Skip to content

build(deps): bump the python-deps group across 1 directory with 10 updates - #780

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/api/python-deps-6ac49cb98a
Open

build(deps): bump the python-deps group across 1 directory with 10 updates#780
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/apps/api/python-deps-6ac49cb98a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group with 10 updates in the /apps/api directory:

Package From To
pydantic 2.13.4 2.13.5
pydantic-settings 2.14.2 2.15.0
jsonschema-rs 0.49.6 0.53.0
cryptography 50.0.0 50.0.1
globus-sdk 4.8.1 4.9.0
diff-cover 10.4.1 10.5.1
ruff 0.16.1 0.16.6
httpx2 2.9.1 2.12.0
pre-commit 4.6.1 4.6.2
hypothesis 6.165.2 6.167.1

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

... (truncated)

Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates jsonschema-rs from 0.49.6 to 0.53.0

Release notes

Sourced from jsonschema-rs's releases.

[Python] Release 0.53.0

Fixed

  • Draft 4 type: integer matching a float or not depending on its repr; a float is never a draft 4 integer.
  • Draft 4 type: integer accepting Decimal("1E+2").
  • uniqueItems accepting 0 alongside -0.0 in arrays of more than 15 items.

Performance

  • Canonicalizing an allOf of object schemas walks their property maps once instead of looking every key up.
  • properties and required compare short names without memcmp.
  • type: integer, and type sets containing it, are up to 67x faster on float-heavy instances.
  • Draft 4 type: integer is up to 20x faster on float-heavy instances.
  • Raising ValidationError is up to 38% faster.
  • evaluate is up to 30% faster, from rendering each node's locations once.
  • Building a schema resolves each $ref target once instead of per reference site.
  • Building a schema with an $id encodes each absolute location once instead of re-validating it.
  • enum listing strings or integers, with or without null, matches against a set instead of comparing each candidate.

[Ruby] Release 0.53.0

Fixed

  • Draft 4 type: integer matching a Float or not depending on its formatting; a Float is never a draft 4 integer.
  • uniqueItems accepting 0 alongside -0.0 in arrays of more than 15 items.

Performance

  • Canonicalizing an allOf of object schemas walks their property maps once instead of looking every key up.
  • properties and required compare short names without memcmp.
  • Draft 4 type: integer is up to 6x faster on float-heavy instances.
  • evaluate renders each node's locations once instead of rebuilding them.
  • Building a schema resolves each $ref target once instead of per reference site.
  • Building a schema with an $id encodes each absolute location once instead of re-validating it.
  • enum listing strings or integers, with or without null, matches against a set instead of comparing each candidate.

[Rust] Release 0.53.0

Added

  • Location::segments, iterating the segments without collecting them.
  • CanonicalizeOptions::prepare, canonicalizing any number of a document's subschemas by JSON Pointer, with the document indexed once.
  • CLI: the --at POINTER flag of jsonschema canonicalize, canonicalizing only the subschema at that pointer without breaking its references into the rest of the document.
  • CLI: jsonschema canonicalize reads YAML schemas (.yaml/.yml) as well as JSON.
  • canonical::{ArrayView, IntegerView, NumberView, ObjectView, StringView, TypedGroupView}, the payload types of CanonicalView, so consumers can name them in signatures.

Fixed

  • jsonschema-value failing to build with default-features = false.
  • jsonschema-value failing to build for wasm32-unknown-unknown, which needs getrandom's wasm_js backend.
  • Draft 4 type: integer accepting numbers written with an exponent, like 1e2.
  • Draft 4 type: integer answering differently for the same number across representations.

... (truncated)

Changelog

Sourced from jsonschema-rs's changelog.

[0.53.0] - 2026-09-02

Added

  • Location::segments, iterating the segments without collecting them.
  • CanonicalizeOptions::prepare, canonicalizing any number of a document's subschemas by JSON Pointer, with the document indexed once.
  • CLI: the --at POINTER flag of jsonschema canonicalize, canonicalizing only the subschema at that pointer without breaking its references into the rest of the document.
  • CLI: jsonschema canonicalize reads YAML schemas (.yaml/.yml) as well as JSON.
  • canonical::{ArrayView, IntegerView, NumberView, ObjectView, StringView, TypedGroupView}, the payload types of CanonicalView, so consumers can name them in signatures.

Fixed

  • jsonschema-value failing to build with default-features = false.
  • jsonschema-value failing to build for wasm32-unknown-unknown, which needs getrandom's wasm_js backend.
  • Draft 4 type: integer accepting numbers written with an exponent, like 1e2.
  • Draft 4 type: integer answering differently for the same number across representations.
  • uniqueItems accepting 0 alongside -0.0 in arrays of more than 15 items.

Performance

  • Canonicalizing an allOf of object schemas walks their property maps once instead of looking every key up.
  • properties and required compare short names without memcmp.
  • Building a schema is up to 5% faster, from cheaper cache sharing and resolving each $ref target once.
  • Building a schema with an $id is up to 15% faster, from encoding each absolute location once.
  • required scans small objects once instead of looking up each key.
  • enum listing strings or integers, with or without null, matches against a set instead of comparing each candidate.
  • evaluate is up to 33% faster, from rendering each node's locations once.
  • CLI: 1.4-1.5x faster on large schemas, from reading files before parsing them.
  • Draft 4 type: integer with arbitrary-precision no longer allocates a string per number.
  • type: integer, and type sets containing it, are up to 54x faster on float-heavy instances with arbitrary-precision.
  • Draft 4 type: integer is up to 20x faster for the Pyo3 and Magnus representations.

[0.52.1] - 2026-08-30

Fixed

  • multipleOf rejecting valid values like 1070468.14 for 0.01 without arbitrary-precision.

Performance

  • minLength and maxLength together now scan the string once.
  • multipleOf with a fractional divisor is 8-16x faster.
  • unevaluatedProperties is up to 2.9x faster.
  • evaluate is up to 27% faster on reference-heavy schemas.

[0.52.0] - 2026-08-26

Added

  • Evaluation::is_valid.

... (truncated)

Commits
  • a1479a9 chore(ruby): Release 0.53.0
  • 9d09cf5 chore(python): Release 0.53.0
  • 6af37d8 chore(rust): Release 0.53.0
  • 8067365 perf: Canonicalizing an allOf of object schemas walks their property maps o...
  • bf325f2 perf: properties and required compare short names without memcmp
  • 1d637f4 fix: uniqueItems accepting 0 alongside -0.0 in arrays of more than 15 i...
  • 09c497d chore: `canonical::{ArrayView, IntegerView, NumberView, ObjectView, StringVie...
  • c38c4e6 build(deps): bump taiki-e/install-action from 2.87.1 to 2.87.2
  • f80fe92 perf: Special casing for nullable enums
  • 84f5570 docs: Update changelogs
  • Additional commits viewable in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

Updates globus-sdk from 4.8.1 to 4.9.0

Release notes

Sourced from globus-sdk's releases.

4.9.0

Added

  • Add Web Input-related methods to the FlowsClient class. (#1410) The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

  • Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (#1417)

Changed

  • The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (#1414)

Documentation

  • Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (#1408)

  • Update the URL to the Flows API documentation. (#1409)

Security

  • GitHub Actions security is now checked with zizmor (#1402)

Development

  • globus-sdk testing now leverages Sphinx doctest to make select examples testable. (#1406)
Changelog

Sourced from globus-sdk's changelog.

v4.9.0 (2026-08-10)

Added

  • Add Web Input-related methods to the FlowsClient class. (:pr:1410)

    The new methods are: list_web_inputs, get_web_input, and respond_to_web_input.

  • Added a new flag, sweep, to GlobusApp.logout(). Use logout(sweep=True) to ask the app to clear all tokens found in the app's storage, not only the ones currently in use by the app. The default behavior, sweep=False, is unchanged. (:pr:1417)

Changed

  • The resource_server attribute of the clients for Auth, Compute, Flows, Groups, Search, Timers, and Transfer is now annotated as str, rather than the inherited type of str | None. (:pr:1414)

Documentation

  • Remove the SpecificFlowClient.run_flow and .update_run methods' label parameter length constraint documentation. (:pr:1408)

  • Update the URL to the Flows API documentation. (:pr:1409)

Security

  • GitHub Actions security is now checked with zizmor <https://zizmor.sh>_ (:pr:1402)

Development

  • globus-sdk testing now leverages Sphinx doctest to make select examples testable. (:pr:1406)

.. _changelog-4.8.1:

Commits
  • 68229cc Release v4.9.0 (#1418)
  • 4872dc3 (actions) update PR references
  • 227c770 Update the auth management example scripts (#1417)
  • 3e5a748 Update the create-and-run-flow example scripts (#1416)
  • 3f45ff2 Inline FlowsClient construction in examples
  • 7b08829 Update the auth management example scripts
  • 6736880 Update the create-and-run-flow example scripts
  • a3aed17 Introduce GlobusApp.logout(sweep=True) (#1415)
  • 297d710 Introduce GlobusApp.logout(sweep=True)
  • b5142ae (actions) update PR references
  • Additional commits viewable in compare view

Updates diff-cover from 10.4.1 to 10.5.1

Release notes

Sourced from diff-cover's releases.

Vesion 10.5.1

What's Changed

Full Changelog: Bachmann1234/diff_cover@v10.5.0...v10.5.1

Version 10.5.0

What's Changed

New Contributors

Full Changelog: Bachmann1234/diff_cover@v10.4.2...v10.5.0

Version 10.4.2

What's Changed

New Contributors

Dependencies

Full Changelog: Bachmann1234/diff_cover@v10.4.1...v10.4.2

Changelog

Sourced from diff-cover's changelog.

8/16/2026 v10.5.1

8/08/2026 v10.5.0

8/06/2026 v10.4.2

7/23/2026 v10.4.1

  • Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 PR 611 (bachmann1234)

7/21/2026 v10.4.0

  • Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @​mofr

05/30/2026 v10.3.0

  • Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @​duxiaocheng

  • Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

01/08/2026 v10.2.0

12/30/2025 v10.1.0

  • Add support for floating-point total percentage in reports PR 565 thanks @​tilaven

12/09/2025 v10.0.0

  • Remove python 3.9 support
  • Add python 3.14 support
  • Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

... (truncated)

Commits
  • 14f114d Version 10.5.1
  • b360113 fix: report a missing git instead of an unhandled FileNotFoundError (#620)
  • 46e8b53 perf: index the Clover file lookup instead of rescanning per source path (#618)
  • e34eec3 Version 10.5.0
  • 5fc9e82 Support PHPUnit clover reports (silently reported as zero coverage) (#617)
  • f6a43b7 Version 10.4.2
  • 3fdbf40 fix(plugins): accept reports/options in diff_cover_report_quality hookspec (#...
  • 4c44508 fix(config): honor format option from config file (#612)
  • b490adc Bump actions/setup-python from 6 to 7 (#614)
  • 19da277 Bump ruff from 0.15.20 to 0.16.0 (#615)
  • Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Commits

Updates httpx2 from 2.9.1 to 2.12.0

Release notes

Sourced from httpx2's releases.

v2.12.0

Highlights

🛡️ Bounded response decompression

httpx2 now decodes gzip, deflate, Brotli, and Zstandard responses incrementally. Each decode step emits at most 1 MiB, so streaming a highly compressed response no longer requires materializing an entire inflated network chunk in memory (pydantic/httpx2#1126).

📦 Shared Zstandard API

Python 3.13 and earlier now use backports.zstd, which provides the same bounded incremental decompression API as compression.zstd on Python 3.14 and later (pydantic/httpx2#1146).

httpx2

Changed

Fixed

httpcore2

No changes since 2.11.0. Version bumped to stay in lockstep with httpx2.

Full Changelog: pydantic/httpx2@v2.11.0...v2.12.0

v2.11.0

Highlights

🌐 Public origin API

httpx2 now includes an immutable and hashable Origin value object, available through URL.origin. It provides normalized scheme, host, and effective port comparisons without including URL paths, queries, fragments, or credentials (pydantic/httpx2#1134).

🛠️ Request compatibility and validation

httpx2

Added

Changed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.12.0 (August 18th, 2026)

Changed

  • Use backports.zstd for Zstandard decoding on Python 3.13 and earlier. (#1146)

Fixed

  • Bound peak memory while streaming compressed responses and close response streams when decoding fails. (#1126)

2.11.0 (August 18th, 2026)

Added

  • Add the public Origin value object and URL.origin property for normalized, hashable origin comparisons. (#1134)

Changed

  • Require Brotli 1.2.0 or later for the brotli extra. (#1141)

Fixed

  • Restore deprecated status code aliases. (#1135)
  • Extract HTTP/2 release notes from changelog headings correctly. (#1136)
  • Respect explicit Transfer-Encoding headers and expose buffered request body lengths to WSGI applications. (#1137)
  • Validate multipart part header names and values before serialization. (#1142)

2.10.0 (August 9th, 2026)

Added

  • Add support for running on WebAssembly / Emscripten via Pyodide, using a JavaScript fetch-based transport defined in httpx2-jsfetch. (#1119)
  • Add max_event_size to cap SSE event buffering. (#1071)
  • Add RFC 9110 status code constants. (#1069)
  • Add support for Python 3.15. (#1090)

Changed

  • Improve SSE chunk buffering performance. (#1117)
  • Skip cookie extraction for responses without Set-Cookie headers. (#1107)
  • Return str | None instead of Any from Headers.get. (#1121)

Fixed

... (truncated)

Commits

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

  • Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
    • Regressed in 4.6.1.

@dependabot
build(deps): bump the python-deps group across 1 directory with 10 up…
f358e49 
…dates

Bumps the python-deps group with 10 updates in the /apps/api directory:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [jsonschema-rs](https://github.com/Stranger6667/jsonschema) | `0.49.6` | `0.53.0` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [globus-sdk](https://github.com/globus/globus-sdk-python) | `4.8.1` | `4.9.0` |
| [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.1` | `10.5.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.6` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.9.1` | `2.12.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.2` | `6.167.1` |



Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `jsonschema-rs` from 0.49.6 to 0.53.0
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.49.6...ruby-v0.53.0)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `globus-sdk` from 4.8.1 to 4.9.0
- [Release notes](https://github.com/globus/globus-sdk-python/releases)
- [Changelog](https://github.com/globus/globus-sdk-python/blob/main/changelog.rst)
- [Commits](globus/globus-sdk-python@4.8.1...4.9.0)

Updates `diff-cover` from 10.4.1 to 10.5.1
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v10.4.1...v10.5.1)

Updates `ruff` from 0.16.1 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.6)

Updates `httpx2` from 2.9.1 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.9.1...v2.12.0)

Updates `pre-commit` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2)

Updates `hypothesis` from 6.165.2 to 6.167.1
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.2...v6.167.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: jsonschema-rs
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: globus-sdk
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: diff-cover
  dependency-version: 10.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pre-commit
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: hypothesis
  dependency-version: 6.167.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 7, 2026
@github-actions

github-actions Bot commented Sep 7, 2026

Copy link
Copy Markdown

Coverage report

This PR does not seem to contain any modification to coverable code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants