Skip to content

deps(deps): bump the python-all group across 1 directory with 12 updates - #561

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-all-859f55d995
Open

deps(deps): bump the python-all group across 1 directory with 12 updates#561
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-all-859f55d995

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-all group with 12 updates in the / directory:

Package From To
uv 0.11.26 0.12.22
fastmcp 3.4.3 4.0.10
sounddevice 0.5.5 0.5.6
openai 2.44.0 3.23.0
aiohttp 3.14.1 3.14.3
click 8.4.2 8.5.0
build 1.5.0 1.6.1
twine 6.2.0 7.0.0
pytest-mock 3.15.1 3.16.0
mkdocs-material 9.7.6 9.7.7
pymdown-extensions 11.0.1 12.1
mkdocs-git-revision-date-localized-plugin 1.5.3 1.6.0

Updates uv from 0.11.26 to 0.12.22

Release notes

Sourced from uv's releases.

0.12.22

Release Notes

Released on 2026-10-01.

Python

  • Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 (#22147)

Enhancements

  • Accept uppercase release suffixes in wheel platform tags (#22113)
  • Record workspace-member default groups in lockfiles (#22010, #22103)
  • Record workspace-member dependency-group Python requirements in lockfiles (#22044, #22103)
  • Record default groups for non-project workspace roots in lockfiles (#22104)
  • Record dependency-group Python requirements for non-project workspace roots in lockfiles (#22104)
  • Format URLs and paths consistently in CLI messages (#21937)
  • Hide the unsupported --offline option from uv publish help (#22124)

Preview features

  • Honor --no-default-groups in uv audit (#22090)
  • Report a clear error when uv audit or uv tool audit runs offline and hide the unsupported option from help (#22114)

Configuration

  • Add UV_PYTHON_ARCH to select an interpreter architecture independently of its Python version (#22098)

Performance

  • Reduce uv's binary size by compressing embedded Python download metadata (#22126)

Bug fixes

  • Verify unchanged requirements against existing lockfile hashes when relocking (#22083)
  • Honor dependency-group Python requirements at non-project workspace roots (#22101)
  • Use each selected workspace member's recorded default groups during frozen sync (#22015)
  • Avoid false entry-point warnings for required workspace members (#22112)

Other changes

  • Raise the minimum supported Rust version for building uv to 1.97 and update the toolchain to Rust 1.99 (#22121)

Install uv 0.12.22

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.22/uv-installer.sh | sh

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.22

Released on 2026-10-01.

Python

  • Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 (#22147)

Enhancements

  • Accept uppercase release suffixes in wheel platform tags (#22113)
  • Record workspace-member default groups in lockfiles (#22010, #22103)
  • Record workspace-member dependency-group Python requirements in lockfiles (#22044, #22103)
  • Record default groups for non-project workspace roots in lockfiles (#22104)
  • Record dependency-group Python requirements for non-project workspace roots in lockfiles (#22104)
  • Format URLs and paths consistently in CLI messages (#21937)
  • Hide the unsupported --offline option from uv publish help (#22124)

Preview features

  • Honor --no-default-groups in uv audit (#22090)
  • Report a clear error when uv audit or uv tool audit runs offline and hide the unsupported option from help (#22114)

Configuration

  • Add UV_PYTHON_ARCH to select an interpreter architecture independently of its Python version (#22098)

Performance

  • Reduce uv's binary size by compressing embedded Python download metadata (#22126)

Bug fixes

  • Verify unchanged requirements against existing lockfile hashes when relocking (#22083)
  • Honor dependency-group Python requirements at non-project workspace roots (#22101)
  • Use each selected workspace member's recorded default groups during frozen sync (#22015)
  • Avoid false entry-point warnings for required workspace members (#22112)

Other changes

  • Raise the minimum supported Rust version for building uv to 1.97 and update the toolchain to Rust 1.99 (#22121)

0.12.21

Released on 2026-09-29.

Python

  • Update CPython to use OpenSSL 3.5.9 (#22076)

... (truncated)

Commits

Updates fastmcp from 3.4.3 to 4.0.10

Release notes

Sourced from fastmcp's releases.

v4.0.10: Inside Job

Task-enabled tools now work behind search transforms and CodeMode: they're registered with the task backend even when hidden, and a tool, resource, or prompt that calls one through ctx.fastmcp.call_tool() (including the search call_tool proxy and CodeMode's execute) now gets its result instead of an empty task receipt.

What's Changed

Fixes 🐞

Docs 📚

Other Changes 🦾

New Contributors

Full Changelog: PrefectHQ/fastmcp@v4.0.9...v4.0.10

v4.0.9: Cache and Release

ResourceTemplate now keeps its compiled URI pattern for its own lifetime while the shared cache is bounded again, preventing dynamic proxies from growing process memory without restoring the 4,096-template performance cliff.

What's Changed

Fixes 🐞

Other Changes 🦾

Full Changelog: PrefectHQ/fastmcp@v4.0.8...v4.0.9

v4.0.8: Take Three

Completion goes back to its 4.0.5 behavior. The visibility check added in 4.0.6 and reworked in 4.0.7 simulated list requests through middleware, and in 4.0.7 that could let a response cache serve hidden prompts to other clients. New tests pin both problems, and withholding suggestions for hidden references will return with a proper design. Resource template patterns are now cached without a size limit, so servers with thousands of templates read fast again, and OAuthProxy revokes the upstream refresh token instead of sending its own token upstream.

What's Changed

Security 🔒

Fixes 🐞

Docs 📚

... (truncated)

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v4.0.11: Fort Knocks

This release contains important security and bug fixes. All users are encouraged to upgrade. Thanks to our 10 contributors, including 6 first-time contributors.

Enhancements ✨

Security 🔒

Fixes 🐞

... (truncated)

Commits

Updates sounddevice from 0.5.5 to 0.5.6

Release notes

Sourced from sounddevice's releases.

python-sounddevice 0.5.6

https://pypi.org/project/sounddevice/0.5.6/

  • Fix architecture detection on Windows ARM64
Changelog

Sourced from sounddevice's changelog.

0.5.6 (2026-08-17):

  • Fix architecture detection on Windows ARM64
Commits
  • bd3f0df Release 0.5.6
  • 9e55e73 Fix architecture detection on Windows ARM64 (#631)
  • e8e7bef Bump actions/setup-python from 6 to 7
  • dfa004d GitHub Actions: Upgrade from ubuntu-22.04 to ubuntu-24.04 (#634)
  • 950d205 update link
  • fd24bd3 Bump actions/checkout from 6 to 7
  • 88de286 CI: bump Python versions
  • 0f16231 Bump idna from 3.11 to 3.15 in the uv group across 1 directory
  • 2634256 Bump urllib3 from 2.6.3 to 2.7.0 in the uv group across 1 directory
  • 715d988 Bump actions/download-artifact from 7 to 8
  • Additional commits viewable in compare view

Updates openai from 2.44.0 to 3.23.0

Release notes

Sourced from openai's releases.

v3.23.0

3.23.0 (2026-10-01)

Features

  • agents: [1/n] return typed answers from session streams (#4007) (10f8816)
  • agents: stage files and download turn artifacts (#4009) (4fc2438)
  • api: Add session traces and Realtime translations (#4001) (138e3d1)
  • beta: expose typed application actions as agent tools (#4006) (f219c55)
  • collect final output from beta Agents streams (157ac4c)

Bug Fixes

  • api: allow original image detail in Chat Completions (#4005) (8a136c2)
  • api: correct the eval run cancellation endpoint (#4003) (28c5c9a)
  • api: retain WebSocket endpoint paths and query parameters (#3999) (7f203fd)
  • keep Castiron budget results valid when main advances (#4012) (73f189b)
  • responses: avoid replaying uncertain typed sends on reconnect (#4011) (1dbbf61)
  • responses: respect send queue limits during reconnect (#4000) (50f95ac)
  • use monotonic clock for file processing timeout (#3748) (58aca1d)

Chores

  • api: retain WebRTC Live session transport types (#4002) (5c9ace9)
  • deps-dev: bump pyright from 1.1.413 to 1.1.414 (#3902) (a91d779)
  • deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#3976) (f15f43c)
  • deps: bump CodeQL actions to 4.38.1 (#3974) (fb70d66)

v3.22.1

3.22.1 (2026-09-30)

Bug Fixes

  • api: correct the missing authentication error message (#3993) (51692ed), closes #3962
  • transform NotRequired typed dictionary fields (#3995) (5544c18)

Chores

  • tests: mark sample_file.txt as text with LF line endings (#3879) (fd78a48)

Documentation

  • examples: fix two stale example comments (#3877) (1c4830b)
  • examples: print event.delta in the streaming helpers doc (#3876) (063375b)

... (truncated)

Changelog

Sourced from openai's changelog.

3.23.0 (2026-10-01)

Features

  • agents: [1/n] return typed answers from session streams (#4007) (10f8816)
  • agents: stage files and download turn artifacts (#4009) (4fc2438)
  • api: Add session traces and Realtime translations (#4001) (138e3d1)
  • beta: expose typed application actions as agent tools (#4006) (f219c55)
  • collect final output from beta Agents streams (157ac4c)

Bug Fixes

  • api: allow original image detail in Chat Completions (#4005) (8a136c2)
  • api: correct the eval run cancellation endpoint (#4003) (28c5c9a)
  • api: retain WebSocket endpoint paths and query parameters (#3999) (7f203fd)
  • keep Castiron budget results valid when main advances (#4012) (73f189b)
  • responses: avoid replaying uncertain typed sends on reconnect (#4011) (1dbbf61)
  • responses: respect send queue limits during reconnect (#4000) (50f95ac)
  • use monotonic clock for file processing timeout (#3748) (58aca1d)

Chores

  • api: retain WebRTC Live session transport types (#4002) (5c9ace9)
  • deps-dev: bump pyright from 1.1.413 to 1.1.414 (#3902) (a91d779)
  • deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#3976) (f15f43c)
  • deps: bump CodeQL actions to 4.38.1 (#3974) (fb70d66)

3.22.1 (2026-09-30)

Bug Fixes

  • api: correct the missing authentication error message (#3993) (51692ed), closes #3962
  • transform NotRequired typed dictionary fields (#3995) (5544c18)

Chores

  • tests: mark sample_file.txt as text with LF line endings (#3879) (fd78a48)

Documentation

  • examples: fix two stale example comments (#3877) (1c4830b)
  • examples: print event.delta in the streaming helpers doc (#3876) (063375b)

3.22.0 (2026-09-29)

... (truncated)

Commits
  • 93bd2aa release: 3.23.0 (#3996)
  • 73f189b fix: keep Castiron budget results valid when main advances (#4012)
  • 1dbbf61 fix(responses): avoid replaying uncertain typed sends on reconnect (#4011)
  • 4fc2438 feat(agents): stage files and download turn artifacts (#4009)
  • a91d779 chore(deps-dev): bump pyright from 1.1.413 to 1.1.414 (#3902)
  • fb70d66 chore(deps): bump CodeQL actions to 4.38.1 (#3974)
  • f15f43c chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#3976)
  • 10f8816 feat(agents): [1/n] return typed answers from session streams (#4007)
  • f219c55 feat(beta): expose typed application actions as agent tools (#4006)
  • 157ac4c feat: collect final output from beta Agents streams (#4004)
  • Additional commits viewable in compare view

Updates aiohttp from 3.14.1 to 3.14.3
Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
  • Fix test failures when using pytest >= 9.1. {pr}3656
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
  • {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
  • The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits
  • 8b19813 Release version 8.5.0
  • 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
  • 131c86a Add FAQ entry about UnicodeEncodeError on Windows
  • e1fd594 Add support of pathlib.Path to edit (#3781)
  • a1d8785 Add support of pathlib.Path to edit
  • 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
  • a6256bf Forwards all user's parameters set in PAGER
  • 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
  • 9835b0f Resolve the pager command once, in _pager_contextmanager
  • f36d58b Refactor pager stream handling (#3767)
  • Additional commits viewable in compare view

Updates build from 1.5.0 to 1.6.1

Release notes

Sourced from build's releases.

1.6.1

What's Changed

Full Changelog: pypa/build@1.6.0...1.6.1

1.6.0

What's Changed

New Contributors

Full Changelog: pypa/build@1.5.1...1.6.0

1.5.1

What's Changed

@dependabot
deps(deps): bump the python-all group across 1 directory with 12 updates
e5ac056 
---
updated-dependencies:
- dependency-name: uv
  dependency-version: 0.12.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-all
- dependency-name: fastmcp
  dependency-version: 4.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-all
- dependency-name: sounddevice
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-all
- dependency-name: openai
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-all
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-all
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-all
- dependency-name: build
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-all
- dependency-name: twine
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-all
- dependency-name: pytest-mock
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-all
- dependency-name: mkdocs-material
  dependency-version: 9.7.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-all
- dependency-name: pymdown-extensions
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-all
- dependency-name: mkdocs-git-revision-date-localized-plugin
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants