Skip to content

chore(deps): bump the python-deps group with 3 updates#410

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/python-deps-5bd65defb4
Open

chore(deps): bump the python-deps group with 3 updates#410
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/develop/python-deps-5bd65defb4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group with 3 updates: beautifulsoup4, google-cloud-storage and uvicorn.

Updates beautifulsoup4 from 4.14.3 to 4.15.0

Updates google-cloud-storage from 3.10.1 to 3.11.0

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage: v3.11.0

v3.11.0 (2026-06-02)

Features

  • Added a new field ComposeObjectRequest.delete_source_objects field (PiperOrigin-RevId: 863087065) (1230e174)

  • add object contexts in Python GCS SDK (#17039) (15ec8bd7)

  • Add delete_source_objects optional parameter to compose API (#17163) (16ab4c26)

  • add fixed-key metadata support in AAOW (#16817) (28487f5c)

  • Add support for blob object in AAOW (#16577) (32718318)

  • implement AsyncMultiRangeDownloader with multiplexed bidi-gRPC stream support (#16528) (493df65b)

  • populate the persisted_data_checksums field with object checksums on write object / query write status responses (PiperOrigin-RevId: 895357062) (56ccbd86)

  • Enhance Otel Span Attributes with BucketId and Location details for every Bucket/Blob operation (a0da993d)

  • drop Python 3.7-3.9 support and regenerate (#17178) (c804a935)

Bug Fixes

  • updates typing for python 3.8 (87b7ba97)

  • propagate quota_project_id and api_endpoint in AsyncGrpcClient (#16731) (b8b457aa)

Performance Improvements

  • add multiplexing performance tests for AsyncMultiRangeDownloader (#16501) (20969910)

  • implement fast-path for queue delivery in _StreamMultiplexer (#16718) (7073be16)

  • use google_crc32c.value for checksums (#16719) (c6461a42)

  • use google_crc32c.value() for simpler crc32c calculation (#16761) (c9846c92)

Documentation

  • Updated documentation for BidiReadObject, ReadObjectRequest, and ObjectContexts (PiperOrigin-RevId: 863087065) (1230e174)

  • improve wording around object_checksums in bidi write object requests (PiperOrigin-RevId: 895357062) (56ccbd86)

Changelog

Sourced from google-cloud-storage's changelog.

3.11.0 (2026-03-05)

Features

3.10.0 (2026-02-12)

Documentation

Features

Bug Fixes

  • Removed the SpannerIndexingConfig message and the spanner_indexing_config field from .google.cloud.documentai.v1beta3.Dataset BREAKING CHANGE: The SpannerIndexingConfig message and the spanner_indexing_config field within the Dataset message have been removed. Client code referencing these will need to stop referencing these in case of an error (5371e8e931dfba1d504ac2ffbd48a7f4abdcc158)

3.9.0 (2026-01-29)

Documentation

3.8.0 (2026-01-08)

Features

3.7.0 (2025-10-16)

Documentation

... (truncated)

Commits
  • 5accbb4 chore: librarian release pull request: 20260602T021047Z (#17336)
  • 86e57cb fix(spanner_dbapi): replace insecure pickle with json for partition deseriali...
  • 6b62cb6 feat(bigframes): Add ai_generate functions to the dataframe bq accessor (#17302)
  • 54fd04b chore: librarian release pull request: 20260529T145921Z (#17312)
  • c04f892 chore: update googleapis and regenerate (#17313)
  • 1c2e24f chore: generate google-cloud-monitoring-dashboards (#17309)
  • 06965d8 chore: generate google-cloud-containeranalysis (#17308)
  • 2024224 chore: generate grafeas (#17307)
  • 9f2ed92 chore(spanner): deprecate experimental host option/parameter to replace with ...
  • 7813ca4 chore: add missing nox sessions and polish dependencies in sqlalchemy-spanner...
  • Additional commits viewable in compare view

Updates uvicorn from 0.48.0 to 0.49.0

Release notes

Sourced from uvicorn's releases.

Version 0.49.0

What's Changed

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

Changelog

Sourced from uvicorn's changelog.

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)
Commits
  • 3ef2e3e Version 0.49.0 (#2973)
  • eeb64b1 Consume duplicate forwarding headers in ProxyHeadersMiddleware (#2971)
  • 630f4ac Make the watchfiles reload tests deterministic (#2972)
  • 9154922 chore(deps): bump the github-actions group across 1 directory with 6 updates ...
  • 739727a Migrate docs deploy from Cloudflare Pages to Workers (#2967)
  • be4a240 Gate docs preview deploy on Cloudflare token presence (#2966)
  • c489d7e Bump httptools minimum version to 0.8.0 (#2962)
  • 9f547bd Skip docs preview deploy for Dependabot PRs (#2961)
  • 44446b8 Migrate documentation from MkDocs Material to Zensical (#2959)
  • cfd659c Bump pymdown-extensions to 10.21.3 (#2958)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-deps group with 3 updates: [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/), [google-cloud-storage](https://github.com/googleapis/google-cloud-python) and [uvicorn](https://github.com/Kludex/uvicorn).


Updates `beautifulsoup4` from 4.14.3 to 4.15.0

Updates `google-cloud-storage` from 3.10.1 to 3.11.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.10.1...google-cloud-storage-v3.11.0)

Updates `uvicorn` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.48.0...0.49.0)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: google-cloud-storage
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants