Skip to content

chore(deps): bump the all group across 1 directory with 9 updates - #284

Merged
vincentsarago merged 2 commits into
mainfrom
dependabot/uv/all-1432e44a57
Oct 19, 2026
Merged

chore(deps): bump the all group across 1 directory with 9 updates#284
vincentsarago merged 2 commits into
mainfrom
dependabot/uv/all-1432e44a57

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 9 updates in the / directory:

Package From To
asyncpg 0.31.0 0.32.0
fastapi 0.141.1 0.142.2
starlette 1.6.0 1.7.0
morecantile 7.0.3 7.1.0
geojson-pydantic 2.1.2 2.2.0
httpx2 2.13.0 2.13.1
pytest-postgresql 9.1.0 9.1.1
black 26.5.1 26.10.0
griffe-inherited-docstrings 1.1.3 1.1.4

Updates asyncpg from 0.31.0 to 0.32.0

Release notes

Sourced from asyncpg's releases.

v0.32.0

Improvements

  • Support Python 3.15 (#1367, #1378) (by @​elprans in 1b118464 and 58c0c595)

  • Support PostgreSQL 19 (#1379) (by @​elprans in 8d2a5aed)

  • Make pool min_size a maintained connection floor and add init_size to control the number of connections opened at startup (#1323). Idle connections at or below min_size are retained, and closed connections are replaced in the background. init_size defaults to min_size. To preserve the previous behavior, where the pool could drain to zero, replace min_size=N with init_size=N, min_size=0. (by @​shatilov-diman in 67a1cbc5)

  • Use hashlib.pbkdf2_hmac() for faster SCRAM password derivation (#1359) (by @​twelfthlabor in 00319a9b)

  • Use the statement cache for copy_records_to_table() introspection (#1360) (by @​matemax in dd058652)

Fixes

  • Clean up connections rejected by target_session_attrs immediately so an unresponsive rejected host cannot delay the selected connection, and cleanup tasks cannot outlive the event loop. Rejected connections are aborted without waiting for a graceful disconnect; servers may log "unexpected EOF on client connection" if the Terminate message is not delivered before the transport closes.

  • Fix a connection pool deadlock when releasing a connection after a protocol abort (#1324) (by @​pchaseh in 4a83cc2f)

  • Honor Connection.close(timeout=...) while waiting for a pending cancellation (#1361) (by @​gyanu2507 in c06bcb4d)

  • Prevent stuck cancellation from blocking connection teardown or pool release by bounding cancellation with the command or release timeout (#1370) (by @​elprans in 4cf02203)

  • Preserve the server error when the connection closes mid-operation (#1369) (by @​RitiGrover in 6c8f1a7a)

  • Fix COPY cleanup when a records generator raises, preserving the original exception and avoiding protocol desynchronization and stalled rollback (#1358) (by @​CodingCossack in fdc6bc8f)

... (truncated)

Commits
  • d701e11 asyncpg v0.32.0
  • b04f8f2 Bump to macOS 26 in runners, set deployment target to 11 (#1384)
  • 3934d77 tests: Capture expected pool retry warnings during role changes (#1383)
  • 2c37501 tests: Avoid DeprecationWarning when settings up uvloop (#1382)
  • b7eea79 Test pool min_size backoff on target attribute mismatch (#1381)
  • 46dda91 Terminate rejected target_session_attrs candidates before returning (#1380)
  • 8d2a5ae Support PostgreSQL 19 (#1379)
  • 58c0c59 Bump uvloop (#1378)
  • 67a1cbc Make pool min_size a maintained connection floor (#1323)
  • 25aaaf5 fix: allow cursors in external transactions (#1350)
  • Additional commits viewable in compare view

Updates fastapi from 0.141.1 to 0.142.2

Release notes

Sourced from fastapi's releases.

0.142.2

Fixes

  • 🐛 Allow startup when automatic OpenTelemetry configuration fails. PR #16418 by @​tiangolo.

0.142.1

Fixes

0.142.0

Features

Refactors

Docs

Translations

Internal

... (truncated)

Commits

Updates starlette from 1.6.0 to 1.7.0

Release notes

Sourced from starlette's releases.

Version 1.7.0

This release adds experimental OpenTelemetry tracing, HTTP QUERY support, and response trailers in TestClient. Starlette now requires AnyIO 4.

[!WARNING] OpenTelemetryMiddleware is experimental. Its API and emitted telemetry may change in minor releases without a deprecation period.

Added

  • Add experimental OpenTelemetryMiddleware for HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.
  • Expose the matched route through scope["route"] #3438.
  • Support the QUERY HTTP method in HTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.
  • Capture HTTP response trailers in TestClient and expose them through response.extensions["http.response.trailers"] #3563.
  • Support partitioned cookies in SessionMiddleware #3510.
  • Add partitioned to Response.delete_cookie() on Python 3.14 and later #3376.
  • Support IPv6 hosts in TrustedHostMiddleware and TestClient #3471.
  • Support Python 3.15 #3508.

Changed

  • Require anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.
  • Raise WebSocketDisconnected, a RuntimeError subclass, for disconnected WebSocket operations #2767.
  • Accept Collection[str] in CORSMiddleware configuration annotations, including sets and frozensets #3518.

Fixed

  • Run background tasks only after the response is sent when using BaseHTTPMiddleware #3476.
  • Return 400 for invalid multipart parser input #3492.
  • Include Vary: Origin on all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.
  • Handle malformed Host headers and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.
  • Ignore Range headers when FileResponse has a status other than 200, preserving its status and full body #3568.
  • Handle standalone If-None-Match: * in StaticFiles #3201.
  • Reject WebSocket requests to StaticFiles without raising an assertion error #3532.
  • Persist session mutations made with popitem() and |= #3436.
  • Handle empty and absent payloads in WebSocketEndpoint.decode() #3372.
  • Implement identity on SimpleUser and UnauthenticatedUser #3271.
  • Allow HTTPException to use non-standard status codes without an explicit detail #3545.
  • Avoid deprecated AnyIO imports in TestClient and add explicit imports in WSGIMiddleware for AnyIO 4.15 compatibility #3498 and #3501.
  • Offload debug traceback rendering to a worker thread in ServerErrorMiddleware #2858.

Full changelog: 1.6.0...1.7.0

Changelog

Sourced from starlette's changelog.

1.7.0 (September 23, 2026)

This release adds experimental OpenTelemetry tracing and requires AnyIO 4.

!!! warning "OpenTelemetryMiddleware is experimental" Its API and emitted telemetry may change in minor releases without a deprecation period #3574.

Added

  • Add experimental OpenTelemetryMiddleware for HTTP server spans, with URL exclusions and custom tracer providers #3438, #3463, and #3520.
  • Expose the matched route through scope["route"] #3438.
  • Support the QUERY HTTP method in HTTPEndpoint, CORS, and OpenAPI 3.2 schema generation #3489.
  • Capture HTTP response trailers in TestClient and expose them through response.extensions["http.response.trailers"] #3563.
  • Support partitioned cookies in SessionMiddleware #3510.
  • Add partitioned to Response.delete_cookie() on Python 3.14 and later #3376.
  • Support IPv6 hosts in TrustedHostMiddleware and TestClient #3471.
  • Support Python 3.15 #3508.

Changed

  • Require anyio>=4.0.0,<5, dropping support for AnyIO 3 #3512.
  • Raise WebSocketDisconnected, a RuntimeError subclass, for disconnected WebSocket operations #2767.
  • Accept Collection[str] in CORSMiddleware configuration annotations, including sets and frozensets #3518.

Fixed

  • Run background tasks only after the response is sent when using BaseHTTPMiddleware #3476.
  • Return 400 for invalid multipart parser input #3492.
  • Include Vary: Origin on all normal CORS responses and vary preflight responses by all request headers that affect them #3516 and #3517.
  • Handle malformed Host headers and IPv6 authorities consistently across URL construction, host routing, and redirect middleware #3472.
  • Ignore Range headers when FileResponse has a status other than 200, preserving its status and full body #3568.
  • Handle standalone If-None-Match: * in StaticFiles #3201.
  • Reject WebSocket requests to StaticFiles without raising an assertion error #3532.
  • Persist session mutations made with popitem() and |= #3436.
  • Handle empty and absent payloads in WebSocketEndpoint.decode() #3372.
  • Implement identity on SimpleUser and UnauthenticatedUser #3271.
  • Allow HTTPException to use non-standard status codes without an explicit detail #3545.
  • Avoid deprecated AnyIO imports in TestClient and add explicit imports in WSGIMiddleware for AnyIO 4.15 compatibility #3498 and #3501.
  • Offload debug traceback rendering to a worker thread in ServerErrorMiddleware #2858.
Commits
  • 2269e9a Version 1.7.0 (#3575)
  • 4fe55eb Preserve FileResponse status for range requests (#3568)
  • 1f08daf Mark OpenTelemetryMiddleware as experimental (#3574)
  • 57de5fa Support HTTP response trailers in TestClient (#3563)
  • 03f12b7 Allow HTTPException to use non-standard status codes (#3545)
  • 76fd00f Reject WebSocket requests to StaticFiles (#3532)
  • f03f65c docs: fix 'its not available' and 'This ensure' wording (#3526)
  • 485aca4 docs: the test client is built on httpx2, not httpx (#3525)
  • fd662b1 Implement identity on SimpleUser and UnauthenticatedUser (#3271)
  • 41db6a7 Stabilize CodSpeed upload buffer allocations (#3524)
  • Additional commits viewable in compare view

Updates morecantile from 7.0.3 to 7.1.0

Release notes

Sourced from morecantile's releases.

7.1.0

What's Changed

Full Changelog: developmentseed/morecantile@7.0.3...7.1.0

Changelog

Sourced from morecantile's changelog.

7.1.0 (2026-09-16)

  • add matrix_to_geojson method to TileMatrixSet class
Commits
  • 0e76c09 Bump version: 7.0.3 → 7.1.0
  • 6c7c582 Merge pull request #249 from developmentseed/feat/add-matrix-to-geojson
  • a198bed chore: update pre-commit config
  • 05761e6 feat: add matrix-to-geojson method
  • c78dd10 Merge pull request #248 from developmentseed/dependabot/github_actions/all-25...
  • 90a006b Bump astral-sh/setup-uv in the all group across 1 directory
  • 8f65c56 ci: refactor actions
  • cee4d38 chore: update pre-commit and lockfile
  • 4a27e68 Merge pull request #242 from developmentseed/dependabot/github_actions/all-bf...
  • 672ae89 Merge pull request #247 from avalentino/bugfix/no-strict-equality
  • Additional commits viewable in compare view

Updates geojson-pydantic from 2.1.2 to 2.2.0

Release notes

Sourced from geojson-pydantic's releases.

2.2.0

What's Changed

New Contributors

Full Changelog: developmentseed/geojson-pydantic@2.1.2...2.2.0

Changelog

Sourced from geojson-pydantic's changelog.

[2.2.0] - 2026-09-21

Commits
  • 4a6ea0b Bump version: 2.1.2 → 2.2.0
  • 0112880 chore: fix changelog
  • a127ab4 chore: update changelog
  • 50e217e chore: update lockfile and pre-commit config
  • 401ceaf Merge pull request #203 from developmentseed/dependabot/github_actions/all-7a...
  • edc5c44 Merge pull request #205 from bensynapse/fix-feature-numeric-ids
  • 7b4d1ce Fix validation of numeric feature identifiers
  • 5a8be88 Bump the all group across 1 directory with 2 updates
  • 56796cd ci: bumb gh-action-pypi-publish to allow metadata 2.5
  • d211149 chore: fix changelog
  • See full diff in compare view

Updates httpx2 from 2.13.0 to 2.13.1

Release notes

Sourced from httpx2's releases.

v2.13.1

Highlights

📤 Accurate file upload lengths

Passing a file as content= now calculates Content-Length from its remaining bytes, respecting the current file position (#1214).

🔐 Reliable proxy TLS and HTTP/2 negotiation

TLS hostname overrides now apply inside HTTP proxy tunnels without affecting the proxy's own TLS connection (#1223). HTTP/2 is advertised first when enabled, and HTTP/1.1 is omitted when disabled (#1155).

🧹 Clean WebSocket shutdown

The sync WebSocket keepalive thread now exits cleanly when a ping races with connection shutdown (#1228).

httpx2

Fixed

  • Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position (#1214).
  • Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown (#1228).

httpcore2

Fixed

  • Honor the sni_hostname extension for TLS inside HTTP proxy tunnels without applying it to the proxy's TLS connection (#1223).
  • Prefer HTTP/2 during TLS protocol negotiation when enabled, and stop advertising HTTP/1.1 when it is disabled (#1155).

Full Changelog: pydantic/httpx2@v2.13.0...v2.13.1

Changelog

Sourced from httpx2's changelog.

2.13.1 (September 23rd, 2026)

Fixed

  • Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position. (#1214)
  • Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown. (#1228)
Commits

Updates pytest-postgresql from 9.1.0 to 9.1.1

Changelog

Sourced from pytest-postgresql's changelog.

pytest-postgresql 9.1.1 (2026-10-04)

Miscellaneous

  • Update actions with zizmor 1.30.0 and migrate to maintained actionlint fork ([#1443](https://github.com/dbfixtures/pytest-postgresql/issues/1443) <https://github.com/dbfixtures/pytest-postgresql/issues/1443>__)
  • Adjust shared-automerge permissions ([#1457](https://github.com/dbfixtures/pytest-postgresql/issues/1457) <https://github.com/dbfixtures/pytest-postgresql/issues/1457>__)
  • Bump psycopg-binary alongside psycopg and group both packages in Dependabot updates ([#1460](https://github.com/dbfixtures/pytest-postgresql/issues/1460) <https://github.com/dbfixtures/pytest-postgresql/issues/1460>__)
Commits
  • 453350b Release 9.1.1
  • f0d11cb Merge pull request #1462 from dbfixtures/pre-commit-ci-update-config
  • 44f989e [pre-commit.ci] pre-commit autoupdate
  • 26d4fcb Merge pull request #1460 from dbfixtures/dependabot/uv/psycopg-3.3.6
  • 963b007 Bump psycopg-binary and dependabot group
  • 904693f Merge pull request #1461 from dbfixtures/dependabot/github_actions/fizyk-acti...
  • 8fd6836 Bump the fizyk-actions-reuse group across 1 directory with 10 updates
  • 364ae42 Bump psycopg from 3.3.5 to 3.3.6
  • 8c6fbec Merge pull request #1459 from dbfixtures/dependabot/github_actions/codecov/co...
  • 259c1c2 Bump codecov/codecov-action from 7.1.0 to 7.1.1
  • Additional commits viewable in compare view

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)
  • Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

  • --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
  • Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
  • Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
  • Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
  • Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
  • Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
  • Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
  • Preserve blank lines that come immediately before a # fmt: on comment (#5300)
  • Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
  • Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
  • Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
  • Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
  • Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
  • Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
  • Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
  • Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
  • Fix inline comments on a bracket inside a comprehension being dropped (#5330)
  • Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
  • Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
  • Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
  • Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
  • Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits
  • 4f1883b Prepare release 26.10.0 (#5478)
  • 93e5c82 Do not split a docstring on non-newline characters (#5461)
  • 2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
  • d078e8e Refactor release process to be more automated and use immutable releases (#5296)
  • 6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
  • cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
  • 9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
  • e1c4783 Fix --force-exclude for paths containing .. (#5471)
  • 34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
  • 5fe7881 Fix preview blank lines after a stub method (#5439)
  • Additional commits viewable in compare view

Updates griffe-inherited-docstrings from 1.1.3 to 1.1.4

Release notes

Sourced from griffe-inherited-docstrings's releases.

1.1.4

1.1.4 - 2026-10-06

Compare with 1.1.3

Build

  • Drop support for Python 3.10 (c8da8dc by Timothée Mazzucotelli).
Changelog

Sourced from griffe-inherited-docstrings's changelog.

1.1.4 - 2026-10-06

Compare with 1.1.3

Build

  • Drop support for Python 3.10 (c8da8dc by Timothée Mazzucotelli).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all group across 1 directory with 9 updates
80032b2 
Bumps the all group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [asyncpg](https://github.com/MagicStack/asyncpg) | `0.31.0` | `0.32.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.141.1` | `0.142.2` |
| [starlette](https://github.com/Kludex/starlette) | `1.6.0` | `1.7.0` |
| [morecantile](https://github.com/developmentseed/morecantile) | `7.0.3` | `7.1.0` |
| [geojson-pydantic](https://github.com/developmentseed/geojson-pydantic) | `2.1.2` | `2.2.0` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.13.0` | `2.13.1` |
| [pytest-postgresql](https://github.com/dbfixtures/pytest-postgresql) | `9.1.0` | `9.1.1` |
| [black](https://github.com/psf/black) | `26.5.1` | `26.10.0` |
| [griffe-inherited-docstrings](https://github.com/mkdocstrings/griffe-inherited-docstrings) | `1.1.3` | `1.1.4` |



Updates `asyncpg` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.31.0...v0.32.0)

Updates `fastapi` from 0.141.1 to 0.142.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.141.1...0.142.2)

Updates `starlette` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.6.0...1.7.0)

Updates `morecantile` from 7.0.3 to 7.1.0
- [Release notes](https://github.com/developmentseed/morecantile/releases)
- [Changelog](https://github.com/developmentseed/morecantile/blob/main/CHANGES.md)
- [Commits](developmentseed/morecantile@7.0.3...7.1.0)

Updates `geojson-pydantic` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/developmentseed/geojson-pydantic/releases)
- [Changelog](https://github.com/developmentseed/geojson-pydantic/blob/main/CHANGELOG.md)
- [Commits](developmentseed/geojson-pydantic@2.1.2...2.2.0)

Updates `httpx2` from 2.13.0 to 2.13.1
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.13.0...v2.13.1)

Updates `pytest-postgresql` from 9.1.0 to 9.1.1
- [Changelog](https://github.com/dbfixtures/pytest-postgresql/blob/main/CHANGES.rst)
- [Commits](dbfixtures/pytest-postgresql@v9.1.0...v9.1.1)

Updates `black` from 26.5.1 to 26.10.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.5.1...26.10.0)

Updates `griffe-inherited-docstrings` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/mkdocstrings/griffe-inherited-docstrings/releases)
- [Changelog](https://github.com/mkdocstrings/griffe-inherited-docstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/griffe-inherited-docstrings@1.1.3...1.1.4)

---
updated-dependencies:
- dependency-name: asyncpg
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: fastapi
  dependency-version: 0.142.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: starlette
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: morecantile
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: geojson-pydantic
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: httpx2
  dependency-version: 2.13.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: pytest-postgresql
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: black
  dependency-version: 26.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: griffe-inherited-docstrings
  dependency-version: 1.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 14, 2026
@vincentsarago
vincentsarago merged commit dcce22f into main Oct 19, 2026
5 checks passed
@vincentsarago
vincentsarago deleted the dependabot/uv/all-1432e44a57 branch October 19, 2026 15:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vincentsarago