Bump the backend-deps group across 1 directory with 9 updates - #28

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open

Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-deps-5dfd6bff9f

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 21, 2026•
edited
Loading

Copy link
Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.
Updates fastapi[standard] to 0.141.1

Release notes

Sourced from fastapi[standard]'s releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3

Release notes

Sourced from apscheduler's releases.

3.11.3

  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51

Release notes

Sourced from sqlalchemy[asyncio]'s releases.

2.0.51

Released: June 15, 2026

orm

  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with PropComparator.of_type() and PropComparator.and_() would silently drop the additional filter criteria, causing all related objects to be loaded instead of only those matching the filter. The LoaderCriteriaOption was being constructed against the base entity rather than the effective entity indicated by PropComparator.of_type(). Pull request courtesy Arya Rizky.

    References: #13207

  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within _orm.Session.commit() for a two-phase session would raise IllegalStateChangeError instead of the original database exception. The internal _prepare_impl() method's error handler was unable to invoke _orm.SessionTransaction.rollback() due to a state-change guard, preventing proper cleanup and masking the underlying error.

    References: #13356

engine

  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous column names present in the original CursorResult, causing key-based access on the thawed result to silently return a value instead of raising InvalidRequestError. The SimpleResultMetaData now accepts and propagates ambiguous key information so that frozen, thawed, and pickled results raise consistently for duplicate column names. Pull request courtesy Saurabh Kohli.

    References: #9427

sql

  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy attribute access through the cached "expected" expression rather than the resolved expression, causing stale closure-bound parameter values to be used when a lambda statement was extended with non-lambda criteria such as an additional .where() clause. Courtesy cjc0013.

    References: #10827

... (truncated)

Commits

Updates alembic from 1.18.4 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

    References: #1842

1.19.0

Released: August 4, 2026

changed

  • [changed] [installation] Environmental updates:

    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature

  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

    References: #508

bug

... (truncated)

Commits

Updates pydantic-settings from 2.14.1 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

... (truncated)

Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0

Release notes

Sourced from python-jose[cryptography]'s releases.

3.5.0

  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings

Bug fixes and Improvements

  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key

https://pypi.org/project/python-jose/3.5.0/

Changelog

Sourced from python-jose[cryptography]'s changelog.

3.5.0 -- 2025-05-28

News

  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings

Bug fixes and Improvements

  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key

3.4.0 -- 2025-02-14

News

  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11

Bug fixes and Improvements

  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)

Housekeeping

  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings

3.3.0 -- 2021-06-04

News

  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend

Housekeeping

... (truncated)

Commits

Updates patchright from 1.59.1 to 1.61.2

Release notes

Sourced from patchright's releases.

v1.61.0

This is an automatic deployment in response to a new release of microsoft/playwright-python. This Release is only used for Versioning.

v1.60.0

This is an automatic deployment in response to a new release of microsoft/playwright-python. This Release is only used for Versioning.

Commits

Updates python-multipart from 0.0.28 to 0.0.32

Release notes

Sourced from python-multipart's releases.

Version 0.0.32

What's Changed

Full Changelog: Kludex/python-multipart@0.0.31...0.0.32

Version 0.0.31

What's Changed

Full Changelog: Kludex/python-multipart@0.0.30...0.0.31

Version 0.0.30

What's Changed

Full Changelog: Kludex/python-multipart@0.0.29...0.0.30

Version 0.0.29

What's Changed

Full Changelog: Kludex/python-multipart@0.0.28...0.0.29

Changelog

Sourced from python-multipart's changelog.

0.0.32 (2026-06-04)

  • Speed up partial-boundary scanning for CR/LF-dense part data #300.

0.0.31 (2026-06-04)

  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.

0.0.30 (2026-05-31)

  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

Install ruff 0.16.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"

Download ruff 0.16.2

FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

  • Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

... (truncated)

Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/uv/backend/backend-deps-5dfd6bff9f branch from 88c592b to 08f99b6CompareAugust 12, 2026 17:11
@dependabot@github

dependabotBot commented on behalf of githubAug 25, 2026

Copy link
Copy Markdown
Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot@github

dependabotBot commented on behalf of githubSep 1, 2026

Copy link
Copy Markdown
Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Bump the backend-deps group across 1 directory with 9 updates - #28
Open
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Open
Bump the backend-deps group across 1 directory with 9 updates#28
dependabot[bot] wants to merge 1 commit into
mainfrom 
dependabot/uv/backend/backend-deps-5dfd6bff9f
Conversation
@dependabot
@dependabotdependabotBot
commented
on behalf of githubJul 21, 2026•

edited

Loading

Copy link


Copy Markdown

Updates the requirements on fastapi[standard], apscheduler, sqlalchemy[asyncio], alembic, pydantic-settings, python-jose[cryptography], patchright, python-multipart and ruff to permit the latest version.

Updates fastapi[standard] to 0.141.1
Release notes
Sourced from fastapi[standard]'s releases.
0.141.1
Fixes
  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.
Docs
Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.2 to 3.11.3
Release notes
Sourced from apscheduler's releases.
3.11.3
  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates sqlalchemy[asyncio] to 2.0.51
Release notes
Sourced from sqlalchemy[asyncio]'s releases.
2.0.51
Released: June 15, 2026
orm
  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with
PropComparator.of_type() and PropComparator.and_() would
silently drop the additional filter criteria, causing all related objects
to be loaded instead of only those matching the filter. The
LoaderCriteriaOption was being constructed against the base
entity rather than the effective entity indicated by
PropComparator.of_type(). Pull request courtesy Arya Rizky.
    References: #13207
  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within
_orm.Session.commit() for a two-phase session would raise
IllegalStateChangeError instead of the original database
exception. The internal _prepare_impl() method's error handler
was unable to invoke _orm.SessionTransaction.rollback() due
to a state-change guard, preventing proper cleanup and masking the
underlying error.
    References: #13356
engine
  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous
column names present in the original CursorResult, causing
key-based access on the thawed result to silently return a value instead of
raising InvalidRequestError. The
SimpleResultMetaData now accepts and propagates ambiguous key
information so that frozen, thawed, and pickled results raise consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.
    References: #9427
sql
  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy
attribute access through the cached "expected" expression rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such as
an additional .where() clause. Courtesy cjc0013.
    References: #10827
... (truncated)
Commits

Updates alembic from 1.18.4 to 1.19.1
Release notes
Sourced from alembic's releases.
1.19.1
Released: August 8, 2026
bug
  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.
    References: #1842
1.19.0
Released: August 4, 2026
changed
  • [changed] [installation] Environmental updates:
    - Trove classifiers now include Python 3.15 which is now part of CI
integration

    • Python 3.14 is also added to trove classifiers which had been previously
omitted
    • Implemented PEP 604 style unions in type annotations

feature
  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
alembic.autogenerate.checkconstraint_byname, and may be disabled if not
desired by excluding it from the
EnvironmentContext.configure.autogenerate_plugins list.
Pull request courtesy Francois van Kempen.
    References: #508
bug
... (truncated)
Commits

Updates pydantic-settings from 2.14.1 to 2.15.0
Release notes
Sourced from pydantic-settings's releases.
v2.15.0
Highlights
Behavior changes
  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.
New features
  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
Bug fixes
  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).
Documentation
  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).
What's Changed
... (truncated)
Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-jose[cryptography] to 3.5.0
Release notes
Sourced from python-jose[cryptography]'s releases.
3.5.0
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
https://pypi.org/project/python-jose/3.5.0/
Changelog
Sourced from python-jose[cryptography]'s changelog.
3.5.0 -- 2025-05-28
News
  • Remove support for Python 3.8
  • Added support for Python 3.12 & 3.13
  • Upgrade to pyasn1 0.5.1+
  • Upgrade to pytest and other dependencies
  • Add RTD config file to silence emailed deprecation warnings
Bug fixes and Improvements
  • Remove get_random_bytes from cryptography backend
  • Do not use utc_now on module level
  • Remove key data (sensitive information) from JWKError exceptions
  • Added possibility to call jwk.construct() with a private RSA key
3.4.0 -- 2025-02-14
News
  • Remove support for Python 3.6 and 3.7
  • Added support for Python 3.10 and 3.11
Bug fixes and Improvements
  • Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
  • Fix for PEM key comparisons caused by line lengths and new lines
  • Fix for CVE-2024-33664 - JWE limited to 250KiB
  • Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
  • Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)
Housekeeping
  • Updated Github Actions Workflows
  • Updated to use tox 4.x
  • Revise codecov integration
  • Fixed DeprecationWarnings
3.3.0 -- 2021-06-04
News
  • Remove support for python 2.7 & 3.5
  • Add support for Python 3.9
  • Remove PyCrypto backend
  • Fix deprecation warning from cryptography backend
Housekeeping
... (truncated)
Commits

Updates patchright from 1.59.1 to 1.61.2
Release notes
Sourced from patchright's releases.
v1.61.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
v1.60.0
This is an automatic deployment in response to a new release of microsoft/playwright-python.
This Release is only used for Versioning.
Commits

Updates python-multipart from 0.0.28 to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
Full Changelog: Kludex/python-multipart@0.0.31...0.0.32
Version 0.0.31
What's Changed
Full Changelog: Kludex/python-multipart@0.0.30...0.0.31
Version 0.0.30
What's Changed
Full Changelog: Kludex/python-multipart@0.0.29...0.0.30
Version 0.0.29
What's Changed
Full Changelog: Kludex/python-multipart@0.0.28...0.0.29
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
  • Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form#297.
0.0.30 (2026-05-31)
  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2#291.
0.0.29 (2026-05-17)
  • Handle malformed RFC 2231 continuations in parse_options_header#270.
Commits

Updates ruff from 0.15.21 to 0.16.2
Release notes
Sourced from ruff's releases.
0.16.2
Release Notes
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
Install ruff 0.16.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2
FilePlatformChecksum
ruff-aarch64-apple-darwin.tar.gzApple Silicon macOSchecksum
ruff-x86_64-apple-darwin.tar.gzIntel macOSchecksum
ruff-aarch64-pc-windows-msvc.zipARM64 Windowschecksum
ruff-i686-pc-windows-msvc.zipx86 Windowschecksum
ruff-x86_64-pc-windows-msvc.zipx64 Windowschecksum
ruff-aarch64-unknown-linux-gnu.tar.gzARM64 Linuxchecksum
ruff-i686-unknown-linux-gnu.tar.gzx86 Linuxchecksum
ruff-powerpc64-unknown-linux-gnu.tar.gzPPC64 Linuxchecksum
ruff-powerpc64le-unknown-linux-gnu.tar.gzPPC64LE Linuxchecksum
ruff-riscv64gc-unknown-linux-gnu.tar.gzRISCV Linuxchecksum
ruff-s390x-unknown-linux-gnu.tar.gzS390x Linuxchecksum
... (truncated)
Changelog
Sourced from ruff's changelog.
0.16.2
Released on 2026-08-06.
Bug fixes
  • [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)
Server
  • Register formatting capabilities dynamically to exclude TOML files (#27332)
Contributors
0.16.1
Released on 2026-07-30.
Preview features
  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)
Bug fixes
  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)
Rule changes
  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)
Server
  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)
... (truncated)
Commits
  • 5b48a04 Bump 0.16.2 (#27555)
  • 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
  • c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
  • 17a00de [ty] Reuse primer commands in memory reports (#27553)
  • 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
  • 2fc445f [ty] Diagnose invalid getattr calls (#27502)
  • 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
  • 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
  • baea3d0 [ty] Expose strict analysis options in the playground (#27543)
  • c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
  • Additional commits viewable in compare view

@dependabotdependabotBot
added

dependencies
Pull requests that update a dependency file
python:uv
Pull requests that update python:uv code
labels
Jul 21, 2026
@dependabot
Bump the backend-deps group across 1 directory with 9 updates
08f99b6
Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [apscheduler](https://github.com/agronholm/apscheduler), [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy), [alembic](https://github.com/sqlalchemy/alembic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-jose[cryptography]](https://github.com/mpdavis/python-jose), [patchright](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python), [python-multipart](https://github.com/Kludex/python-multipart) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
Updates `fastapi[standard]` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.141.1)
Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)
Updates `sqlalchemy[asyncio]` to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)
Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)
Updates `pydantic-settings` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.15.0)
Updates `python-jose[cryptography]` to 3.5.0
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](mpdavis/python-jose@3.3.0...3.5.0)
Updates `patchright` from 1.59.1 to 1.61.2
- [Release notes](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/releases)
- [Commits](https://github.com/Kaliiiiiiiiii-Vinyzu/patchright-python/commits)
Updates `python-multipart` from 0.0.28 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.28...0.0.32)
Updates `ruff` from 0.15.21 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.2)
---
updated-dependencies:
- dependency-name: alembic
dependency-version: 1.18.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: apscheduler
dependency-version: 3.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: fastapi[standard]
dependency-version: 0.139.2
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: patchright
dependency-version: 1.61.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: backend-deps
- dependency-name: pydantic-settings
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: python-jose[cryptography]
dependency-version: 3.5.0
dependency-type: direct:production
dependency-group: backend-deps
- dependency-name: python-multipart
dependency-version: 0.0.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: ruff
dependency-version: 0.15.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: backend-deps
- dependency-name: sqlalchemy[asyncio]
dependency-version: 2.0.51
dependency-type: direct:production
dependency-group: backend-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed
the
dependabot/uv/backend/backend-deps-5dfd6bff9f
branch
from
88c592b to
08f99b6CompareAugust 12, 2026 17:11
@dependabot@github
dependabotBot
commented
on behalf of githubAug 25, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment

@dependabot@github
dependabotBot
commented
on behalf of githubSep 1, 2026

Copy link


Copy Markdown

Author
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants