Commits

Updates pydantic-core from 2.46.4 to 2.47.0

Commits

Updates python-engineio from 4.13.3 to 4.13.4

Release notes

Sourced from python-engineio's releases.

Release 4.13.4

See CHANGES.md for release notes.

Changelog

Sourced from python-engineio's changelog.

python-engineio change log

Release 4.13.4 - 2026-07-31

  • Prevent a race condition in the sync client's connection close handling #458 (commit)
  • Cleaner WebSocket exit for Werkzeug #457 (commit)

Release 4.13.3 - 2026-06-20

  • Make sure client disconnects when write loop exits #455 (commit)
  • Address flaky unit test #444 (commit)
  • Stop using codecov service, since it has been failing for a long time (commit)

Release 4.13.2 - 2026-05-21

Release 4.13.1 - 2026-02-06

  • Document that a process can have only one custom JSON module (commit)
  • Switch to Furo documentation template (commit)

Release 4.13.0 - 2025-12-24

  • Apply escaping rules when parsing cookie values (commit)
  • Several minor improvements to the aiohttp integration #419 (commit) (thanks PaulWasTaken!)
  • Clarify logging behavior in documentation #421 (commit) (thanks ZipFile!)
  • Address deprecation warnings #422 (commit)
  • Add 3.14 and pypy-3.11 CI builds (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 4.12.3 - 2025-09-28

  • Reset client queue upon disconnection #414 (commit)
  • Support ['*'] in addition to '*' in the cors_allowed_origins option #410 (commit) (thanks Wu Clan!)

Release 4.12.2 - 2025-06-04

  • Support new monkey-patched gevent Queue class in the client #403 (commit)
  • Better support of the ASGI spec when interpreting WebSocket events #405 (commit) (thanks Eric Zhang!)

Release 4.12.1 - 2025-05-11

  • Accept empty binary values in the async server #404 (commit)
  • Add SPDX license identifier #401 (commit) (thanks Marc Mueller!)

Release 4.12.0 - 2025-04-12

  • Optimize packet parsing to avoid unnecessary calls to JSON parser #399 (commit)

... (truncated)

Commits

Updates redis from 8.0.1 to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

  • Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).
  • Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).
  • Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).
  • Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).
  • Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).
  • Sentinel — replica sentinel aliases (#4127).

🚀 New Features

  • Add replica sentinel aliases (#4127)
  • Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)
  • feat: add TS.READ command support to the timeseries module (#4170)
  • feat: add SDIFFCARD and SUNIONCARD command support (#4171)
  • feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)
  • feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)
  • feat: add async maintenance-notifications support for standalone and cluster clients (#4177)
  • feat: add COLLECT reducer support to search aggregations (#4179)
  • feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)
  • feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)
  • feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

  • feat: add client-side HIMPORT fieldset support for...

    Description has been truncated

@dependabot
build(deps): bump the python-deps group across 1 directory with 13 up…
c21c9be 
…dates

Bumps the python-deps group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [annotated-doc](https://github.com/fastapi/annotated-doc) | `0.0.4` | `0.0.5` |
| [cffi](https://github.com/python-cffi/cffi) | `2.1.0` | `2.1.1` |
| [cryptography](https://github.com/pyca/cryptography) | `49.0.0` | `50.0.0` |
| [curl-cffi](https://github.com/lexiforest/curl_cffi) | `0.15.0` | `0.16.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.140.7` | `0.141.1` |
| [openai](https://github.com/openai/openai-python) | `2.48.0` | `2.53.0` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.47.0` |
| [python-engineio](https://github.com/miguelgrinberg/python-engineio) | `4.13.3` | `4.13.4` |
| [redis](https://github.com/redis/redis-py) | `8.0.1` | `8.1.0` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.4.6` | `3.4.8` |
| [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.4.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.1` |
| [websockets](https://github.com/python-websockets/websockets) | `16.1.1` | `17.0.1` |



Updates `annotated-doc` from 0.0.4 to 0.0.5
- [Release notes](https://github.com/fastapi/annotated-doc/releases)
- [Changelog](https://github.com/fastapi/annotated-doc/blob/main/release-notes.md)
- [Commits](fastapi/annotated-doc@0.0.4...0.0.5)

Updates `cffi` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.1.0...v2.1.1)

Updates `cryptography` from 49.0.0 to 50.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@49.0.0...50.0.0)

Updates `curl-cffi` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/lexiforest/curl_cffi/releases)
- [Changelog](https://github.com/lexiforest/curl_cffi/blob/main/docs/changelog.rst)
- [Commits](lexiforest/curl_cffi@v0.15.0...v0.16.0)

Updates `fastapi` from 0.140.7 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.140.7...0.141.1)

Updates `openai` from 2.48.0 to 2.53.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.48.0...v2.53.0)

Updates `pydantic-core` from 2.46.4 to 2.47.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `python-engineio` from 4.13.3 to 4.13.4
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-engineio@v4.13.3...v4.13.4)

Updates `redis` from 8.0.1 to 8.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v8.0.1...v8.1.0)

Updates `sse-starlette` from 3.4.6 to 3.4.8
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.4.6...v3.4.8)

Updates `starlette` from 1.3.1 to 1.4.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.3.1...1.4.1)

Updates `uvicorn` from 0.51.0 to 0.52.1
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.1)

Updates `websockets` from 16.1.1 to 17.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@16.1.1...17.0.1)

---
updated-dependencies:
- dependency-name: annotated-doc
  dependency-version: 0.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: curl-cffi
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pydantic-core
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: python-engineio
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: sse-starlette
  dependency-version: 3.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: starlette
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.52.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: websockets
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants