Skip to content

deps(deps): bump the python-minor-and-patch group across 1 directory with 14 updates#18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-and-patch-06ec9088f4
Open

deps(deps): bump the python-minor-and-patch group across 1 directory with 14 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-and-patch-06ec9088f4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps the python-minor-and-patch group with 14 updates in the / directory:

Package From To
fastapi 0.136.0 0.136.3
uvicorn 0.44.0 0.48.0
databricks-sdk 0.105.0 0.111.0
pydantic 2.13.2 2.13.4
python-multipart 0.0.26 0.0.29
certifi 2026.2.25 2026.5.20
click 8.3.2 8.4.1
google-auth 2.49.2 2.53.0
idna 3.11 3.16
pydantic-core 2.46.2 2.47.0
requests 2.33.1 2.34.2
starlette 1.0.0 1.1.0
urllib3 2.6.3 2.7.0
watchfiles 1.1.1 1.2.0

Updates fastapi from 0.136.0 to 0.136.3

Release notes

Sourced from fastapi's releases.

0.136.3

Refactors

  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @​tiangolo.

0.136.2

Refactors

  • ♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits
  • 8206485 🔖 Release version 0.136.3
  • c910e01 📝 Update release notes
  • 063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
  • 22b02e2 🔖 Release version 0.136.2
  • 3b252a2 📝 Update release notes
  • c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
  • cb83b83 📝 Update release notes
  • 00f805c ✅ Update tests, don't double dispose the engine (#15587)
  • 3675137 📝 Update release notes
  • 7b57e42 📝 Document --entrypoint CLI option (#15464)
  • Additional commits viewable in compare view

Updates uvicorn from 0.44.0 to 0.48.0

Release notes

Sourced from uvicorn's releases.

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Version 0.47.0

What's Changed

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Version 0.46.0

What's Changed

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Changelog

Sourced from uvicorn's changelog.

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

  • Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

  • Eagerly import the ASGI app in the parent process (#2919)

Fixed

  • Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

Changed

  • Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)
  • Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

... (truncated)

Commits
  • 73e84e5 Version 0.48.0 (#2951)
  • 45ea116 Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)
  • dd4394c chore(deps): bump idna from 3.11 to 3.15 (#2941)
  • abe0781 Default ssl_ciphers to None and use OpenSSL defaults (#2940)
  • 479a2c0 Version 0.47.0 (#2937)
  • 89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
  • 767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
  • f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
  • 8782666 Fix typo in docs/deployment/index.md. (#2932)
  • ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
  • Additional commits viewable in compare view

Updates databricks-sdk from 0.105.0 to 0.111.0

Changelog

Sourced from databricks-sdk's changelog.

Release v0.111.0 (2026-05-25)

API Changes

  • Add databricks.sdk.service.bundle package.
  • Add w.bundle workspace-level service.
  • Add revert() method for w.lakeview workspace-level service.
  • Add undelete_branch() method for w.postgres workspace-level service.
  • Add parent_path field for databricks.sdk.service.dashboards.GenieUpdateSpaceRequest.
  • Add attributes and excluded_attributes fields for databricks.sdk.service.iam.MeRequest.
  • Add include_trigger_state field for databricks.sdk.service.jobs.GetJobRequest.
  • Add mtls_config field for databricks.sdk.service.ml.AuthConfig.
  • Add delete_time and purge_time fields for databricks.sdk.service.postgres.BranchStatus.
  • Add purge field for databricks.sdk.service.postgres.DeleteBranchRequest.
  • Add show_deleted field for databricks.sdk.service.postgres.ListBranchesRequest.
  • Add deleted enum value for databricks.sdk.service.postgres.BranchStatusState.
  • [Breaking] Change tags field for databricks.sdk.service.marketplace.ListListingsRequest to type databricks.sdk.service.marketplace.ListingTag dataclass.
  • [Breaking] Change pagination for ClustersAPI.events method.
  • Add compute_max_instances and compute_min_instances fields for databricks.sdk.service.apps.App.
  • Add compute_max_instances and compute_min_instances fields for databricks.sdk.service.apps.AppUpdate.
  • Add cron_schedule_trigger, streaming_mode and table_trigger fields for databricks.sdk.service.ml.MaterializedFeature.
  • Add synced_table_id field for databricks.sdk.service.postgres.SyncedTableSyncedTableStatus.

Release v0.110.0 (2026-05-19)

API Changes

  • Add full_refresh_selection, refresh_flow_selection, refresh_selection and reset_checkpoint_selection fields for databricks.sdk.service.jobs.PipelineParams.
  • Add full_refresh_selection, refresh_flow_selection, refresh_selection and reset_checkpoint_selection fields for databricks.sdk.service.jobs.PipelineTask.
  • Add effective_operational_email_custom_recipient and operational_email_custom_recipient fields for databricks.sdk.service.settingsv2.Setting.

Release v0.109.0 (2026-05-18)

API Changes

  • Add create_workspace_assignment_detail(), delete_workspace_assignment_detail(), get_workspace_assignment_detail(), list_workspace_assignment_details() and update_workspace_assignment_detail() methods for a.account_iam_v2 account-level service.
  • Add create_workspace_assignment_detail_proxy(), delete_workspace_assignment_detail_proxy(), get_workspace_assignment_detail_proxy(), list_workspace_assignment_details_proxy() and update_workspace_assignment_detail_proxy() methods for w.workspace_iam_v2 workspace-level service.
  • Add failover_group_name field for databricks.sdk.service.disasterrecovery.StableUrl.
  • Add catalog_name, created_at, created_by, name and schema_name fields for databricks.sdk.service.ml.Feature.
  • [Breaking] Add catalog_name and schema_name fields for databricks.sdk.service.ml.ListFeaturesRequest.
  • Add cross_workspace_access field for databricks.sdk.service.settings.CustomerFacingIngressNetworkPolicy.
  • Add allowed_apps_user_api_scopes and effective_allowed_apps_user_api_scopes fields for databricks.sdk.service.settingsv2.Setting.
  • Add gpu_xlarge enum value for databricks.sdk.service.serving.ServedModelInputWorkloadType.
  • Add gpu_xlarge enum value for databricks.sdk.service.serving.ServingModelWorkloadType.
  • [Breaking] Change list_features() method for w.feature_engineering workspace-level service with new required argument order.
  • Add python_operator_task field for databricks.sdk.service.jobs.RunTask.
  • Add python_operator_task field for databricks.sdk.service.jobs.SubmitTask.
  • Add python_operator_task field for databricks.sdk.service.jobs.Task.
  • Add rolling field for databricks.sdk.service.ml.TimeWindow.

... (truncated)

Commits
  • 1d1f857 [Release] Release v0.111.0
  • 4cbcf61 Update SDK API to 581ed6f3148344f453000224ada95e0646bb6d16 (#1441)
  • 7f81295 Update SDK API to 0503dcda908dd1bdf9626152bcf3576996138c58 (#1440)
  • 27d27cf Update SDK API to 993160f9786ab5532bba61a5b56c2c47c2e2b745 (#1438)
  • 3ddb051 [Release] Release v0.110.0
  • 8e35c56 Update SDK API to 50a10950ac51e28984f99a85f0d4511e90d6ae94 (#1434)
  • db20e3e [Release] Release v0.109.0
  • 09a5322 Update SDK API to 3771259535cb6c99a2870881c91e865c79a7b199 (#1433)
  • 10224ba Update SDK API to cd173d1def500fcb9c225d104a6613059bbbf6bf (#1432)
  • 96b9f9e Update SDK API to 1cc0b1d334985d59e5926169b5152daf9b879d27 (#1431)
  • Additional commits viewable in compare view

Updates pydantic from 2.13.2 to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • Additional commits viewable in compare view

Updates python-multipart from 0.0.26 to 0.0.29

Release notes

Sourced from python-multipart's releases.

Version 0.0.29

What's Changed

Full Changelog: Kludex/python-multipart@0.0.28...0.0.29

Version 0.0.28

What's Changed

Full Changelog: Kludex/python-multipart@0.0.27...0.0.28

Version 0.0.27

What's Changed

Full Changelog: Kludex/python-multipart@0.0.26...0.0.27

Changelog

Sourced from python-multipart's changelog.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

  • Speed up partial-boundary tail scan via bytes.find #281.
  • Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

  • Add multipart header limits #267.
  • Pass parse offsets via constructors #268.
Commits
  • e3d6853 Version 0.0.29 (#288)
  • a60dcdc Handle malformed RFC 2231 continuations in parse_options_header (#270)
  • 75c33b2 Add 7-day cooldown for dependency resolution via uv exclude-newer (#286)
  • a078b8e Bump urllib3 from 2.6.3 to 2.7.0 (#285)
  • 7d8d28b Version 0.0.28 (#284)
  • b0dd125 Cap multipart boundary length at 256 bytes (#282)
  • d1b5739 Speed up partial-boundary tail scan via bytes.find (#281)
  • 09cb8c3 Make the long_boundary benchmark dominated by the patched code path (#280)
  • a6467c9 Revert "Switch CodSpeed benchmarks to walltime mode" (#279)
  • 9a96900 Switch CodSpeed benchmarks to walltime mode (#278)
  • Additional commits viewable in compare view

Updates certifi from 2026.2.25 to 2026.5.20

Commits

Updates click from 8.3.2 to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

  • ParamType typing improvements. #3371

    • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
    • :class:CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

  • Parameter typing improvements. #2805

    • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. :issue:3458 :issue:3484
  • Zsh completion scripts parse correctly on Windows. :issue:3277 :pr:3466
  • Shell completion of Choice Enum values produces a valid completion result. :issue:3015
  • Fix empty byte-string handling in echo. :issue:3487
  • Fix closed file error with echo_via_pager. :issue:3449

Version 8.4.0

Released 2026-05-17

  • :class:ParamType typing improvements. :pr:3371

    • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
    • :class:CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. :pr:3372

  • :class:Parameter typing improvements. :pr:2805

    • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior. :issue:2745 :pr:3364

  • Auto-detect type=UNPROCESSED for flag_value of non-basic types (not str, int, float, or bool), so programmer-provided Python objects like classes and enum members are passed through unchanged instead of being stringified. Previously type=click.UNPROCESSED had to be set explicitly. :issue:2012 :pr:3363

... (truncated)

Commits
  • 6eeb50e release version 8.4.1
  • 67921d5 change log and doc fixes (#3495)
  • 9c41f46 Fix changelog and version admonitions
  • 6cb3477 fix skip condition
  • 5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
  • becbde5 pager doesn't close std streams
  • a5f5aa6 Handle empty bytes in echo (#3493)
  • 4d3db84 handle empty bytes in echo
  • d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
  • 0baa8db Document ctx.params bypass with test and doc
  • Additional commits viewable in compare view

Updates google-auth from 2.49.2 to 2.53.0

Commits

Updates idna from 3.11 to 3.16

Changelog

Sourced from idna's changelog.

3.16 (2026-05-22)

  • Add a command-line interface (python -m idna, also available as the idna script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling.
  • Raise the minimum supported Python version to 3.9
  • Various code quality improvements

3.15 (2026-05-12)

  • Enforce DNS-length cap on individual labels early in check_label, short-circuiting contextual-rule processing for oversized input while staying compatible with UTS 46 usage.
  • Tidy core helpers: hoist bidi category sets to module-level frozensets (avoiding per-codepoint list construction), simplify length checks, and reuse the shared _unicode_dots_re from idna.core in the codec module.
  • Use raise ... from err for proper exception chaining and switch internal string formatting to f-strings.
  • Allow flit_core 4.x in the build backend.
  • Expand the ruff lint set (flake8-bugbear, flake8-simplify, pyupgrade, perflint) and apply the surfaced fixes; pin lint CI to Python 3.14.
  • Add Dependabot configuration for GitHub Actions.
  • Convert README and HISTORY from reStructuredText to Markdown.
  • Reference CVE-2026-45409 for the 3.14 advisory in place of the initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for contributions to this release.

3.14 (2026-05-10)

  • Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409]

Thanks to Stan Ulbrych for reporting the issue.

3.13 (2026-04-22)

  • Correct classification error for codepoint U+A7F1

3.12 (2026-04-21)

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including

... (truncated)

Commits
  • 6d1a0de Release 3.16
  • 4e6cbe2 Demote installation instruction to usage section
  • 223533c Merge branch 'readme-simplification' into release-3.16
  • b1640b2 Bump version to 3.16rc0
  • 3a86113 Update history for 3.16 release
  • d4bc9e7 Merge pull request #246 from kjd/python-3.9
  • a21d9fc Update deprecation policy
  • b464926 Raise minimum Python to 3.9 and modernize typing
  • 7f3b15e Explicit example not needed
  • 7530c70 Remove unnecessary print()
  • Additional commits viewable in compare view

Updates pydantic-core from 2.46.2 to 2.47.0

Commits

Updates requests from 2.33.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has bee...

    Description has been truncated

@dependabot
deps(deps): bump the python-minor-and-patch group across 1 directory …
10b8c2f 
…with 14 updates

Bumps the python-minor-and-patch group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.0` | `0.136.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.44.0` | `0.48.0` |
| [databricks-sdk](https://github.com/databricks/databricks-sdk-py) | `0.105.0` | `0.111.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.2` | `2.13.4` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.26` | `0.0.29` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.5.20` |
| [click](https://github.com/pallets/click) | `8.3.2` | `8.4.1` |
| [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.49.2` | `2.53.0` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.16` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.2` | `2.47.0` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [starlette](https://github.com/Kludex/starlette) | `1.0.0` | `1.1.0` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.1` | `1.2.0` |



Updates `fastapi` from 0.136.0 to 0.136.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.136.3)

Updates `uvicorn` from 0.44.0 to 0.48.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.44.0...0.48.0)

Updates `databricks-sdk` from 0.105.0 to 0.111.0
- [Release notes](https://github.com/databricks/databricks-sdk-py/releases)
- [Changelog](https://github.com/databricks/databricks-sdk-py/blob/main/CHANGELOG.md)
- [Commits](databricks/databricks-sdk-py@v0.105.0...v0.111.0)

Updates `pydantic` from 2.13.2 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.2...v2.13.4)

Updates `python-multipart` from 0.0.26 to 0.0.29
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.26...0.0.29)

Updates `certifi` from 2026.2.25 to 2026.5.20
- [Commits](certifi/python-certifi@2026.02.25...2026.05.20)

Updates `click` from 8.3.2 to 8.4.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.2...8.4.1)

Updates `google-auth` from 2.49.2 to 2.53.0
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-auth-library-python/commits)

Updates `idna` from 3.11 to 3.16
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.16)

Updates `pydantic-core` from 2.46.2 to 2.47.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `starlette` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.0...1.1.0)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `watchfiles` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.1.1...v1.2.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: databricks-sdk
  dependency-version: 0.111.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: python-multipart
  dependency-version: 0.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: certifi
  dependency-version: 2026.5.20
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: click
  dependency-version: 8.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-auth
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: idna
  dependency-version: '3.16'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pydantic-core
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: starlette
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: watchfiles
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 25, 2026

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants