Skip to content

chore(deps): bump the pip group across 1 directory with 5 updates - #62

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pip-5d622325a5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pip-5d622325a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown

Bumps the pip group with 5 updates in the /backend directory:

Package From To
pydantic 2.13.4 2.13.5
sse-starlette 3.4.8 3.4.11
lancedb 0.37.1 0.38.0
pypdf 6.16.2 6.18.0
ruff 0.16.4 0.16.7

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates sse-starlette from 3.4.8 to 3.4.11

Release notes

Sourced from sse-starlette's releases.

v3.4.11

What's Changed

New Contributors

Full Changelog: sysid/sse-starlette@v3.4.10...v3.4.11

v3.4.10

What's Changed

New Contributors

Full Changelog: sysid/sse-starlette@v3.4.9...v3.4.10

v3.4.9

What's Changed

Full Changelog: sysid/sse-starlette@v3.4.8...v3.4.9

Commits
  • 6754ef3 Bump version to 3.4.11
  • 25bcc15 fix(examples): make broadcast stream terminal after cleanup
  • faa2c1c Merge pull request #209 from varadfromeast/fix/broadcasting-backpressure
  • cb2205e fix(examples): close send-timeout leak and harden broadcasting tests
  • b2362d5 fix(examples): handle slow broadcasting clients
  • dd0cdb2 fix: uv.lock
  • 70368f0 Bump version to 3.4.10
  • 824f8c0 Merge pull request #208 from wse114/fix/send-timeout-heartbeat
  • e9dcc04 Bump version to 3.4.9
  • 8d050b7 Merge pull request #207 from sysid/fix/issue206
  • Additional commits viewable in compare view

Updates lancedb from 0.37.1 to 0.38.0

Release notes

Sourced from lancedb's releases.

LanceDB v0.38.0

🛠 Breaking Changes

🎉 New Features

... (truncated)

Commits
  • 8c68e0c Bump version: 0.38.0-beta.16 → 0.38.0
  • 1a9414c Bump version: 0.38.0-beta.15 → 0.38.0-beta.16
  • c4ee8ae feat: update lance dependency to v11.0.0 (#4093)
  • 57b8d3b Bump version: 0.38.0-beta.14 → 0.38.0-beta.15
  • c6dfe83 feat(python): support large_utf8 function signatures (#4092)
  • d5dac65 feat: support Blob v2 UDF signatures (#4091)
  • 1b0fc2c Bump version: 0.38.0-beta.13 → 0.38.0-beta.14
  • a417e46 feat(functions): support GPU resource requirements (#4085)
  • fcdc3f9 fix: allow multiple function bindings per table (#4090)
  • 0c4e066 Bump version: 0.38.0-beta.12 → 0.38.0-beta.13
  • Additional commits viewable in compare view

Updates pypdf from 6.16.2 to 6.18.0

Release notes

Sourced from pypdf's releases.

Version 6.18.0, 2026-09-07

What's new

Please note that this release requires users which previously overwrote the default limits to migrate to the new approach: Docs

In short:

  • Use apply_configuration as a context manager to temporarily overwrite configuration values.
  • Use overwrite_configuration to change the configuration values for the whole session.

The old overwrites should continue to work in most cases. If you have migrated successfully and do not need the legacy handling anymore (which can cause some overhead), consider using the temporary disable_legacy_handling setting:

from pypdf import overwrite_configuration
overwrite_configuration(disable_legacy_handling=True)

In case you are experiencing some unexpected issues after the migration, consider opening a new issue (or commenting on an existing one) with the necessary details to reproduce it.

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033) by @​PJBrs

Full Changelog

Version 6.17.0, 2026-09-04

What's new

Security (SEC)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032) by @​PJBrs

Performance Improvements (PI)

Bug Fixes (BUG)

Robustness (ROB)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.18.0, 2026-09-07

Security (SEC)

  • Limit allowed length of indirect object tokens (#4055)

Deprecations (DEP)

  • Rework configuration value handling (#4044)

New Features (ENH)

  • Draw borders and backgrounds for appearance streams and annotations (#4033)

Full Changelog

Version 6.17.0, 2026-09-04

Security (SEC)

  • Limit value for Roman numerals (#4047)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032)

Performance Improvements (PI)

  • Cache repeated text extraction character lookups (#4036)

Bug Fixes (BUG)

  • Treat an empty /Filter array as no filter when extracting images (#4026)
  • Detect a duplicate dictionary key whose first value is falsy (#4024)
  • Make is_open=False collapse outline items (#3998)

Robustness (ROB)

  • Multiple changes for wrong inputs
  • Skip trailing duplicate %%EOF markers when locating startxref (#4015)
  • Do not crash on a non-array destination (#3976)
  • Handle annotations without subtype during merge (#3999)

Documentation (DOC)

  • Use AnnotationFlag enum instead of plain integers (#3997)

Code Style (STY)

  • Multiple small changes detected from test runs

Full Changelog

Commits
  • 18e4c22 REL: 6.18.0
  • 82501d2 SEC: Limit allowed length of indirect object tokens (#4055)
  • d35834b ENH: Draw borders and backgrounds for appearance streams and annotations (#4033)
  • 4b16bbb STY: Rename variable for readability (#4049)
  • a1ce7fb ROB: Do not crash when a page tree entry is not a dictionary (#4048)
  • 06b97ce DEV: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#4053)
  • d3f790c ROB: Do not crash when the annotations are not an array (#4046)
  • 3dc716e STY: Enforce lowercase function variables (#4045)
  • ec2406f DEP: Rework configuration value handling (#4044)
  • c76eed7 REL: 6.17.0
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 5 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.4.8` | `3.4.11` |
| [lancedb](https://github.com/lancedb/lancedb) | `0.37.1` | `0.38.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.16.2` | `6.18.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.7` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `sse-starlette` from 3.4.8 to 3.4.11
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.4.8...v3.4.11)

Updates `lancedb` from 0.37.1 to 0.38.0
- [Release notes](https://github.com/lancedb/lancedb/releases)
- [Changelog](https://github.com/lancedb/lancedb/blob/main/release_process.md)
- [Commits](lancedb/lancedb@v0.37.1...v0.38.0)

Updates `pypdf` from 6.16.2 to 6.18.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.16.2...6.18.0)

Updates `ruff` from 0.16.4 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.7)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: sse-starlette
  dependency-version: 3.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: lancedb
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pypdf
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 20, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 20, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/backend/pip-5d622325a5 branch September 20, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants