Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 24 updates - #1182

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/python-dependencies-56976760f4
Open

chore(deps): bump the python-dependencies group across 1 directory with 24 updates#1182
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/python-dependencies-56976760f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on litellm, coverage, responses, moto, pyarrow, datasets, langchain, langchain-openai, mangum, pypdf, lxml, langchain-core, cachetools, tiktoken, fastapi, pydantic, cryptography, starlette, mypy, pre-commit, poetry, annotated-types, pydantic-core and typing-extensions to permit the latest version.
Updates litellm from 1.86.2 to 1.99.0

Release notes

Sourced from litellm's releases.

v1.99.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.99.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits
  • fa647f7 Merge pull request #39048 from BerriAI/litellm_/docker-build-failure-9f6247
  • 5892e30 fix(docker): pin apk python to 3.13 in migrations image
  • 91f1a57 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13
  • d0c8667 Merge pull request #38862 from BerriAI/litellm_/litellm-e2e-rc-1-99-0-11cfd8
  • da1d292 test(e2e): measure the select popup after it settles instead of mid-flight
  • a2aecfe fix(e2e): only the negative fallback assertion needs every replica to agree
  • ab1da05 test(e2e): de-flake the cost-header cache read and the router fallback control
  • 1411852 Merge pull request #38855 from BerriAI/litellm_/backport-38251-rc-1-99-0
  • f0ee067 fix(anthropic): translate tool_result document blocks in the /v1/messages bridge
  • 4b281e7 Merge pull request #38854 from BerriAI/litellm_backport_model_test_dialog_str...
  • Additional commits viewable in compare view

Updates coverage to 7.16.0

Release notes

Sourced from coverage's releases.

7.16.0

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.
  • The Coverage.switch_context() method now returns the previous context.
  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.
  • Fixes to validation of options and configuration settings:
    • Negative precision settings now always cause useful error messages (pull 2261).
    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).
    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).
    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).
  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️  PyPI page: coverage 7.16.0. :arrow_right:  To install: python3 -m pip install coverage==7.16.0

Changelog

Sourced from coverage's changelog.

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

  • The :meth:.Coverage.switch_context method now returns the previous context.

  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268_.

  • Fixes to validation of options and configuration settings:

    • Negative precision settings now always cause useful error messages (pull 2261_).

    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...: user-defined function raised exception" error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262_).

    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren't strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263_).

    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can't reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with "Can't combine statement coverage data with branch data". Each named concurrency library is now properly considered (pull 2270_).

  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: coveragepy/coveragepy#2261 .. _pull 2262: coveragepy/coveragepy#2262 .. _pull 2263: coveragepy/coveragepy#2263 .. _pull 2265: coveragepy/coveragepy#2265 .. _issue 2266: coveragepy/coveragepy#2266 .. _pull 2268: coveragepy/coveragepy#2268

... (truncated)

Commits
  • 3e9fc16 docs: prep for 7.16.0
  • 38be8d1 build: control check-manifest explicitly
  • 8eb1266 docs(build): no longer commit sample_html
  • 1a8b3fa docs: remove sample_html
  • aeaa79b docs: linklint is now sphinx-linklint
  • d5eaf3f test: a branchless way to re-add extensions
  • 57e52fd docs: adjust CHANGES for #2270
  • b9d304d fix: check for multiprocessing in a --concurrency list (#2270)
  • a6ef928 chore: make upgrade
  • 070461f chore: bump the action-dependencies group with 4 updates (#2271)
  • Additional commits viewable in compare view

Updates responses to 0.26.3

Release notes

Sourced from responses's releases.

0.26.3

  • Added a keep_headers argument to _recorder.record and Recorder.dump_to_file to preserve named headers (for example Date) that are otherwise stripped as verbose defaults, so a signed response can be recorded and later verified. Matching is case-insensitive. See #763
  • Fixed the element type exposed by CallList so static type checkers infer Call values when iterating, indexing, or filtering recorded calls. See #722
  • Fixed query_string_matcher (and the query matching auto-applied to a registered URL's own query string) discarding blank-valued query params (b=), which caused requests with an extra or missing blank param to match incorrectly. See #804
  • Fixed fragment_identifier_matcher treating opaque fragments (those without =, e.g. /users/5) as always equal, so a required fragment matched a different one or none at all. See #806
Changelog

Sourced from responses's changelog.

0.26.3

  • Added a keep_headers argument to _recorder.record and Recorder.dump_to_file to preserve named headers (for example Date) that are otherwise stripped as verbose defaults, so a signed response can be recorded and later verified. Matching is case-insensitive. See #763
  • Fixed the element type exposed by CallList so static type checkers infer Call values when iterating, indexing, or filtering recorded calls. See #722
  • Fixed query_string_matcher (and the query matching auto-applied to a registered URL's own query string) discarding blank-valued query params (b=), which caused requests with an extra or missing blank param to match incorrectly. See #804
  • Fixed fragment_identifier_matcher treating opaque fragments (those without =, e.g. /users/5) as always equal, so a required fragment matched a different one or none at all. See #806

0.26.2

  • Default headers (such as Content-Type, Date and Server) are now stripped from recorded files regardless of header name case. Previously, responses recorded from servers that send lowercase header names (for example over HTTP/2) kept these redundant headers in the generated file.
  • Fixed query_param_matcher mutating the caller's params dict when numeric values are provided. See #801

0.26.1

  • Added Spanish translation of the README (README.es.rst)
  • When both content_type and headers['content-type'] are in a response mock file, content_type is now used.
  • Added strict_match to urlencoded_params_matcher, enabling partial request parameter matching.

0.26.0

  • When using assert_all_requests_are_fired=True, assertions about unfired requests are now raised even when an exception occurs in the context manager or decorated function. Previously, these assertions were suppressed when exceptions occurred. This new behavior provides valuable debugging context about which mocked requests were or weren't called.
  • Consider the Retry-After header when handling retries

0.25.8

... (truncated)

Commits
  • cb13954 release: 0.26.3
  • f30df24 Merge pull request #809 from golikovichev/fix/763-recorder-keep-headers
  • 5c074b9 Add keep_headers to the recorder to preserve named default headers
  • 2827d43 fix: type CallList as a sequence of calls (#807)
  • 2af69cb fix: compare opaque fragment identifiers verbatim (#806)
  • da2c5d1 fix: keep blank-valued query params significant in query_string_matcher (#804)
  • 983a497 Merge branch 'release/0.26.2'
  • 31d28eb release: 0.26.2
  • 6fb610d Fix CHANGES (#802)
  • aae1d47 Set license format to SPDX identifier in setup.py (#803)
  • Additional commits viewable in compare view

Updates moto from 5.2.2 to 5.2.3

Changelog

Sourced from moto's changelog.

5.2.3

Docker Digest for 5.2.3: sha256:91fd602a21f49cf9eb82fdf474015a3c131d40104c8297ea6a2ca920708ae32c

General:
    * Dropped support for the Panorama service, following the removal by botocore

New Services:
* Clean Rooms:
* create_collaboration()
* create_configured_table()
* create_membership()
* delete_collaboration()
* delete_configured_table()
* delete_membership()
* get_collaboration()
* get_configured_table()
* get_membership()
* list_collaborations()
* list_configured_tables()
* list_members()
* list_memberships()
* list_tags_for_resource()
* tag_resource()
* untag_resource()
* update_collaboration()
* update_configured_table()
* update_membership()


* DevOps Agent:
    * create_agent_space()
    * delete_agent_space()
    * get_agent_space()
    * list_agent_spaces()
    * list_tags_for_resource()
    * tag_resource()
    * update_agent_space()
    * untag_resource()

    

  • Payment Cryptography:

      

    • add_key_replication_regions()
      • 

    • create_alias()
      • 

    • create_key()
      • 

    • delete_alias()
      • 

    • delete_resource_policy()
      • 

    • disable_default_key_replication_regions()
      • 

    • enable_default_key_replication_regions()
      • 

    • get_alias()
      • 

    • get_default_key_replication_regions()
      • 

    • get_key()

... (truncated)

Commits

Updates pyarrow to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Commits

Updates datasets from 5.0.0 to 5.0.1

Release notes

Sourced from datasets's releases.

5.0.1

Bug fixes

Docs

New Contributors

... (truncated)

Commits
  • 921c2a7 release: 5.0.1 (#8370)
  • c6fc5cd Preserve nullable integer columns in to_json/to_csv/to_sql (#8366)
  • 6747b87 Fix DatasetDict.push_to_hub leaving removed splits in the dataset card (#8367)
  • b305031 fix buckets on windows (#8369)
  • 030a3e5 Decode Json() columns in Dataset.to_pandas() (#8344)
  • 0f207a0 Rebatch arrow source before formatting in IterableDataset.filter to fix resum...
  • adad35d Keep integers on the python read path for fixed-shape ArrayXD columns with nu...
  • 8966746 Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 (#8358)
  • b8e861a Fix bucket dataset card handling and push metadata accounting (#8354)
  • 521a590 Keep flat numeric columns with nulls numeric in numpy format (#8352)
  • Additional commits viewable in compare view

Updates langchain from 1.3.10 to 1.4.0

Release notes

Sourced from langchain's releases.

langchain-perplexity==1.4.0

Changes since langchain-perplexity==1.3.2

release(perplexity): 1.4.0 (#37993) feat(perplexity): bind_tools and Responses-API tool round-trip (#37934) hotfix(openai): min core dep (#37990)

langchain-openai==1.4.0

Changes since langchain-openai==1.3.5

release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797)

langchain==1.4.0

Changes since langchain==1.3.18

docs(langchain): runnable langchain.mcp examples (#39976) feat(langchain): langchain.mcp namespace, MCPAdapter (#39939) perf(anthropic,langchain): omit middleware trace inputs (#40098) fix(langchain): include model destination in agent tool routing (#38355) chore(langchain): bump vcrpy test dependency minimum to >=8.2.0 (#39942)

langchain==1.4.0a4

Initial release

release(langchain): 1.4.0a4 test(langchain): cover mixed-era ClientGroup and group elicitation Update libs/langchain_v1/langchain/mcp/adapter.py fix(langchain): drive MCP elicitation via member session for fastmcp 4.0.1 fix(sdk): use latest fastmcp and rm reentrant impl cr cr refactor(langchain): inline MCP client arming into __init__ refactor(langchain): stamp an arm marker instead of introspecting the handler closure fix(langchain): gate MCP interrupt routing on the negotiated protocol era refactor(langchain): drop MCP elicitation flag, derive interrupt routing from the client fix(sdk): add _ReentrantClientGroup fix(langchain): narrow MCPAdapter.client union in mcp tests for mypy chore(langchain): format mcp/adapter.py release(langchain): 1.4.0a3 feat(langchain): group MCP tool metadata under an mcp namespace refactor(langchain): stop exporting MCPAdapterTarget from langchain.mcp refactor(langchain): rename convert_mcp_tool_to_langchain_tool to as_langchain_tool refactor(langchain): rename MCPAdapter.get_tools to list_tools feat(langchain): expose cache_mode on MCPAdapter.get_tools chore(langchain): require fastmcp 4.0.0 feat(langchain): accept a ClientGroup as an MCPAdapter target feat(langchain): mark the langchain.mcp namespace as beta

... (truncated)

Commits
  • 79cab2d release(anthropic): 1.7.1 (#40181)
  • 1e6a4f0 chore(model-profiles): refresh model profile data (#40171)
  • 8330dfe docs(langchain): runnable langchain.mcp examples (#39976)
  • 280442b feat(langchain): langchain.mcp namespace, MCPAdapter (#39939)
  • f5ee2b6 chore(chroma): bump Pygments security constraint (#40162)
  • 234255c chore(model-profiles): refresh model profile data (#40009)
  • 79e0e4a chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/langchain (#40149)
  • e90201b chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/core (#40150)
  • 4240248 chore(deps): bump mistune from 3.3.0 to 3.3.3 in /libs/text-splitters (#40148)
  • 530290a chore(deps): bump uv to 0.12.8 (#40092)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.3.2 to 1.6.0

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617) release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326) release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050) release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009) release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797) release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762)

... (truncated)

Commits
  • 3478c28 release(anthropic): 1.6.0 (#39763)
  • 420dfc9 release(openai): 1.6.0 (#39762)
  • 85602c3 release(core): 1.6.0 (#39760)
  • 5c3538e fix(core): resolve postponed annotations in `StructuredTool._injected_args_ke...
  • 9984a87 feat(core): add standard model exception types (#39538)
  • b3e9eef chore(model-profiles): refresh model profile data (#39751)
  • ded2a1f fix(core): allow deserializing RunnablePick (#39753)
  • 04ae744 fix(core): make convert_to_openai_function handle callables and non-dict ma...
  • 37f2662 feat(langchain): support custom token_counter in ContextEditingMiddleware (#3...
  • 2019bf5 fix(openai): raise clear error on unexpected response type in `_create_chat_r...
  • Additional commits viewable in compare view

Updates mangum from 0.21.0 to 0.22.0

Release notes

Sourced from mangum's releases.

0.22.0 - Python 3.15, tested against the real thing

Python 3.15, tested against the real thing

Mangum 0.22.0 moves the supported Python window forward and backs every release with end-to-end tests against a real Lambda runtime.

pip install mangum==0.22.0
  • Python 3.15 is supported. The full suite and strict type checking pass on 3.15 (#404).
  • Python 3.9 is no longer supported. The minimum is now Python 3.10 (#393).
  • Adapters are now verified against a real Lambda runtime. The test suite deploys Mangum to LocalStack and drives it through a Lambda Function URL and an API Gateway REST API with real HTTP requests - covering the HTTP v2 and REST v1 event formats plus lifespan startup, instead of relying only on hand-written mock events (#400, #401).

Full changelog: 0.21.0...0.22.0

Changelog

Sourced from mangum's changelog.

0.22.0

Commits
  • 042ac44 Version 0.22.0 (#405)
  • 4240aac Add Python 3.15 support (#404)
  • 87c062e Bump starlette to 1.3.1 and require starlette>=1.0 (#402)
  • 160e5a7 Bump h2 from 4.3.0 to 4.4.1 (#396)
  • 9d12429 Bump pytest from 9.0.2 to 9.0.3 (#395)
  • 6c398a1 Add API Gateway REST v1 and lifespan end-to-end coverage (#401)
  • fde0b82 Add LocalStack integration tests via testcontainers (#400)
  • cfa53c0 Enforce strict type hints on the test suite (#399)
  • 8b772f6 Use pyproject.toml for coverage config and close test coverage gaps (

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
e4111c7 
…th 24 updates

Updates the requirements on [litellm](https://github.com/BerriAI/litellm), [coverage](https://github.com/coveragepy/coveragepy), [responses](https://github.com/getsentry/responses), [moto](https://github.com/getmoto/moto), [pyarrow](https://github.com/apache/arrow), [datasets](https://github.com/huggingface/datasets), [langchain](https://github.com/langchain-ai/langchain), [langchain-openai](https://github.com/langchain-ai/langchain), [mangum](https://github.com/Kludex/mangum), [pypdf](https://github.com/py-pdf/pypdf), [lxml](https://github.com/lxml/lxml), [langchain-core](https://github.com/langchain-ai/langchain), [cachetools](https://github.com/tkem/cachetools), [tiktoken](https://github.com/openai/tiktoken), [fastapi](https://github.com/fastapi/fastapi), [pydantic](https://github.com/pydantic/pydantic), [cryptography](https://github.com/pyca/cryptography), [starlette](https://github.com/Kludex/starlette), [mypy](https://github.com/python/mypy), [pre-commit](https://github.com/pre-commit/pre-commit), [poetry](https://github.com/python-poetry/poetry), [annotated-types](https://github.com/annotated-types/annotated-types), [pydantic-core](https://github.com/pydantic/pydantic) and [typing-extensions](https://github.com/python/typing_extensions) to permit the latest version.

Updates `litellm` from 1.86.2 to 1.99.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.86.2...v1.99.0)

Updates `coverage` to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.14.2...7.16.0)

Updates `responses` to 0.26.3
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](getsentry/responses@0.26.1...0.26.3)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `pyarrow` to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.1)

Updates `datasets` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/huggingface/datasets/releases)
- [Commits](huggingface/datasets@5.0.0...5.0.1)

Updates `langchain` from 1.3.10 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.3.10...langchain==1.4.0)

Updates `langchain-openai` from 1.3.2 to 1.6.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.3.2...langchain-openai==1.6.0)

Updates `mangum` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/Kludex/mangum/releases)
- [Changelog](https://github.com/Kludex/mangum/blob/main/CHANGELOG.md)
- [Commits](Kludex/mangum@0.21.0...0.22.0)

Updates `pypdf` from 6.14.0 to 6.17.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.14.0...6.17.0)

Updates `lxml` from 6.1.1 to 6.1.3
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.3)

Updates `langchain-core` from 1.4.8 to 1.6.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.8...langchain-core==1.6.2)

Updates `cachetools` from 7.1.4 to 7.1.8
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.4...v7.1.8)

Updates `tiktoken` from 0.12.0 to 0.14.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.12.0...0.14.0)

Updates `fastapi` from 0.124.4 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.124.4...0.141.1)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `cryptography` from 46.0.7 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.7...50.0.1)

Updates `starlette` to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.40.0...1.6.0)

Updates `mypy` from 2.1.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.1)

Updates `pre-commit` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.2)

Updates `poetry` from 2.4.1 to 2.4.3
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.4.1...2.4.3)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](annotated-types/annotated-types@v0.7.0...v0.8.0)

Updates `pydantic-core` from 2.46.4 to 2.48.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.4...core-v2.48.0)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.15.0...4.16.0)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.99.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: responses
  dependency-version: 0.26.3
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyarrow
  dependency-version: 25.0.1
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: datasets
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langchain-openai
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mangum
  dependency-version: 0.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pypdf
  dependency-version: 6.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lxml
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 1.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: cachetools
  dependency-version: 7.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: tiktoken
  dependency-version: 0.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:development
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: poetry
  dependency-version: 2.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: annotated-types
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic-core
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants