Bump the python-packages group across 1 directory with 20 updates by dependabot[bot] · Pull Request #699 · fiaisis/FIA-API

dependabot · 2026-09-21T09:44:23Z

Bumps the python-packages group with 20 updates in the / directory:

Package	From	To
fastapi	`0.139.0`	`0.143.0`
pygithub	`2.9.1`	`2.10.0`
pyjwt	`2.15.0`	`2.15.1`
psycopg2	`2.9.12`	`2.9.13`
sqlalchemy	`2.0.51`	`2.1.4`
pydantic	`2.13.4`	`2.14.0`
uvicorn	`0.51.0`	`0.54.0`
redis	`8.0.1`	`8.1.0`
pika	`1.4.1`	`1.4.4`
opentelemetry-api	`1.43.0`	`1.45.1`
opentelemetry-sdk	`1.43.0`	`1.45.1`
opentelemetry-instrumentation	`0.64b0`	`0.66b1`
opentelemetry-instrumentation-fastapi	`0.64b0`	`0.66b1`
opentelemetry-instrumentation-psycopg2	`0.64b0`	`0.66b1`
opentelemetry-exporter-otlp	`1.43.0`	`1.45.1`
ruff	`0.15.21`	`0.17.0`
mypy	`2.2.0`	`2.4.0`
types-requests	`2.33.0.20260712`	`2.33.0.20261006`
faker	`40.28.1`	`40.43.0`
pytest-env	`1.6.0`	`1.7.1`

Updates fastapi from 0.139.0 to 0.143.0

Release notes

Sourced from fastapi's releases.

0.143.0

Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL_* environment variables, set FASTAPI_OTEL_AUTO_CONFIGURE=true or use FastAPI(telemetry={"auto_configure": True}) to retain the previous behavior.

Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.

Breaking Changes

💥 Require opt-in for automatic OpenTelemetry exporter setup. PR #16476 by @tiangolo.

0.142.4

Fixes

🐛 Isolate FastAPI telemetry for excluded requests. PR #16470 by @tiangolo.

0.142.3

Fixes

🐛 Cache OpenTelemetry tracers to preserve warning deduplication. PR #16468 by @tiangolo.

Docs

📝 Remove HTML title from newsletter to avoid the tooltip. PR #16461 by @tiangolo.

📝 Embed the FastAPI and friends newsletter signup form. PR #16459 by @tiangolo.

📝 Update skill, use Asyncer for blocking code in threads. PR #16420 by @tiangolo.

Translations

🌐 Update translations for fr (add-missing). PR #16436 by @pr-submit[bot].

🌐 Update translations for hi (add-missing). PR #16435 by @pr-submit[bot].

🌐 Update translations for tr (add-missing). PR #16434 by @pr-submit[bot].

🌐 Update translations for zh (add-missing). PR #16433 by @pr-submit[bot].

🌐 Update translations for zh-hant (add-missing). PR #16432 by @pr-submit[bot].

🌐 Update translations for pt (add-missing). PR #16431 by @pr-submit[bot].

🌐 Update translations for de (add-missing). PR #16430 by @pr-submit[bot].

🌐 Update translations for uk (add-missing). PR #16429 by @pr-submit[bot].

🌐 Update translations for ja (add-missing). PR #16428 by @pr-submit[bot].

🌐 Update translations for ko (add-missing). PR #16425 by @pr-submit[bot].

🌐 Update translations for es (add-missing). PR #16426 by @pr-submit[bot].

🌐 Update translations for ru (add-missing). PR #16427 by @pr-submit[bot].

🌐 Update Russian LLM-prompt. PR #16449 by @YuriiMotov.

Internal

👷 Fix deprecated command in bump-pre-commit-hooks workflow. PR #16463 by @YuriiMotov.

🔧 Update sponsors: remove Render. PR #16457 by @tiangolo.

🔨 Use gpt-6-astra model for translations. PR #16453 by @YuriiMotov.

⬆ Bump the python-packages group across 1 directory with 14 updates. PR #16447 by @dependabot[bot].

⬆ Bump starlette from 1.6.0 to 1.7.0. PR #16440 by @dependabot[bot].

⬆ Bump pyjwt from 2.13.0 to 2.15.0. PR #16423 by @dependabot[bot].

⬆ Bump gitpython from 3.1.60 to 3.1.62. PR #16444 by @dependabot[bot].

... (truncated)

Commits

f5c6e9b 🔖 Release version 0.143.0 (#16477)
182c8b8 📝 Update release notes
af889e4 💥 Require opt-in for automatic OpenTelemetry exporter setup (#16476)
9269f17 🔖 Release version 0.142.4 (#16471)
78ede01 📝 Update release notes
4e31a07 🐛 Isolate FastAPI telemetry for excluded requests (#16470)
cb8dabc 🔖 Release version 0.142.3 (#16469)
787dc56 📝 Update release notes
6eae2f3 🐛 Cache OpenTelemetry tracers to preserve warning deduplication (#16468)
94918c1 📝 Update release notes
Additional commits viewable in compare view

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

Allow to specify the Github API version by @EnricoMi in PyGithub/PyGithub#3480

Add issue dependency endpoints by @james-geiger in PyGithub/PyGithub#3477

Improvements

Add incomplete_results property to PaginatedList by @Felixoid in PyGithub/PyGithub#3396

Add WorkflowRun.get_attempt and Repository.get_workflow_job functions by @cecheta in PyGithub/PyGithub#3401

Add support for head_repo when creating pull request by @shannon in PyGithub/PyGithub#3479

Add max_rate_limit_wait to GithubRetry to cap rate limit backoff by @tanistheta in PyGithub/PyGithub#3540

Add return_run_details parameter to Workflow.create_dispatch by @SebastienSyd in PyGithub/PyGithub#3471

Update SecurityAndAnalysis by @EnricoMi in PyGithub/PyGithub#3503

Bug Fixes

Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() by @Krishnachaitanyakc in PyGithub/PyGithub#3472

Fix GithubException.__str__ decoding bytes data by @SAY-5 in PyGithub/PyGithub#3494

Fixing OrganizationVariable.value by properly using base class by @EnricoMi in PyGithub/PyGithub#3507

Parse only the query string for PaginatedList.totalCount by @Noethix55555 in PyGithub/PyGithub#3518

Encode boolean query parameters as lowercase by @Noethix55555 in PyGithub/PyGithub#3516

Fix doubled slash in request path for base_url with trailing slash by @Noethix55555 in PyGithub/PyGithub#3537

Fix WorkflowRun schema suggestion by @EnricoMi in PyGithub/PyGithub#3559

Fix OAuth2 authorization state / code_verifier parameters by @TheoGoudout in PyGithub/PyGithub#3440

Allow creating custom property with values_editable_by param by @chawlajay9 in PyGithub/PyGithub#3548

Fix OrganizationSecret.edit() to seal the value and use PUT by @Noethix55555 in PyGithub/PyGithub#3529

Fix lazy retrieval of latest tag name by @sathieu in PyGithub/PyGithub#3487

Fix typing and typos by @EnricoMi in PyGithub/PyGithub#3485

Maintenance

Add support for Python 3.15 and drop EOL 3.9 by @hugovk in PyGithub/PyGithub#3551

Move self-link awareness into CompletableGithubObject by @EnricoMi in PyGithub/PyGithub#3432

Add documentation for agents, add Claude skills by @EnricoMi in PyGithub/PyGithub#3509

Add sphinx-copybutton for code blocks by @DivyanshiGautam31 in PyGithub/PyGithub#3493

Add support to OpenAPI script for applying schema to methods by @EnricoMi in PyGithub/PyGithub#3374

Improve OpenAPI apply properties and methods by @EnricoMi in PyGithub/PyGithub#3495

Fix OpenAPI method verb detection by @EnricoMi in PyGithub/PyGithub#3496

Add OpenAPI script tests by @EnricoMi in PyGithub/PyGithub#3489

Fix OpenAPI apply method by @EnricoMi in PyGithub/PyGithub#3498

Reordering OpenAPI test sequence by @EnricoMi in PyGithub/PyGithub#3500

Apply typing convention by @EnricoMi in PyGithub/PyGithub#3504

Bump mypy Python version to 3.12 by @EnricoMi in PyGithub/PyGithub#3505

Use @overload to type get_user by @xmo-odoo in PyGithub/PyGithub#3502

Add overload type annotations by @EnricoMi in PyGithub/PyGithub#3506

Simplify OrganizationVariable by @EnricoMi in PyGithub/PyGithub#3508

Add OpenAPI script filename option to create class by @EnricoMi in PyGithub/PyGithub#3512

OpenAPI script improvements by @EnricoMi in PyGithub/PyGithub#3511

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)

Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)

Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)

Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)

Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)

Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)

Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)

Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)

Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)

Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)

Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)

Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)

Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)

Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)

Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)

Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)

Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)

Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)

Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)

Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)

Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)

Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)

Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)

Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)

Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)

Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits

5cdf6ab Release 2.10.0 (#3560)
33071b3 Fix lazy retrieval of latest tag name (#3487)
4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
c63d09e docs: add example for uploading multiple files in a single commit (#3545)
4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
134f38a Allow creating custom property with values_editable_by param (#3548)
5f707d6 Fix WorkflowRun schema suggestion (#3559)
8280929 docs: add exception handling example (#3543)
c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
Additional commits viewable in compare view

Updates pyjwt from 2.15.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__

Fixed


- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).

Commits

7d5ef55 chore: prepare 2.15.1 release
7bf3252 Accept canonical Base64URL padding in JWT segments (#1216)
See full diff in compare view

Updates psycopg2 from 2.9.12 to 2.9.13

Changelog

Sourced from psycopg2's changelog.

Current release

What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.15 (:ticket:[#1848](https://github.com/psycopg/psycopg2/issues/1848)).

Fix parsing of malformed bytea input.

Fix parsing of malformed int64 input in arrays (:ticket:[#1847](https://github.com/psycopg/psycopg2/issues/1847)).

Add a pyproject.toml file to declare a PEP 517 build backend (:ticket:[#1788](https://github.com/psycopg/psycopg2/issues/1788)).

Drop support for Python 3.9.

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8

... (truncated)

Commits

f650e7a chore: bump to release 2.9.13
368c8a1 chore!: drop support for Python 3.9
9b39e65 chore: drop scaleway build support
2ca7041 fix: fix handling of PostgreSQL 18 exceptions
5385c02 Build CPython 3.15 wheels
1d32e1f ci: only attempt triggering documentation refresh when pushing on main repo
433e7b7 chore: add pyproject.toml file to declare a PEP 517 build backend
8fb80bc fix: fix parsing of malformed int64 input in arrays
f98014a fix: fix parsing of malformed bytea input
822b79c chore: bump dependencies in binary package
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.51 to 2.1.4

Release notes

Sourced from sqlalchemy's releases.

2.1.4

Released: October 7, 2026

orm

[orm] [bug] [regression] Fixed regression caused by #13333 where assigning a MetaData object to the metadata attribute of a mapped Declarative class, in order to place that class's Table in a MetaData collection other than that of the _orm.registry, would emit a warning that the attribute name metadata should be left reserved. The warning is now emitted only when the metadata attribute is assigned to an object other than a MetaData.

References: #13659

engine

[engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected. The cursor is now closed immediately, as was the case in 1.3 and as is already the case for INSERT, UPDATE, DELETE and _sql.text() statements.

This change is also backported to: 2.0.55

References: #13640

[engine] [bug] Fixed issue in the _engine.Connection.execution_options.logging_token option where setting the value to None or another false value would raise AttributeError if a logging token had not already been established on that _engine.Connection, such as on a newly checked out connection, when the option was set at the _engine.Engine level, or when the token was reset to None more than once. Regression introduced in 2.0.30 as part of #11210.

This change is also backported to: 2.0.55

References: #13641

[engine] [bug] [regression] Fixed regression where iterating a Result directly would create reference cycles that prevented the Result along with the DBAPI

... (truncated)

Commits

See full diff in compare view

Updates pydantic from 2.13.4 to 2.14.0

Release notes

Sourced from pydantic's releases.

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

Handle TypeError gracefully during docstring extraction by @Viicos in #13874

Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @Viicos in #13891

Don't apply ser_json_timedelta to all datetime types in serialization inference by @Viicos in #13892

Encode JSON Schema defaults with a consistent configuration by @Viicos in #13893

Propagate init and kw_only=False from Field() to stdlib dataclass fields by @Viicos in #13898

Respect propagated extra config in the JSON Schema of stdlib dataclasses by @Viicos in #13899

Handle OS errors during ZoneInfo validation by @Viicos in #13912

Handle exceptions during Decimal validation by @Viicos in #13940

Rebuild incomplete types during serialization inference by @Viicos in #13922

Reject large exponents in Fraction validation by @Viicos in #13944

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945

Full Changelog: pydantic/pydantic@v2.13.0...v2.14.0

v2.14.0b2 2026-09-09

What's Changed

This pre-release adds full support for Python 3.15 specific features, such as support for frozendict, making use of TypeForm and stabilizing the MISSING sentinel type.

New Features

Allow any CoreSchema to be used as serialization by @Viicos in #13680

Add support for frozendict type by @Viicos in #13634

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

Handle TypeError gracefully during docstring extraction by @Viicos in #13874

Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @Viicos in #13891

Don't apply ser_json_timedelta to all datetime types in serialization inference by @Viicos in #13892

Encode JSON Schema defaults with a consistent configuration by @Viicos in #13893

Propagate init and kw_only=False from Field() to stdlib dataclass fields by @Viicos in #13898

Respect propagated extra config in the JSON Schema of stdlib dataclasses by @Viicos in #13899

Handle OS errors during ZoneInfo validation by @Viicos in #13912

Handle exceptions during Decimal validation by @Viicos in #13940

Rebuild incomplete types during serialization inference by @Viicos in #13922

Reject large exponents in Fraction validation by @Viicos in #13944

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945

New Contributors

@saquibjawedbit made their first contribution in #13859

v2.14.0b2 (2026-09-09)

GitHub release

... (truncated)

Commits

fcdefa7 Correct v2.14.0 release date (#13952)
c821eac Revert "Respect config in TypeAdapter.json_schemas() (#13890)" (#13951)
a656b75 Prepare release v2.14.0 (#13948)
b4028f9 Avoid validating URL prefix multiple times in multi host URLs (#13945)
69ed168 Reject large exponents in Fraction validation (#13944)
895c0c2 Fix datetime parsing in custom validator examples (#13931)
d2cbaaa Bump virtualenv from 20.36.1 to 21.7.13 (#13943)
3fbc25a Bump pydantic-core dependencies (#13942)
027b5c7 Rebuild incomplete types during serialization inference (#13922)
2706d1f Handle exceptions during Decimal validation (#13940)
Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.54.0

Release notes

Sourced from uvicorn's releases.

Version 0.54.0

📨 Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.
uv add uvicorn==0.54.0 "zttp>=0.0.34"
Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.

HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

💡 Hint at resources before the final response

Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Version 0.53.0

🌐 Opt-in HTTP/2 support

uvicorn 0.53.0 adds experimental HTTP/2 through zttp, alongside a new zuvloop integration and connection-handling improvements.
uv add uvicorn==0.53.0
Serve HTTP/1.1 and HTTP/2 with zttp (#2982, #3101). Install zttp, then enable HTTP/2 with --http zttp --http2. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.

HTTP/2 remains experimental. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

⚙️ More event loop choice

Run Uvicorn with zuvloop (#3104). Install zuvloop separately and select it explicitly with --loop zuvloop on CPython 3.14 or newer.

🛡️ More reliable connections and proxies

Honor Connection: close token lists (#3103). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.

Trust IPv6 loopback proxies by default (#3119). The default FORWARDED_ALLOW_IPS value now includes ::1.

Keep upgraded WebSockets alive (#3107). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.

Full changelog: 0.52.4...0.53.0

Version 0.52.4

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)

Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

Add experimental HTTP/2 support through zttp (#2982, #3101)

Add support for zuvloop (#3104)

Fixed

Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)

Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)

Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

0.52.4 (August 18, 2026)

Fixed

Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)

Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)

Handle connection loss while a WebSocket write is waiting on backpressure (#3050)

... (truncated)

Commits

3eb9a9a Version 0.54.0 (#3161)
cd7ef6d Remove races from supervisor tests (#3134)
a56c7cc Support HTTP/2 response trailers (#3146)
9bd4404 chore(deps): bump anyio fro...
Description has been truncated

Bumps the python-packages group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.143.0` | | [pygithub](https://github.com/pygithub/pygithub) | `2.9.1` | `2.10.0` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.15.0` | `2.15.1` | | [psycopg2](https://github.com/psycopg/psycopg2) | `2.9.12` | `2.9.13` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.1.4` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.14.0` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.54.0` | | [redis](https://github.com/redis/redis-py) | `8.0.1` | `8.1.0` | | [pika](https://github.com/pika/pika) | `1.4.1` | `1.4.4` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.45.1` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.45.1` | | [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.66b1` | | [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.66b1` | | [opentelemetry-instrumentation-psycopg2](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.66b1` | | [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.45.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.17.0` | | [mypy](https://github.com/python/mypy) | `2.2.0` | `2.4.0` | | [types-requests](https://github.com/python/typeshed) | `2.33.0.20260712` | `2.33.0.20261006` | | [faker](https://github.com/joke2k/faker) | `40.28.1` | `40.43.0` | | [pytest-env](https://github.com/pytest-dev/pytest-env) | `1.6.0` | `1.7.1` | Updates `fastapi` from 0.139.0 to 0.143.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.143.0) Updates `pygithub` from 2.9.1 to 2.10.0 - [Release notes](https://github.com/pygithub/pygithub/releases) - [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst) - [Commits](PyGithub/PyGithub@v2.9.1...v2.10.0) Updates `pyjwt` from 2.15.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.15.0...2.15.1) Updates `psycopg2` from 2.9.12 to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `sqlalchemy` from 2.0.51 to 2.1.4 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `pydantic` from 2.13.4 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.14.0) Updates `uvicorn` from 0.51.0 to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.51.0...0.54.0) Updates `redis` from 8.0.1 to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v8.0.1...v8.1.0) Updates `pika` from 1.4.1 to 1.4.4 - [Release notes](https://github.com/pika/pika/releases) - [Changelog](https://github.com/pika/pika/blob/1.4.4/CHANGELOG.md) - [Commits](pika/pika@1.4.1...1.4.4) Updates `opentelemetry-api` from 1.43.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.45.1) Updates `opentelemetry-sdk` from 1.43.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.45.1) Updates `opentelemetry-instrumentation` from 0.64b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-fastapi` from 0.64b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-psycopg2` from 0.64b0 to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-exporter-otlp` from 1.43.0 to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.45.1) Updates `ruff` from 0.15.21 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.17.0) Updates `mypy` from 2.2.0 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.2.0...v2.4.0) Updates `types-requests` from 2.33.0.20260712 to 2.33.0.20261006 - [Commits](https://github.com/python/typeshed/commits) Updates `faker` from 40.28.1 to 40.43.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v40.28.1...v40.43.0) Updates `pytest-env` from 1.6.0 to 1.7.1 - [Release notes](https://github.com/pytest-dev/pytest-env/releases) - [Commits](pytest-dev/pytest-env@1.6.0...1.7.1) --- updated-dependencies: - dependency-name: faker dependency-version: 40.39.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: opentelemetry-exporter-otlp dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: opentelemetry-instrumentation dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-packages - dependency-name: opentelemetry-instrumentation-fastapi dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-packages - dependency-name: opentelemetry-instrumentation-psycopg2 dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-packages - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pika dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: psycopg2 dependency-version: 2.9.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pygithub dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pyjwt dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest-env dependency-version: 1.7.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: types-requests dependency-version: 2.33.0.20260906 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: uvicorn dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 21, 2026

dependabot Bot force-pushed the dependabot/pip/python-packages-fa763a2a6c branch 2 times, most recently from 0faaa8a to d69aa94 Compare October 5, 2026 09:44

dependabot Bot force-pushed the dependabot/pip/python-packages-fa763a2a6c branch from d69aa94 to a1f78cf Compare October 13, 2026 04:24

Navigation Menu

Repository navigation

Bump the python-packages group across 1 directory with 20 updates - #699

Bump the python-packages group across 1 directory with 20 updates#699
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packages-fa763a2a6c

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.143.0

Breaking Changes

0.142.4

Fixes

0.142.3

Fixes

Docs

Translations

Internal

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

New Features

Improvements

Bug Fixes

Maintenance

Version 2.10.0 (August 20, 2026)

2.15.1

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Current release

2.1.4

orm

engine

v2.14.0 2026-10-08

What's Changed

New Features

Changes

Fixes

v2.14.0b2 2026-09-09

What's Changed

New Features

v2.14.0 (2026-10-08)

What's Changed

New Features

Changes

Fixes

New Contributors

v2.14.0b2 (2026-09-09)

Version 0.54.0

📨 Send metadata after the response body

💡 Hint at resources before the final response

Version 0.53.0

🌐 Opt-in HTTP/2 support

⚙️ More event loop choice

🛡️ More reliable connections and proxies

Version 0.52.4

Fixed

Version 0.52.3

0.54.0 (September 24, 2026)

Added

0.53.0 (September 14, 2026)

Added

Fixed

0.52.4 (August 18, 2026)

Fixed

0.52.3 (August 13, 2026)

Changed

0.52.2 (August 13, 2026)

Fixed

0.52.1 (August 1, 2026)

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 21, 2026 •

edited

Loading

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__