Skip to content

chore(deps): Bump the python-dependencies group across 1 directory with 16 updates#106

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-47c08151b2
Open

chore(deps): Bump the python-dependencies group across 1 directory with 16 updates#106
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-47c08151b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 12 updates in the / directory:

Package From To
slack-sdk 3.42.0 3.43.0
pydantic-settings 2.14.1 2.14.2
structlog 25.5.0 26.1.0
mcp 1.27.1 1.28.1
anthropic 0.104.0 0.116.0
google-api-python-client 2.196.0 2.198.0
protobuf 6.33.6 7.35.1
pytest 9.0.3 9.1.1
pytest-asyncio 1.3.0 1.4.0
aioresponses 0.7.8 0.7.9
redis 7.4.0 8.0.1
code-review-graph 2.3.3 2.3.6

Updates slack-sdk from 3.42.0 to 3.43.0

Release notes

Sourced from slack-sdk's releases.

v3.43.0

What's Changed

⚠️ Warning: A signing secret is now required to exist when validating requests. Apps that receive events with Socket Mode should update to Bolt for Python 1.29.0 to avoid errors at initialization. Please refer to this issue: slackapi/python-slack-sdk#1903

🚀 Enhancements

📚 Documentation

🔒 Security

📦 Other changes

New Contributors

Full Changelog: slackapi/python-slack-sdk@v3.42.0...v3.43.0 Milestone: https://github.com/slackapi/python-slack-sdk/milestone/119

Commits
  • 3a5cec2 chore(release): version 3.43.0 (#1902)
  • 0ffc13f feat: make thread_ts optional for assistant.threads.setSuggestedPrompts (#1901)
  • e23b181 docs: restore canonical security policy over bot-added SECURITY.md (#1897)
  • ecb8ae9 docs: fixing broken links to security concepts (#1896)
  • 74a9330 docs: removing external links for unified nav (#1895)
  • 0b4f57b chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#1894)
  • d3058ca docs: audit and fix docs/english markdown files (#1883)
  • 2491a2d chore(deps): update flake8 requirement from <8,>=5.0.4 to >=7.3.0,<8 (#1889)
  • c955bae chore(deps): update pytest-cov requirement from <8,>=2 to >=7.1.0,<8 (#1885)
  • fdfdd21 chore(deps): bump docutils from 0.22.4 to 0.23 (#1886)
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates structlog from 25.5.0 to 26.1.0

Release notes

Sourced from structlog's releases.

26.1.0

Highlights

Given how long this release took, it's pretty thicc with nice things all over the board! Apologies for the long release cycle; it's been a victim of the slopocalypse and me trying to navigate my way thru the new normal. Extra big thanks to my sponsors for not abandoning me in these unironically trying times. ❤️

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), GitHub (@github), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Al Sweigart (@asweigart), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Removed

  • Python 3.8 and 3.9 support.

Deprecated

  • Support for better-exceptions is deprecated and will be removed within a year. Use our Rich integration or copy-paste the one line of code you need. #802

Added

  • Python 3.15 support. #813

  • structlog.dev.rich_monochrome_traceback for Rich-based monochrome exception rendering and add support for it throughout structlog.dev.ConsoleRenderer when the user asks for no colors. #794

  • structlog.BytesLogger now has a name attribute which allows you to use it with the structlog.stdlib.add_logger_name() processor without using the standard library integration. #786

  • structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_MODULE that adds the qualified import name of the module of the callsite, or __main__ if the module is the entry point. This is only available for structlog-originated events since the standard library has no equivalent (except for the convention of setting the logger's name to __name__). #812

  • structlog.stdlib.BoundLogger now has is_enabled_for() and get_effective_level() methods that are snake_case aliases for its isEnabledFor() and getEffectiveLevel() methods. This makes it more compatible with the native structlog.typing.FilteringBoundLogger, so you can swap configurations without changing your call sites. #818

Changed

  • structlog.dev.ConsoleRenderer does not warn anymore when the exception key has a rendered value despite having a fancy formatter configured. #790

... (truncated)

Changelog

Sourced from structlog's changelog.

26.1.0 - 2026-06-06

Removed

  • Python 3.8 and 3.9 support.

Deprecated

  • Support for better-exceptions is deprecated and will be removed within a year. Use our Rich integration or copy-paste the one line of code you need. #802

Added

  • Python 3.15 support. #813

  • structlog.dev.rich_monochrome_traceback for Rich-based monochrome exception rendering and add support for it throughout structlog.dev.ConsoleRenderer when the user asks for no colors. #794

  • structlog.BytesLogger now has a name attribute which allows you to use it with the structlog.stdlib.add_logger_name() processor without using the standard library integration. #786

  • structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_MODULE that adds the qualified import name of the module of the callsite, or __main__ if the module is the entry point. This is only available for structlog-originated events since the standard library has no equivalent (except for the convention of setting the logger's name to __name__). #812

  • structlog.stdlib.BoundLogger now has is_enabled_for() and get_effective_level() methods that are snake_case aliases for its isEnabledFor() and getEffectiveLevel() methods. This makes it more compatible with the native structlog.typing.FilteringBoundLogger, so you can swap configurations without changing your call sites. #818

Changed

  • structlog.dev.ConsoleRenderer does not warn anymore when the exception key has a rendered value despite having a fancy formatter configured. #790

Fixed

  • structlog.BytesLogger, structlog.PrintLogger, and structlog.WriteLogger now hold weak references to the files they use for output. This prevents their leakage in long-running processes that open many logfiles, such as task executors that create a per-task BytesLogger or WriteLogger. #807

  • structlog.WriteLogger is usable after unpickling. #787

  • structlog.processors.CallsiteParameterAdder now reports the calling thread's id and name for async log methods, instead of the thread from the executor pool that runs the underlying sync logger.

... (truncated)

Commits

Updates mcp from 1.27.1 to 1.28.1

Release notes

Sourced from mcp's releases.

v1.28.0

Deprecations

Two API surfaces now emit DeprecationWarning ahead of their removal in v2. Nothing is removed in 1.x, and the warnings fire only when the deprecated API is called - importing the modules stays silent.

  • WebSocket transport - mcp.client.websocket.websocket_client and mcp.server.websocket.websocket_servermodelcontextprotocol/typescript-sdk#1783
  • Experimental tasks API - ClientSession.experimental, Server.experimental, ServerSession.experimental, and the experimental_task_handlers= kwarg on ClientSession. Tasks (SEP-1686) were removed from the MCP specification and are expected to return as a separate MCP extension.

If your test suite runs with filterwarnings = ["error"] and exercises these paths, add a scoped ignore such as ignore:The experimental tasks API is deprecated:DeprecationWarning or ignore:The WebSocket .* transport is deprecated:DeprecationWarning.

See #2828 for full details.

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/python-sdk@v1.27.2...v1.28.0

v1.27.2

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v1.27.1...v1.27.2

Commits
  • 777b8d0 [v1.x] Support TransportSecuritySettings in the WebSocket server transport (#...
  • 4720467 [v1.x] Set Development Status classifier to Production/Stable (#2976)
  • 6df3d73 [v1.x] Buffer per-request StreamableHTTP streams; store priming event before ...
  • 32d3290 [v1.x] Pass a list to parametrize in test_docs_examples (pytest 9.1.0 compat)...
  • 0dca751 [v1.x] Deflake the child process cleanup tests (#2839)
  • 52258a9 [v1.x] Add a v2 status banner to the README (#2835)
  • b8f4917 [v1.x] Deprecate the WebSocket transport and the experimental tasks entry poi...
  • 2309e5e fix: omit null optional fields from task result payloads (#2809)
  • 494eb11 [v1.x] Support Python 3.14 (#2769)
  • 6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
  • Additional commits viewable in compare view

Updates anthropic from 0.104.0 to 0.116.0

Release notes

Sourced from anthropic's releases.

v0.116.0

0.116.0 (2026-07-02)

Full Changelog: v0.115.1...v0.116.0

Features

  • api: add agent-memory-2026-07-22 beta header (e181d5c)

v0.115.1

0.115.1 (2026-07-01)

Full Changelog: v0.115.0...v0.115.1

Chores

  • api: remove some nonfunctional types from the SDKs (5e7c431)

v0.115.0

0.115.0 (2026-06-30)

Full Changelog: v0.114.0...v0.115.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (8c23f7e)

v0.114.0

0.114.0 (2026-06-30)

Full Changelog: v0.113.0...v0.114.0

Features

  • api: add support for claude-sonnet-5 (b893033)

Bug Fixes

  • agent_toolset: allow absolute paths that resolve inside workdir (#121) (0105529)

v0.113.0

0.113.0 (2026-06-29)

Full Changelog: v0.112.0...v0.113.0

Features

  • api: add support for 20260318 web fetch and support tools (88dbfb1)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.116.0 (2026-07-02)

Full Changelog: v0.115.1...v0.116.0

Features

  • api: add agent-memory-2026-07-22 beta header (e181d5c)

0.115.1 (2026-07-01)

Full Changelog: v0.115.0...v0.115.1

Chores

  • api: remove some nonfunctional types from the SDKs (5e7c431)

0.115.0 (2026-06-30)

Full Changelog: v0.114.0...v0.115.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (8c23f7e)

0.114.0 (2026-06-30)

Full Changelog: v0.113.0...v0.114.0

Features

  • api: add support for claude-sonnet-5 (b893033)

Bug Fixes

  • agent_toolset: allow absolute paths that resolve inside workdir (#121) (0105529)

0.113.0 (2026-06-29)

Full Changelog: v0.112.0...v0.113.0

Features

  • api: add support for 20260318 web fetch and support tools (88dbfb1)

Bug Fixes

  • async count_tokens missing output_format/output_config merge block (#162) (122c958)

... (truncated)

Commits
  • d2f6543 release: 0.116.0
  • 4253c06 feat(api): add agent-memory-2026-07-22 beta header
  • 5e98d72 release: 0.115.1
  • 5385af6 chore(api): remove some nonfunctional types from the SDKs
  • e4283c3 release: 0.115.0
  • d1a933e feat(api): add support for Managed Agents event delta streaming, agent overri...
  • 53582ad codegen metadata
  • 6e9f197 release: 0.114.0
  • ab10964 feat(api): add support for claude-sonnet-5
  • 8a004a2 fix(agent_toolset): allow absolute paths that resolve inside workdir (#121)
  • Additional commits viewable in compare view

Updates google-api-python-client from 2.196.0 to 2.198.0

Release notes

Sourced from google-api-python-client's releases.

v2.198.0

2.198.0 (2026-06-23)

Features

... (truncated)

Commits

Updates protobuf from 6.33.6 to 7.35.1

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

…th 16 updates

Bumps the python-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [slack-sdk](https://github.com/slackapi/python-slack-sdk) | `3.42.0` | `3.43.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [structlog](https://github.com/hynek/structlog) | `25.5.0` | `26.1.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.1` | `1.28.1` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.104.0` | `0.116.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.196.0` | `2.198.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.35.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` |
| [aioresponses](https://github.com/pnuckowski/aioresponses) | `0.7.8` | `0.7.9` |
| [redis](https://github.com/redis/redis-py) | `7.4.0` | `8.0.1` |
| [code-review-graph](https://github.com/tirth8205/code-review-graph) | `2.3.3` | `2.3.6` |



Updates `slack-sdk` from 3.42.0 to 3.43.0
- [Release notes](https://github.com/slackapi/python-slack-sdk/releases)
- [Commits](slackapi/python-slack-sdk@v3.42.0...v3.43.0)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `structlog` from 25.5.0 to 26.1.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.5.0...26.1.0)

Updates `mcp` from 1.27.1 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.1...v1.28.1)

Updates `anthropic` from 0.104.0 to 0.116.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.104.0...v0.116.0)

Updates `google-api-python-client` from 2.196.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.196.0...v2.198.0)

Updates `protobuf` from 6.33.6 to 7.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pytest-asyncio` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `aioresponses` from 0.7.8 to 0.7.9
- [Release notes](https://github.com/pnuckowski/aioresponses/releases)
- [Commits](pnuckowski/aioresponses@0.7.8...0.7.9)

Updates `opentelemetry-api` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `opentelemetry-sdk` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `opentelemetry-exporter-otlp` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.43.0)

Updates `opentelemetry-instrumentation` from 0.63b1 to 0.64b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `redis` from 7.4.0 to 8.0.1
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.4.0...v8.0.1)

Updates `code-review-graph` from 2.3.3 to 2.3.6
- [Release notes](https://github.com/tirth8205/code-review-graph/releases)
- [Changelog](https://github.com/tirth8205/code-review-graph/blob/main/CHANGELOG.md)
- [Commits](tirth8205/code-review-graph@v2.3.3...v2.3.6)

---
updated-dependencies:
- dependency-name: slack-sdk
  dependency-version: 3.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: structlog
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: anthropic
  dependency-version: 0.116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: google-api-python-client
  dependency-version: 2.198.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: protobuf
  dependency-version: 7.35.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: aioresponses
  dependency-version: 0.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.64b0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: redis
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: code-review-graph
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants