build(deps): bump the core-deps group with 5 updates - #14
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [httpx](https://github.com/encode/httpx) and [structlog](https://github.com/hynek/structlog) to permit the latest version. Updates `fastapi` to 0.135.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.135.1...0.135.3) Updates `pydantic` to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.10.0...v2.12.5) Updates `pydantic-settings` to 2.13.1 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.6.0...v2.13.1) Updates `httpx` to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](encode/httpx@0.28.0...0.28.1) Updates `structlog` to 25.5.0 - [Release notes](https://github.com/hynek/structlog/releases) - [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md) - [Commits](hynek/structlog@25.1.0...25.5.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.135.3 dependency-type: direct:production dependency-group: core-deps - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production dependency-group: core-deps - dependency-name: pydantic-settings dependency-version: 2.13.1 dependency-type: direct:production dependency-group: core-deps - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production dependency-group: core-deps - dependency-name: structlog dependency-version: 25.5.0 dependency-type: direct:production dependency-group: core-deps ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
WalkthroughUpdated runtime dependencies in Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes 🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@pyproject.toml`:
- Around line 11-16: Run poetry lock to generate a poetry.lock that pins
transitive dependencies for the updated package constraints in pyproject.toml
(e.g., fastapi, uvicorn, pydantic, pydantic-settings, httpx, structlog), add the
generated poetry.lock to the repo (git add poetry.lock), and commit the lockfile
with a clear message so installs are reproducible across environments.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro
Run ID: 7a6bfda6-f805-48af-bd62-3398067c2e4f
📒 Files selected for processing (1)
pyproject.toml
Comment on lines
+11
to
+16
| fastapi = "^0.135.3" | ||
| uvicorn = {extras = ["standard"], version = "^0.32.0"} | ||
| pydantic = "^2.10.0" | ||
| pydantic-settings = "^2.6.0" | ||
| httpx = "^0.28.0" | ||
| structlog = "^25.0.0" | ||
| pydantic = "^2.12.5" | ||
| pydantic-settings = "^2.13.1" | ||
| httpx = "^0.28.1" | ||
| structlog = "^25.5.0" |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# 1) Ensure lockfile exists
fd '^poetry\.lock$' .
# 2) Show declared constraints in pyproject
rg -n '^(fastapi|pydantic|pydantic-settings|httpx|structlog)\s*=' pyproject.toml
# 3) Verify locked package entries/versions are present
# (Read-only check; does not modify repo)
python - <<'PY'
import re
from pathlib import Path
lock = Path("poetry.lock")
if not lock.exists():
raise SystemExit("poetry.lock not found")
text = lock.read_text(encoding="utf-8", errors="replace")
targets = {
"fastapi": "0.135.3",
"pydantic": "2.12.5",
"pydantic-settings": "2.13.1",
"httpx": "0.28.1",
"structlog": "25.5.0",
}
for name, expected in targets.items():
pat = re.compile(
rf'\[\[package\]\]\nname = "{re.escape(name)}"\nversion = "([^"]+)"',
re.MULTILINE
)
m = pat.search(text)
if not m:
print(f"[MISSING] {name} not found in poetry.lock")
continue
actual = m.group(1)
status = "OK" if actual == expected else "MISMATCH"
print(f"[{status}] {name}: lock={actual}, expected={expected}")
PYRepository: cryptoxdog/l9-codegraph
Length of output: 232
Generate and commit poetry.lock for the updated dependency constraints.
The dependency constraints in pyproject.toml are syntactically correct, but poetry.lock is missing from the repository. This means transitive dependencies are not pinned, causing potential inconsistencies across deployment environments. Run poetry lock and commit the generated lockfile to ensure reproducible installs.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@pyproject.toml` around lines 11 - 16, Run poetry lock to generate a
poetry.lock that pins transitive dependencies for the updated package
constraints in pyproject.toml (e.g., fastapi, uvicorn, pydantic,
pydantic-settings, httpx, structlog), add the generated poetry.lock to the repo
(git add poetry.lock), and commit the lockfile with a clear message so installs
are reproducible across environments.
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on fastapi, pydantic, pydantic-settings, httpx and structlog to permit the latest version.
Updates
fastapito 0.135.3Release notes
Sourced from fastapi's releases.
Commits
1f442c4🔖 Release version 0.135.38f5d157📝 Update release notes428452a📝 Update release notes70580da✨ Add support for@app.vibe()(#15280)6ee8747📝 Update release notes3e72c09👥 Update FastAPI People - Experts (#15279)96df35f📝 Update release notes6c81125⬆ Bump orjson from 3.11.7 to 3.11.8 (#15276)428f82c📝 Update release notes5599c59⬆ Bump ruff from 0.15.0 to 0.15.8 (#15277)Updates
pydanticto 2.12.5Release notes
Sourced from pydantic's releases.
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
bd2d0ddPrepare release v2.12.57d0302eDocument security implications when usingcreate_model()e9ef980Fix typo in Standard Library Types documentationf2c20c0Addpydantic-docsdev dependency, make use of versioning blocksa76c1aaUpdate documentation about JSON Schema8cbc72cAdd documentation about custom__init__()99eba59Add additional test forFieldInfo.get_default()c710769Special caseMISSINGsentinel insmart_deepcopy()20a9d77Do not delete mock validator/serializer inrebuild_dataclass()c86515aUpdate parts of the model andrevalidate_instancesdocumentationUpdates
pydantic-settingsto 2.13.1Commits
e87d12dv2.13.1 (#790)acf8c14Fix JSON decoding for parameterized PEP 695 type aliases (#780)58b236aFix AttributeError with nested env vars for dict fields (#785) (#786)4933f06Fix CLI parsing error for set field types since 2.13.0 (#787) (#788)bd0ebe6Fix RecursionError with self-referential models in CliApp (#783)eb7840eFix regression for bool fields since 2.13.0 (#784)198e71cPrepare release 2.13.0 (#777)de71e84Add nested path support for yaml_config_section (fixes #772) (#773)0f8f951CLI Union Discriminator Choices in Help (#764)ce9804cCLI coerce numeric types. (#769)Updates
httpxto 0.28.1Release notes
Sourced from httpx's releases.
Changelog
Sourced from httpx's changelog.
... (truncated)
Commits
26d48e0Version 0.28.1 (#3445)89599a9Fixverify=False,cert=...case. (#3442)8ecb86fAdd test for request params behavior changes (#3364) (#3440)0cb7e5aBump the python-packages group with 11 updates (#3434)15e21e9Updating deprecated docstring Client() class (#3426)Updates
structlogto 25.5.0Release notes
Sourced from structlog's releases.
... (truncated)
Changelog
Sourced from structlog's changelog.
... (truncated)
Commits
c0ef9e0Prepare 25.5.09cb662fdocs: nit5400612docs/stdlib: add warning about ProcessorFormatter1c2c19aTry validating pyproject.tomlaca10f2Drop pretend dependency (#766)3800d40docs: use nativeecaa15astdlib: add support for stacklevel (#763)7f7a221update dev (#765)5acfc85docs: 5% bigger stillc102862docs: bigger fontDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by CodeRabbit