Skip to content

Bump the dependencies group with 38 updates#1089

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-06ea7e4c26
Closed

Bump the dependencies group with 38 updates#1089
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-06ea7e4c26

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Bumps the dependencies group with 38 updates:

Package From To
pydantic 2.12.5 2.13.0
pymongo 4.10.1 4.16.0
paramiko 3.5.1 4.0.0
boto3 1.42.46 1.42.89
memray 1.19.2 1.19.3
azure-storage-blob 12.27.1 12.28.0
azure-identity 1.25.2 1.25.3
moto 5.1.21 5.1.22
responses 0.21.0 0.26.0
mkdocs-material 9.7.1 9.7.6
attrs 25.4.0 26.1.0
botocore 1.42.46 1.42.89
cryptography 46.0.6 46.0.7
pydantic-core 2.41.5 2.46.0
pytz 2025.2 2026.1.post1
urllib3 1.26.20 2.6.3
tzdata 2025.3 2026.1
azure-core 1.38.1 1.39.0
backrefs 6.1 6.2
certifi 2026.1.4 2026.2.25
charset-normalizer 3.4.4 3.4.7
mkdocs-get-deps 0.2.0 0.2.2
mpmath 1.3.0 1.4.1
msal 1.34.0 1.36.0
narwhals 2.16.0 2.19.0
plotly 6.5.2 6.7.0
pyjwt 2.12.0 2.12.1
pymdown-extensions 10.20.1 10.21.2
pytest-cov 7.0.0 7.1.0
rich 14.3.2 15.0.0
ruff 0.15.0 0.15.10
textual 7.5.0 8.2.3
tomli 2.4.0 2.4.1
virtualenv 20.36.1 21.2.3
werkzeug 3.1.6 3.1.8
xmltodict 1.0.2 1.0.4
pybtex 0.25.1 0.26.1
zipp 3.23.0 3.23.1

Updates pydantic from 2.12.5 to 2.13.0

Release notes

Sourced from pydantic's releases.

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

Packaging

  • Add zizmor for GitHub Actions workflow linting by @​Viicos in #13039
  • Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #13064

New Features

  • Allow default factories of private attributes to take validated model data by @​Viicos in #13013

Changes

Fixes

  • Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #13049
  • Fix model equality when using runtime extra configuration by @​Viicos in #13062

New Contributors

Full Changelog: pydantic/pydantic@v2.12.0...v2.13.0

v2.13.0b3 2026-03-31

What's Changed

Packaging

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

  • Allow default factories of private attributes to take validated model data by @​Viicos in #13013

Changes

Fixes

  • Change type of Any when synthesizing _build_sources for BaseSettings.__init__() signature in the mypy plugin by @​Viicos in #13049
  • Fix model equality when using runtime extra configuration by @​Viicos in #13062

Packaging

  • Add zizmor for GitHub Actions workflow linting by @​Viicos in #13039
  • Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #13064

New Contributors

v2.13.0b3 (2026-03-31)

GitHub release

What's Changed

New Features

Changes

... (truncated)

Commits

Updates pymongo from 4.10.1 to 4.16.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.16.0

Community notes:

PyMongo 4.15.5

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185

PyMongo 4.15.4

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292

PyMongo 4.15.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778

PyMongo 4.15.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543

PyMongo 4.15.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837

PyMongo 4.15.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574

PyMongo 4.14.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511

PyMongo 4.14.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906

PyMongo 4.13.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705

PyMongo 4.13.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356

PyMongo 4.13.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391.

PyMongo 4.12.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326

What's Changed

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.16.0 (2026/01/07)

PyMongo 4.16 brings a number of changes including:

  • Removed invalid documents from :class:bson.errors.InvalidDocument error messages as doing so may leak sensitive user data. Instead, invalid documents are stored in :attr:bson.errors.InvalidDocument.document.
  • PyMongo now requires dnspython>=2.6.1, since dnspython 1.0 is no longer maintained. The minimum version is 2.6.1 to account for CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483>_.
  • Removed support for Eventlet. Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Use Zstandard support from the standard library for Python 3.14+, and use backports.zstd for older versions.
  • Fixed return type annotation for find_one_and_* methods on :class:~pymongo.asynchronous.collection.AsyncCollection and :class:~pymongo.synchronous.collection.Collection to include None.
  • Added support for NumPy 1D-arrays in :class:bson.binary.BinaryVector.
  • Prevented :class:~pymongo.encryption.ClientEncryption from loading the crypt shared library to fix "MongoCryptError: An existing crypt_shared library is loaded by the application" unless the linked library search path is set.

Changes in Version 4.15.5 (2025/12/02)

Version 4.15.5 is a bug fix release.

  • Fixed a bug that could cause AutoReconnect("connection pool paused") errors when cursors fetched more documents from the database after SDAM heartbeat failures.

Changes in Version 4.15.4 (2025/10/21)

Version 4.15.4 is a bug fix release.

  • Relaxed the callback type of :meth:~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction to allow the broader Awaitable type rather than only Coroutine objects.
  • Added the missing Python 3.14 trove classifier to the package metadata.

Issues Resolved ...............

See the PyMongo 4.15.4 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.15.4 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47237

Changes in Version 4.15.3 (2025/10/07)

Version 4.15.3 is a bug fix release.

  • Fixed a memory leak when raising :class:bson.errors.InvalidDocument with C extensions.
  • Fixed the return type of the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct,

... (truncated)

Commits
  • 3290101 Prepare 4.16.0 release (#2672)
  • 1be94d2 PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (#2669)
  • 6585d9c PYTHON-2442: Refactor: use _asdict() in _options_dict() (#2670)
  • fdb1f7e PYTHON-5677 Prevent ClientEncryption from loading crypt shared library (#2659)
  • 0cd9763 Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...
  • 2f263d4 PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (#2665)
  • e9658b2 Add 4.15.5 release date to changelog (#2666)
  • 10dd204 Update coverage[toml] requirement from <=7.10.6,>=5 to >=5,<=7.10.7 (#2662)
  • 1300677 [Spec Resync] 12-22-2025 (#2663)
  • 18c1f14 PYTHON-5529 Introduce optin setting to await for MinPoolSize population (#2664)
  • Additional commits viewable in compare view

Updates paramiko from 3.5.1 to 4.0.0

Commits
  • aad0370 Cut 4.0.0 in changelog
  • 76f2406 Speling
  • 8c4277c Fix syntax-warning-throwing unittest method call
  • d3a9617 Test existence of root module dunder version
  • 9579700 Nuke mentions of specific Python 3.x versions from docs etc
  • dbfd52c Administrivia update: Python>=3.9, pyproject.toml, etc
  • c2ba378 Remove outdated version check in GSS module
  • 2af0dd7 I'm good at my job, honest
  • e534b1a Fixes #973: remove DSA/DSS support
  • 3523feb Tweak .gitignore to more safely ignore top level docs/
  • See full diff in compare view

Updates boto3 from 1.42.46 to 1.42.89

Commits
  • 54a9dc1 Merge branch 'release-1.42.89'
  • 730d84c Bumping version to 1.42.89
  • 6b65768 Add changelog entries from botocore
  • f92a06c Merge branch 'release-1.42.88'
  • 5da0f6a Merge branch 'release-1.42.88' into develop
  • 9bdec29 Bumping version to 1.42.88
  • d880788 Add changelog entries from botocore
  • 39a4122 chore: add additional text to CONTRIBUTING.rst (#4749)
  • 8d65320 Merge branch 'release-1.42.87'
  • fdcbb88 Merge branch 'release-1.42.87' into develop
  • Additional commits viewable in compare view

Updates memray from 1.19.2 to 1.19.3

Release notes

Sourced from memray's releases.

v1.19.3

What's Changed

New Contributors

Full Changelog: bloomberg/memray@v1.19.2...v1.19.3

Changelog

Sourced from memray's changelog.

memray 1.19.3 (2026-04-07)

Bug Fixes


- Include Linux HugeTLB memory in memray's RSS snapshots by adding ``HugetlbPages`` from ``/proc/<pid>/status`` to ``VmRSS``. This makes resident-memory graphs and memory snapshot records account for huge pages that the kernel reports separately from normal RSS.
- Fix a broken link in the tutorial documentation. ([#891](https://github.com/bloomberg/memray/issues/891))
- Fix a bug that would result in a crash if DNS resolution failed while setting up live mode tracking. ([#894](https://github.com/bloomberg/memray/issues/894))
- Fix a bug that could result in a list getting leaked if we ran out of memory while reporting allocations. ([#895](https://github.com/bloomberg/memray/issues/895))

Miscellaneous

  • Add a KEYS file to the repo documenting the PGP public keys of the maintainers who will tag new Memray releases and upload them to PyPI.
  • Enable PyPI Trusted Publishing for Memray releases, rather than using long-lived secrets.
Commits
  • 1952221 Prepare for 1.19.3 release
  • 2f83784 ci: Switch to Trusted Publishing
  • 9303254 docs: Remove broken link in tutorial
  • 8ed3279 Include HugeTLB pages in Linux RSS snapshots
  • 99db37a Set LZ4 include directory in CPPFLAGS, not CFLAGS
  • 00d4ad4 build(deps): bump codecov/codecov-action from 5 to 6
  • c3dd05a build(deps-dev): bump lodash from 4.17.23 to 4.18.1
  • 6574bd7 Fix GIL double-release in DNS resolution error path
  • f552b35 build(deps): bump @​tootallnate/once and jest
  • f55b768 build(deps): bump pypa/cibuildwheel from 3.4.0 to 3.4.1
  • Additional commits viewable in compare view

Updates azure-storage-blob from 12.27.1 to 12.28.0

Commits
  • b3301ac STG 100 GA Release Date for 2026-01-06
  • beb8dfa [Storage][STG 100] Prepare branch for GA + cherry-pick block size change (#44...
  • 874cfcf [Storage] Update Swagger and Release Date (#44243)
  • 4aca0cc Fix perf tests on Python 3.14 + Storage change (#44230)
  • cd5ecc5 [Storage] Fix 100 Live Tests (#44108)
  • 1cd78b1 [Storage] Added support for Python 3.14 + update 100 release date (#44224)
  • 471cda1 [Storage] Add Blob download perf test that uses HTTP library directly (#44111)
  • 9e53510 [Storage] Decompression for Binary Response in Download APIs (#43587)
  • 68b646b Removed create file with data and file semantics features (#43978)
  • 09f0066 [Storage] Added Support for UseDevelopmentStorage=true; for Connection Stri...
  • Additional commits viewable in compare view

Updates azure-identity from 1.25.2 to 1.25.3

Release notes

Sourced from azure-identity's releases.

azure-identity_1.25.3

1.25.3 (2026-03-12)

Bugs Fixed

  • Fixed an issue where an expired token could skip refresh when a recent token request was made, due to the retry delay taking precedence over expiration. (#45496)

Other Changes

  • Bumped minimum dependency on msal to >=1.35.1.
Commits

Updates moto from 5.1.21 to 5.1.22

Changelog

Sourced from moto's changelog.

5.1.22

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

* Athena:
    * tag_resource()
    * untag_resource()

    

  • 

    Pipes:
    

      

    • list_tags_for_resource()
      • 

    

    • 

  • 

    OSIS:
    

      

    • delete_resource_policy()
      • 

    • get_resource_policy()
      • 

    • put_resource_policy()
      • 

    

    • 

  • 

    RDS:
    

      

    • copy_db_cluster_parameter_group()
      • 

    

    • 

  • 

    STS:
    

      

    • get_access_key_info()
      • 

    

    • 

  • 

    Transfer:
    

      

    • list_servers()
      






Miscellaneous:

* CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources

* CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources

* CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources

* EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides

* EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter

* EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags

* RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy

* RDS: delete_db_cluster_parameter_group() now validates that the provided group exists

* S3: delete_object() now supports IfMatch

* SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)

* SQS: send_message() now returns the SequenceNumber-attribute

* VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

Commits

Updates responses from 0.21.0 to 0.26.0

Release notes

Sourced from responses's releases.

0.26.0

  • When using assert_all_requests_are_fired=True, assertions about unfired requests are now raised even when an exception occurs in the context manager or decorated function. Previously, these assertions were suppressed when exceptions occurred. This new behavior provides valuable debugging context about which mocked requests were or weren't called.
  • Consider the Retry-After header when handling retries

0.25.8

  • Fix bug where the content type is always recorded as either text/plain or application/json. See #770
  • Allow asserts on add_callback() matches. See #727

0.25.7

  • Added support for python 3.13

0.25.6

No release notes provided.

0.25.5

No release notes provided.

0.25.3

  • Fixed recorder not saving and loading response headers with yaml files. See #715

0.25.2

  • Mulligan on 0.25.1 to run release pipeline correctly.
  • Added matchers.body_matcher for matching string request bodies. See #717

Responses 0.25.1

What's Changed

New Contributors

Full Changelog: getsentry/responses@0.25.0...0.25.1

0.25.0

  • Added support for Python 3.12
  • Fixed matchers.header_matcher not failing when a matched header is missing from the request. See #702

0.24.1

  • Reverted overloads removal
  • Added typing to Call attributes.
  • Fix socket issues (see #693)

0.24.0

... (truncated)

Changelog

Sourced from responses's changelog.

0.26.0

  • When using assert_all_requests_are_fired=True, assertions about unfired requests are now raised even when an exception occurs in the context manager or decorated function. Previously, these assertions were suppressed when exceptions occurred. This new behavior provides valuable debugging context about which mocked requests were or weren't called.
  • Consider the Retry-After header when handling retries

0.25.8

  • Fix bug where the content type is always recorded as either text/plain or application/json. See #770
  • Allow asserts on add_callback() matches. See #727

0.25.7

  • Added support for python 3.13

0.25.6

  • Added py.typed to package_data

0.25.5

  • Fix readme issue that prevented 0.25.4 from being published to pypi.

0.25.4

  • Responses can now match requests that use data with file-like objects. Files will be read as bytes and stored in the request mock. See #736
  • RequestsMock.matchers was added. This property is an alias to responses.matchers. See #739
  • Removed tests from packaged wheels. See #746
  • Improved recorder API to ease use in REPL environments. See #745

0.25.3

  • Fixed recorder not saving and loading response headers with yaml files. See #715

0.25.2

  • Mulligan on 0.25.1 to run release pipeline correctly.

... (truncated)

Commits
  • 94913d0 release: 0.26.0
  • 051b79e Make assert_all_requests_are_fired always assert on exception (#782)
  • 0905cb8 Fix query_param_matcher not matching empty query parameter values (#787)
  • e0c6faa ci(release): Switch from action-prepare-release to Craft (#785)
  • 1be3a73 fix: Consider the Retry-After header when handling retries (#784)
  • c6730fb Merge branch 'release/0.25.8'
  • cdd104d release: 0.25.8
  • f940dc7 Allow asserts on add_callback() matches (#774)
  • 9485a01 Fix mypy errors in master (#776)
  • 1532e9e 🔧 chore: update return type of RequestsMock.exit (#769)
  • Additional commits viewable in compare view

Updates mkdocs-material from 9.7.1 to 9.7.6

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.6

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

  • Hardened social cards plugin by switching to sandboxed environment (recommended by @​caveeroo)
  • Updated MkDocs 2.0 incompatibility warning

... (truncated)

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.6 (2026-03-19)

  • Automatically disable MkDocs 2.0 warning for forks of MkDocs

mkdocs-material-9.7.5 (2026-03-10)

  • Limited version range of mkdocs to <2
  • Updated MkDocs 2.0 incompatibility warning (clarify relation with MkDocs)

mkdocs-material-9.7.4 (2026-03-03)

  • Hardened social cards plugin by switching to sandboxed environment
  • Updated MkDocs 2.0 incompatibility warning

mkdocs-material-9.7.3 (2026-02-24)

  • Fixed #8567: Print MkDocs 2.0 incompatibility warning to stderr

mkdocs-material-9.7.2 (2026-02-18)

  • Opened up version ranges of optional dependencies for forward-compatibility
  • Added warning to 'mkdocs build' about impending MkDocs 2.0 incompatibility

mkdocs-material-9.7.1 (2025-12-18)

  • Updated requests to 2.30+ to mitigate CVE in urllib
  • Fixed privacy plugin not picking up protocol-relative URLs
  • Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

... (truncated)

Commits
  • 6c52ed6 Prepare 9.7.6 release
  • 51d9b76 Automatically disable MkDocs 2.0 warning for forks of MkDocs
  • 6f9a48b Updated links
  • 00b9933 Prepare 9.7.5 release
  • 37683d1 Updated blog post on MkDocs 2.0
  • 199e315 Updated warning message to clarify relation to MkDocs
  • 1025833 Limited version range of mkdocs to <2
  • 1532f52 Added update log to blog post
  • d0c8b28 Updated dependencies to fix vulnerabilities
  • 71d4869 Updated blog post on MkDocs 2.0
  • Additional commits viewable in compare view

Updates attrs from 25.4.0 to 26.1.0

Release notes

Sourced from attrs's releases.

26.1.0

Highlights

The main outward change here only affects people using field transformers, but it should be a nice quality of life improvement!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Backwards-incompatible Changes

  • Field aliases are now resolved before callin...

    Description has been truncated

@dependabot
Bump the dependencies group with 38 updates
6396fdf 
Bumps the dependencies group with 38 updates:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.0` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.10.1` | `4.16.0` |
| [paramiko](https://github.com/paramiko/paramiko) | `3.5.1` | `4.0.0` |
| [boto3](https://github.com/boto/boto3) | `1.42.46` | `1.42.89` |
| [memray](https://github.com/bloomberg/memray) | `1.19.2` | `1.19.3` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.27.1` | `12.28.0` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.25.2` | `1.25.3` |
| [moto](https://github.com/getmoto/moto) | `5.1.21` | `5.1.22` |
| [responses](https://github.com/getsentry/responses) | `0.21.0` | `0.26.0` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.1` | `9.7.6` |
| [attrs](https://github.com/python-attrs/attrs) | `25.4.0` | `26.1.0` |
| [botocore](https://github.com/boto/botocore) | `1.42.46` | `1.42.89` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.6` | `46.0.7` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.46.0` |
| [pytz](https://github.com/stub42/pytz) | `2025.2` | `2026.1.post1` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.20` | `2.6.3` |
| [tzdata](https://github.com/python/tzdata) | `2025.3` | `2026.1` |
| [azure-core](https://github.com/Azure/azure-sdk-for-python) | `1.38.1` | `1.39.0` |
| [backrefs](https://github.com/facelessuser/backrefs) | `6.1` | `6.2` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.2.25` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.4` | `3.4.7` |
| [mkdocs-get-deps](https://github.com/mkdocs/get-deps) | `0.2.0` | `0.2.2` |
| [mpmath](https://github.com/mpmath/mpmath) | `1.3.0` | `1.4.1` |
| [msal](https://github.com/AzureAD/microsoft-authentication-library-for-python) | `1.34.0` | `1.36.0` |
| [narwhals](https://github.com/narwhals-dev/narwhals) | `2.16.0` | `2.19.0` |
| [plotly](https://github.com/plotly/plotly.py) | `6.5.2` | `6.7.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.12.0` | `2.12.1` |
| [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.20.1` | `10.21.2` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [rich](https://github.com/Textualize/rich) | `14.3.2` | `15.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.0` | `0.15.10` |
| [textual](https://github.com/Textualize/textual) | `7.5.0` | `8.2.3` |
| [tomli](https://github.com/hukkin/tomli) | `2.4.0` | `2.4.1` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.36.1` | `21.2.3` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.6` | `3.1.8` |
| [xmltodict](https://github.com/martinblech/xmltodict) | `1.0.2` | `1.0.4` |
| [pybtex](https://pybtex.org/) | `0.25.1` | `0.26.1` |
| [zipp](https://github.com/jaraco/zipp) | `3.23.0` | `3.23.1` |


Updates `pydantic` from 2.12.5 to 2.13.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.0)

Updates `pymongo` from 4.10.1 to 4.16.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.10.1...4.16.0)

Updates `paramiko` from 3.5.1 to 4.0.0
- [Commits](paramiko/paramiko@3.5.1...4.0.0)

Updates `boto3` from 1.42.46 to 1.42.89
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.46...1.42.89)

Updates `memray` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/bloomberg/memray/releases)
- [Changelog](https://github.com/bloomberg/memray/blob/main/NEWS.rst)
- [Commits](bloomberg/memray@v1.19.2...v1.19.3)

Updates `azure-storage-blob` from 12.27.1 to 12.28.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.27.1...azure-storage-blob_12.28.0)

Updates `azure-identity` from 1.25.2 to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.2...azure-identity_1.25.3)

Updates `moto` from 5.1.21 to 5.1.22
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.21...5.1.22)

Updates `responses` from 0.21.0 to 0.26.0
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](getsentry/responses@0.21.0...0.26.0)

Updates `mkdocs-material` from 9.7.1 to 9.7.6
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.1...9.7.6)

Updates `attrs` from 25.4.0 to 26.1.0
- [Release notes](https://github.com/python-attrs/attrs/releases)
- [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md)
- [Commits](python-attrs/attrs@25.4.0...26.1.0)

Updates `botocore` from 1.42.46 to 1.42.89
- [Commits](boto/botocore@1.42.46...1.42.89)

Updates `cryptography` from 46.0.6 to 46.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.6...46.0.7)

Updates `pydantic-core` from 2.41.5 to 2.46.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pytz` from 2025.2 to 2026.1.post1
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2025.2...release_2026.1.post1)

Updates `urllib3` from 1.26.20 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.20...2.6.3)

Updates `tzdata` from 2025.3 to 2026.1
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2025.3...2026.1)

Updates `azure-core` from 1.38.1 to 1.39.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-core_1.38.1...azure-core_1.39.0)

Updates `backrefs` from 6.1 to 6.2
- [Release notes](https://github.com/facelessuser/backrefs/releases)
- [Commits](facelessuser/backrefs@6.1...6.2)

Updates `certifi` from 2026.1.4 to 2026.2.25
- [Commits](certifi/python-certifi@2026.01.04...2026.02.25)

Updates `charset-normalizer` from 3.4.4 to 3.4.7
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.4...3.4.7)

Updates `mkdocs-get-deps` from 0.2.0 to 0.2.2
- [Commits](https://github.com/mkdocs/get-deps/commits)

Updates `mpmath` from 1.3.0 to 1.4.1
- [Release notes](https://github.com/mpmath/mpmath/releases)
- [Changelog](https://github.com/mpmath/mpmath/blob/1.4.1/CHANGES)
- [Commits](mpmath/mpmath@1.3.0...1.4.1)

Updates `msal` from 1.34.0 to 1.36.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-python/releases)
- [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/RELEASES.md)
- [Commits](AzureAD/microsoft-authentication-library-for-python@1.34.0...1.36.0)

Updates `narwhals` from 2.16.0 to 2.19.0
- [Release notes](https://github.com/narwhals-dev/narwhals/releases)
- [Commits](narwhals-dev/narwhals@v2.16.0...v2.19.0)

Updates `plotly` from 6.5.2 to 6.7.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v6.5.2...v6.7.0)

Updates `pyjwt` from 2.12.0 to 2.12.1
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.12.0...2.12.1)

Updates `pymdown-extensions` from 10.20.1 to 10.21.2
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/commits/10.21.2)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `rich` from 14.3.2 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.3.2...v15.0.0)

Updates `ruff` from 0.15.0 to 0.15.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.0...0.15.10)

Updates `textual` from 7.5.0 to 8.2.3
- [Release notes](https://github.com/Textualize/textual/releases)
- [Changelog](https://github.com/Textualize/textual/blob/main/CHANGELOG.md)
- [Commits](Textualize/textual@v7.5.0...v8.2.3)

Updates `tomli` from 2.4.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.4.0...2.4.1)

Updates `virtualenv` from 20.36.1 to 21.2.3
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.36.1...21.2.3)

Updates `werkzeug` from 3.1.6 to 3.1.8
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.6...3.1.8)

Updates `xmltodict` from 1.0.2 to 1.0.4
- [Release notes](https://github.com/martinblech/xmltodict/releases)
- [Changelog](https://github.com/martinblech/xmltodict/blob/master/CHANGELOG.md)
- [Commits](martinblech/xmltodict@v1.0.2...v1.0.4)

Updates `pybtex` from 0.25.1 to 0.26.1

Updates `zipp` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.0...v3.23.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pymongo
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: paramiko
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.42.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: memray
  dependency-version: 1.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: azure-storage-blob
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: moto
  dependency-version: 5.1.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: responses
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: mkdocs-material
  dependency-version: 9.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: attrs
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.42.89
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydantic-core
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytz
  dependency-version: 2026.1.post1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: tzdata
  dependency-version: '2026.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: azure-core
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: backrefs
  dependency-version: '6.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: certifi
  dependency-version: 2026.2.25
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: mkdocs-get-deps
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: mpmath
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: msal
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: narwhals
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: plotly
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pyjwt
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pymdown-extensions
  dependency-version: 10.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.15.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: textual
  dependency-version: 8.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: tomli
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: virtualenv
  dependency-version: 21.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: werkzeug
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: xmltodict
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pybtex
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zipp
  dependency-version: 3.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 14, 2026
@rkingsbury rkingsbury closed this Apr 22, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 22, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/dependencies-06ea7e4c26 branch April 22, 2026 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rkingsbury