Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the allpip group with 15 updates in the / directory:

Package From To
fastapi 0.124.0 0.128.0
uvicorn 0.38.0 0.40.0
sqlalchemy 2.0.44 2.0.45
sqlalchemy-utils 0.42.0 0.42.1
authlib 1.6.5 1.6.6
aiosqlite 0.21.0 0.22.1
python-multipart 0.0.20 0.0.21
urllib3 2.6.1 2.6.2
coverage 7.13.0 7.13.1
ruff 0.14.8 0.14.10
pre-commit 4.5.0 4.5.1
jaraco-context 6.0.1 6.0.2
jaraco-functools 4.3.0 4.4.0
nodeenv 1.9.1 1.10.0
pbs-installer 2025.12.5 2025.12.17

Updates fastapi from 0.124.0 to 0.128.0

Release notes

Sourced from fastapi's releases.

0.128.0

Breaking Changes

Internal

0.127.1

Refactors

Docs

Translations

Internal

0.127.0

Breaking Changes

Translations

  • 🔧 Add LLM prompt file for Korean, generated from the existing translations. PR #14546 by @​tiangolo.
  • 🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR #14545 by @​tiangolo.

Internal

0.126.0

Upgrades

  • ➖ Drop support for Pydantic v1, keeping short temporary support for Pydantic v2's pydantic.v1. PR #14575 by @​tiangolo.

... (truncated)

Commits

Updates uvicorn from 0.38.0 to 0.40.0

Release notes

Sourced from uvicorn's releases.

Version 0.40.0

What's Changed

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

Version 0.39.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

Changelog

Sourced from uvicorn's changelog.

0.40.0 (December 21, 2025)

Remove

  • Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

  • Send close frame on ASGI return for WebSockets (#2769)
  • Explicitly start ASGI run with empty context (#2742)
Commits

Updates sqlalchemy from 2.0.44 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

  • [orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

    References: #12858

  • [orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

    References: #12952

examples

  • [examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

  • [sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

    References: #12915

  • [sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

Updates sqlalchemy-utils from 0.42.0 to 0.42.1

Release notes

Sourced from sqlalchemy-utils's releases.

0.42.1

Changelog

Sourced from sqlalchemy-utils's changelog.

0.42.1 (2025-12-12) ^^^^^^^^^^^^^^^^^^^

  • Fix AttributeError with Sequence defaults in instant_defaults_listener (#793)
Commits
  • ed0cc46 Bump version to 0.42.1
  • 11cf519 Bump urllib3 from 2.5.0 to 2.6.0 in /requirements/docs
  • 881fed4 Merge pull request #797 from kvesteri/dependabot/github_actions/github-action...
  • 81a5f82 Bump actions/checkout from 5 to 6 in the github-actions group
  • e8b12f8 Merge pull request #794 from kvesteri/dependabot/github_actions/github-action...
  • 19570dc Bump actions/setup-python from 5 to 6 in the github-actions group
  • 4a7d764 Fix AttributeError with Sequence defaults in instant_defaults_listener (#...
  • 9645938 Fix AttributeError with Sequence defaults in instant_defaults_listener
  • e4b9f72 Merge pull request #792 from kvesteri/dependabot/github_actions/github-action...
  • 755064d Bump actions/checkout from 4 to 5 in the github-actions group
  • Additional commits viewable in compare view

Updates authlib from 1.6.5 to 1.6.6

Changelog

Sourced from authlib's changelog.

Version 1.6.6

Released on Dec 12, 2025

  • get_jwt_config takes a client parameter, :pr:844.
  • Fix incorrect signature when Content-Type is x-www-form-urlencoded for OAuth 1.0 Client, :pr:778.
  • Use expires_in in OAuth2Token when expires_at is unparsable, :pr:842.
  • Always track state in session for OAuth client integrations.
Commits
  • bb7a315 chore: release 1.6.6
  • 0a423d4 Merge pull request #844 from azmeuk/806-get-jwt-config-client
  • 2808378 Merge commit from fork
  • 714502a feat: get_jwt_config takes a client parameter
  • 260d04e Fix: Use expires_in when expires_at is unparsable
  • eb37124 Merge pull request #778 from shc261392/fix-httpx-oauth1-form-data-incorrect-s...
  • 0ba9ec4 docs: fix guide on requests self signed certificate
  • a2e9943 docs: indicate that #743 needs a migration
  • 06015d2 test: factorize the token fixture
  • See full diff in compare view

Updates aiosqlite from 0.21.0 to 0.22.1

Changelog

Sourced from aiosqlite's changelog.

v0.22.1

Bug fix release

NOTE: Starting with v0.22.0, the aiosqlite.Connection object no longer inherits from threading.Thread. If not using aiosqlite as a context manager, clients must await connection.close() or call connection.stop() to ensure the helper thread is completed and terminated correctly. A ResourceWarning will be emitted for any connection that is garbage collected without being closed or stopped.

  • Added synchronous stop() method to aiosqlite.Connection to enable safe cleanup and termination of the background thread without dependence on having an active event loop (#370)
$ git shortlog -s v0.22.0...v0.22.1
     2	Amethyst Reese

v0.22.0

Feature release

  • Support set_authorizer query access controls (#349)
  • Wait for transaction queue to complete when closing connection (#305)
  • Emit warning when connection goes out of scope without being closed (#355)
  • Remove dependency on typing_extensions (#365)
$ git shortlog -s v0.21.0...v0.22.0
     1	Alec Berryman
     1	Amethyst Reese
     1	David Andreoletti
     1	Markus Heidelberg
     1	beerpsi
    19	dependabot[bot]
Commits

Updates python-multipart from 0.0.20 to 0.0.21

Release notes

Sourced from python-multipart's releases.

Version 0.0.21

What's Changed

New Contributors

Full Changelog: Kludex/python-multipart@0.0.20...0.0.21

Changelog

Sourced from python-multipart's changelog.

0.0.21 (2025-12-17)

  • Add support for Python 3.14 and drop EOL 3.8 and 3.9 #216.
Commits
  • 1f72955 Version 0.0.21 (#217)
  • 47ecfed Add support for Python 3.14 and drop EOL 3.8 and 3.9 (#216)
  • f18b709 Bump the github-actions group across 1 directory with 4 updates (#214)
  • b388e9a chore: use depedency-groups in pyproject.toml (#212)
  • 6113e75 Bump the github-actions group across 1 directory with 3 updates (#210)
  • 7aa8d99 Bump ruff from 0.8.0 to 0.11.7 (#203)
  • 3e909f5 Bump astral-sh/setup-uv from 4 to 5 in the github-actions group (#198)
  • See full diff in compare view

Updates urllib3 from 2.6.1 to 2.6.2

Release notes

Sourced from urllib3's releases.

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

  • Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (urllib3/urllib3#3734)
Changelog

Sourced from urllib3's changelog.

2.6.2 (2025-12-11)

  • Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. ([#3734](https://github.com/urllib3/urllib3/issues/3734) <https://github.com/urllib3/urllib3/issues/3734>__)
Commits
  • 83f8643 Release 2.6.2
  • 571a9b7 Fix HTTPResponse.read_chunked when leftover data is present in decoder's bu...
  • See full diff in compare view

Updates coverage from 7.13.0 to 7.13.1

Changelog

Sourced from coverage's changelog.

Version 7.13.1 — 2025-12-28

  • Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. Closes issue 2110_.

  • Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable.

  • Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105_. This is now fixed, thanks to Jianrong Zhao.

  • Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. This shouldn't change any behavior. If you find that it does, please get in touch.

  • Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step.

  • Docs: added a section explaining more about what is considered a missing branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.

  • Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: coveragepy/coveragepy#1597 .. _pull 2092: coveragepy/coveragepy#2092 .. _issue 2105: coveragepy/coveragepy#2105 .. _issue 2109: coveragepy/coveragepy#2109 .. _issue 2110: coveragepy/coveragepy#2110

.. _changes_7-13-0:

Commits
  • a6afdc3 docs: sample HTML for 7.13.1
  • a497081 docs: prep for 7.13.1
  • e992033 docs: polish up CHANGES
  • 18bba6e chore: bump the action-dependencies group with 4 updates (#2111)
  • 80fb808 refactor: (?x:...) lets us use re.VERBOSE even when combining later
  • cc272bd docs: leave a comment so we'll find this when 3.12 is the minimum
  • 70d007d types: be explicit
  • a2c1940 types: fully import modules that will be patched
  • 57b975d types: explicit Protocol inheritance permits changing parameter names
  • 63ec12d types: clarify that morfs arguments can be a single morf
  • Additional commits viewable in compare view

Updates ruff from 0.14.8 to 0.14.10

Release notes

Sourced from ruff's releases.

0.14.10

Release Notes

Released on 2025-12-18.

Preview features

  • [formatter] Fluent formatting of method chains (#21369)
  • [formatter] Keep lambda parameters on one line and parenthesize the body if it expands (#21385)
  • [flake8-implicit-str-concat] New rule to prevent implicit string concatenation in collections (ISC004) (#21972)
  • [flake8-use-pathlib] Make fixes unsafe when types change in compound statements (PTH104, PTH105, PTH109, PTH115) (#22009)
  • [refurb] Extend support for Path.open (FURB101, FURB103) (#21080)

Bug fixes

  • [pyupgrade] Fix parsing named Unicode escape sequences (UP032) (#21901)

Rule changes

  • [eradicate] Ignore ruff:disable and ruff:enable comments in ERA001 (#22038)
  • [flake8-pytest-style] Allow match and check keyword arguments without an expected exception type (PT010) (#21964)
  • [syntax-errors] Annotated name cannot be global (#20868)

Documentation

  • Add uv and ty to the Ruff README (#21996)
  • Document known lambda formatting deviations from Black (#21954)
  • Update setup.md (#22024)
  • [flake8-bandit] Fix broken link (S704) (#22039)

Other changes

  • Fix playground Share button showing "Copied!" before clipboard copy completes (#21942)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.10

Released on 2025-12-18.

Preview features

  • [formatter] Fluent formatting of method chains (#21369)
  • [formatter] Keep lambda parameters on one line and parenthesize the body if it expands (#21385)
  • [flake8-implicit-str-concat] New rule to prevent implicit string concatenation in collections (ISC004) (#21972)
  • [flake8-use-pathlib] Make fixes unsafe when types change in compound statements (PTH104, PTH105, PTH109, PTH115) (#22009)
  • [refurb] Extend support for Path.open (FURB101, FURB103) (#21080)

Bug fixes

  • [pyupgrade] Fix parsing named Unicode escape sequences (UP032) (#21901)

Rule changes

  • [eradicate] Ignore ruff:disable and ruff:enable comments in ERA001 (#22038)
  • [flake8-pytest-style] Allow match and check keyword arguments without an expected exception type (PT010) (#21964)
  • [syntax-errors] Annotated name cannot be global (#20868)

Documentation

  • Add uv and ty to the Ruff README (#21996)
  • Document known lambda formatting deviations from Black (#21954)
  • Update setup.md (#22024)
  • [flake8-bandit] Fix broken link (S704) (#22039)

Other changes

  • Fix playground Share button showing "Copied!" before clipboard copy completes (#21942)

Contributors

0.14.9

... (truncated)

Commits
  • 45bbb4c Bump 0.14.10 (#22058)
  • 42b9727 [ty] Use datatest instead of dirtest (#21937)
  • f7ec178 [ty] Gracefully handle client requests that can't be deserialized (#22051)
  • c315164 [ty] Don't suggest keyword statements when only expressions are valid
  • bb1955e [ty] Use cursor context in a few more places...
  • 070e08a [ty] Move completion function to the top
  • bab3924 [ty] Refactor completion generation
  • 10748b2 [flake8-pytest-style] Allow match and check keyword arguments without a...
  • 56539db [ty] Fix some configuration panics in the LSP (#22040)
  • 8d32ad1 [ty] Add support for attribute docstrings (#22036)
  • Additional commits viewable in compare view

Updates pre-commit from 4.5.0 to 4.5.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.
Changelog

Sourced from pre-commit's changelog.

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.
Commits
  • 8a0630c v4.5.1
  • fcbc745 Merge pull request #3597 from pre-commit/empty-setup-py
  • 51592ee fix python local template when artifact dirs are present
  • 67e8faf Merge pull request #3596 from pre-commit/pre-commit-ci-update-config
  • c251e6b [pre-commit.ci] pre-commit autoupdate
  • 98ccafa Merge pull request #3593 from pre-commit/pre-commit-ci-update-config
  • 4895355 [pre-commit.ci] pre-commit autoupdate
  • 2cedd58 Merge pull request #3588 from pre-commit/pre-commit-ci-update-config
  • 465192d [pre-commit.ci] pre-commit autoupdate
  • fd42f96 Merge pull request #3586 from pre-commit/zipapp-sha256-file-not-needed
  • Additional commits viewable in compare view

Updates jaraco-context from 6.0.1 to 6.0.2

Changelog

Sourced from jaraco-context's changelog.

v6.0.2

No significant changes.

Commits

Updates jaraco-functools from 4.3.0 to 4.4.0

Changelog

Sourced from jaraco-functools's changelog.

v4.4.0

Features

  • Add noop.
Commits

Updates nodeenv from 1.9.1 to 1.10.0

Release notes

Sourced from nodeenv's releases.

1.10.0 - drop

What's Changed

Fixed bugs 🐛

Improvements 🛠

Other Changes

New Contributors

Full Changelog: ekalinin/nodeenv@1.9.1...1.10.0

Commits
  • 9dee547 chore: bump nodeenv version to 1.10.0
  • d45aabb chore: add pyright ignore comments for compatibility
  • 55d6c21 chore: update AUTHORS
  • 5f694e6 test: update test test_node_system_creates_shim
  • fa3fdfb Merge branch 'master' of github.com:ekalinin/nodeenv
  • e868dbe Replace additional use of which(1) with shutil.which() (#355)
  • b4cd00d test: enhance activation tests for nodeenv with custom prompts and file handling
  • 0b5ea9d refactor(tests): improve readability of mock patches in nodeenv tests
  • 37c0c30 ci: add GH workflow for testing and coverage in PR
  • 326a7a4 test: add comprehensive tests for install_npm and install_npm_win functions
  • Additional commits viewable in compare view

Updates pbs-installer from 2025.12.5 to 2025.12.17

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the allpip group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.124.0` | `0.128.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.38.0` | `0.40.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.44` | `2.0.45` |
| [sqlalchemy-utils](https://github.com/kvesteri/sqlalchemy-utils) | `0.42.0` | `0.42.1` |
| [authlib](https://github.com/authlib/authlib) | `1.6.5` | `1.6.6` |
| [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.21.0` | `0.22.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.20` | `0.0.21` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.1` | `2.6.2` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.0` | `7.13.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.8` | `0.14.10` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.0` | `4.5.1` |
| [jaraco-context](https://github.com/jaraco/jaraco.context) | `6.0.1` | `6.0.2` |
| [jaraco-functools](https://github.com/jaraco/jaraco.functools) | `4.3.0` | `4.4.0` |
| [nodeenv](https://github.com/ekalinin/nodeenv) | `1.9.1` | `1.10.0` |
| [pbs-installer](https://github.com/frostming/pbs-installer) | `2025.12.5` | `2025.12.17` |



Updates `fastapi` from 0.124.0 to 0.128.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.124.0...0.128.0)

Updates `uvicorn` from 0.38.0 to 0.40.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.38.0...0.40.0)

Updates `sqlalchemy` from 2.0.44 to 2.0.45
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `sqlalchemy-utils` from 0.42.0 to 0.42.1
- [Release notes](https://github.com/kvesteri/sqlalchemy-utils/releases)
- [Changelog](https://github.com/kvesteri/sqlalchemy-utils/blob/master/CHANGES.rst)
- [Commits](kvesteri/sqlalchemy-utils@0.42.0...0.42.1)

Updates `authlib` from 1.6.5 to 1.6.6
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/main/docs/changelog.rst)
- [Commits](authlib/authlib@v1.6.5...v1.6.6)

Updates `aiosqlite` from 0.21.0 to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.21.0...v0.22.1)

Updates `python-multipart` from 0.0.20 to 0.0.21
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.20...0.0.21)

Updates `urllib3` from 2.6.1 to 2.6.2
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.1...2.6.2)

Updates `coverage` from 7.13.0 to 7.13.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.0...7.13.1)

Updates `ruff` from 0.14.8 to 0.14.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.8...0.14.10)

Updates `pre-commit` from 4.5.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.5.0...v4.5.1)

Updates `jaraco-context` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/jaraco/jaraco.context/releases)
- [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.context@v6.0.1...v6.0.2)

Updates `jaraco-functools` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/jaraco/jaraco.functools/releases)
- [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.functools@v4.3.0...v4.4.0)

Updates `nodeenv` from 1.9.1 to 1.10.0
- [Release notes](https://github.com/ekalinin/nodeenv/releases)
- [Changelog](https://github.com/ekalinin/nodeenv/blob/master/CHANGES)
- [Commits](ekalinin/nodeenv@1.9.1...1.10.0)

Updates `pbs-installer` from 2025.12.5 to 2025.12.17
- [Release notes](https://github.com/frostming/pbs-installer/releases)
- [Commits](frostming/pbs-installer@2025.12.05...2025.12.17)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.128.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: uvicorn
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: sqlalchemy
  dependency-version: 2.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: sqlalchemy-utils
  dependency-version: 0.42.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: authlib
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: python-multipart
  dependency-version: 0.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: urllib3
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: coverage
  dependency-version: 7.13.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: ruff
  dependency-version: 0.14.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: jaraco-context
  dependency-version: 6.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: allpip
- dependency-name: jaraco-functools
  dependency-version: 4.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: nodeenv
  dependency-version: 1.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: allpip
- dependency-name: pbs-installer
  dependency-version: 2025.12.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: allpip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Dependancy issue label Dec 29, 2025
@github-actions github-actions bot enabled auto-merge December 29, 2025 07:23
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 5, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 5, 2026
auto-merge was automatically disabled January 5, 2026 07:23

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/allpip-e0fd4b9022 branch January 5, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependancy issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant