Skip to content

build(deps): bump the python-deps group across 1 directory with 11 updates - #803

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/api/python-deps-7b9b0e3556
Open

build(deps): bump the python-deps group across 1 directory with 11 updates#803
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/api/python-deps-7b9b0e3556

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group with 11 updates in the /apps/api directory:

Package From To
pydantic 2.13.4 2.13.5
pydantic-settings 2.14.2 2.15.0
jsonschema-rs 0.49.6 0.56.0
cryptography 50.0.0 50.0.1
globus-sdk 4.8.1 4.9.0
diff-cover 10.4.1 10.5.1
ruff 0.16.1 0.16.7
pyright 1.1.411 1.1.414
httpx2 2.9.1 2.12.0
pre-commit 4.6.1 4.6.2
hypothesis 6.165.2 6.168.0

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

... (truncated)

Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates jsonschema-rs from 0.49.6 to 0.56.0

Release notes

Sourced from jsonschema-rs's releases.

[Python] Release 0.56.0

Added

  • canonical.RawReason, what stopped a run from modeling a document, and RawView.reason and RawView.pointer, carrying it beside the subschema the run stopped on.

Changed

  • Canonicalization of a oneOf whose branches share a region too wide to expand, which spent the document's whole intersection allowance on that choice and kept the document Raw.

Performance

  • Preparing or building a schema that names no base URI parses the default one once for the process instead of once per schema.
  • Canonicalization reads the facets no checker covers once per node instead of once per containment query.

[Ruby] Release 0.56.0

Added

  • JSONSchema::Canonical::RawReason, what stopped a run from modeling a document, and RawView#reason and RawView#pointer, carrying it beside the subschema the run stopped on.

Changed

  • Canonicalization of a oneOf whose branches share a region too wide to expand, which spent the document's whole intersection allowance on that choice and kept the document Raw.

Performance

  • Preparing or building a schema that names no base URI parses the default one once for the process instead of once per schema.
  • Canonicalization reads the facets no checker covers once per node instead of once per containment query.

[Rust] Release 0.56.0

Added

  • canonical::RawReason, what stopped a run from modeling a document, and canonical::RawView, carrying it beside the document and a pointer to the subschema the run stopped on.
  • ValidationOptions::is_known_format, whether a format of that name is checked under a draft.

Changed

  • BREAKING: canonical::CanonicalView::Raw carries a canonical::RawView in place of the document alone.
  • Canonicalization of a oneOf whose branches share a region too wide to expand, which spent the document's whole intersection allowance on that choice and kept the document Raw.

Performance

  • Preparing or building a schema that names no base URI parses the default one once for the process instead of once per schema.
  • Canonicalizing several subschemas of one prepared document compiles each pattern once for the document instead of once per call.
  • Canonicalization reads the facets no checker covers once per node instead of once per containment query.

[Python] Release 0.55.1

Changed

  • Canonicalization of an anyOf over an allOf through a $ref to a union, which left that union nested inside the outer one.
  • Canonicalization of an anyOf whose branch narrowing runs out of intersections, which left true as a branch inside the union.

... (truncated)

Changelog

Sourced from jsonschema-rs's changelog.

[0.56.0] - 2026-09-10

Added

  • canonical::RawReason, what stopped a run from modeling a document, and canonical::RawView, carrying it beside the document and a pointer to the subschema the run stopped on.
  • ValidationOptions::is_known_format, whether a format of that name is checked under a draft.

Changed

  • BREAKING: canonical::CanonicalView::Raw carries a canonical::RawView in place of the document alone.
  • Canonicalization of a oneOf whose branches share a region too wide to expand, which spent the document's whole intersection allowance on that choice and kept the document Raw.

Performance

  • Preparing or building a schema that names no base URI parses the default one once for the process instead of once per schema.
  • Canonicalizing several subschemas of one prepared document compiles each pattern once for the document instead of once per call.
  • Canonicalization reads the facets no checker covers once per node instead of once per containment query.

[0.55.1] - 2026-09-08

Changed

  • Canonicalization of an anyOf over an allOf through a $ref to a union, which left that union nested inside the outer one.
  • Canonicalization of an anyOf whose branch narrowing runs out of intersections, which left true as a branch inside the union.

[0.55.0] - 2026-09-06

Changed

  • BREAKING: canonical::ObjectViolationView gained the PatternValueFails variant, which negation records for a patternProperties entry.
  • Canonicalization of not over patternProperties, which kept the entry under not instead of recording the demand a key breaks.
  • Canonicalization of unevaluated* beside a conditional reaching no key or index the node already evaluates, which spent a case on it.
  • Canonicalization of a conditional split outgrowing its per-node case budget, which kept documents like the Open API 3.2 meta-schema Raw.
  • Canonicalization of an anyOf over objects sharing a properties key under patternProperties, which settled only on a second pass.
  • Canonicalization of not over an allOf folded through a reference, which settled only on a second pass.
  • Canonicalization of a multipleOf divisor past f64 precision, which was not taken to divide itself.
  • Canonicalization of an anyOf over a value beside a window pinned to it, which settled only on a second pass.
  • Canonicalization of minProperties: 1 beside a not that already demands a key, which settled only on a second pass.

Fixed

  • absolute_keyword_location naming the sibling keyword whose validator carries the check: maxLength beside minLength, minItems, maxItems or type beside items, and a two-name required beside properties. #1579
  • schemaLocation in evaluate output naming minLength for a maxLength failure. #1579

[0.54.0] - 2026-09-06

Added

  • backend = SerdeJson on #[jsonschema::validator], generating a validator that reads serde_json::Value.
  • PreparedDocument::unsatisfiable_pointers, listing every subschema no value satisfies.

... (truncated)

Commits
  • c5ce51d chore(ruby): Release 0.56.0
  • 1e244c9 chore(rust): Release 0.56.0
  • 507d66a build: Switch to weekly dependabot
  • 7762942 build: Increase timeout for s390x test job
  • 7d4b40d test: Update hegeltest to 0.41
  • b2622e5 build(deps): bump taiki-e/install-action from 2.87.3 to 2.87.8
  • c983788 build(deps): update wasm-bindgen requirement from =0.2.127 to =0.2.128
  • 6e7e8f6 build(deps): bump crates/jsonschema/tests/suite
  • 3f2c0a0 perf: Preparing or building a schema that names no base URI parses the defaul...
  • 2b4f25b perf: More benchmarks
  • Additional commits viewable in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

Updates globus-sdk from 4.8.1 to 4.9.0

Release notes

Sourced from globus-sdk's releases.

4.9.0

Added

  • Add Web Input-related methods to the FlowsClient class. (#1410) The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

  • Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (#1417)

Changed

  • The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (#1414)

Documentation

  • Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (#1408)

  • Update the URL to the Flows API documentation. (#1409)

Security

  • GitHub Actions security is now checked with zizmor (#1402)

Development

  • globus-sdk testing now leverages Sphinx doctest to make select examples testable. (#1406)
Changelog

Sourced from globus-sdk's changelog.

v4.9.0 (2026-08-10)

Added

  • Add Web Input-related methods to the FlowsClient class. (:pr:1410)

    The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

  • Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (:pr:1417)

Changed

  • The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (:pr:1414)

Documentation

  • Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (:pr:1408)

  • Update the URL to the Flows API documentation. (:pr:1409)

Security

  • GitHub Actions security is now checked with zizmor <https://zizmor.sh>_ (:pr:1402)

Development

  • globus-sdk testing now leverages Sphinx doctest to make select examples testable. (:pr:1406)

.. _changelog-4.8.1:

Commits
  • 68229cc Release v4.9.0 (#1418)
  • 4872dc3 (actions) update PR references
  • 227c770 Update the auth management example scripts (#1417)
  • 3e5a748 Update the create-and-run-flow example scripts (#1416)
  • 3f45ff2 Inline FlowsClient construction in examples
  • 7b08829 Update the auth management example scripts
  • 6736880 Update the create-and-run-flow example scripts
  • a3aed17 Introduce GlobusApp.logout(sweep=True) (#1415)
  • 297d710 Introduce GlobusApp.logout(sweep=True)
  • b5142ae (actions) update PR references
  • Additional commits viewable in compare view

Updates diff-cover from 10.4.1 to 10.5.1

Release notes

Sourced from diff-cover's releases.

Vesion 10.5.1

What's Changed

Full Changelog: Bachmann1234/diff_cover@v10.5.0...v10.5.1

Version 10.5.0

What's Changed

New Contributors

Full Changelog: Bachmann1234/diff_cover@v10.4.2...v10.5.0

Version 10.4.2

What's Changed

New Contributors

Dependencies

Full Changelog: Bachmann1234/diff_cover@v10.4.1...v10.4.2

Changelog

Sourced from diff-cover's changelog.

8/16/2026 v10.5.1

8/08/2026 v10.5.0

8/06/2026 v10.4.2

7/23/2026 v10.4.1

  • Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 PR 611 (bachmann1234)

7/21/2026 v10.4.0

  • Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @​mofr

05/30/2026 v10.3.0

  • Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @​duxiaocheng

  • Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

01/08/2026 v10.2.0

12/30/2025 v10.1.0

  • Add support for floating-point total percentage in reports PR 565 thanks @​tilaven

12/09/2025 v10.0.0

  • Remove python 3.9 support
  • Add python 3.14 support
  • Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

... (truncated)

Commits
  • 14f114d Version 10.5.1
  • b360113 fix: report a missing git instead of an unhandled FileNotFoundError (#620)
  • 46e8b53 perf: index the Clover file lookup instead of rescanning per source path (#618)
  • e34eec3 Version 10.5.0
  • 5fc9e82 Support PHPUnit clover reports (silently reported as zero coverage) (#617)
  • f6a43b7 Version 10.4.2
  • 3fdbf40 fix(plugins): accept reports/options in diff_cover_report_quality hookspec (#...
  • 4c44508 fix(config): honor format option from config file (#612)
  • b490adc Bump actions/setup-python from 6 to 7 (#614)
  • 19da277 Bump ruff from 0.15.20 to 0.16.0 (#615)
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates pyright from 1.1.411 to 1.1.414

Commits

Updates httpx2 from 2.9.1 to 2.12.0

Release notes

Sourced from httpx2's releases.

v2.12.0

Highlights

🛡️ Bounded response decompression

httpx2 now decodes gzip, deflate, Brotli, and Zstandard responses incrementally. Each decode step emits at most 1 MiB, so streaming a highly compressed response no longer requires materializing an entire inflated network chunk in memory (pydantic/httpx2#1126).

📦 Shared Zstandard API

Python 3.13 and earlier now use backports.zstd, which provides the same bounded incremental decompression API as compression.zstd on Python 3.14 and later (pydantic/httpx2#1146).

httpx2

Changed

Fixed

httpcore2

No changes since 2.11.0. Version bumped to stay in lockstep with httpx2.

Full Changelog: pydantic/httpx2@v2.11.0...v2.12.0

v2.11.0

Highlights

🌐 Public origin API

httpx2 now includes an immutable and hashable Origin value object, available through URL.origin. It provides normalized scheme, host, and effective port comparisons without including URL paths, queries, fragments, or credentials (pydantic/httpx2#1134).

🛠️ Request compatibility and validation

httpx2

Added

Changed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.12.0 (August 18th, 2026)

Changed

  • Use backports.zstd for Zstandard decoding on Python 3.13 and earlier. (#1146)

Fixed

  • Bound peak memory while streaming compressed responses and close response streams when decoding fails. (#1126)

2.11.0 (August 18th, 2026)

Added

  • Add the public Origin value object and URL.origin property for normalized, hashable origin comparisons. (#1134)

Changed

  • Require Brotli 1.2.0 or later for the brotli extra. (#1141)

Fixed

  • Restore deprecated status code aliases. (#1135)
  • Extract HTTP/2 release notes from changelog headings correctly. (#1136)
  • Respect explicit Transfer-Encoding headers and expose buffered request body lengths to WSGI applications. (#1137)
  • Validate multipart part header names and values before serialization. (#1142)

2.10.0 (August 9th, 2026)

Added

  • Add support for running on WebAssembly / Emscripten via Pyodide, using a JavaScript fetch-based transport defined in httpx2-jsfetch. (#1119)
  • Add max_event_size to cap SSE event buffering. (#1071)
  • Add RFC 9110 status code constants. (#1069)
  • Add support for Python 3.15. (#1090)

Changed

  • Improve SSE chunk buffering performance. (#1117)
  • Skip cookie extraction for responses without Set-Cookie headers. (#1107)
  • Return str | None instead of Any from Headers.get. (#1121)

Fixed

... (truncated)

Commits

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from

@dependabot
build(deps): bump the python-deps group across 1 directory with 11 up…
6afe236 
…dates

Bumps the python-deps group with 11 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [jsonschema-rs](https://github.com/Stranger6667/jsonschema) | `0.49.6` | `0.56.0` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [globus-sdk](https://github.com/globus/globus-sdk-python) | `4.8.1` | `4.9.0` |
| [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.1` | `10.5.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.7` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.9.1` | `2.12.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.168.0` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `jsonschema-rs` from 0.49.6 to 0.56.0
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.49.6...ruby-v0.56.0)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `globus-sdk` from 4.8.1 to 4.9.0
- [Release notes](https://github.com/globus/globus-sdk-python/releases)
- [Changelog](https://github.com/globus/globus-sdk-python/blob/main/changelog.rst)
- [Commits](globus/globus-sdk-python@4.8.1...4.9.0)

Updates `diff-cover` from 10.4.1 to 10.5.1
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v10.4.1...v10.5.1)

Updates `ruff` from 0.16.1 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.7)

Updates `pyright` from 1.1.411 to 1.1.414
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414)

Updates `httpx2` from 2.9.1 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.9.1...v2.12.0)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `hypothesis` from 6.165.2 to 6.168.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.168.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: jsonschema-rs
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: globus-sdk
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: diff-cover
  dependency-version: 10.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pyright
  dependency-version: 1.1.414
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: hypothesis
  dependency-version: 6.168.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 14, 2026
@github-actions

github-actions Bot commented Sep 14, 2026

Copy link
Copy Markdown

Coverage report

This PR does not seem to contain any modification to coverable code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants