Skip to content

chore(deps): bump the python-runtime group across 1 directory with 49 updates - #83

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-runtime-500ef7ebe7
Open

chore(deps): bump the python-runtime group across 1 directory with 49 updates#83
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-runtime-500ef7ebe7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Updates the requirements on cryptography, jsonschema, numpy, scipy, sqlparse, tree-sitter, tree-sitter-python, tree-sitter-typescript, tree-sitter-java, tree-sitter-ruby, tree-sitter-rust, click, fastapi, hypothesis, anthropic, restrictedpython, psycopg2-binary, keyring, uvicorn, pytest, pytest-asyncio, pytest-cov, httpx, moto, pycryptodome, aiosqlite, gunicorn, celery, redis, sqlalchemy, alembic, asyncpg, psycopg, pydantic, pydantic-settings, boto3, botocore, aiobotocore, python-multipart, pyjwt, workos, gitpython, websockets, sentry-sdk, stripe, pynacl, python-dotenv, sse-starlette and setuptools to permit the latest version.
Updates cryptography to 49.0.0

Changelog

Sourced from cryptography's changelog.

49.0.0 - 2026-06-12


* **BACKWARDS INCOMPATIBLE:** Support for ``x86_64`` macOS has been removed.
  We now only publish ``arm64`` wheels for macOS.
* **BACKWARDS INCOMPATIBLE:** Support for 32-bit Windows has been removed.
  Users should move to a 64-bit Python installation.
* **BACKWARDS INCOMPATIBLE:** Removed the deprecated
  ``PUBLIC_KEY_TYPES``, ``PRIVATE_KEY_TYPES``,
  ``CERTIFICATE_PRIVATE_KEY_TYPES``, ``CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES``,
  and ``CERTIFICATE_PUBLIC_KEY_TYPES`` type aliases. Use
  ``PublicKeyTypes``, ``PrivateKeyTypes``, ``CertificateIssuerPrivateKeyTypes``,
  ``CertificateIssuerPublicKeyTypes``, and ``CertificatePublicKeyTypes``
  instead. These were deprecated in version 40.0.
* **BACKWARDS INCOMPATIBLE:** :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`
  now treats the first 4 bytes of the ``nonce`` as a 32-bit little-endian block
  counter (as defined in :rfc:`7539`) and tracks the number of bytes processed.
  Attempting to encrypt or decrypt more data than the counter allows before it
  would overflow now raises a :class:`ValueError` rather than silently diverging
  from RFC 7539. Setting the counter portion of the ``nonce`` to zero allows
  encrypting up to 256 GiB with a given nonce.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 certificate whose ECDSA or DSA
  signature ``AlgorithmIdentifier`` contains encoded NULL parameters now raises
  a :class:`ValueError`. Such certificates are invalid, but older versions of
  Java emitted them; previously they loaded with a deprecation warning.
* Fixed cross-compilation of the CFFI bindings when ``PYO3_CROSS_LIB_DIR``
  is set. The build now derives the Python include directory from
  ``PYO3_CROSS_LIB_DIR`` instead of querying the host interpreter, which
  previously caused the build to fail during cross-compilations for embedded
  systems, on hosts which have same-version Python development headers
  installed as the target Python.
* Added support for signing and verifying X.509 certificates, certificate
  signing requests, and certificate revocation lists with
  :doc:`/hazmat/primitives/asymmetric/mldsa` keys, as well as loading
  certificates that contain ML-DSA public keys.
* Added :meth:`~cryptography.hazmat.primitives.hpke.KEM.enc_length` to
  :class:`~cryptography.hazmat.primitives.hpke.KEM` so callers can split the
  encapsulated key from the ciphertext returned by
  :meth:`~cryptography.hazmat.primitives.hpke.Suite.encrypt`.
* :meth:`~cryptography.x509.verification.ExtensionPolicy.require_present`,
  :meth:`~cryptography.x509.verification.ExtensionPolicy.may_be_present`, and
  :meth:`~cryptography.x509.verification.ExtensionPolicy.require_not_present`
  now accept any extension type. Previously only a fixed set of extension
  types was supported, which made it impossible to account for otherwise
  unrecognized critical extensions during path validation.
* Added support for using :class:`~cryptography.x509.Certificate`,
  :class:`~cryptography.x509.CertificateSigningRequest`, and
  :class:`~cryptography.x509.CertificateRevocationList` as field types in
  :doc:`/hazmat/asn1/index` structures.
* Added :func:`~cryptography.hazmat.asn1.value_set`, a class decorator that
</tr></table>

... (truncated)

Commits
  • e300bbe bump version and changelog for 49.0.0 (#15030)
  • fa74cd8 Add external mu (message representative) support for ML-DSA (#14979)
  • f594db3 chore(deps): bump openssl from 0.10.80 to 0.10.81 (#15029)
  • 608e011 chore(deps): bump openssl-sys from 0.9.116 to 0.9.117 (#15028)
  • a322bc4 chore(deps): bump cc from 1.2.63 to 1.2.64 (#15027)
  • 33181a7 Reject critical nameConstraints extensions containing directoryName constrain...
  • 6080dc7 Bump dependencies that dependabot isn't (#15026)
  • 121faa3 chore(deps): bump virtualenv from 21.4.2 to 21.4.3 (#15023)
  • 829520b Add more robust processing for DH parameters. (#15016)
  • 0f05001 Bump downstream dependencies in CI (#15025)
  • Additional commits viewable in compare view

Updates jsonschema to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).

v4.25.1

  • Fix an incorrect required argument in the Validator protocol's type annotations (#1396).

v4.25.0

  • Add support for the iri and iri-reference formats to the format-nongpl extra via the MIT-licensed rfc3987-syntax. They were alread supported by the format extra. (#1388).

v4.24.1

  • Properly escape segments in ValidationError.json_path (#139).

v4.24.0

  • Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).
  • Support for Python 3.8 has been dropped, as it is end-of-life.

v4.23.0

  • Do not reorder dictionaries (schemas, instances) that are printed as part of validation errors.
  • Declare support for Py3.13

v4.22.0

  • Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
  • (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

v4.21.1

  • Slightly speed up the contains keyword by removing some unnecessary validator (re-)creation.

v4.21.0

  • Fix the behavior of enum in the presence of 0 or 1 to properly consider True and False unequal (#1208).
  • Special case the error message for {min,max}{Items,Length,Properties} when they're checking for emptiness rather than true length.

... (truncated)

Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates numpy to 2.2.6

Release notes

Sourced from numpy's releases.

v2.2.6 (May 17, 2025)

NumPy 2.2.6 Release Notes

NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance.

This release supports Python versions 3.10-3.13.

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Ilhan Polat
  • Joren Hammudoglu
  • Marco Gorelli +
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Sayed Adel

Pull requests merged

A total of 11 pull requests were merged for this release.

  • #28778: MAINT: Prepare 2.2.x for further development
  • #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments...
  • #28852: BUG: fix heap buffer overflow in np.strings.find
  • #28853: TYP: fix NDArray[floating] + float return type
  • #28864: BUG: fix stringdtype singleton thread safety
  • #28865: MAINT: use OpenBLAS 0.3.29
  • #28889: MAINT: from_dlpack thread safety fixes
  • #28913: TYP: Fix non-existent CanIndex annotation in ndarray.setfield
  • #28915: MAINT: Avoid dereferencing/strict aliasing warnings
  • #28916: BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate.
  • #28966: TYP: reject complex scalar types in ndarray.__ifloordiv__

Checksums

MD5

259343f056061f6eadb2f4b8999d06d4  numpy-2.2.6-cp310-cp310-macosx_10_9_x86_64.whl
16fa85488e149489ce7ee044d7b0d307  numpy-2.2.6-cp310-cp310-macosx_11_0_arm64.whl
f01b7aea9d2b76b1eeb49766e615d689  numpy-2.2.6-cp310-cp310-macosx_14_0_arm64.whl
f2ddc2b22517f6e31caa1372b12c2499  numpy-2.2.6-cp310-cp310-macosx_14_0_x86_64.whl
52190e22869884f0870eb3df7a283ca9  numpy-2.2.6-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
8f382b9ca6770db600edd5ea2447a925  numpy-2.2.6-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
e604aae2ef6e01fb92ecc39aca0424d9  numpy-2.2.6-cp310-cp310-musllinux_1_2_aarch64.whl

... (truncated)

Commits
  • 2b686f6 Merge pull request #28980 from charris/prepare-2.2.6
  • ed41828 REL: Prepare for the NumPy 2.2.6 release [wheel build]
  • 83e4e7f Merge pull request #28966 from charris/backport-28958
  • 248f0cb TYP: add rejection-tests for complex ndarray floordiv
  • 5bad9da TYP: reject complex scalar types in ndarray.__ifloordiv__
  • 6c42775 Merge pull request #28915 from charris/backport-28892
  • 4277e7c Merge pull request #28916 from charris/backport-28898
  • bd1c863 BUG: Fix missing check for PyErr_Occurred() in _pyarray_correlate. (#28898)
  • 87d1d8a MAINT: Avoid dereferencing/strict aliasing warnings during complex casts in `...
  • 9e50659 Merge pull request #28913 from charris/backport-28908
  • Additional commits viewable in compare view

Updates scipy to 1.15.3

Release notes

Sourced from scipy's releases.

SciPy 1.15.3 Release Notes

SciPy 1.15.3 is a bug-fix release with no new features compared to 1.15.2.

For the complete issue and PR lists see the raw release notes.

Authors

  • Name (commits)
  • aiudirog (1) +
  • Nickolai Belakovski (1)
  • Florian Bourgey (1) +
  • Richard Strong Bowen (2) +
  • Jake Bowhay (1)
  • Dietrich Brunn (2)
  • Evgeni Burovski (1)
  • Lucas Colley (1)
  • Ralf Gommers (1)
  • Saarthak Gupta (1) +
  • Matt Haberland (4)
  • Chengyu Han (1) +
  • Lukas Huber (1) +
  • Nick ODell (2)
  • Ilhan Polat (4)
  • Tyler Reddy (52)
  • Neil Schemenauer (1) +
  • Dan Schult (1)
  • sildater (1) +
  • Gagandeep Singh (4)
  • Albert Steppi (2)
  • Matthias Urlichs (1) +
  • David Varela (1) +
  • ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (3)

A total of 24 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Commits
  • e29dcb6 REL: 1.15.3 rel commit [wheel build]
  • 61e6aa1 Merge pull request #22840 from tylerjereddy/treddy_1.15.3_backports
  • 18c4ca8 MAINT: PR 22840 wheel build [wheel build]
  • bd0f132 MAINT: PR 22840 revisions
  • 033b138 MAINT: PR 22840 revisions
  • 7a283cc DOC: PR 22840 revisions
  • 3d1ea40 BUG: spatial.HalfspaceIntersection: raise on non-feasible half space (#20035)
  • d01b984 BUG: ndimage.median_filter: fix segfault when using mode='mirror' (#22608)
  • 0879108 MAINT: special.logsumexp: fix bug when weight of largest magnitude component ...
  • 9b3b2d8 Merge pull request #22869 from smurfix/main
  • Additional commits viewable in compare view

Updates sqlparse to 0.5.5

Changelog

Sourced from sqlparse's changelog.

Release 0.5.5 (Dec 19, 2025)

Bug Fixes

  • Fix DoS protection to raise SQLParseError instead of silently returning None when grouping limits are exceeded (issue827).
  • Fix splitting of BEGIN TRANSACTION statements (issue826).

Release 0.5.4 (Nov 28, 2025)

Enhancements

  • Add support for Python 3.14.
  • Add type annotations to top-level API functions and include py.typed marker for PEP 561 compliance, enabling type checking with mypy and other tools (issue756).
  • Add pre-commit hook support. sqlparse can now be used as a pre-commit hook to automatically format SQL files. The CLI now supports multiple files and an --in-place flag for in-place editing (issue537).
  • Add ATTACH and DETACH to PostgreSQL keywords (pr808).
  • Add INTERSECT to close keywords in WHERE clause (pr820).
  • Support REGEXP BINARY comparison operator (pr817).

Bug Fixes

  • Add additional protection against denial of service attacks when parsing very large lists of tuples. This enhances the existing recursion protections with configurable limits for token processing to prevent DoS through algorithmic complexity attacks. The new limits (MAX_GROUPING_DEPTH=100, MAX_GROUPING_TOKENS=10000) can be adjusted or disabled (by setting to None) if needed for legitimate large SQL statements.
  • Remove shebang from cli.py and remove executable flag (pr818).
  • Fix strip_comments not removing all comments when input contains only comments (issue801, pr803 by stropysh).
  • Fix splitting statements with IF EXISTS/IF NOT EXISTS inside BEGIN...END blocks (issue812).
  • Fix splitting on semicolons inside BEGIN...END blocks (issue809).

Release 0.5.3 (Dez 10, 2024)

Bug Fixes

  • This version introduces a more generalized handling of potential denial of service attack (DOS) due to recursion errors for deeply nested statements. Brought up and fixed by @​living180. Thanks a lot!

... (truncated)

Commits
  • 0d24023 Bump version to 0.5.5
  • da67ac1 Enhance DoS protection by raising SQLParseError for exceeded grouping limits ...
  • 5ca50a2 Fix splitting of BEGIN TRANSACTION statements (fixes #826).
  • acd8e58 Back to development version.
  • 14e300b Bump version.
  • 96a67e2 Code cleanup.
  • 1a3bfbd Fix handling of semicolons inside BEGIN...END blocks (fixes #809).
  • e92a032 Fix handling of IF EXISTS statements in BEGIN...END blocks (fixes #812).
  • 149bebf Update Changelog.
  • 561a67e Update AUTHORS.
  • Additional commits viewable in compare view

Updates tree-sitter to 0.25.2

Release notes

Sourced from tree-sitter's releases.

v0.25.2

What's Changed

Full Changelog: tree-sitter/py-tree-sitter@v0.25.1...v0.25.2

Commits
  • e2a5b21 chore: release 0.25.2
  • bddf8ad build: bump tree_sitter/core from a467ea8 to da6fe9b
  • 2a94c01 fix(parser): fix memleak of source_view
  • 10ff18d build: bump tree_sitter/core from 629093d to a467ea8
  • 8452c1b ci: bump actions/setup-python from 5 to 6 in the actions group
  • d2d8789 ci: bump actions/upload-pages-artifact from 3 to 4 in the actions group
  • d36bde5 build: properly detect MSVC compiler
  • ec0eab3 build: bump tree_sitter/core from 3624198 to 629093d
  • 5bae230 ci: bump actions/checkout from 4 to 5 in the actions group
  • 794a34f ci: bump actions/download-artifact from 4 to 5 in the actions group
  • Additional commits viewable in compare view

Updates tree-sitter-python to 0.25.0

Release notes

Sourced from tree-sitter-python's releases.

v0.25.0

NOTE: Download tree-sitter-python.tar.gz for the complete source code.

Commits
  • 293fdc0 0.25.0
  • 34a91a2 chore: generate
  • 8ad8a51 ci: update failing files
  • a0b84ed test: update tests
  • 1b1ca93 fix: give a higher lexical precedence to the * in except*
  • a4c106f feat: allow multiple exception expressions without parenthesis
  • 29e3bc2 refactor!: simplify exceptions
  • d8f9e69 feat: add PEP 750 template string support
  • 7ff26da feat: simplify try statement by accepting missing else/except/finally blocks
  • afdba00 build: update bindings
  • Additional commits viewable in compare view

Updates tree-sitter-typescript to 0.23.2

Release notes

Sourced from tree-sitter-typescript's releases.

v0.23.2

NOTE: Download tree-sitter-typescript.tar.xz for the complete source code.

Commits
  • f975a62 0.23.2
  • 61e2a77 0.23.1
  • 7bfe051 fix(rust): don't fetch files from node_modules
  • aa6c28f fix: remove glimmer tags
  • 9230875 build: move tree-sitter-javascript to dependencies
  • 14af167 chore: regenerate
  • 31725c1 build: update bindings
  • 89e0420 feat(node): support single-file executables via bun build --compile
  • 73c4447 chore: regenerate
  • 18bb23a build: update bindings
  • Additional commits viewable in compare view

Updates tree-sitter-java to 0.23.5

Release notes

Sourced from tree-sitter-java's releases.

v0.23.5

NOTE: Download tree-sitter-java.tar.xz for the complete source code.

Commits
  • 94703d5 0.23.5
  • de81673 chore: generate
  • 4885576 feat: allow reserved identifiers in element_value_pair
  • 24a58d8 fix: correct floating point literal parsing
  • 33a3868 fix: allow annotations after the ellipsis in a spread parameter
  • e75fda2 fix: give yield in _reserved_identifier a precedence of 0
  • 04a649d feat(highlights): add more keywords
  • a1bbe92 0.23.4
  • 875834d ci(publish): add attestations and generate parser
  • 68dd781 ci: bump tree-sitter/setup-action from 1 to 2
  • Additional commits viewable in compare view

Updates tree-sitter-ruby to 0.23.1

Release notes

Sourced from tree-sitter-ruby's releases.

v0.23.1

NOTE: Download tree-sitter-ruby.tar.xz for the complete source code.

Commits

Updates tree-sitter-rust to 0.24.2

Release notes

Sourced from tree-sitter-rust's releases.

v0.24.2

NOTE: Download tree-sitter-rust.tar.gz for the complete source code.

Commits

Updates click to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449
Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
  • Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
  • Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
  • Fix empty byte-string handling in echo. {issue}3487 {pr}3493
  • Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
  • Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

  • {class}ParamType typing improvements. {pr}3371

    • {class}ParamType is now a generic abstract base class, parameterized by its converted value type.
    • {meth}~ParamType.convert return types are narrowed on all concrete types (str for {class}STRING, int for {class}INT, etc.).
    • {meth}~ParamType.to_info_dict returns specific {class}~typing.TypedDict subclasses instead of dict[str, Any].
    • {class}CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add {func}typing.overload signatures. {pr}3372

  • {class}Parameter typing improvements. {pr}2805

    • {class}Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • {attr}Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of {meth}Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or {class}Tuple type, matching environment variable behavior. {issue}2745 {pr}3364

  • Auto-detect type=UNPROCESSED for flag_value of non-basic types

... (truncated)

Commits
  • 6eeb50e release version 8.4.1
  • 67921d5 change log and doc fixes (#3495)
  • 9c41f46 Fix changelog and version admonitions
  • 6cb3477 fix skip condition
  • 5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
  • becbde5 pager doesn't close std streams
  • a5f5aa6 Handle empty bytes in echo (#3493)
  • 4d3db84 handle empty bytes in echo
  • d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
  • 0baa8db Document ctx.params bypass with test and doc
  • Additional commits viewable in compare view

Updates fastapi to 0.137.1

Release notes

Sourced from fastapi's releases.

0.137.1

Fixes

Commits

Updates hypothesis to 6.155.3

Commits
  • 8497a82 Bump hypothesis version to 6.155.3 and update changelog
  • 1ac02e3 Merge pull request #4767 from pschanely/suppress-observations
  • 814a0ef Merge branch 'master' into suppress-observations
  • ef41ab2 Fix two crosshair-backend test failures + a spurious empty observation
  • 1084b33 claude: fix link preview dark styling in furo auto theme mode
  • caa15d0 Bump hypothesis version to 6.155.2 and update changelog
  • 41f16b2 format

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 15, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 15, 2026
@dependabot
chore(deps): bump the python-runtime group across 1 directory with 49…
52400d5 
… updates

Updates the requirements on [cryptography](https://github.com/pyca/cryptography), [jsonschema](https://github.com/python-jsonschema/jsonschema), [numpy](https://github.com/numpy/numpy), [scipy](https://github.com/scipy/scipy), [sqlparse](https://github.com/andialbrecht/sqlparse), [tree-sitter](https://github.com/tree-sitter/py-tree-sitter), [tree-sitter-python](https://github.com/tree-sitter/tree-sitter-python), [tree-sitter-typescript](https://github.com/tree-sitter/tree-sitter-typescript), [tree-sitter-java](https://github.com/tree-sitter/tree-sitter-java), [tree-sitter-ruby](https://github.com/tree-sitter/tree-sitter-ruby), [tree-sitter-rust](https://github.com/tree-sitter/tree-sitter-rust), [click](https://github.com/pallets/click), [fastapi](https://github.com/fastapi/fastapi), [hypothesis](https://github.com/HypothesisWorks/hypothesis), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [restrictedpython](https://github.com/zopefoundation/RestrictedPython), [psycopg2-binary](https://github.com/psycopg/psycopg2), [keyring](https://github.com/jaraco/keyring), [uvicorn](https://github.com/Kludex/uvicorn), [pytest](https://github.com/pytest-dev/pytest), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [httpx](https://github.com/encode/httpx), [moto](https://github.com/getmoto/moto), [pycryptodome](https://github.com/Legrandin/pycryptodome), [aiosqlite](https://github.com/omnilib/aiosqlite), [gunicorn](https://github.com/benoitc/gunicorn), [celery](https://github.com/celery/celery), [redis](https://github.com/redis/redis-py), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [asyncpg](https://github.com/MagicStack/asyncpg), [psycopg](https://github.com/psycopg/psycopg), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [aiobotocore](https://github.com/aio-libs/aiobotocore), [python-multipart](https://github.com/Kludex/python-multipart), [pyjwt](https://github.com/jpadilla/pyjwt), [workos](https://workos.com/docs/sdks/python), [gitpython](https://github.com/gitpython-developers/GitPython), [websockets](https://github.com/python-websockets/websockets), [sentry-sdk](https://github.com/getsentry/sentry-python), [stripe](https://github.com/stripe/stripe-python), [pynacl](https://github.com/pyca/pynacl), [python-dotenv](https://github.com/theskumar/python-dotenv), [sse-starlette](https://github.com/sysid/sse-starlette) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `cryptography` to 49.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.0...49.0.0)

Updates `jsonschema` to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.21.0...v4.26.0)

Updates `numpy` to 2.2.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.26.0...v2.2.6)

Updates `scipy` to 1.15.3
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.11.0...v1.15.3)

Updates `sqlparse` to 0.5.5
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.5.0...0.5.5)

Updates `tree-sitter` to 0.25.2
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](tree-sitter/py-tree-sitter@v0.23.0...v0.25.2)

Updates `tree-sitter-python` to 0.25.0
- [Release notes](https://github.com/tree-sitter/tree-sitter-python/releases)
- [Commits](tree-sitter/tree-sitter-python@v0.23.0...v0.25.0)

Updates `tree-sitter-typescript` to 0.23.2
- [Release notes](https://github.com/tree-sitter/tree-sitter-typescript/releases)
- [Commits](tree-sitter/tree-sitter-typescript@v0.23.0...v0.23.2)

Updates `tree-sitter-java` to 0.23.5
- [Release notes](https://github.com/tree-sitter/tree-sitter-java/releases)
- [Commits](tree-sitter/tree-sitter-java@v0.23.0...v0.23.5)

Updates `tree-sitter-ruby` to 0.23.1
- [Release notes](https://github.com/tree-sitter/tree-sitter-ruby/releases)
- [Commits](tree-sitter/tree-sitter-ruby@v0.23.0...v0.23.1)

Updates `tree-sitter-rust` to 0.24.2
- [Release notes](https://github.com/tree-sitter/tree-sitter-rust/releases)
- [Commits](tree-sitter/tree-sitter-rust@v0.24.0...v0.24.2)

Updates `click` to 8.4.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.1.0...8.4.1)

Updates `fastapi` to 0.137.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.137.1)

Updates `hypothesis` to 6.155.3
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.100.0...v6.155.3)

Updates `anthropic` to 0.109.2
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.40.0...v0.109.2)

Updates `restrictedpython` to 8.3
- [Changelog](https://github.com/zopefoundation/RestrictedPython/blob/master/CHANGES.rst)
- [Commits](zopefoundation/RestrictedPython@8.1...8.3)

Updates `psycopg2-binary` to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.12)

Updates `keyring` to 25.7.0
- [Release notes](https://github.com/jaraco/keyring/releases)
- [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst)
- [Commits](jaraco/keyring@v25.0.0...v25.7.0)

Updates `uvicorn` to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.30.0...0.49.0)

Updates `pytest` to 9.1.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...9.1.0)

Updates `pytest-asyncio` to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v0.23.0...v1.4.0)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v5.0.0...v7.1.0)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.0...0.28.1)

Updates `moto` to 5.2.2
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.0.0...5.2.2)

Updates `pycryptodome` to 3.23.0
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.20.0...v3.23.0)

Updates `aiosqlite` to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.20.0...v0.22.1)

Updates `gunicorn` to 26.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@22.0.0...26.0.0)

Updates `celery` to 5.6.3
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst)
- [Commits](celery/celery@v5.4.0...v5.6.3)

Updates `redis` to 8.0.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.0...v8.0.0)

Updates `sqlalchemy` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `alembic` to 1.18.4
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `asyncpg` to 0.31.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.29.0...v0.31.0)

Updates `psycopg` to 3.3.4
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.0...3.3.4)

Updates `pydantic` to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.7.0...v2.13.4)

Updates `pydantic-settings` to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.3.0...v2.14.1)

Updates `boto3` to 1.43.30
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.34.0...1.43.30)

Updates `botocore` to 1.43.30
- [Commits](boto/botocore@1.34.0...1.43.30)

Updates `aiobotocore` to 3.7.0
- [Release notes](https://github.com/aio-libs/aiobotocore/releases)
- [Changelog](https://github.com/aio-libs/aiobotocore/blob/main/CHANGES.rst)
- [Commits](aio-libs/aiobotocore@2.13.0...3.7.0)

Updates `python-multipart` to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.9...0.0.32)

Updates `pyjwt` to 2.13.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.9.0...2.13.0)

Updates `workos` to 8.0.0

Updates `gitpython` to 3.1.50
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.0...3.1.50)

Updates `websockets` to 16.0
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@12.0...16.0)

Updates `sentry-sdk` to 2.62.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.5.0...2.62.0)

Updates `stripe` to 15.2.1
- [Release notes](https://github.com/stripe/stripe-python/releases)
- [Changelog](https://github.com/stripe/stripe-python/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-python@v10.0.0...v15.2.1)

Updates `pynacl` to 1.6.2
- [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pynacl@1.5.0...1.6.2)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `sse-starlette` to 3.4.4
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v2.1.0...v3.4.4)

Updates `setuptools` to 82.0.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v77.0.0...v82.0.1)

---
updated-dependencies:
- dependency-name: aiobotocore
  dependency-version: 3.7.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: alembic
  dependency-version: 1.18.4
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: anthropic
  dependency-version: 0.109.1
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: boto3
  dependency-version: 1.43.29
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: botocore
  dependency-version: 1.43.29
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: celery
  dependency-version: 5.6.3
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: click
  dependency-version: 8.4.1
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: cryptography
  dependency-version: 49.0.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: fastapi
  dependency-version: 0.137.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: gitpython
  dependency-version: 3.1.50
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: gunicorn
  dependency-version: 26.0.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: hypothesis
  dependency-version: 6.155.2
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: keyring
  dependency-version: 25.7.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: moto
  dependency-version: 5.2.2
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: numpy
  dependency-version: 2.2.6
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: psycopg
  dependency-version: 3.3.4
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: pycryptodome
  dependency-version: 3.23.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pynacl
  dependency-version: 1.6.2
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pytest
  dependency-version: 9.1.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: redis
  dependency-version: 8.0.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: restrictedpython
  dependency-version: '8.2'
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: scipy
  dependency-version: 1.15.3
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: sentry-sdk
  dependency-version: 2.62.0
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: sqlalchemy
  dependency-version: 2.0.50
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: sqlparse
  dependency-version: 0.5.5
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: sse-starlette
  dependency-version: 3.4.4
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: stripe
  dependency-version: 15.2.1
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: tree-sitter
  dependency-version: 0.25.2
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: tree-sitter-java
  dependency-version: 0.23.5
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: tree-sitter-python
  dependency-version: 0.25.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: tree-sitter-ruby
  dependency-version: 0.23.1
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: tree-sitter-rust
  dependency-version: 0.24.2
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: tree-sitter-typescript
  dependency-version: 0.23.2
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: websockets
  dependency-version: '16.0'
  dependency-type: direct:development
  dependency-group: python-runtime
- dependency-name: workos
  dependency-version: 8.0.0
  dependency-type: direct:development
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-runtime-500ef7ebe7 branch from bfd9cb8 to 52400d5 Compare June 16, 2026 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gowdaharshith1998-lang gowdaharshith1998-lang Awaiting requested review from gowdaharshith1998-lang gowdaharshith1998-lang is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants