Repository navigation
build(deps): bump the python-minor-and-patch group across 1 directory with 15 updates - #33
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| "pyyaml>=6.0", | ||
| "modal>=1.5.2.dev2", # dev2 adds VM-mode V2 (_experimental_create + vm_runtime) | ||
| "e2b~=2.46.4", # AsyncSandbox/AsyncTemplate APIs validated against the 2.46 line | ||
| "e2b>=2.46.4,<2.52.0", # AsyncSandbox/AsyncTemplate APIs validated against the 2.46 line |
There was a problem hiding this comment.
The e2b range now allows versions through the 2.51 line, and uv.lock selects 2.51.0. The comment still says the APIs were validated against the 2.46 line. Update it to describe the range the package now allows, so maintainers do not get conflicting guidance.
Prompt To Fix With AI
This is a comment left during a code review.
Path: pyproject.toml
Line: 27
Comment:
**E2B support note is outdated**
The `e2b` range now allows versions through the 2.51 line, and `uv.lock` selects 2.51.0. The comment still says the APIs were validated against the 2.46 line. Update it to describe the range the package now allows, so maintainers do not get conflicting guidance.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!
| @@ -1487,13 +1493,14 @@ wheels = [ | |||
|
|
|||
| [[package]] | |||
| name = "litellm" | |||
| version = "1.96.0" | |||
| version = "1.103.0" | |||
There was a problem hiding this comment.
uv.lock now selects litellm 1.103.0, but THIRD_PARTY_NOTICES.md still lists 1.96.0 even though it says its versions come from the lockfile. The protocol notice also lists the old starlette version. Refresh both notices with this dependency bump so readers see the versions the packages select.
Prompt To Fix With AI
This is a comment left during a code review.
Path: uv.lock
Line: 1496
Comment:
**Published notices list old versions**
`uv.lock` now selects `litellm` 1.103.0, but `THIRD_PARTY_NOTICES.md` still lists 1.96.0 even though it says its versions come from the lockfile. The protocol notice also lists the old `starlette` version. Refresh both notices with this dependency bump so readers see the versions the packages select.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.… with 15 updates Bumps the python-minor-and-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.43.38` | `1.43.104` | | [litellm](https://github.com/BerriAI/litellm) | `1.96.0` | `1.103.0` | | [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.5` | | [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.17.0` | `4.18.2` | | [modal](https://github.com/modal-labs/modal-client) | `1.5.2.dev12` | `1.5.6.dev30` | | [e2b](https://github.com/e2b-dev/e2b) | `2.46.4` | `2.51.0` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.49.0` | `0.54.0` | | [google-api-core](https://github.com/googleapis/google-cloud-python) | `2.31.0` | `2.39.0` | | [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.1` | `2.59.0` | | [moto](https://github.com/getmoto/moto) | `5.2.2` | `5.2.3` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.12` | `2.9.13` | | [pytest-socket](https://github.com/miketheman/pytest-socket) | `0.8.0` | `0.8.1` | | [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.7.0` | | [regex](https://github.com/mrabarnett/mrab-regex) | `2026.6.28` | `2026.9.10` | Updates `boto3` from 1.43.38 to 1.43.104 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.38...1.43.104) Updates `litellm` from 1.96.0 to 1.103.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.96.0...v1.103.0) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `pydantic` from 2.12.5 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.5) Updates `pymongo` from 4.17.0 to 4.18.2 - [Release notes](https://github.com/mongodb/mongo-python-driver/releases) - [Changelog](https://github.com/mongodb/mongo-python-driver/blob/main/doc/changelog.rst) - [Commits](mongodb/mongo-python-driver@4.17.0...4.18.2) Updates `modal` from 1.5.2.dev12 to 1.5.6.dev30 - [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_DEV.md) - [Commits](https://github.com/modal-labs/modal-client/commits) Updates `e2b` from 2.46.4 to 2.51.0 - [Release notes](https://github.com/e2b-dev/e2b/releases) - [Commits](https://github.com/e2b-dev/e2b/compare/@e2b/python-sdk@2.46.4...e2b@2.51.0) Updates `uvicorn` from 0.49.0 to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.49.0...0.54.0) Updates `google-api-core` from 2.31.0 to 2.39.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-api-core-v2.31.0...google-api-core-v2.39.0) Updates `google-auth` from 2.55.1 to 2.59.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-auth-v2.55.1...google-auth-v2.59.0) Updates `moto` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.2.2...5.2.3) Updates `psycopg2-binary` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `pytest-socket` from 0.8.0 to 0.8.1 - [Release notes](https://github.com/miketheman/pytest-socket/releases) - [Changelog](https://github.com/miketheman/pytest-socket/blob/main/CHANGELOG.md) - [Commits](miketheman/pytest-socket@0.8.0...0.8.1) Updates `starlette` from 1.3.1 to 1.7.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@1.3.1...1.7.0) Updates `regex` from 2026.6.28 to 2026.9.10 - [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt) - [Commits](mrabarnett/mrab-regex@2026.6.28...2026.9.10) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: e2b dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: google-api-core dependency-version: 2.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: google-auth dependency-version: 2.58.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: litellm dependency-version: 1.103.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: modal dependency-version: 1.5.6.dev29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: moto dependency-version: 5.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pymongo dependency-version: 4.18.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: pytest-socket dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-and-patch - dependency-name: regex dependency-version: 2026.9.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: starlette dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/uv/python-minor-and-patch-92c8e0d42d
branch
from
October 1, 2026 23:55
698f59d to
c89d8db
Compare
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/uv/python-minor-and-patch-92c8e0d42d
branch
October 5, 2026 16:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-minor-and-patch group with 15 updates in the / directory:
1.43.381.43.1041.96.01.103.026.226.32.12.52.13.54.17.04.18.21.5.2.dev121.5.6.dev302.46.42.51.00.49.00.54.02.31.02.39.02.55.12.59.05.2.25.2.32.9.122.9.130.8.00.8.11.3.11.7.02026.6.282026.9.10Updates
boto3from 1.43.38 to 1.43.104Commits
ca37987Merge branch 'release-1.43.104'c468e3dBumping version to 1.43.104f2d1bacAdd changelog entries from botocore0470368Merge branch 'release-1.43.103'378d670Merge branch 'release-1.43.103' into develop1b65309Bumping version to 1.43.103655adc5Add changelog entries from botocoreda00dd2Merge branch 'release-1.43.102'76d6266Merge branch 'release-1.43.102' into develop551d660Bumping version to 1.43.102Updates
litellmfrom 1.96.0 to 1.103.0Release notes
Sourced from litellm's releases.
... (truncated)
Commits
c991f4bfix(proxy): unregister logging callbacks removed from the stored config (#43429)cc111d1fix(streaming): backport text-completion usage fix and e2e provider-flake tol...4dbbe6etest(ci): fix the e2e and integration reds left on rc/1.103.0 after #43382 an...8aca86atest(e2e): clear the two rc/1.103.0 e2e reds owned by upstream providers (#43...e640c0etest(integration): make rc/1.103.0 integration groups collect and pass again ...10e77cefix(caching): stand default cache points down when extra_body hides a direct ...6076c0afix(jwt,otel): backport session conversation id and JWT team header selection...6bfc987chore: update Next.js build artifacts (2026-09-26 18:18 UTC, node v24.19.0) (...6397b36fix: backport five regression fixes to rc/1.103.0 (#43331)4d08789fix(proxy): pass team member spend rows as jsonb so a $0 flush cannot poison ...Updates
packagingfrom 26.2 to 26.3Release notes
Sourced from packaging's releases.
... (truncated)
Changelog
Sourced from packaging's changelog.
... (truncated)
Commits
929fd4bBump for releasef300ebfchore(deps): bump the pre-commit group with 5 updates (#1357)f91d975ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)b1a7124chore(deps): bump the github-actions group with 7 updates (#1358)2d873ebfix(metadata): fold every line boundary when writing headers (#1356)413d006docs: changelog for 26.3 (#1343)4eb0753docs(metadata): explain selective field validation (#1342)77e9ed4feat(tags): add pure Python tag generator (#1346)7cea5e8ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...45a8b34docs: add missing versionadded/versionchanged directives (#1344)Updates
pydanticfrom 2.12.5 to 2.13.5Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
001dea0Bumppypa/gh-action-pypi-publishaction to v1.14.2558379fBump twine to v7.0.02cfd5d3Do not check for docs builda735beeFix more Clippy lints7eed4a1Fix Clippy 0.1.95 warningsb353bbbPrepare release v2.13.563d2cccCount validated model fields once in smart unionsa53ec2eSpeed up PyPy CI testsd65e0f9Workaround circular import error in Mypy47a6dbfFix missing GC traversal inpydantic-coreforGeneralFieldsSerializerUpdates
pymongofrom 4.17.0 to 4.18.2Release notes
Sourced from pymongo's releases.
Changelog
Sourced from pymongo's changelog.
... (truncated)
Commits
640dd23Prep 4.18.2 release (#3066)6a0ec65Update changelog for CVE-2026-88029 reference (#3049)44be553BUMP 4.18.2.dev0127d140PYTHON-6085 Prep for 4.18.1 release (#3047)fa67658PYTHON-5994 Use exact match for file ID in GridFS delete methods (#3046)1011e57Prep branch v4.184dd7303PYTHON-6076 Request workflows permission in create-release-branch (#3039)e66da83PYTHON-5956 Use shared python/setup action for CI setup (#2990)22a2ec8PYTHON-6021 Move _write_concern_for_cmd into BaseObject (#3036)2a4a004PYTHON-5874 Fix test_fork.py failures on Python 3.15 due to fork() Deprecatio...Updates
modalfrom 1.5.2.dev12 to 1.5.6.dev30Commits
Updates
e2bfrom 2.46.4 to 2.51.0Commits
ccaf9fc[skip ci] Release new versions5c0f6ebRemove SDK-side defaults from API request payloads (#1749)7a90fff[skip ci] Release new versions6a608effeat(cli): adde2b sandbox forkcommand (#1879)3e5a48bjs-sdk: run the msw-mocked suites in the browser leg (#1871)d0b2685[skip ci] Release new versions956e3abfix(sdk): apply the upload headers the API returns with a file upload link (#...5b015adchore: remove the V1 template build footprint (#1875)80496c0test(js-sdk): run the full unit test suite in a browser (#1609)e1fbe86chore(deps): scheduled dependency updates for js-sdk / cli / python-sdk (#1874)Updates
uvicornfrom 0.49.0 to 0.54.0Release notes
Sourced from uvicorn's releases.
... (truncated)
Changelog
Sourced from uvicorn's changelog.
... (truncated)
Commits
3eb9a9aVersion 0.54.0 (#3161)cd7ef6dRemove races from supervisor tests (#3134)a56c7ccSupport HTTP/2 response trailers (#3146)9bd4404chore(deps): bump anyio from 4.13.0 to 4.14.2 (#3145)21f39efAdd HTTP/2 Early Hints support (#3137)421708fVersion 0.53.0 (#3136)f1a1bffUnset the keep-alive timer when upgrading to WebSocket (#3107)63971edDocument HTTP/2 support (#3130)7d1a005Remove race from multiprocess health check test (#3128)5ac6265Add ::1 to FORWARDED_ALLOW_IPS (#3119)Updates
google-api-corefrom 2.31.0 to 2.39.0Release notes
Sourced from google-api-core's releases.
Commits
c0208c6chore: release main (#18421)e654dc2chore(main): release google-auth 2.58.1 (#18462)1665e68fix(auth): allow mTLS retry when credentials raise NotImplementedError on ref...89310bechore(main): release google-crc32c 1.9.0 (#18459)9cb21d0fix: regenerate gencode with protobuf 6.33.5 (#18461)54f1019feat: update API sources and regenerate (#18446)a04c831feat(firestore): add BSONDecimal128 support (#18395)1bf979afix(crc32c): remove stale pypy reference from README (#18458)fdaa618chore(crc32c): run manylinux wheel validation and upload in isolated Python 3...5fe1ef3feat: add 3.15 support to gapic library classifiers (#18450)Updates
google-authfrom 2.55.1 to 2.59.0Commits
1d9f468chore(main): release google-auth 2.59.0 (#18465)c7c133achore(bigtable): Added an internal batch completed callback to the data clien...8cb3c6aperf(spanner): optimize query option merging and prevent in-place mutation (#...58031beperf(spanner): short-circuit trace_call when tracing is inactive (#18356)ce72986perf(spanner): optimize query result decoding and type resolution (#18330)7cead02fix(storage): add correct app hub uri prefix to aco traces (#18483)a1e0e00feat(firestore): add PyMongo duck-typing serialization support (#18406)13be295feat(firestore): add BSON cross-type query ordering support (#18405)ce2544ffeat(firestore): add BSON read deserialization support (#18402)11207f8chore(gapic-generator): update dependencies (#18470)Updates
motofrom 5.2.2 to 5.2.3Changelog
Sourced from moto's changelog.
... (truncated)
Commits
3acd662Pre-Release: Up Version Number13036cfPrep release 5.2.3 (#10199)35e6424DynamoDB: Bring parity with AWS in error messages (#10198)5b6aa9dELBv2: Add support for FS policy (#10197)656b2b3[FIS] - Most Methods Implemented (#10192)8e3cbebGlue: Add MLTransform support and tagging for DevEndpoints/Workflows (#10181)62bf212Payment-Cryptography: New Service Methods (#10129)7ffce30EMRServerless: addexecutionRoletoGetJobRunresponse (#10189)55e2fbcRDS: extract ARN parsing into dedicated helper (#10180)bef4271fix(dynamodb): validate Select and honor Scan COUNT (#10175)Updates
psycopg2-binaryfrom 2.9.12 to 2.9.13Changelog
Sourced from psycopg2-binary's changelog.
... (truncated)
Commits
f650e7achore: bump to release 2.9.13368c8a1chore!: drop support for Python 3.99b39e65chore: drop scaleway build support2ca7041fix: fix handling of PostgreSQL 18 exc...Description has been truncated
The PR is not ready to merge: indexed reads can miss records, and the task runner can start the wrong task.
Fix with agent prompt
Summary
This PR refreshes the project’s Python dependency set and widens the allowed version ranges for LiteLLM and E2B. The lockfile updates the 15 grouped packages and their related dependencies to newer versions.
<1.104, and E2B’s to<2.52.0.Diagram
%%{init: {'theme': 'neutral'}}%% flowchart LR A[SQLite read] --> B[New SQL candidate filter] B --> C[Existing document match check] D[Task-runner URL changes] --> E[Mounted runner keeps old task ID] E --> F[Run starts old task]Reviews (2) · Last reviewed commit: "build(deps): bump the python-minor-and-p..."