Skip to content

chore(deps): bump the python-minor-and-patch group with 7 updates#795

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/python-minor-and-patch-982d1f0920
Open

chore(deps): bump the python-minor-and-patch group with 7 updates#795
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/develop/python-minor-and-patch-982d1f0920

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 7 updates:

Package From To
fastapi 0.137.0 0.138.0
sqlalchemy 2.0.50 2.0.51
anyio 4.13.0 4.14.0
langgraph 1.2.5 1.2.6
anthropic 0.109.1 0.111.0
openai 2.41.1 2.43.0
google-genai 2.8.0 2.9.0

Updates fastapi from 0.137.0 to 0.138.0

Release notes

Sourced from fastapi's releases.

0.138.0

Features

  • ✨ Add support for app.frontend("/", directory="dist") and router.frontend("/", directory="dist"). PR #15800 by @​tiangolo.

Docs

Translations

Internal

0.137.2

Features

  • ✨ Add iter_route_contexts() for advanced use cases that used to use router.routes (e.g. Jupyverse). PR #15785 by @​tiangolo.

Translations

Internal

... (truncated)

Commits

Updates sqlalchemy from 2.0.50 to 2.0.51

Release notes

Sourced from sqlalchemy's releases.

2.0.51

Released: June 15, 2026

orm

  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with PropComparator.of_type() and PropComparator.and_() would silently drop the additional filter criteria, causing all related objects to be loaded instead of only those matching the filter. The LoaderCriteriaOption was being constructed against the base entity rather than the effective entity indicated by PropComparator.of_type(). Pull request courtesy Arya Rizky.

    References: #13207

  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within _orm.Session.commit() for a two-phase session would raise IllegalStateChangeError instead of the original database exception. The internal _prepare_impl() method's error handler was unable to invoke _orm.SessionTransaction.rollback() due to a state-change guard, preventing proper cleanup and masking the underlying error.

    References: #13356

engine

  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous column names present in the original CursorResult, causing key-based access on the thawed result to silently return a value instead of raising InvalidRequestError. The SimpleResultMetaData now accepts and propagates ambiguous key information so that frozen, thawed, and pickled results raise consistently for duplicate column names. Pull request courtesy Saurabh Kohli.

    References: #9427

sql

  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy attribute access through the cached "expected" expression rather than the resolved expression, causing stale closure-bound parameter values to be used when a lambda statement was extended with non-lambda criteria such as an additional .where() clause. Courtesy cjc0013.

    References: #10827

... (truncated)

Commits

Updates anyio from 4.13.0 to 4.14.0

Release notes

Sourced from anyio's releases.

4.14.0

  • Added support for Python 3.15

  • Added an asynchronous implementation of the itertools module (#998; PR by @​11kkw)

  • Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @​nullwiz)

  • Added support for custom capacity limiters in async path and file I/O functions and classes

  • Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

  • Changed TaskGroup.start_soon() to return a TaskHandle

  • Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

  • Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

  • Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @​EmmanuelNiyonshuti)

  • Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @​EmmanuelNiyonshuti)

  • Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @​SAY-5)

  • Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

    • TaskGroup.start_soon()
    • TaskGroup.start()
    • anyio.from_thread.run()

    This reverts an earlier change from v3.7.0 which was made in error. (#1153)

  • Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @​gschaffner)

  • Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

    • anyio.CancelScope
    • anyio.CapacityLimiter
    • anyio.Condition
    • anyio.Event
    • anyio.Lock
    • anyio.ResourceGuard
    • anyio.Semaphore

  • Fixed cancellation exception escaping a cancel scope when triggered via check_cancelled() in a worker thread (#1113)

  • Fixed TaskGroup raising AttributeError instead of a clear error when entered more than once (#1109; PR by @​bahtya)

  • Fixed lost type information when passing arguments to lru_cache (#1104; PR by @​Graeme22)

  • Fixed test resumption after KeyboardInterrupt in async generator fixtures on the asyncio backend (#1060; PR by @​EmmanuelNiyonshuti)

... (truncated)

Commits
  • ffe9133 Bumped up the version
  • f8b9f01 Fixed asyncio lock waiter deadlocks after cancellation (#1145)
  • d517ee1 [pre-commit.ci] pre-commit autoupdate (#1176)
  • 550b68e Make anyio.run support Awaitable at runtime on all backends (#1171)
  • 29a5e04 Fixed FastAPI test run
  • 4d752ac Updated downstream test setups for FastAPI and Anthropic MCP
  • ebdc950 Added task handle support to start() and start_soon() (#1153)
  • f32bfb8 Fixed test suite compatibility issues with Pytest 9.1.0
  • 85f7e8e Added __slots__ to several classes
  • b7ea84c [pre-commit.ci] pre-commit autoupdate (#1165)
  • Additional commits viewable in compare view

Updates langgraph from 1.2.5 to 1.2.6

Release notes

Sourced from langgraph's releases.

langgraph==1.2.6

Changes since 1.2.5

  • release(langgraph): 1.2.6 (#8139)
  • fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • release(cli): 0.4.30 (#8101)
  • docs: standardize package README.md structure (#8064)
  • chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)
Commits
  • ce6c8b2 release(langgraph): 1.2.6 (#8139)
  • 9100f2c feat: add delta-channel-dump recovery script as examples to dump from Postgre...
  • 79befe6 fix: nested subgraph inherits parent checkpoint_ns (regression in 1.2.3) (#8053)
  • 9af2521 fix: cancel running subgraphs on v3 stream abort [closes #8029] (#8057)
  • 1a9baae release(cli): 0.4.30 (#8101)
  • 916025d feat(cli): support compatible api version ranges (#8023)
  • 9732084 ci(deps): pin GitHub Actions to commit SHAs (#8065)
  • 8558481 docs: standardize package README.md structure (#8064)
  • 4cf120d chore(deps): bump tornado from 6.5.5 to 6.5.6 in /libs/langgraph (#8063)
  • See full diff in compare view

Updates anthropic from 0.109.1 to 0.111.0

Release notes

Sourced from anthropic's releases.

v0.111.0

0.111.0 (2026-06-18)

Full Changelog: v0.110.0...v0.111.0

Features

  • helpers: tag refusal-fallback middleware requests with fallback-refusal-middleware (#96) (2f8ac78)

v0.110.0

0.110.0 (2026-06-18)

Full Changelog: v0.109.2...v0.110.0

Features

  • api: add support for new code_execution_20260120 tool (5e23212)

Bug Fixes

  • append x-stainless-helper across header merges instead of clobbering (#105) (922558e)
  • bedrock: preserve stream event type (#1682) (b27e343)
  • helpers: single source of truth for x-stainless-helper key + closed value vocabulary (#95) (e6f7a56)

v0.109.2

0.109.2 (2026-06-15)

Full Changelog: v0.109.1...v0.109.2

Chores

  • api: remove retired models from API and SDKs (d4bcfcc)
Changelog

Sourced from anthropic's changelog.

0.111.0 (2026-06-18)

Full Changelog: v0.110.0...v0.111.0

Features

  • helpers: tag refusal-fallback middleware requests with fallback-refusal-middleware (#96) (2f8ac78)

0.110.0 (2026-06-18)

Full Changelog: v0.109.2...v0.110.0

Features

  • api: add support for new code_execution_20260120 tool (5e23212)

Bug Fixes

  • append x-stainless-helper across header merges instead of clobbering (#105) (922558e)
  • bedrock: preserve stream event type (#1682) (b27e343)
  • helpers: single source of truth for x-stainless-helper key + closed value vocabulary (#95) (e6f7a56)

0.109.2 (2026-06-15)

Full Changelog: v0.109.1...v0.109.2

Chores

  • api: remove retired models from API and SDKs (d4bcfcc)
Commits
  • 5d6fd8d release: 0.111.0
  • 9fdf2ef feat(helpers): tag refusal-fallback middleware requests with fallback-refusal...
  • af2b702 release: 0.110.0
  • a10dbaa feat(api): add support for new code_execution_20260120 tool
  • 9d49b63 fix(helpers): single source of truth for x-stainless-helper key + closed valu...
  • e8a5c84 fix: append x-stainless-helper across header merges instead of clobbering (#105)
  • ed0af5b fix(bedrock): preserve stream event type (#1682)
  • ebb1715 release: 0.109.2
  • 37a7d36 chore(api): remove retired models from API and SDKs
  • See full diff in compare view

Updates openai from 2.41.1 to 2.43.0

Release notes

Sourced from openai's releases.

v2.43.0

2.43.0 (2026-06-17)

Full Changelog: v2.42.0...v2.43.0

Features

  • api: update OpenAPI spec or Stainless config (2254235)

v2.42.0

2.42.0 (2026-06-16)

Full Changelog: v2.41.1...v2.42.0

Features

  • api: admin spend_alerts (6134198)
  • api: manual updates (f337bf4)
  • api: update OpenAPI spec or Stainless config (7015158)

Build System

Changelog

Sourced from openai's changelog.

2.43.0 (2026-06-17)

Full Changelog: v2.42.0...v2.43.0

Features

  • api: update OpenAPI spec or Stainless config (2254235)

2.42.0 (2026-06-16)

Full Changelog: v2.41.1...v2.42.0

Features

  • api: admin spend_alerts (6134198)
  • api: manual updates (f337bf4)
  • api: update OpenAPI spec or Stainless config (7015158)

Build System

Commits

Updates google-genai from 2.8.0 to 2.9.0

Release notes

Sourced from google-genai's releases.

v2.9.0

2.9.0 (2026-06-19)

Major updates

  • The interactions implementation has been completely replaced. The public api surface is unchanged. (d830f16)

Features

  • Add audioOffset to VoiceActivity (fb785e4)
  • Add gemini-3-flash-preview (gemini-3.1, gemini-3.5, gemini-4 are already mapped) to the local tokenizer map. (749f8a1), closes #1972
  • Add interimInputTranscription to LiveServerContent (fb785e4)
  • Add LanguageAuto, LanguageHints, and adaptationPhrases to AudioTranscriptionConfig (fb785e4)
  • Broaden publisher model path check to support all publishers (5d282e6)
  • Add ServiceTier to UsageMetadata (45b4963)
  • Expose Computer Use API fields (420b5a7)
  • Gemma 4 local tokenizer support (ca97c58)
  • interaction-api: Add presence_penalty, frequency_penalty, and cached_content to models.proto (05f16fe)
  • interaction-api: Rename usage to total_usage in StreamMetadata. (7c331c6)

Bug Fixes

  • Add fallback for aiohttp.readline without max_line_length for backward compatibility because we still want to keep aiohttp as optional dependency (e99ab99), closes #2487
  • Fix header (f8f9749)
  • Keep live music API keys out of websocket urls (#2564) (c754ebf)
  • Make transformers an optional dependency for local tokenizers, also add other dependencies to local-tokenizer-extras. (528926b)
  • Use .model_copy() instead of deprecated .copy() (216369f)

v2.9.0-rc1

2.9.0-rc1 (2026-06-17)

Features

  • Add audioOffset to VoiceActivity (fb785e4)
  • Add gemini-3-flash-preview (gemini-3.1, gemini-3.5, gemini-4 are already mapped) to the local tokenizer map. (749f8a1), closes #1972
  • Add interimInputTranscription to LiveServerContent (fb785e4)
  • Add LanguageAuto, LanguageHints, and adaptationPhrases to AudioTranscriptionConfig (fb785e4)
  • Broaden publisher model path check to support all publishers (5d282e6)

Miscellaneous Chores

v2.9.0-rc0

2.9.0-rc0 (2026-06-16)

Major updates

... (truncated)

Changelog

Sourced from google-genai's changelog.

2.9.0 (2026-06-19)

Major updates

  • The interactions implementation has been completely replaced. The public api surface is unchanged. (d830f16)

Features

  • Add audioOffset to VoiceActivity (fb785e4)
  • Add gemini-3-flash-preview (gemini-3.1, gemini-3.5, gemini-4 are already mapped) to the local tokenizer map. (749f8a1), closes #1972
  • Add interimInputTranscription to LiveServerContent (fb785e4)
  • Add LanguageAuto, LanguageHints, and adaptationPhrases to AudioTranscriptionConfig (fb785e4)
  • Broaden publisher model path check to support all publishers (5d282e6)
  • Add ServiceTier to UsageMetadata (45b4963)
  • Expose Computer Use API fields (420b5a7)
  • Gemma 4 local tokenizer support (ca97c58)
  • interaction-api: Add presence_penalty, frequency_penalty, and cached_content to models.proto (05f16fe)
  • interaction-api: Rename usage to total_usage in StreamMetadata. (7c331c6)

Bug Fixes

  • Add fallback for aiohttp.readline without max_line_length for backward compatibility because we still want to keep aiohttp as optional dependency (e99ab99), closes #2487
  • Fix header (f8f9749)
  • Keep live music API keys out of websocket urls (#2564) (c754ebf)
  • Make transformers an optional dependency for local tokenizers, also add other dependencies to local-tokenizer-extras. (528926b)
  • Use .model_copy() instead of deprecated .copy() (216369f)

2.9.0-rc1 (2026-06-17)

Features

  • Add audioOffset to VoiceActivity (fb785e4)
  • Add gemini-3-flash-preview (gemini-3.1, gemini-3.5, gemini-4 are already mapped) to the local tokenizer map. (749f8a1), closes #1972
  • Add interimInputTranscription to LiveServerContent (fb785e4)
  • Add LanguageAuto, LanguageHints, and adaptationPhrases to AudioTranscriptionConfig (fb785e4)
  • Broaden publisher model path check to support all publishers (5d282e6)

Miscellaneous Chores

2.9.0-rc0 (2026-06-16)

Major updates

... (truncated)

Commits
  • 84aa3ae chore(main): release 2.9.0 (#2635)
  • 6119dd3 feat: Interactions is no longer in preview.
  • 02921e1 chore: Remove experimental warnings for interactions
  • f63d1dc chore: internal update
  • 85fbda3 Copybara import of the project:
  • f91f359 Copybara import of the project:
  • eee7ddc chore: Update version.py (#2628)
  • 04677a8 chore(main): release 2.9.0-rc1 (#2618)
  • b95f2a8 chore: release 2.9.0-rc1
  • 749f8a1 feat: Add gemini-3-flash-preview (gemini-3.1, gemini-3.5, gemini-4 are alread...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-minor-and-patch group with 7 updates
1a68575 
Bumps the python-minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.137.0` | `0.138.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.50` | `2.0.51` |
| [anyio](https://github.com/agronholm/anyio) | `4.13.0` | `4.14.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.5` | `1.2.6` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.109.1` | `0.111.0` |
| [openai](https://github.com/openai/openai-python) | `2.41.1` | `2.43.0` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.8.0` | `2.9.0` |


Updates `fastapi` from 0.137.0 to 0.138.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.137.0...0.138.0)

Updates `sqlalchemy` from 2.0.50 to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `anyio` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.13.0...4.14.0)

Updates `langgraph` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.5...1.2.6)

Updates `anthropic` from 0.109.1 to 0.111.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.109.1...v0.111.0)

Updates `openai` from 2.41.1 to 2.43.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.41.1...v2.43.0)

Updates `google-genai` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.8.0...v2.9.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.138.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: sqlalchemy
  dependency-version: 2.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: anyio
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: langgraph
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: anthropic
  dependency-version: 0.111.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: openai
  dependency-version: 2.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-genai
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants