Skip to content

deps: Bump the python-minor-and-patch group across 1 directory with 11 updates#27

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-2be54e9e8d
Open

deps: Bump the python-minor-and-patch group across 1 directory with 11 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-2be54e9e8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 10 updates in the / directory:

Package From To
boto3 1.43.34 1.43.40
typer 0.26.7 0.26.8
filelock 3.29.4 3.29.5
opentelemetry-api 1.42.1 1.43.0
joserfc 1.7.1 1.7.2
sentry-sdk 2.63.0 2.64.0
aiointercept 0.1.7 0.1.8
ruff 0.15.18 0.15.20
ty 0.0.51 0.0.56
hypothesis 6.155.7 6.156.1

Updates boto3 from 1.43.34 to 1.43.40

Commits
  • dd59a59 Merge branch 'release-1.43.40'
  • b416ca0 Bumping version to 1.43.40
  • b228d05 Add changelog entries from botocore
  • 121db7a Merge branch 'release-1.43.39'
  • 00141f6 Merge branch 'release-1.43.39' into develop
  • 310317d Bumping version to 1.43.39
  • ff7c1cf Add changelog entries from botocore
  • 805c683 Update CODEOWNERS to shared Python SDK and CLI team (#4809)
  • efcfb65 Merge branch 'release-1.43.38'
  • d7aa957 Merge branch 'release-1.43.38' into develop
  • Additional commits viewable in compare view

Updates typer from 0.26.7 to 0.26.8

Release notes

Sourced from typer's releases.

0.26.8

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

Changelog

Sourced from typer's changelog.

0.26.8 (2026-06-25)

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

Commits
  • b210c0e 🔖 Release version 0.26.8 (#1859)
  • 51ae100 📝 Update release notes
  • 0c15b1b 🐛 Make second column of Rich help output reflect the type consistently, even ...
  • b7cb8c7 📝 Update release notes
  • 5285cd4 👷 Simplify pull request workflow triggers (#1858)
  • b27385b 📝 Update release notes
  • e64958f 👷 Update issue-manager to 0.7.1 (#1857)
  • 1b02fb3 📝 Update release notes
  • e64632c ⬆️ Update issue-manager to 0.7.0 (#1856)
  • 289b6a6 📝 Update release notes
  • Additional commits viewable in compare view

Updates filelock from 3.29.4 to 3.29.5

Release notes

Sourced from filelock's releases.

3.29.5

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.29.4...3.29.5

Commits
  • be56227 lifetime: reject negative, non-numeric, and bool values at the setter (#573)
  • 1f6cde4 roll back a read acquire's open transaction when its SELECT fails (#575)
  • c76dee6 test: fix Windows type check broken by #577 (#580)
  • ea594a5 Keep Unix lock files after release (#577)
  • 7595a7b use a private break name in break_lock_file (#576)
  • 0b707fe [pre-commit.ci] pre-commit autoupdate (#572)
  • 22ecd6a don't complete a writer acquire on a peer's reclaimed marker (#571)
  • 70ecdb2 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#570)
  • dbcc83a [pre-commit.ci] pre-commit autoupdate (#568)
  • 022394c don't follow symlinks in raise_on_not_writable_file (#567)
  • Additional commits viewable in compare view

Updates opentelemetry-api from 1.42.1 to 1.43.0

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.43.0/0.64b0 (2026-06-24)

Added

  • opentelemetry-sdk: add add_metric_reader / remove_metric_reader public APIs to register / unregister metric readers at runtime. (#4863)
  • opentelemetry-exporter-prometheus: add support for configuring metric scope labels (#5123)
  • opentelemetry-exporter-otlp-proto-grpc: Add grpc error details to the log message that's written when the grpc call fails. (#5143)
  • opentelemetry-exporter-http-transport: add 'opentelemetry-exporter-http-transport' package for HTTP exporters (#5194)
  • opentelemetry-sdk: Add composite/development samplers support to declarative file configuration (#5201)
  • opentelemetry-exporter-otlp-json-file: Add OTLP JSON File exporter implementation (#5207)
  • opentelemetry-sdk: add _resolve_component shared utility for declarative config plugin loading, reducing boilerplate in exporter factory functions (#5215)
  • opentelemetry-sdk: add pull metric reader support to declarative file configuration, including Prometheus metric reader via the prometheus_development config field (#5216)
  • opentelemetry-proto-json: update to use opentelemetry-proto v1.10.0 (#5224)
  • opentelemetry-proto: bump maximum supported protobuf version to 7.x.x (#5251)
  • opentelemetry-sdk: add ServiceInstanceIdResourceDetector for populating service.instance.id (#5259)
  • opentelemetry-sdk: declarative config loader now recursively converts parsed dicts into typed dataclass instances, including nested dataclasses, lists of dataclasses, and enum values. End-to-end YAML/JSON → SDK configuration now works via the factory functions. (#5269)
  • opentelemetry-sdk: add configure_sdk(config) to the declarative configuration API. Single entry point that takes a parsed OpenTelemetryConfiguration, builds the resource, and applies the tracer/meter/logger providers and propagator globally. Honors the top-level disabled flag. (#5270)
  • opentelemetry-sdk: the SDK configurator now honors the OTEL_CONFIG_FILE environment variable. When set, the SDK loads and applies the referenced declarative configuration file (YAML or JSON) in place of the env-var-based

... (truncated)

Commits
  • fcbbeb8 [release/v1.43.x-0.64bx] Prepare release 1.43.0/0.64b0 (#5349)
  • b40dcbc opentelemetry-exporter-http-transport: enable entry-point loading of transpor...
  • 10e8577 update to Sphinx to 8.1.3 in order to support Python 3.14 (#5278)
  • 6ac6895 docs: add declarative configuration guide and example (#5309)
  • 13ad4d5 opentelemetry-api: normalize empty environment propagation names to "_" in En...
  • 6a0ab84 opentelemetry-sdk: merge doesn't need a copy, dict already does this (#5326)
  • ac7a3df feat(config): support OTEL_CONFIG_FILE in the SDK configurator (#5271)
  • fa75422 Add support for composite samplers in declarative config (#5201)
  • 43f079f Update json and proto encoder to always accept None type, cleanup code / test...
  • 53c9d96 chore: cleanup typo found in test (#5324)
  • Additional commits viewable in compare view

Updates opentelemetry-sdk from 1.42.1 to 1.43.0

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.43.0/0.64b0 (2026-06-24)

Added

  • opentelemetry-sdk: add add_metric_reader / remove_metric_reader public APIs to register / unregister metric readers at runtime. (#4863)
  • opentelemetry-exporter-prometheus: add support for configuring metric scope labels (#5123)
  • opentelemetry-exporter-otlp-proto-grpc: Add grpc error details to the log message that's written when the grpc call fails. (#5143)
  • opentelemetry-exporter-http-transport: add 'opentelemetry-exporter-http-transport' package for HTTP exporters (#5194)
  • opentelemetry-sdk: Add composite/development samplers support to declarative file configuration (#5201)
  • opentelemetry-exporter-otlp-json-file: Add OTLP JSON File exporter implementation (#5207)
  • opentelemetry-sdk: add _resolve_component shared utility for declarative config plugin loading, reducing boilerplate in exporter factory functions (#5215)
  • opentelemetry-sdk: add pull metric reader support to declarative file configuration, including Prometheus metric reader via the prometheus_development config field (#5216)
  • opentelemetry-proto-json: update to use opentelemetry-proto v1.10.0 (#5224)
  • opentelemetry-proto: bump maximum supported protobuf version to 7.x.x (#5251)
  • opentelemetry-sdk: add ServiceInstanceIdResourceDetector for populating service.instance.id (#5259)
  • opentelemetry-sdk: declarative config loader now recursively converts parsed dicts into typed dataclass instances, including nested dataclasses, lists of dataclasses, and enum values. End-to-end YAML/JSON → SDK configuration now works via the factory functions. (#5269)
  • opentelemetry-sdk: add configure_sdk(config) to the declarative configuration API. Single entry point that takes a parsed OpenTelemetryConfiguration, builds the resource, and applies the tracer/meter/logger providers and propagator globally. Honors the top-level disabled flag. (#5270)
  • opentelemetry-sdk: the SDK configurator now honors the OTEL_CONFIG_FILE environment variable. When set, the SDK loads and applies the referenced declarative configuration file (YAML or JSON) in place of the env-var-based

... (truncated)

Commits
  • fcbbeb8 [release/v1.43.x-0.64bx] Prepare release 1.43.0/0.64b0 (#5349)
  • b40dcbc opentelemetry-exporter-http-transport: enable entry-point loading of transpor...
  • 10e8577 update to Sphinx to 8.1.3 in order to support Python 3.14 (#5278)
  • 6ac6895 docs: add declarative configuration guide and example (#5309)
  • 13ad4d5 opentelemetry-api: normalize empty environment propagation names to "_" in En...
  • 6a0ab84 opentelemetry-sdk: merge doesn't need a copy, dict already does this (#5326)
  • ac7a3df feat(config): support OTEL_CONFIG_FILE in the SDK configurator (#5271)
  • fa75422 Add support for composite samplers in declarative config (#5201)
  • 43f079f Update json and proto encoder to always accept None type, cleanup code / test...
  • 53c9d96 chore: cleanup typo found in test (#5324)
  • Additional commits viewable in compare view

Updates joserfc from 1.7.1 to 1.7.2

Release notes

Sourced from joserfc's releases.

1.7.2

   🐞 Bug Fixes

    View changes on GitHub
Changelog

Sourced from joserfc's changelog.

1.7.2

Released on June 29, 2026

  • Avoid trailing padding for JWTs.
Commits

Updates sentry-sdk from 2.63.0 to 2.64.0

Release notes

Sourced from sentry-sdk's releases.

2.64.0

The SDK now extracts all gen_ai spans out of a transaction and sends them as v2 envelope items by default. This prevents gen_ai spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated. To keep the previous behavior, set stream_gen_ai_spans=False.

Self-hosted Sentry users should opt out with stream_gen_ai_spans=False, since streamed gen_ai spans may not be ingested by their Sentry instance.

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.64.0

The SDK now extracts all gen_ai spans out of a transaction and sends them as v2 envelope items by default. This prevents gen_ai spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated. To keep the previous behavior, set stream_gen_ai_spans=False.

Self-hosted Sentry users should opt out with stream_gen_ai_spans=False, since streamed gen_ai spans may not be ingested by their Sentry instance.

Bug Fixes 🐛

Documentation 📚

Internal Changes 🔧

... (truncated)

Commits
  • 9cb0167 Call out changed stream_gen_ai_spans default value
  • bdbe208 Update CHANGELOG.md
  • 8966e45 release: 2.64.0
  • 7074643 ci: 🤖 Update test matrix with new releases (06/29) (#6682)
  • b0f319f (test): exclude django 6.1 alphas and betas from tox (#6690)
  • a661615 (test): need to include the alpha tag for mcp package inclusion (#6688)
  • 9c83606 ci(mcp): Pin mcp package to <2.0.0 while alphas are in flight (#6687)
  • 1dd161d feat: Set sentry.trace_lifecycle attr in span streaming (#6684)
  • 5dabd02 fix(pydantic-ai): Stop truncating in the streaming trace lifecycle (#6659)
  • 7991f71 ref: Make stream_gen_ai_spans opt out (#6658)
  • Additional commits viewable in compare view

Updates aiointercept from 0.1.7 to 0.1.8

Changelog

Sourced from aiointercept's changelog.

[0.1.8] - 2026-06-28

Added

  • m.ordered_requests — flat list of (key, AiointerceptRequest) tuples in arrival order, giving cross-URL request ordering that m.requests (grouped by key) does not provide.
  • m.call_count — integer property; total requests intercepted across all URLs (len(m.ordered_requests)).
  • MockResponse — object returned by m.add() / m.get() / m.post() etc. Its call_count attribute increments each time that specific registration is matched and served, enabling per-handler assertions: rsp = m.get(url); ...; assert rsp.call_count == 2.
  • m.last_request — property returning the most recently intercepted AiointerceptRequest, or None if no requests have been made.
  • Streaming response bodies: body= now accepts an AsyncIterable[bytes] (e.g. an async generator). aiohttp wraps it in an AsyncIterablePayload and streams the chunks with chunked transfer encoding, so the client receives each piece as it is written — useful for mocking server-sent events / OpenAI-style streaming endpoints. The iterator is drained once: with repeat only the first response carries the body and later ones come back empty, so register a fresh iterator per expected request. Related to aioresponses#274.

Fixed

  • start() now clears m.requests and m.ordered_requests at the beginning of each session. Previously, reusing the same instance across multiple invocations (decorator mode or manual start()/stop() cycles) accumulated requests from prior runs, causing assert_called_once() and assert_not_called() to report stale counts. Recorded requests remain accessible after stop() for post-context-manager inspection.
  • passthrough_unmatched proxying no longer truncates compressed upstream responses: the upstream Content-Length (the compressed size) was relayed alongside the already-decompressed body.
  • Proxied redirects are now relayed untouched (allow_redirects=False upstream), so the client's own redirect handling (allow_redirects, response.history) behaves as it would against the real network. Previously the proxy followed redirects itself and the client saw only the final response.
  • The internal proxy session no longer accumulates cookies across proxied requests (it now uses a DummyCookieJar); cookie state belongs to each test's own client.
  • Custom resolvers passed to TCPConnector(resolver=...) are now intercepted too. Resolution is funneled through a single TCPConnector._resolve_host patch instead of patching ThreadedResolver.resolve / AsyncResolver.resolve, which only covered those two classes.
  • Calling add() before the server is started now raises RuntimeError (was AssertionError, which disappears under python -O); a URL without a host raises ValueError.
  • start() now fails with a clear RuntimeError instead of blocking the caller's event loop forever if the server thread wedges during startup.

Improved

  • Sequential requests to a mocked host are faster: pooled keep-alive connections that already point at the mock server are reused instead of forcing a fresh TCP connection per request (connections pointing elsewhere are still discarded).
  • Mock startup is faster: the passthrough proxy session is created lazily on first use instead of eagerly on every start().
  • mock_external_urls=True now installs 3 class-level patches instead of 5 (TCPConnector._resolve_host / _get_ssl_context / _get), and passthrough hosts keep normal DNS caching (the per-lookup cache clearing is gone — interception happens before the cache).
Commits

Updates ruff from 0.15.18 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

  • Allow human-readable names in rule selectors (#25887)
  • Emit a warning instead of an error for unknown rule selectors (#26113)
  • Match noqa shebang handling in ruff:ignore comments (#26286)
  • [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

  • Add versioning sections to custom crate READMEs (#26317)
  • Update ruff_python_parser README for crates.io (#26315)
  • [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

Install ruff 0.15.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"

Download ruff 0.15.20

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

@dependabot
deps: Bump the python-minor-and-patch group across 1 directory with 1…
f87bacb 
…1 updates

Bumps the python-minor-and-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.34` | `1.43.40` |
| [typer](https://github.com/fastapi/typer) | `0.26.7` | `0.26.8` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.4` | `3.29.5` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.43.0` |
| [joserfc](https://github.com/authlib/joserfc) | `1.7.1` | `1.7.2` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.63.0` | `2.64.0` |
| [aiointercept](https://github.com/Polandia94/aiointercept) | `0.1.7` | `0.1.8` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.18` | `0.15.20` |
| [ty](https://github.com/astral-sh/ty) | `0.0.51` | `0.0.56` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.155.7` | `6.156.1` |



Updates `boto3` from 1.43.34 to 1.43.40
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.34...1.43.40)

Updates `typer` from 0.26.7 to 0.26.8
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.7...0.26.8)

Updates `filelock` from 3.29.4 to 3.29.5
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.4...3.29.5)

Updates `opentelemetry-api` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `opentelemetry-sdk` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `joserfc` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](authlib/joserfc@1.7.1...1.7.2)

Updates `sentry-sdk` from 2.63.0 to 2.64.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.63.0...2.64.0)

Updates `aiointercept` from 0.1.7 to 0.1.8
- [Release notes](https://github.com/Polandia94/aiointercept/releases)
- [Changelog](https://github.com/Polandia94/aiointercept/blob/main/CHANGELOG.md)
- [Commits](Polandia94/aiointercept@v0.1.7...v0.1.8)

Updates `ruff` from 0.15.18 to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.18...0.15.20)

Updates `ty` from 0.0.51 to 0.0.56
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.51...0.0.56)

Updates `hypothesis` from 6.155.7 to 6.156.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.155.7...v6.156.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: typer
  dependency-version: 0.26.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: filelock
  dependency-version: 3.29.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: opentelemetry-api
  dependency-version: 1.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: opentelemetry-sdk
  dependency-version: 1.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: joserfc
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: sentry-sdk
  dependency-version: 2.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: aiointercept
  dependency-version: 0.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.56
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: hypothesis
  dependency-version: 6.156.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants