Skip to content

Bump the python-runtime group with 10 updates - #40

Closed
dependabot[bot] wants to merge 594 commits into
mainfrom
dependabot/pip/python-runtime-bc6374e755
Closed

Bump the python-runtime group with 10 updates#40
dependabot[bot] wants to merge 594 commits into
mainfrom
dependabot/pip/python-runtime-bc6374e755

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the python-runtime group with 10 updates:

Package From To
cachetools 7.0.2 7.1.4
fastapi 0.135.1 0.139.2
pyairtable 3.3.0 3.4.0
pydantic-settings 2.13.1 2.14.2
pymongo 4.16.0 4.17.0
python-telegram-bot 22.6 22.8
redis 7.2.1 8.0.1
requests 2.32.5 2.34.2
uvicorn 0.41.0 0.51.0
mypy 1.19.1 2.3.0

Updates cachetools from 7.0.2 to 7.1.4

Changelog

Sourced from cachetools's changelog.

v7.1.4 (2026-05-22)

  • Minor unit test improvements.

  • Update build environment.

v7.1.3 (2026-05-18)

  • Minor type stub improvements.

  • Update build environment.

v7.1.2 (2026-05-16)

  • Minor type stub improvements.

  • Minor documentation improvements.

  • Modernize build environment.

v7.1.1 (2026-05-03)

  • Various type stub improvements.

v7.1.0 (2026-05-01)

  • Add type stubs based on the work of the good people at typeshed <https://github.com/python/typeshed/tree/main/stubs/cachetools/>__.

  • Update unit tests.

v7.0.6 (2026-04-20)

  • Minor code improvements.

  • Update project URLs.

  • Update CI environment.

... (truncated)

Commits

Updates fastapi from 0.135.1 to 0.139.2

Release notes

Sourced from fastapi's releases.

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.

0.139.1

Fixes

  • 🐛 Fix frontend fallback support for doted paths like /users/john.doe. PR #16011 by @​tiangolo.

Docs

  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #15995 by @​YuriiMotov.

Translations

Internal

... (truncated)

Commits
  • 866b7a3 🔖 Release version 0.139.2 (#16014)
  • 7b3effe 📝 Update release notes
  • 7fe315c 🐛 Refactor router route building to make it thread-safe, mainly relevant for ...
  • c48e67b 🔖 Release version 0.139.1 (#16012)
  • 2acc4fb 📝 Update release notes
  • eb75fd0 🐛 Fix frontend fallback support for doted paths like /users/john.doe (#16011)
  • 9b8410b 📝 Update release notes
  • e24d44c 📝 Fix topic repository list not being displayed and skip_users not being ap...
  • 93b78f8 📝 Update release notes
  • b959b44 📝 Update release notes
  • Additional commits viewable in compare view

Updates pyairtable from 3.3.0 to 3.4.0

Commits
  • 012bc56 Update docs for 3.4.0
  • 2d88b4d Enterprise.create_base_from_package takes package_or_release=
  • 209fe5e CLAUDE.md -> AGENTS.md
  • 53fdac4 Merge pull request #454 from mesozoic/install-package
  • cc9a3ef Merge pull request #456 from mesozoic/update-resources
  • d9f57d9 Scan schemas for new fields and add support for them
  • ba00adc Merge pull request #455 from mesozoic/orm-docs
  • fd7ce6e Mention the base orm command in docs (fixes #446)
  • db028f7 Merge pull request #449 from mesozoic/fix_docs
  • 287211c Fixing documentation typos
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.13.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

v2.14.1

What's Changed

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • d703bd7 Prepare release 2.14.2 (#890)
  • e95c30b Prepare release 2.14.1 (#859)
  • 0c87345 Fix field named cls conflicting with classmethod parameter (#858)
  • 7bd0072 Bump the python-packages group with 2 updates (#856)
  • b03e573 Bump the github-actions group with 3 updates (#853)
  • eaa3b43 Bump the python-packages group with 5 updates (#854)
  • 9f95615 Bump the python-packages group with 4 updates (#850)
  • 8916bee Prepare release 2.14.0 (#848)
  • 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
  • 9ed7f48 Bump the python-packages group with 4 updates (#847)
  • Additional commits viewable in compare view

Updates pymongo from 4.16.0 to 4.17.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.17.0

Community notes

What's Changed

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.17.0 (2026/04/20)

PyMongo 4.17 brings a number of changes including:

  • has_key, iterkeys and itervalues in :class:bson.son.SON have been deprecated and will be removed in PyMongo 5.0. These methods were deprecated in favor of the standard dictionary containment operator in and the keys() and values() methods, respectively.
  • Added the :meth:~pymongo.asynchronous.client_session.AsyncClientSession.bind and :meth:~pymongo.client_session.ClientSession.bind methods that allow users to bind a session to all database operations within the scope of a context manager instead of having to explicitly pass the session to each individual operation. See the Transactions docs <https://www.mongodb.com/docs/languages/python/pymongo-driver/current/crud/transactions/#methods>_ for examples and more information.
  • Added support for MongoDB's Intelligent Workload Management (IWM) and ingress connection rate limiting features in MongoDB server version 9.0. The driver will gracefully handle write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability.
Commits
  • f2103a9 Prep branch v4.17
  • 3491c08 PYTHON-5801 - Update changelog for 4.17 release (#2762)
  • 912ef33 PYTHON-5798 - Overload retargeting prose tests do not ensure that sec… (#2760)
  • b4e2c03 PYTHON-5800 - Simple collation is included in index information (#2761)
  • f31ba09 PYTHON-5797 - Add IWM and Overload Error links to changelog (#2757)
  • 5da9183 PYTHON-5794 - Add prose tests to verify correct retry behavior when a… (#2755)
  • 35e51a5 Revert "PYTHON-5768 Add AGENTS.md w/copilot instructions" (#2744) (#2754)
  • f41dd5c PYTHON-5772 Increase _gcp_helpers.py coverage (#2749)
  • 49e7a05 PYTHON-5760 Increase _azure_helpers.py coverage (#2747)
  • a2b0cd8 PYTHON-5795 Fix absolute link to CONTRIBUTING.md in README.md (#2756)
  • Additional commits viewable in compare view

Updates python-telegram-bot from 22.6 to 22.8

Release notes

Sourced from python-telegram-bot's releases.

v22.8

We've just released v22.8. Thank you to everyone who contributed to this release. As usual, upgrade using pip install -U python-telegram-bot.

The release notes can be found here.

v22.7

We've just released v22.7. Thank you to everyone who contributed to this release. As usual, upgrade using pip install -U python-telegram-bot.

The release notes can be found here.

Commits

Updates redis from 7.2.1 to 8.0.1

Release notes

Sourced from redis's releases.

8.0.1

Changes

🐛 Bug Fixes

  • Fix Unix socket maintenance notification handling and tests (#4097)
  • Fix async cluster node connection release on write errors (#4111)
  • Fixed async MultiDBClient with underlying RedisCluster (#4108)
  • Fix hiredis readiness checks for high file descriptors (#4115)
  • fix(search): parse RESP3 FT.SEARCH responses with bytes-typed keys (#4109)
  • Fixing pubsub's listen method to be blocking. (#4119)
  • fix(asyncio): release pooled connection when Pipeline.reset() is cancelled (#4123)
  • Avoid per-check fd allocation in hiredis _socket_can_read() — use poll() instead of a per-call selector (#4118)

🧰 Maintenance

  • Updating PyJWT dependency. (#4100)
  • Update CI badge in README.md (#4099)
  • Add missing url query argument parser for ssl_min_version (#4047)
  • ci: least-privilege permissions on spellcheck (read) and stale-issues (job-level write for actions/stale) (#4080)
  • Bumping github-versions actions (#4102)
  • Updating lib version + supported Redis versions in README.md + updating the Redis versions in CI test matrix (#4092)

We'd like to thank all the contributors who worked on this release! @​violuke @​mokashang @​arpitjain099 @​coredumperror @​elena-kolevska @​vladvildanov @​petyaslavova

8.0.0

Changes

🚀 Highlights

Async Cluster PubSub

This release introduces full asyncio Cluster PubSub support, bringing shard-channel capabilities (SSUBSCRIBE, SUNSUBSCRIBE, SPUBLISH) to the async RedisCluster client. The new ClusterPubSub class in redis.asyncio.cluster automatically routes shard-channel subscriptions to the correct cluster node based on key-slot hashing, manages per-node PubSub connections, and supports round-robin message retrieval across nodes. Users can create a cluster pubsub instance via RedisCluster.pubsub() and use ssubscribe(), sunsubscribe(), and get_sharded_message() just as they would with the sync cluster client.

Keyspace and subkey notifications

Redis Keyspace Notifications are now supported for standalone and cluster deployments in both sync and async modes. New classes — KeyspaceNotifications, ClusterKeyspaceNotifications, AsyncKeyspaceNotifications, and AsyncClusterKeyspaceNotifications — provide a high-level API for keyspace/keyevent subscriptions and subkey notification families: subkeyspace, subkeyevent, subkeyspaceitem, and subkeyspaceevent. Convenience methods like subscribe_keyspace(), subscribe_keyevent(), subscribe_subkeyspace(), subscribe_subkeyevent(), subscribe_subkeyspaceitem(), and subscribe_subkeyspaceevent() simplify common patterns, with channel classes for both key and subkey channels.

In cluster mode, subscriptions are managed across primary nodes because each node emits notifications only for keys it owns, with built-in topology-change handling. Sync run_in_thread() and async listen() workflows are supported.

Redis Array commands(https://redis.io/docs/latest/develop/data-types/arrays/)

redis-py now supports Redis Arrays, a preview Redis data type for sparse, index-addressable sequences of strings. New AR* command helpers cover indexed reads/writes, range scans, deletion, cursor-based insertion, ring-buffer writes, metadata, text search, and aggregation, including ARGET, ARSET, ARMGET, ARMSET, ARSCAN, ARGREP, ARRING, and AROP.

Type Hints Improvements (breaking changes)

The @overload pattern has been applied systematically across core commands (core.py), VectorSet commands, and module commands (Search, JSON, TimeSeries, Bloom filters) to provide distinct return types for sync and async clients. Previously, methods returned a combined ResponseT (i.e., Union[Awaitable[Any], Any]), which caused static analysis tools like mypy and Pyright to flag false positives. Now, sync clients see concrete return types (e.g., int, bool, list[str]) while async clients see Awaitable[...] wrappers. This is a breaking change for type-checking only—runtime behavior is unchanged, but code relying on the old union return types in type annotations may need updates. Two new protocol types, SyncClientProtocol and AsyncClientProtocol, are used in overload signatures to enable this distinction.

RESP3 by default with opt-in unified responses

... (truncated)

Commits
  • 7c0fd11 Updating lib version to 8.0.1
  • b7a4d7d Avoid per-check fd allocation in hiredis _socket_can_read() — use poll() ...
  • eec778e fix(asyncio): release pooled connection when Pipeline.reset() is cancelled (#...
  • 08e01bb Fixing pubsub's listen method to be blocking. (#4119)
  • 3d5257a fix(search): parse RESP3 FT.SEARCH responses with bytes-typed keys (#4109)
  • cce28ff Fix hiredis readiness checks for high file descriptors (#4115)
  • e20691c Fixed async MultiDBClient with underlying RedisCluster (#4108)
  • ea37fcc Fix async cluster node connection release on write errors (#4111)
  • f4146fa Updating lib version + supported Redis versions in README.md + updating the R...
  • d47674e Bumping github-versions actions (#4102)
  • Additional commits viewable in compare view

Updates requests from 2.32.5 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

nikitacometa added 30 commits May 28, 2023 17:37
@nikitacometa
catch exceptions
3a8210d
@nikitacometa
fix typo
8787220
@nikitacometa
fix tinyman API typo
85e826b
@nikitacometa
try fix pool tinyman error
fabe643
@nikitacometa
fix required mnemonic rekeyed
c699c45
@nikitacometa
fix algoexplorer url (DEAD)
6b28533
@nikitacometa
fix airdrop model and key-file exclusions
f9c5a93
@nikitacometa
disable pools cache background
a4b8bfa
@nikitacometa
disable cometa bot
c7044e7
@nikitacometa
fix dir mapping
2c1d43e
@nikitacometa
update contracts cache ttl
d20a46c
@nikitacometa
fix socket name
8ffd25d
@nikitacometa
disable python buffer
537cbe4
@nikitacometa
fix beneficiary
ef8883e
@nikitacometa
log sending error
197c958
@nikitacometa
fix user pools empty
097e7dd
@nikitacometa
workaround prices testnet ffs
2da323a
@nikitacometa
propagate network context through staking lottery
0a9fa89
@nikitacometa
skip LP price lookup outside mainnet
3b47448
@nikitacometa
support testnet pool valuation
4957714
@nikitacometa
fetch fresh staking state for lottery checks
0aeb5aa
@nikitacometa
log user pool tokens
0c717cf
@nikitacometa
debug lottery
e631dc5
@nikitacometa
return background sync of pools
eda504e
@nikitacometa
fix get user address with cache
031fc77
@nikitacometa
add delay fpor opt-in to finish
625571f
@nikitacometa
add delay to rate-limit avoid
3221d7c
@nikitacometa
log user pools
249b76c
@nikitacometa
log user pools better
3a60417
@nikitacometa
use just sleep not async
9503e12
nikitacometa and others added 20 commits March 31, 2026 00:28
@nikitacometa
add LP token pricing via background worker, remove broken lp_states p…
22a4851 
…ipeline
@nikitacometa
update board: CB-070 done — LP token pricing via background worker
e7cb196
@nikitacometa
add price routing with fallback chain and LP pricing resilience
d8c5c0d 
- new flex/providers/price_router.py: DB → Vestige → Tinyman → CoinGecko
- vestige.py: VestigeUnavailableError for 403/429/5xx instead of crash
- lp_prices.py: use price_router, parallelize with semaphore
@nikitacometa
add algod fallback for contract registration and cache updates
85eaefb 
- new flex/blockchain/contract_state.py: read on-chain state via algosdk
- app.py: /contract/register tries JS interop, falls back to algod
- app.py: /contracts/refresh-cache works without JS interop
- background.py: contract cache update falls back to algod on JS failure
@nikitacometa
fix null bytes in on-chain state keys for MongoDB compatibility
691832a
@nikitacometa
fix parse_bignum to handle None, str, and int inputs safely
71cfc18
@nikitacometa
remove enable_js gate from cache update worker, use algod fallback di…
385b804 
…rectly
@nikitacometa
add proxy support to JS interop, protect cache from empty overwrites
6a2929c
@nikitacometa
fix LP token pricing: multi-source lookup for LP definitions
38e3eb9 
get_lp_token_definitions() was only using contract metadata (asset1_id + dex),
which is missing for most farm contracts. Now uses 4 sources in priority order:
1. lp_tokens collection (verified pool data)
2. farming_pools collection (first_token, second_token)
3. Contract metadata (fallback)
4. On-chain auto-discovery via algod (last resort)
@nikitacometa
fix LP pricing: use reserve address for Tinyman V2, exclude LP tokens…
32acc53 
… from regular pricing
@nikitacometa
fix CORS on error responses, throttle LP pricing to 5-min intervals
677d5e8
@nikitacometa
optimize LP pricing: active contracts only, remove on-chain discovery…
dc2f6a5 
…, add request delay
@nikitacometa
tighten LP active filter: only endBlock >= current_round, skip ended …
4ec81f7 
…farms
@nikitacometa
add repository contributor guide
f078751
@nikitacometa
harden repository quality foundations
a38a510
@nikitacometa
refactor fintech reliability boundaries
28aad95
@dependabot
update GitHub Actions to v7
cdb2151 
Upgrade pinned checkout and setup-node actions after the full Python, JavaScript, and Compose CI matrix passed.
@nikitacometa
improve public repository presentation
a0aee8c
@nikitacometa
harden API and sidecar boundaries
820e9e6
@dependabot
Bump the python-runtime group with 10 updates
01e751c 
Bumps the python-runtime group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [cachetools](https://github.com/tkem/cachetools) | `7.0.2` | `7.1.4` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.135.1` | `0.139.2` |
| [pyairtable](https://github.com/gtalarico/pyairtable) | `3.3.0` | `3.4.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.2` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.16.0` | `4.17.0` |
| [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot) | `22.6` | `22.8` |
| [redis](https://github.com/redis/redis-py) | `7.2.1` | `8.0.1` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.34.2` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.51.0` |
| [mypy](https://github.com/python/mypy) | `1.19.1` | `2.3.0` |


Updates `cachetools` from 7.0.2 to 7.1.4
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.0.2...v7.1.4)

Updates `fastapi` from 0.135.1 to 0.139.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.1...0.139.2)

Updates `pyairtable` from 3.3.0 to 3.4.0
- [Commits](gtalarico/pyairtable@3.3.0...3.4.0)

Updates `pydantic-settings` from 2.13.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.2)

Updates `pymongo` from 4.16.0 to 4.17.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/main/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.16.0...4.17.0)

Updates `python-telegram-bot` from 22.6 to 22.8
- [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases)
- [Commits](python-telegram-bot/python-telegram-bot@v22.6...v22.8)

Updates `redis` from 7.2.1 to 8.0.1
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.2.1...v8.0.1)

Updates `requests` from 2.32.5 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.34.2)

Updates `uvicorn` from 0.41.0 to 0.51.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.51.0)

Updates `mypy` from 1.19.1 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v2.3.0)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: fastapi
  dependency-version: 0.139.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: pyairtable
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: pymongo
  dependency-version: 4.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: python-telegram-bot
  dependency-version: '22.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: redis
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-runtime
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 17, 2026
@dependabot
dependabot Bot requested a review from nikitacometa as a code owner July 17, 2026 22:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 17, 2026
@nikitacometa

nikitacometa commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

Superseded by the security-focused history rewrite and the refreshed Python 3.12 lockfile on main; current dependency scanning reports no open alerts.

@nikitacometa
nikitacometa deleted the dependabot/pip/python-runtime-bc6374e755 branch July 18, 2026 02:35
@dependabot @github

dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nikitacometa nikitacometa Awaiting requested review from nikitacometa nikitacometa is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nikitacometa