Skip to content

MESH-2092 Bump the dependencies group across 1 directory with 18 updates#202

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/dependencies-9f4387feae
Closed

MESH-2092 Bump the dependencies group across 1 directory with 18 updates#202
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/dependencies-9f4387feae

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 1, 2025 •
edited
Loading

Bumps the dependencies group with 17 updates in the / directory:

Package From To
types-python-dateutil 2.9.0.20251008 2.9.0.20251115
cryptography 46.0.2 46.0.3
fastapi 0.118.3 0.123.0
uvicorn 0.37.0 0.38.0
pytest 8.4.2 9.0.1
mypy 1.18.2 1.19.0
coverage 7.11.0 7.12.0
types-lxml 2025.8.25 2025.11.25
black 25.9.0 25.11.0
ipython 9.6.0 9.7.0
anyio 4.11.0 4.12.0
certifi 2025.10.5 2025.11.12
click 8.3.0 8.3.1
pydantic 2.12.2 2.12.5
pydantic-core 2.41.4 2.41.5
starlette 0.48.0 0.50.0
werkzeug 3.1.3 3.1.4

Updates types-python-dateutil from 2.9.0.20251008 to 2.9.0.20251115

Commits

Updates cryptography from 46.0.2 to 46.0.3

Changelog

Sourced from cryptography's changelog.

46.0.3 - 2025-10-15


* Fixed compilation when using LibreSSL 4.2.0.

.. _v46-0-2:

Commits

Updates fastapi from 0.118.3 to 0.123.0

Release notes

Sourced from fastapi's releases.

0.123.0

Fixes

  • 🐛 Cache dependencies that don't use scopes and don't have sub-dependencies with scopes. PR #14419 by @​tiangolo.

0.122.1

Fixes

Docs

Internal

0.122.0

Fixes

Internal

0.121.3

Refactors

  • ♻️ Make the result of Depends() and Security() hashable, as a workaround for other tools interacting with these internal parts. PR #14372 by @​tiangolo.

Upgrades

Docs

... (truncated)

Commits
  • f2bab95 🔖 Release version 0.123.0
  • c38e3e0 📝 Update release notes
  • 7fbd304 🐛 Cache dependencies that don't use scopes and don't have sub-dependencies wi...
  • 63d7a2b 🔖 Release version 0.122.1
  • 7681f29 📝 Update release notes
  • 378ad68 🐛 Fix hierarchical security scope propagation (#5624)
  • c6487ed 📝 Update release notes
  • 62a6974 ⬆ Bump markdown-include-variants from 0.0.5 to 0.0.6 (#14418)
  • 9982882 📝 Update release notes
  • 8ab7167 💅 Update CSS to explicitly use emoji font (#14415)
  • Additional commits viewable in compare view

Updates uvicorn from 0.37.0 to 0.38.0

Release notes

Sourced from uvicorn's releases.

Version 0.38.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Changelog

Sourced from uvicorn's changelog.

0.38.0 (October 18, 2025)

Added

  • Support Python 3.14 (#2723)
Commits

Updates pytest from 8.4.2 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

  • #13895: Restore support for skipping tests via raise unittest.SkipTest.
  • #13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
  • #13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
  • #13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

  • #13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.
  • #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

9.0.0

pytest 9.0.0 (2025-11-05)

New features

  • #1367: Support for subtests has been added.

    subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

    Example:

    def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)

... (truncated)

Commits
  • d1b64aa Prepare release version 9.0.1
  • 0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
  • a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
  • 2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
  • a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
  • 4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
  • 15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
  • 0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
  • fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
  • b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
  • Additional commits viewable in compare view

Updates pytest-asyncio from 1.2.0 to 0.23.3

Commits
  • 260b791 [docs] Prepare release of v0.23.3.
  • 6a253e2 [docs] Shorten changelog by combining multiple issues.
  • e2cbb90 [docs] Mention correct issue in changelog.
  • 0c522bf [fix] Fixes a bug that caused an internal pytest error when using ImportWarni...
  • 31c7e6f Build(deps): Bump coverage from 7.3.3 to 7.3.4 in /dependencies/default
  • 38d5c7e Build(deps): Bump sphinx-rtd-theme in /dependencies/docs
  • 650ec58 Build(deps): Bump babel from 2.13.1 to 2.14.0 in /dependencies/docs
  • 0166a7e Build(deps): Bump typing-extensions in /dependencies/default
  • 3a15f30 Build(deps): Bump coverage from 7.3.2 to 7.3.3 in /dependencies/default
  • 28e91f0 Build(deps): Bump hypothesis in /dependencies/default
  • Additional commits viewable in compare view

Updates mypy from 1.18.2 to 1.19.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Drop Support for Python 3.9

Mypy no longer supports running with Python 3.9, which has reached end-of-life. When running mypy with Python 3.10+, it is still possible to type check code that needs to support Python 3.9 with the --python-version 3.9 argument. Support for this will be dropped in the first half of 2026!

Contributed by Marc Mueller (PR 20156).

Mypy 1.19

We’ve just uploaded mypy 1.19.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.9 Support Ending Soon

This is the last mypy feature release that supports Python 3.9, which reached end of life in October 2025.

Performance Improvements

  • Switch to a more dynamic SCC processing logic (Ivan Levkivskyi, PR 20053)
  • Speed up type aliases (Ivan Levkivskyi, PR 19810)

Fixed‑Format Cache Improvements

Mypy uses a cache by default to speed up incremental runs by reusing partial results from earlier runs. Mypy 1.18 added a new binary fixed-format cache representation as an experimental feature. The feature is no longer experimental, and we are planning to enable it by default in a future mypy release (possibly 1.20), since it's faster and uses less space than the original, JSON-based cache format. Use --fixed-format-cache to enable the fixed-format cache.

Mypy now has an extra dependency on the librt PyPI package, as it's needed for cache serialization and deserialization.

Mypy ships with a tool to convert fixed-format cache files to the old JSON format. Example of how to use this:

$ python -m mypy.exportjson .mypy_cache/.../my_module.data.ff

... (truncated)

Commits

Updates coverage from 7.11.0 to 7.12.0

Changelog

Sourced from coverage's changelog.

Version 7.12.0 — 2025-11-18

  • The HTML report now shows separate coverage totals for statements and branches, as well as the usual combined coverage percentage. Thanks to Ryuta Otsuka for the discussion <issue 2081_>_ and the implementation <pull 2085_>_.

  • The JSON report now includes separate coverage totals for statements and branches, thanks to Ryuta Otsuka <pull 2090_>_.

  • Fix: except* clauses were not handled properly under the "sysmon" measurement core, causing KeyError exceptions as described in issue 2086_. This is now fixed.

  • Fix: we now defend against aggressive mocking of open() that could cause errors inside coverage.py. An example of a failure is in issue 2083_.

  • Fix: in unusual cases where a test suite intentionally exhausts the system's file descriptors to test handling errors in open(), coverage.py would fail when trying to open source files, as described in issue 2091_. This is now fixed.

  • A small tweak to the HTML report: file paths now use thin spaces around slashes to make them easier to read.

.. _issue 2081: coveragepy/coveragepy#2081 .. _issue 2083: coveragepy/coveragepy#2083 .. _pull 2085: coveragepy/coveragepy#2085 .. _issue 2086: coveragepy/coveragepy#2086 .. _pull 2090: coveragepy/coveragepy#2090 .. _issue 2091: coveragepy/coveragepy#2091

.. _changes_7-11-3:

Version 7.11.3 — 2025-11-09

  • Fix: the 7.11.1 changes meant that conflicts between a requested measurement core and other settings would raise an error. This was a breaking change from previous behavior, as reported in issue 2076_ and issue 2078_.

    The previous behavior has been restored: when the requested core conflicts with other settings, another core is used instead, and a warning is issued.

  • For contributors: the repo has moved from Ned's nedbat GitHub account_ to the coveragepy GitHub organization_. The default branch has changed from master to main.

... (truncated)

Commits
  • 63db2b1 docs: sample HTML for 7.12.0
  • 598bbc3 docs: prep for 7.12.0
  • 557dd15 feat: add statement and branch coverage percentages to JSON report (#2090)
  • e18359c fix: don't crash if open() genuinely fails. #2091
  • fff5e59 docs: thanks, Ryuta Otsuka #2085
  • 97bf625 docs: support files for the sample html
  • 8320b74 style(html): tweak the styling for the new stmt/branch stats #2085
  • 7e08183 feat(templite): {% else %}
  • 4abe253 feat: add statement and branch coverage columns to index.html report (#2085)
  • ddbafa9 build: no longer need to work around a pytest/iTerm2 bug
  • Additional commits viewable in compare view

Updates types-lxml from 2025.8.25 to 2025.11.25

Release notes

Sourced from types-lxml's releases.

2025.11.25

Breaking and Important changes

  • Declare Python 3.14 support
  • PEP 800 support (@disjoint_base)
    • As a result, remove Python 3.8 support and require newest type checkers / typing_extensions

Features

  • Additional libxml2 error constants from lxml 6.0.1+
  • Use io.Reader and io.Writer from Python 3.14, replacing SupportsRead and SupportsWrite from typeshed.

Bug fix

  • (#100, thanks to @​BeatButton) Replace __init__() with __new__() for all XMLParser subclasses, overriding XMLParser.__new__(). Due to CustomTargetParser change in fdf2a8117562c1b07309239554bb36d021f0b207, XMLParser uses __new__() instead of __init__(). That commit brought in undesirable effect: pyright treats all XMLParser / HTMLParser subclasses instances as base class instances.
  • Add @type_check_only to some protocols and generics

Refactor

  • Drop deprecated collection-related typing aliases
  • Replace some LiteralString with Literal constants when value is fixed
  • Drop unused type ignore comments because we are not supporting wide range of type checker versions now

Minor changes

  • No more globally ignore mypy assignment error code in tests
  • Add HTMLParser.__init__() and XMLParser.__init__() to allowlist, due to #100
Commits
  • ec30745 docs: Update readme for new release
  • 4bd0652 fix: Bump revealtype plugin to fix type expr parsing bug
  • 7f68163 Merge pull request #101 from abelcheung/create-pull-request/formatting
  • 5446e5f style: automated formatting
  • 95572d7 refactor: Reduce usage of LiteralString
  • 015b8aa fix: Add type_check_only to some protocols and generics
  • c76c298 test: Missing new mypy flags in runtime tests
  • e3f0c26 test: No more globally ignore mypy assignment error code
  • 1eef050 test: Drop unused mypy type-ignores in tests
  • 9f00bff ci: Drop known incompatible type checker versions
  • Additional commits viewable in compare view

Updates black from 25.9.0 to 25.11.0

Release notes

Sourced from black's releases.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Improve error message for vim plugin users. It now handles independently vim version
  • Vim: Warn on unsupported Vim and Python versions independently (#4772)
  • Vim: Print the import paths when importing black fails (#4675)
  • Vim: Fix handling of virtualenvs that have a different Python version (#4675)
Changelog

Sourced from black's changelog.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)
  • Releases now include arm64 Windows binaries and wheels (#4814)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)
  • Improve error message for vim plugin users. It now handles independently vim version

... (truncated)

Commits

Updates ipython from 9.6.0 to 9.7.0

Commits
  • 4d6a64a release 9.7.0
  • 6dd0bf2 create publish action on GH (#15061)
  • b805f6d create publish script
  • d4b1083 TST: add systematic backward compatibility checks against oldest supported ve...
  • a7d5d2c DEP: bump minimal requirement on stack-data (0.0.7 -> 0.6.0)
  • 558cf9e DEP: bump minimal requirement on jedi (0.17.0 -> 0.18.1)
  • a703cfb TST: add systematic backward compatibility checks against oldest supported ve...
  • 3c94df8 Add setuptools-scm to pyflyby tests (#15059)
  • 1019171 Add setuptools-scm to pyflyby tests
  • fdbc964 Move TerminalInteractiveshell.inputhook to Deprecated, from Pending. (#15053)
  • Additional commits viewable in compare view

Updates anyio from 4.11.0 to 4.12.0

Release notes

Sourced from anyio's releases.

4.12.0

  • Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)
  • Added an asynchronous implementation of the functools module (#1001)
  • Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @​Vizonex)
  • Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)
  • Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)
  • Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)
  • Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @​northisup)
  • Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)
  • Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @​gschaffner)
  • Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @​gschaffner)
  • Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @​gschaffner)
  • Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @​saper)
  • Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)
Commits
  • bc021b6 Fixed the download-artifact settings to retain the expected behavior
  • c6000aa Corrected the format of the version in the changelog
  • 9d1bfe0 Bumped up the version
  • 77f7ce2 Fixed RuntimeError while shutting down the asyncio process pool (#1039)
  • aecc666 [pre-commit.ci] pre-commit autoupdate (#1036)
  • e5569ad Bump actions/checkout from 5 to 6 in the github-actions group (#1037)
  • dde3ab8 Moved a changelog entry to its correct position
  • 250d4f1 Restore compatibility with pytest<=6.1.2 (#1030)
  • 3708e22 Fixed a typo in the documentation (#1035)
  • 9adbe08 Add new params to Path.glob & Path.rglob introduced since 3.12 (#1034)
  • Additional commits viewable in compare view

Updates certifi from 2025.10.5 to 2025.11.12

Commits

Updates click from 8.3.0 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

  • Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137
Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090
Commits
  • 1d038f2 release version 8.3.1
  • 03f3889 Fix Ruff UP038 warning (#3141)
  • 3867781 Fix Ruff UP038 warning
  • b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
  • 437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
  • ea70da4 Don't test using a file in docs/ (#3102)
  • e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
  • a92c573 Fix test_edit to work with BSD sed (#3129)
  • bd131e1 Fix test_edit to work with BSD sed
  • 0b5c6b7 Add Best practices section (#3127)
  • Additional commits viewable in compare view

Updates pydantic from 2.12.2 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

  • Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
  • Several updates to the documentation by @​Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

  • Fix issue with forward references in parent TypedDict classes by @​Viicos in #12427.

    This issue is only relevant on Python 3.14 and greater.

  • Exclude fields with exclude_if from JSON Schema required fields by @​Viicos in #12430

  • Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @​davidhewitt in pydantic-core#1833.

    This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

  • Add type inference for IP address types by @​davidhewitt in pydantic-core#1868.

    The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

  • Avoid getting default values from defaultdict by @​davidhewitt in pydantic-core#1853.

    This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

  • Fix issue with field serializers on nested typed dictionaries by @​davidhewitt in pydantic-core#1879.

  • <...

    Description has been truncated

@dependabot
MESH-2092 Bump the dependencies group across 1 directory with 18 updates
30bbe58 
Bumps the dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [types-python-dateutil](https://github.com/typeshed-internal/stub_uploader) | `2.9.0.20251008` | `2.9.0.20251115` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.2` | `46.0.3` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.118.3` | `0.123.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.37.0` | `0.38.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.1` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.11.0` | `7.12.0` |
| [types-lxml](https://github.com/abelcheung/types-lxml) | `2025.8.25` | `2025.11.25` |
| [black](https://github.com/psf/black) | `25.9.0` | `25.11.0` |
| [ipython](https://github.com/ipython/ipython) | `9.6.0` | `9.7.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.12.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2025.11.12` |
| [click](https://github.com/pallets/click) | `8.3.0` | `8.3.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.2` | `2.12.5` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.41.4` | `2.41.5` |
| [starlette](https://github.com/Kludex/starlette) | `0.48.0` | `0.50.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.3` | `3.1.4` |



Updates `types-python-dateutil` from 2.9.0.20251008 to 2.9.0.20251115
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `cryptography` from 46.0.2 to 46.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.2...46.0.3)

Updates `fastapi` from 0.118.3 to 0.123.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.118.3...0.123.0)

Updates `uvicorn` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.37.0...0.38.0)

Updates `pytest` from 8.4.2 to 9.0.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.1)

Updates `pytest-asyncio` from 1.2.0 to 0.23.3
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.2.0...v0.23.3)

Updates `mypy` from 1.18.2 to 1.19.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.18.2...v1.19.0)

Updates `coverage` from 7.11.0 to 7.12.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.11.0...7.12.0)

Updates `types-lxml` from 2025.8.25 to 2025.11.25
- [Release notes](https://github.com/abelcheung/types-lxml/releases)
- [Commits](abelcheung/types-lxml@2025.08.25...2025.11.25)

Updates `black` from 25.9.0 to 25.11.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.9.0...25.11.0)

Updates `ipython` from 9.6.0 to 9.7.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.6.0...9.7.0)

Updates `anyio` from 4.11.0 to 4.12.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.11.0...4.12.0)

Updates `certifi` from 2025.10.5 to 2025.11.12
- [Commits](certifi/python-certifi@2025.10.05...2025.11.12)

Updates `click` from 8.3.0 to 8.3.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.0...8.3.1)

Updates `pydantic` from 2.12.2 to 2.12.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.2...v2.12.5)

Updates `pydantic-core` from 2.41.4 to 2.41.5
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.41.4...v2.41.5)

Updates `starlette` from 0.48.0 to 0.50.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.48.0...0.50.0)

Updates `werkzeug` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.3...3.1.4)

---
updated-dependencies:
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20251115
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-version: 46.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fastapi
  dependency-version: 0.123.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: uvicorn
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest
  dependency-version: 9.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pytest-asyncio
  dependency-version: 0.23.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mypy
  dependency-version: 1.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: types-lxml
  dependency-version: 2025.11.25
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: black
  dependency-version: 25.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipython
  dependency-version: 9.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: anyio
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: click
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydantic-core
  dependency-version: 2.41.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: starlette
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: werkzeug
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 1, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jan 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jan 1, 2026
@dependabot dependabot Bot deleted the dependabot/pip/dependencies-9f4387feae branch January 1, 2026 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants