Skip to content

Bump the pip group across 5 directories with 6 updates - #1

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/mindsdb/integrations/handlers/dspy_handler/pip-ab7fb46ace
Closed

Bump the pip group across 5 directories with 6 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/mindsdb/integrations/handlers/dspy_handler/pip-ab7fb46ace

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown

Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/dspy_handler directory: dspy.
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/lindorm_handler directory: protobuf.
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/llama_index_handler directory: llama-index.
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/ludwig_handler directory: ray.
Bumps the pip group with 2 updates in the /requirements directory: filelock and langchain-community.

Updates dspy from 0.1.4 to 3.1.0b1

Release notes

Sourced from dspy's releases.

3.1.0b1

What's Changed

This is a pre-release for 3.1.0.

Optimizers & Evaluation

Features & Enhancements

Security & Serialization

Bug Fixes & Type Handling

Documentation & Tutorials

... (truncated)

Commits

Updates protobuf from 4.25.8 to 5.29.6

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

... (truncated)

Commits

Updates llama-index from 0.12.28 to 0.13.0

Release notes

Sourced from llama-index's releases.

v0.13.0

Release Notes

NOTE: All packages have been bumped to handle the latest llama-index-core version.

llama-index-core [0.13.0]

  • breaking: removed deprecated agent classes, including FunctionCallingAgent, the older ReActAgent implementation, AgentRunner, all step workers, StructuredAgentPlanner, OpenAIAgent, and more. All users should migrate to the new workflow based agents: FunctionAgent, CodeActAgent, ReActAgent, and AgentWorkflow (#19529)
  • breaking: removed deprecated QueryPipeline class and all associated code (#19554)
  • breaking: changed default index.as_chat_engine() to return a CondensePlusContextChatEngine. Agent-based chat engines have been removed (which was the previous default). If you need an agent, use the above mentioned agent classes. (#19529)
  • fix: Update BaseDocumentStore to not return Nones in result (#19513)
  • fix: Fix FunctionTool param doc parsing and signature mutation; update tests (#19532)
  • fix: Handle empty prompt in MockLLM.stream_complete (#19521)

llama-index-embeddings-mixedbreadai [0.5.0]

  • feat: Update mixedbread embeddings and rerank for latest sdk (#19519)

llama-index-instrumentation [0.4.0]

  • fix: let wrapped exceptions bubble up (#19566)

llama-index-llms-google-genai [0.3.0]

  • feat: Add Thought Summaries and signatures for Gemini (#19505)

llama-index-llms-nvidia [0.4.0]

  • feat: add support for kimi-k2-instruct (#19525)

llama-index-llms-upstage [0.6.0]

  • feat: add new upstage model(solar-pro2) (#19526)

llama-index-postprocessor-mixedbreadai-rerank [0.5.0]

  • feat: Update mixedbread embeddings and rerank for latest sdk (#19519)

llama-index-readers-github [0.8.0]

  • feat: Github Reader enhancements for file filtering and custom processing (#19543)

llama-index-readers-s3 [0.5.0]

  • feat: add support for region_name via client_kwargs in S3Reader (#19546)

llama-index-tools-valyu [0.4.0]

  • feat: Update Valyu sdk to latest version (#19538)

... (truncated)

Changelog

Sourced from llama-index's changelog.

llama-index-llms-bedrock-converse [0.13.0]

  • fix(bedrock-converse): Improve handling of reasoningContent in responses from Converse & ConverStream requests (#20853)

llama-index-llms-langchain [0.7.2]

  • fix: bump ver to trigger llama-index-llms-langchain integration release (#20751)

llama-index-llms-mistralai [0.10.0.post2]

  • Fix mistralai pkg version bump (#20776)
  • fix: update Mistral package Python requirement (#20777)

llama-index-llms-modelslab [0.1.0]

  • feat: Add ModelsLab LLM integration (llama-index-llms-modelslab) (#20731)

llama-index-llms-openai [0.6.26]

  • fix-openai-toolcall-after-thinking #20333 (#20725)
  • fix: forward allow_parallel_tool_calls for OpenAI chat completions (#20744)
  • feat: gpt-5-chat support (#20774)
  • feat: support reasoning_content in OpenAI Chat Completions (#20786)
  • nit: add openai model name (#20800)
  • fix: Use constrained decoding for OpenAIResponses structured_predict (#20808)
  • Respect Retry-After header in OpenAI retry decorator (#20813)
  • fix openai tool calls (#20831)
  • fix: strip parallel_tool_calls for reasoning models (#20866)

llama-index-node-parser-chonkie [0.1.2]

  • Fix/20706 chonkie init doc (#20713)

llama-index-observability-otel [0.5.1]

  • feat: add extra span processors to register within the otel tracer (#20747)
  • feat: pass a custom tracer provider (#20765)
  • feat: add inheritance for external context (#20788)
  • otel instrumentation enhancements (#20816)

llama-index-packs-agent-search-retriever [0.4.1]

  • chore(deps): bump the uv group across 47 directories with 3 updates (#20793)

llama-index-packs-amazon-product-extraction [0.4.1]

  • chore(deps): bump the uv group across 47 directories with 3 updates (#20793)

llama-index-packs-arize-phoenix-query-engine [0.4.1]

... (truncated)

Commits

Updates ray from 2.43.0 to 2.55.0

Release notes

Sourced from ray's releases.

Ray-2.55.0

Ray Data

🎉 New Features

  • Add DataSourceV2 API with scanner/reader framework, file listing, and file partitioning (#61220, #61615, #61997)
  • Support GPU shuffle with rapidsmpf 26.2 (#61371, #62062)
  • Add Kafka datasink, migrate to confluent-kafka, support datetime offsets (#60307, #61284, #60909)
  • Add Turbopuffer datasink (#58910)
  • Add 2-phase commit checkpointing with trie recovery and load method (#61821, #60951)
  • Queue-based autoscaling policy integrated with task consumers (#59548, #60851)
  • Enable autoscaling for GPU stages (#61130)
  • Expressions: add random(), uuid(), cast, and map namespace support (#59656, #60695, #59879)
  • Add support for Arrow native fixed-shape tensor type (#56284)
  • Support writing tensors to tfrecords (#60859)
  • Add pathlib.Path support to read_* functions (#61126)
  • Add cudf as a batch_format (#61329)
  • Allow ActorPoolStrategy for read_datasource() via compute parameter (#59633)
  • Introduce ExecutionCache for streamlined caching (#60996)
  • Support strict=False mode for StreamingRepartition (#60295)
  • Port changes from lance-ray into Ray Data (#60497)
  • Enable PyArrow compute-to-expression conversion for predicate pushdown (#61617)
  • Add vLLM metrics export and Data LLM Grafana dashboard (#60385)
  • Include logical memory in resource manager scheduling decisions (#60774)
  • Add monotonically increasing ID support (#59290)

💫 Enhancements

  • Performance: cache _map_task args, heap-based actor ranking, actor pool map improvements (#61996, #62114, #61591)
  • Optimize concat tables and PyArrow schema hashing (#61315, #62108)
  • Reduce default DownstreamCapacityBackpressurePolicy threshold to 50% (#61890)
  • Improve reproducibility for random APIs (#59662)
  • Clamp batch size to fall within C++ 32-bit int range (#62242)
  • Account for external consumer object store usage in resource manager budget (#62117)
  • Make get_parquet_dataset configurable in number of fragments to scan (#61670)
  • Consolidate schema inference and make all preprocessors implement SerializablePreprocessorBase (#61213, #61341)
  • Disable hanging issue detection by default (#62405)
  • Make execution callback dataflow explicit to prevent state leakage (#61405)
  • Log DataContext in JSON format at execution start for traceability (#61150, #61428)
  • Autoscaler: configurable traceback, Prometheus gauges, relaxed constraints (#62210, #62209, #61917, #61385)
  • Add metrics for task scheduling time, output backpressure, and logical memory (#61192, #61007, #61436)
  • Prevent operators from dominating entire shared object store budget (#61605)
  • Eliminate generators to avoid intermediate state pinning (#60598)
  • Default log encoding to UTF-8 on Windows (#61143)
  • Remove legacy BlockList, locality_with_output, old callback API, PyArrow 9.0 checks (#60575, #61044, #62055, #61483)
  • Upgrade to pyiceberg 0.11.0; cap pandas to <3 (#61062, #60406)
  • Refactor logical operators to frozen dataclasses (#61059, #61308, #61348, #61349, #61351, #61364, #61481)
  • Prevent aggregator head node scheduling (#61288)
  • Add error for local:// paths with a zero-resource head node (#60709)

🔨 Fixes

... (truncated)

Commits

Updates filelock from 3.18.0 to 3.20.3

Release notes

Sourced from filelock's releases.

3.20.3

What's Changed

Full Changelog: tox-dev/filelock@3.20.2...3.20.3

3.20.2

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.20.1...3.20.2

3.20.1

What's Changed

Full Changelog: tox-dev/filelock@3.20.0...3.20.1

3.20.0

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.19.1...3.20.0

3.19.1

What's Changed

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

3.29.4 (2026-06-13)

  • keep the read/write heartbeat alive on a transient touch error :pr:562 - by :user:dxbjavid
  • verify inode in break_lock_file before unlinking a stale lock :pr:561 - by :user:dxbjavid

3.29.3 (2026-06-10)

  • 🐛 fix(ci): restore release environment on tag job :pr:559
  • validate pid range in _parse_lock_holder :pr:556 - by :user:dxbjavid
  • 🔧 ci(release): publish to PyPI on tag push :pr:557
  • build(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 :pr:558 - by :user:dependabot[bot]

3.29.2 (2026-06-10)

  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3 :pr:555 - by :user:dependabot[bot]
  • [pre-commit.ci] pre-commit autoupdate :pr:554 - by :user:pre-commit-ci[bot]
  • check hostname in is_lock_held_by_us :pr:553 - by :user:dxbjavid
  • 🔒 fix(soft): harden stale-lock breaking and self-heal malformed locks :pr:551
  • open marker reads non-blocking to refuse attacker-placed fifo :pr:549 - by :user:dxbjavid

3.29.1 (2026-06-03)

  • 🐛 fix(soft): refuse to follow symlinks when reading the lock file :pr:548 - by :user:dxbjavid
  • [pre-commit.ci] pre-commit autoupdate :pr:547 - by :user:pre-commit-ci[bot]
  • [pre-commit.ci] pre-commit autoupdate :pr:546 - by :user:pre-commit-ci[bot]
  • chore: improve filelock maintenance path :pr:545 - by :user:lphuc2250gma
  • chore: improve filelock maintenance path :pr:544 - by :user:lphuc2250gma
  • chore: improve filelock maintenance path :pr:542 - by :user:lphuc2250gma
  • docs: clarify per-thread scope of FileLock configuration :pr:543 - by :user:Gares95
  • [pre-commit.ci] pre-commit autoupdate :pr:541 - by :user:pre-commit-ci[bot]
  • docs: fix API docs of release() :pr:540 - by :user:MrAnno
  • [pre-commit.ci] pre-commit autoupdate :pr:539 - by :user:pre-commit-ci[bot]
  • [pre-commit.ci] pre-commit autoupdate :pr:538 - by :user:pre-commit-ci[bot]
  • [pre-commit.ci] pre-commit autoupdate :pr:537 - by :user:pre-commit-ci[bot]
  • build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 :pr:536 - by :user:dependabot[bot]
  • [pre-commit.ci] pre-commit autoupdate :pr:535 - by :user:pre-commit-ci[bot]

... (truncated)

Commits

Updates langchain-community from 0.3.5 to 0.3.27

Release notes

Sourced from langchain-community's releases.

libs/community/v0.3.27

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-community@libs/community/v0.3.26...libs/community/v0.3.27

libs/community/v0.3.26

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-community@libs/community/v0.3.25...libs/community/v0.3.26

libs/community/v0.3.25

What's Changed

New Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the pip group across 5 directories with 6 updates
1c5ee64 
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/dspy_handler directory: [dspy](https://github.com/stanfordnlp/dspy).
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/lindorm_handler directory: [protobuf](https://github.com/protocolbuffers/protobuf).
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/llama_index_handler directory: [llama-index](https://github.com/run-llama/llama_index).
Bumps the pip group with 1 update in the /mindsdb/integrations/handlers/ludwig_handler directory: [ray](https://github.com/ray-project/ray).
Bumps the pip group with 2 updates in the /requirements directory: [filelock](https://github.com/tox-dev/py-filelock) and [langchain-community](https://github.com/langchain-ai/langchain-community).


Updates `dspy` from 0.1.4 to 3.1.0b1
- [Release notes](https://github.com/stanfordnlp/dspy/releases)
- [Commits](https://github.com/stanfordnlp/dspy/commits/3.1.0b1)

Updates `protobuf` from 4.25.8 to 5.29.6
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `llama-index` from 0.12.28 to 0.13.0
- [Release notes](https://github.com/run-llama/llama_index/releases)
- [Changelog](https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md)
- [Commits](run-llama/llama_index@v0.12.28...v0.13.0)

Updates `ray` from 2.43.0 to 2.55.0
- [Release notes](https://github.com/ray-project/ray/releases)
- [Commits](ray-project/ray@ray-2.43.0...ray-2.55.0)

Updates `filelock` from 3.18.0 to 3.20.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.18.0...3.20.3)

Updates `langchain-community` from 0.3.5 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain-community/releases)
- [Commits](https://github.com/langchain-ai/langchain-community/commits/libs/community/v0.3.27)

---
updated-dependencies:
- dependency-name: dspy
  dependency-version: 3.1.0b1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 5.29.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: llama-index
  dependency-version: 0.13.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: ray
  dependency-version: 2.55.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: filelock
  dependency-version: 3.20.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Author

Superseded by #2.

@dependabot dependabot Bot closed this Jun 20, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/mindsdb/integrations/handlers/dspy_handler/pip-ab7fb46ace branch June 20, 2026 14:25
@sonarqubecloud

sonarqubecloud Bot commented Jun 20, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants