From 57cbfd613ffb3e0171467a697d949cb4bba0ad22 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 6 Nov 2026 18:17:23 +0000 Subject: [PATCH] chore(deps): Bump the python-dependencies group across 1 directory with 21 updates Bumps the python-dependencies group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `2.14.1` | `2.14.2` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.21.2` | `6.21.4` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.32` | `0.0.33` | | [filelock](https://github.com/tox-dev/filelock) | `4.2.4` | `4.2.7` | | [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `2.3.0` | `2.4.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.0` | `1.4.1.post1` | | [ruff](https://github.com/astral-sh/ruff) | `0.17.2` | `0.17.3` | | [mypy](https://github.com/python/mypy) | `2.4.0` | `2.4.1` | | [moto](https://github.com/getmoto/moto) | `5.2.4` | `5.2.5` | | [anyio](https://github.com/agronholm/anyio) | `4.15.1` | `4.16.0` | | [boto3](https://github.com/boto/boto3) | `1.43.118` | `1.43.123` | | [botocore](https://github.com/boto/botocore) | `1.43.118` | `1.43.123` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.17.0` | `7.17.1` | | [deprecated](https://github.com/laurent-laporte-pro/deprecated) | `3.0.0` | `3.0.1` | | [mypy-extensions](https://github.com/python/mypy_extensions) | `1.1.0` | `1.2.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.45.1` | `1.45.2` | | [pydantic-core](https://github.com/pydantic/pydantic) | `2.50.1` | `2.50.2` | | [python-dateutil](https://github.com/dateutil/dateutil) | `2.9.0.post0` | `4.0.0` | | [websockets](https://github.com/python-websockets/websockets) | `17.3` | `17.4` | | [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.5.1` | `2.5.2` | Updates `pydantic` from 2.14.1 to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.14.1...v2.14.2) Updates `pypdf` from 6.21.2 to 6.21.4 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/py-pdf/pypdf/compare/6.21.2...6.21.4) Updates `python-multipart` from 0.0.32 to 0.0.33 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](https://github.com/Kludex/python-multipart/compare/0.0.32...0.0.33) Updates `filelock` from 4.2.4 to 4.2.7 - [Release notes](https://github.com/tox-dev/filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/filelock/compare/4.2.4...4.2.7) Updates `anthropic` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v2.3.0...v2.4.0) Updates `pytest` from 9.1.1 to 9.2.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.1.1...9.2.0) Updates `pytest-asyncio` from 1.4.0 to 1.4.1.post1 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.4.0...v1.4.1.post1) Updates `ruff` from 0.17.2 to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.17.2...0.17.3) Updates `mypy` from 2.4.0 to 2.4.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.4.0...v2.4.1) Updates `moto` from 5.2.4 to 5.2.5 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](https://github.com/getmoto/moto/compare/5.2.4...5.2.5) Updates `anyio` from 4.15.1 to 4.16.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](https://github.com/agronholm/anyio/compare/4.15.1...4.16.0) Updates `boto3` from 1.43.118 to 1.43.123 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.43.118...1.43.123) Updates `botocore` from 1.43.118 to 1.43.123 - [Commits](https://github.com/boto/botocore/compare/1.43.118...1.43.123) Updates `coverage` from 7.17.0 to 7.17.1 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.17.0...7.17.1) Updates `deprecated` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/laurent-laporte-pro/deprecated/releases) - [Changelog](https://github.com/laurent-laporte-pro/deprecated/blob/master/CHANGELOG.md) - [Commits](https://github.com/laurent-laporte-pro/deprecated/compare/v3.0.0...v3.0.1) Updates `mypy-extensions` from 1.1.0 to 1.2.0 - [Commits](https://github.com/python/mypy_extensions/compare/1.1.0...1.2.0) Updates `opentelemetry-api` from 1.45.1 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.45.1...v1.45.2) Updates `pydantic-core` from 2.50.1 to 2.50.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/core-v2.50.1...core-v2.50.2) Updates `python-dateutil` from 2.9.0.post0 to 4.0.0 - [Release notes](https://github.com/dateutil/dateutil/releases) - [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS) - [Commits](https://github.com/dateutil/dateutil/compare/2.9.0.post0...4.0.0) Updates `websockets` from 17.3 to 17.4 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](https://github.com/python-websockets/websockets/compare/17.3...17.4) Updates `wrapt` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](https://github.com/GrahamDumpleton/wrapt/compare/2.5.1...2.5.2) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pypdf dependency-version: 6.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: python-multipart dependency-version: 0.0.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: filelock dependency-version: 4.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: anthropic dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pytest dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pytest-asyncio dependency-version: 1.4.1.post1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.17.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mypy dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: moto dependency-version: 5.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: anyio dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: boto3 dependency-version: 1.43.123 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: botocore dependency-version: 1.43.123 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: coverage dependency-version: 7.17.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: deprecated dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mypy-extensions dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-api dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pydantic-core dependency-version: 2.50.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: python-dateutil dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: websockets dependency-version: '17.4' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: wrapt dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] --- requirements.lock.txt | 42 +++++++++++++++++++++--------------------- requirements.txt | 2 +- 2 files changed, 22 insertions(+), 22 deletions(-) diff --git a/requirements.lock.txt b/requirements.lock.txt index d11586c..26a55a2 100644 --- a/requirements.lock.txt +++ b/requirements.lock.txt @@ -8,9 +8,9 @@ annotated-doc==0.0.5 # via fastapi annotated-types==0.8.0 # via pydantic -anthropic==2.3.0 +anthropic==2.4.0 # via cortex (pyproject.toml) -anyio==4.15.1 +anyio==4.16.0 # via # anthropic # httpx @@ -25,9 +25,9 @@ bandit==1.9.4 # via cortex (pyproject.toml) bcrypt==5.0.0 # via passlib -boto3==1.43.118 +boto3==1.43.123 # via moto -botocore==1.43.118 +botocore==1.43.123 # via # boto3 # moto @@ -43,19 +43,19 @@ charset-normalizer==3.5.2 # via requests click==8.5.0 # via uvicorn -coverage==7.17.0 +coverage==7.17.1 # via pytest-cov cryptography==50.0.2 # via # cortex (pyproject.toml) # moto -deprecated==3.0.0 +deprecated==3.0.1 # via limits docstring-parser==0.18.0 # via anthropic fastapi==0.162.0 # via cortex (pyproject.toml) -filelock==4.2.4 +filelock==4.2.7 # via cortex (pyproject.toml) future==1.0.0 # via cortex (pyproject.toml) @@ -107,13 +107,13 @@ mdurl==0.1.2 # via markdown-it-py mmh3==5.3.1 # via cortex (pyproject.toml) -moto==5.2.4 +moto==5.2.5 # via cortex (pyproject.toml) -mypy==2.4.0 +mypy==2.4.1 # via cortex (pyproject.toml) -mypy-extensions==1.1.0 +mypy-extensions==1.2.0 # via mypy -opentelemetry-api==1.45.1 +opentelemetry-api==1.45.2 # via # anthropic # fastapi @@ -133,12 +133,12 @@ psycopg2-binary==2.9.13 # via cortex (pyproject.toml) pycparser==3.12 # via cffi -pydantic==2.14.1 +pydantic==2.14.2 # via # anthropic # cortex (pyproject.toml) # fastapi -pydantic-core==2.50.1 +pydantic-core==2.50.2 # via pydantic pygments==2.21.0 # via @@ -146,24 +146,24 @@ pygments==2.21.0 # rich pyjwt==2.15.1 # via cortex (pyproject.toml) -pypdf==6.21.2 +pypdf==6.21.4 # via cortex (pyproject.toml) -pytest==9.1.1 +pytest==9.2.0 # via # cortex (pyproject.toml) # pytest-asyncio # pytest-cov -pytest-asyncio==1.4.0 +pytest-asyncio==1.4.1.post1 # via cortex (pyproject.toml) pytest-cov==7.1.0 # via cortex (pyproject.toml) -python-dateutil==2.9.0.post0 +python-dateutil==4.0.0 # via botocore python-docx==1.2.0 # via cortex (pyproject.toml) python-dotenv==1.2.4 # via uvicorn -python-multipart==0.0.32 +python-multipart==0.0.33 # via cortex (pyproject.toml) pyyaml==6.0.3 # via @@ -180,7 +180,7 @@ responses==0.26.3 # via moto rich==15.0.0 # via bandit -ruff==0.17.2 +ruff==0.17.3 # via cortex (pyproject.toml) s3transfer==0.19.3 # via boto3 @@ -233,11 +233,11 @@ uvloop==0.23.0 # via uvicorn watchfiles==1.3.0 # via uvicorn -websockets==17.3 +websockets==17.4 # via uvicorn werkzeug==3.1.9 # via moto -wrapt==2.5.1 +wrapt==2.5.2 # via deprecated xmltodict==1.0.4 # via moto diff --git a/requirements.txt b/requirements.txt index 7fc1e5c..709032a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,6 +5,6 @@ # Pins below mirror a subset of [project] dependencies (auth + idna CVE floor). PyJWT>=2.15.1 passlib[bcrypt]==1.7.4 -python-multipart==0.0.32 +python-multipart==0.0.33 # Security: pin idna >= 3.19 (GHSA-jjg7-2v4v-x38h — DoS in idna.encode) idna>=3.20