chore(deps): bump the production-dependencies group across 1 directory with 9 updates

[dependabot]

Bumps the production-dependencies group with 9 updates in the / directory:

Package	From	To
alembic	1.19.1	1.19.2
cachetools	7.1.7	7.1.8
cryptography	50.0.0	50.0.1
gitpython	3.1.59	3.1.61
grpcio	1.83.0	1.83.1
grpcio-health-checking	1.83.0	1.83.1
grpcio-testing	1.83.0	1.83.1
grpcio-tools	1.83.0	1.83.1
phonenumbers	9.0.37	9.0.38

Updates alembic from 1.19.1 to 1.19.2

Release notes

Sourced from alembic's releases.

1.19.2

Released: September 4, 2026

changed

• [changed] [autogenerate] The autogenerate plugin for CHECK constraint detection by name, added in 1.19.0. for #508, is no longer enabled by default. It has been renamed from alembic.autogenerate.checkconstraint_byname to alembic.ext.checkconstraint_byname and no longer matches on the "alembic.autogenerate.*" wildcard, which remains the default plugin specification. The previous name will still function as well if placed in the plugins list explicitly, both to enable the plugin and within a "~" exclusion, so that an env.py written against 1.19.0 or 1.19.1 requires no change.

  The plugin is now recommended only for schemas that ensure the naming of all constraints using a client side naming convention, otherwise there's a persistent risk of false positives. See autogenerate_check_constraints for background on things to be aware of when using this plugin.

  As part of this change "type bound" CHECK constraints, which include constraints generated for the Boolean and Enum datatypes when the create_constraint parameter is set to True, are no longer ignored in the metadata side, so that normal name-based matching can occur for these constraints.

  References: #1859

usecase

• [usecase] [autogenerate] [batch] The target of a ~sqlalchemy.schema.ForeignKey is now located using the ForeignKey.target_tokens and ForeignKey.target_table_key accessors added in SQLAlchemy 2.1, rather than by splitting the dotted string form of that target on ".". As a dot inside a schema, table or column name cannot be told apart from the separator between those names, a foreign key whose target name contained a dot was previously mis-parsed by autogenerate rendering as well as by batch migrations. The dotted string continues to be split when running against SQLAlchemy 2.0, where these accessors are not present. Thanks to Gyanu Mayank for the initial pull request.

  References: #1860

Commits

• See full diff in compare view

Updates cachetools from 7.1.7 to 7.1.8

Changelog

Sourced from cachetools's changelog.

v7.1.8 (2026-08-31)

• Reject negative maxsize in Cache.__init__.

Commits

• 4500e3d Release v7.1.8.
• 6e49bef Update copilot instructions and review.
• defc58b Prepare v7.1.8.
• a39180b Remove somewhat superfluous and slightly incorrect documentation note regardi...
• dd181c5 Reject negative maxsize in Cache.init
• b43b953 Use monthly batches for dependabot updates.
• See full diff in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.
.. _v50-0-0:

Commits

• ffde75a bump for 50.0.1 + changelog (#15520)
• See full diff in compare view

Updates gitpython from 3.1.59 to 3.1.61

Release notes

Sourced from gitpython's releases.

3.1.61

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

• Fix repository discovery precedence by @​Byron in gitpython-developers/GitPython#2218
• fix: wait for git daemon to listen before connecting by @​Vogtinator in gitpython-developers/GitPython#2219
• fix: restore Actor.name_email_regex by @​Byron in gitpython-developers/GitPython#2221

New Contributors

• @​Vogtinator made their first contribution in gitpython-developers/GitPython#2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

3.1.60 Security

What's Changed

• prepare changelog prior to release by @​Byron in gitpython-developers/GitPython#2212
• Preserve Git config escape semantics by @​Byron in gitpython-developers/GitPython#2213
• Harden diff path and actor identity parsing by @​Byron in gitpython-developers/GitPython#2215
• Require explicit opt-in for filesystem diffs by @​Byron in gitpython-developers/GitPython#2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

Commits

• 5346d1b prepare next release
• d81336b Merge pull request #2221 from gitpython-developers/re-add-regex
• bc63b02 fix: restore Actor.name_email_regex (#2220)
• a9fb008 Merge pull request #2219 from Vogtinator/main
• db1a2cf fix: wait for git daemon to listen before connecting
• 3481da9 Merge pull request #2218 from gitpython-developers/fix-repo-open
• 56636c3 prepare new release
• c7cf4d1 fix: prefer .git during repository discovery
• d160fb4 Merge pull request #2217 from gitpython-developers/fix-advisory
• 09f2cf3 fix: require opt-in for no-index diffs
• Additional commits viewable in compare view

Updates grpcio from 1.83.0 to 1.83.1

Release notes

Sourced from grpcio's releases.

Release v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Commits

• aae2670 [Backport][v1.83.x] Fix legacy_channel.cc compile error with `std::optional<a...
• b77ea36 [Backport][v1.83.x] Memory optimization (#43297)
• 9dcd5aa [CI] Fix Python 3.15 Sanity (#43299)
• ed8899e [Backport][v1.83.x] Fixing bug in GoAway and gRPC Message Compression (#43270)
• 5f8d6df [Release] Bump version to 1.83.1 (on v1.83.x branch) (#43274)
• 291e0be [Backport][v1.83.x][Python] Fix the StatusCode Enums to be int (#43252)
• 05ceb5d [CI][Backport][v1.83.x][Python] Fix PSM Interop xds-v3 Python continuous fail...
• dbc73b8 [Backport][v1.83.x][PHP]updated workflow to preserve github folder (#43243)
• See full diff in compare view

Updates grpcio-health-checking from 1.83.0 to 1.83.1

Updates grpcio-testing from 1.83.0 to 1.83.1

Updates grpcio-tools from 1.83.0 to 1.83.1

Release notes

Sourced from grpcio-tools's releases.

Release v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Commits

• 5f8d6df [Release] Bump version to 1.83.1 (on v1.83.x branch) (#43274)
• See full diff in compare view

Updates phonenumbers from 9.0.37 to 9.0.38

Commits

• 8573503 Prep for 9.0.38 release
• 3bd961c Generated files for metadata
• 9d0fd57 Merge metadata changes from upstream 9.0.38
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions