Skip to content

build(deps): bump the python-dependencies group with 5 updates - #296

Merged
richardmhope merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-d10bf0181c
Aug 1, 2026
Merged

build(deps): bump the python-dependencies group with 5 updates#296
richardmhope merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-d10bf0181c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on fastapi, uvicorn[standard], anthropic, anthropic[bedrock] and openai to permit the latest version.
Updates fastapi from 0.140.0 to 0.140.13

Release notes

Sourced from fastapi's releases.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

Internal

0.140.8

Fixes

0.140.6

Refactors

... (truncated)

Commits
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • e92a0dc 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints (#15937)
  • 6215d8a 📝 Update release notes
  • 12242c4 📝 Fix format_sse_event docstring rendering of \n\n terminator (#15613)
  • 70a8f3d 📝 Update release notes
  • 4f0152c 📝 Add API reference page for fastapi.sse (#15930)
  • 5f25505 🔖 Release version 0.140.12 (#16095)
  • 76e2c83 📝 Update release notes
  • 0f3e7bd 🐛 Fix line splitting in format_sse_event to comply with SSE spec (#15515)
  • Additional commits viewable in compare view

Updates uvicorn[standard] to 0.52.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

  • Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

0.50.0 (July 4, 2026)

If you use WebSockets, note that --ws auto now picks the websockets-sansio implementation. You shouldn't need it, but you can pin --ws websockets to get the deprecated legacy one back.

Changed

  • Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (#3001)
  • Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (#3001)
  • Default --ws auto to websockets-sansio when websockets is installed (#2985)
  • Skip the eager app import in the parent process with --reload or --workers, fixing a memory regression introduced in 0.47.0 (#3012)
  • Build a fresh asgi scope dict per request (#2977)
  • Cache the asgi scope sub-dict per connection (#2976)
  • Avoid copying single-frame WebSocket payloads in websockets-sansio (#2983)
  • Memoize trusted host checks in ProxyHeadersMiddleware (#2970)

... (truncated)

Commits

Updates anthropic from 0.120.0 to 0.120.2

Release notes

Sourced from anthropic's releases.

v0.120.2

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

  • mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

v0.120.1

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

Changelog

Sourced from anthropic's changelog.

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

  • mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

Commits

Updates anthropic[bedrock] to 0.120.2

Release notes

Sourced from anthropic[bedrock]'s releases.

v0.120.2

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

  • mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)
Changelog

Sourced from anthropic[bedrock]'s changelog.

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

  • mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

  • api: add claude-opus-5 model (bf4e31c)
  • api: add tool addition/removal blocks and tool_change events (bf4e31c)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (d983cde)

Bug Fixes

  • tools: handle binary files in agent toolset read/edit (#283) (417b76b)

0.118.0 (2026-07-22)

Full Changelog: v0.117.1...v0.118.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (712bc6f)

0.117.1 (2026-07-21)

Full Changelog: v0.117.0...v0.117.1

... (truncated)

Commits

Updates openai from 2.48.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)
Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [uvicorn[standard]](https://github.com/Kludex/uvicorn), [anthropic](https://github.com/anthropics/anthropic-sdk-python), [anthropic[bedrock]](https://github.com/anthropics/anthropic-sdk-python) and [openai](https://github.com/openai/openai-python) to permit the latest version.

Updates `fastapi` from 0.140.0 to 0.140.13
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.140.0...0.140.13)

Updates `uvicorn[standard]` to 0.52.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.0)

Updates `anthropic` from 0.120.0 to 0.120.2
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.120.0...v0.120.2)

Updates `anthropic[bedrock]` to 0.120.2
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.120.0...v0.120.2)

Updates `openai` from 2.48.0 to 2.50.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.48.0...v2.50.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: uvicorn[standard]
  dependency-version: 0.52.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 0.120.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: anthropic[bedrock]
  dependency-version: 0.120.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: openai
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 29, 2026
@richardmhope
richardmhope merged commit f64280e into main Aug 1, 2026
7 checks passed
@richardmhope
richardmhope deleted the dependabot/uv/python-dependencies-d10bf0181c branch August 1, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant