From 2c812ae224b85c7ff294a342461dda4aef99387e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 08:25:23 +0000 Subject: [PATCH] chore(deps): bump the python group across 1 directory with 5 updates Bumps the python group with 5 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.142.2` | `0.146.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.15.0` | `2.16.0` | | [pyvrp](https://github.com/PyVRP/PyVRP) | `0.14.0` | `0.14.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.17.1` | Updates `fastapi` from 0.142.2 to 0.146.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.142.2...0.146.0) Updates `pydantic` from 2.13.5 to 2.14.1 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.5...v2.14.1) Updates `pydantic-settings` from 2.15.0 to 2.16.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.15.0...v2.16.0) Updates `pyvrp` from 0.14.0 to 0.14.1 - [Release notes](https://github.com/PyVRP/PyVRP/releases) - [Commits](https://github.com/PyVRP/PyVRP/compare/v0.14.0...v0.14.1) Updates `ruff` from 0.16.9 to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.9...0.17.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.146.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pydantic dependency-version: 2.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pydantic-settings dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pyvrp dependency-version: 0.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] --- backend/pyproject.toml | 8 ++++---- backend/requirements-dev.txt | 2 +- backend/requirements.txt | 8 ++++---- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/backend/pyproject.toml b/backend/pyproject.toml index 72dedf3..eed72b6 100644 --- a/backend/pyproject.toml +++ b/backend/pyproject.toml @@ -6,13 +6,13 @@ description = "Resource allocation engine: equipment engineers to tool-downs and requires-python = ">=3.11" readme = "../README.md" dependencies = [ - "fastapi==0.142.2", + "fastapi==0.146.0", "uvicorn[standard]==0.54.0", - "pydantic==2.13.5", - "pydantic-settings==2.15.0", + "pydantic==2.14.1", + "pydantic-settings==2.16.0", "numpy>=2.3,<3", "scipy>=1.16,<2", - "pyvrp==0.14.0", + "pyvrp==0.14.1", "qdrant-client==1.19.1", "pyjwt[crypto]==2.15.1", "psycopg[binary]==3.3.6", diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt index a9b9774..b1e5750 100644 --- a/backend/requirements-dev.txt +++ b/backend/requirements-dev.txt @@ -2,7 +2,7 @@ pytest==9.1.1 pytest-cov==7.1.0 httpx==0.28.1 -ruff==0.16.9 +ruff==0.17.1 pip-audit==2.10.1 pyyaml==6.0.3 # docs-site consistency test reads mkdocs.yml scikit-learn==1.9.1 # quantile model in scripts/duration_study.py; dev only diff --git a/backend/requirements.txt b/backend/requirements.txt index e678d12..6f0cd2c 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,12 +1,12 @@ # Runtime dependencies. Everything is free/open-source; nothing needs an API key. # Exact pins, except numpy/scipy: ranges so Python 3.11-3.14 each get a matching wheel. -fastapi==0.142.2 +fastapi==0.146.0 uvicorn[standard]==0.54.0 -pydantic==2.13.5 -pydantic-settings==2.15.0 +pydantic==2.14.1 +pydantic-settings==2.16.0 numpy>=2.3,<3 # range, not a pin: 2.5 dropped Python 3.11 scipy>=1.16,<2 # Hungarian (linear_sum_assignment) and the exact MILP (HiGHS) -pyvrp==0.14.0 # state-of-the-art VRPTW iterated local search, MIT +pyvrp==0.14.1 # state-of-the-art VRPTW iterated local search, MIT qdrant-client==1.19.1 # repair-history vector search (embedded locally, server in prod) pyjwt[crypto]==2.15.1 # verifies Supabase (ES256/RS256 via JWKS) and demo (HS256) tokens psycopg[binary]==3.3.6 # Postgres / Supabase in production; unused with the SQLite default