Skip to content

build(deps): Bump the python-minor-patch group across 1 directory with 15 updates - #339

Merged
NewtonSander merged 1 commit into
mainfrom
dependabot/uv/python-minor-patch-578e34a3e8
Nov 2, 2026
Merged

build(deps): Bump the python-minor-patch group across 1 directory with 15 updates#339
NewtonSander merged 1 commit into
mainfrom
dependabot/uv/python-minor-patch-578e34a3e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 15 updates in the / directory:

Package From To
anthropic 2.2.0 2.3.0
pydantic 2.14.1 2.14.2
fastapi 0.161.1 0.162.0
openai 3.37.0 3.41.0
huggingface-hub 2.3.0 2.4.0
cachetools 7.2.4 7.2.7
genai-prices 0.1.13 0.2.0
torch 2.14.1 2.15.0
transformers 5.20.2 5.22.1
inspect-ai 0.3.283 0.3.286
pytest 9.1.1 9.2.0
pytest-asyncio 1.4.0 1.4.1
ruff 0.17.2 0.17.3
modal 1.6.2 1.6.3
mkdocs-material 9.7.7 9.8.0

Updates anthropic from 2.2.0 to 2.3.0

Release notes

Sourced from anthropic's releases.

v2.3.0

Features

  • api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

  • google-cloud: send user profiles requests to the organization endpoint

Chores

  • client: stop sending query params hardcoded in endpoint paths
  • docs: improve the descriptions of the code execution tool and its encrypted results
  • docs: reword work queue, skill and external key descriptions
  • docs: update descriptions of the per-user usage and cost reports
  • internal: carry endpoint path query params to the request layer
  • internal: check the repository by owner and public name in workflows
  • internal: read the beta route qualifier instead of the beta=true query
  • internal: remove preview build upload from CI
  • internal: stop sending the beta query param from parse and stream

Documentation

  • mcp: remove the stray await from the async tool_runner examples
  • google-cloud: update the product name
  • client: link the Bedrock and Vertex raw response docstrings to the SDK documentation
  • update the README and the example request
Changelog

Sourced from anthropic's changelog.

2.3.0 (2026-10-23)

Features

  • api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

  • google-cloud: send user profiles requests to the organization endpoint

Chores

  • client: stop sending query params hardcoded in endpoint paths
  • docs: improve the descriptions of the code execution tool and its encrypted results
  • docs: reword work queue, skill and external key descriptions
  • docs: update descriptions of the per-user usage and cost reports
  • internal: carry endpoint path query params to the request layer
  • internal: check the repository by owner and public name in workflows
  • internal: read the beta route qualifier instead of the beta=true query
  • internal: remove preview build upload from CI
  • internal: stop sending the beta query param from parse and stream

Documentation

  • mcp: remove the stray await from the async tool_runner examples
  • google-cloud: update the product name
  • client: link the Bedrock and Vertex raw response docstrings to the SDK documentation
  • update the README and the example request
Commits
  • 202db72 release: 2.3.0
  • d0cbc80 Merge pull request #1069 from anthropics/synced/published
  • aba9374 feat(api): add Claude Tag endpoints for Claude Enterprise organizations
  • 013f5a2 chore(internal): remove preview build upload from CI (#1077)
  • 10908cd chore(docs): improve the descriptions of the code execution tool and its encr...
  • f46b53c docs: update the README and the example request
  • 5da2887 docs(client): link the Bedrock and Vertex raw response docstrings to the SDK ...
  • 7c50ea2 chore(internal): stop sending the beta query param from parse and stream (#1076)
  • 4866287 chore(internal): check the repository by owner and public name in workflows
  • 691be0d chore(client): stop sending query params hardcoded in endpoint paths
  • Additional commits viewable in compare view

Updates pydantic from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic's releases.

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

Performance

Fixes

  • Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

    JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

    from pydantic import BaseModel, ConfigDict
from pydantic.alias_generators import to_camel
class Page(BaseModel):
model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
page_size: int = 10

Page.model_validate_json('{"page_size": 50}')
Before: Page(page_size=10)
After: ValidationError (extra_forbidden)

    See the pull request for the full list of behavior changes. This change addresses GHSA-qpmf-fgh3-ff25.

  • Ignore extra data matching a field name in TypedDict and dataclasses with extra=allow by @​Viicos in #14090. Addresses GHSA-3r8g-cqwr-jr29.

  • Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

  • Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

  • Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

  • Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

  • Implement recursion guard for validate_strings() by @​Viicos in #14029

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.2 (2026-10-29)

GitHub release

What's Changed

Packaging

Performance

Fixes

  • Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

    JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

    from pydantic import BaseModel, ConfigDict
from pydantic.alias_generators import to_camel
class Page(BaseModel):
model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
page_size: int = 10

Page.model_validate_json('{"page_size": 50}')
Before: Page(page_size=10)
After: ValidationError (extra_forbidden)

    See the pull request for the full list of behavior changes.

  • Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

  • Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

  • Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

  • Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

  • Implement recursion guard for validate_strings() by @​Viicos in #14029

  • Support named tuples in Sequence serialization by @​Viicos in #14033

... (truncated)

Commits
  • aa540ac Update changelog for v2.14.2
  • 6cde12f Update changelog for v2.14.2
  • 2db7c25 Fix deep copy of self-referential models
  • d783154 Update changelog for v2.14.2
  • df49b6c Avoid heap allocation for small JSON model field buffers
  • cd93e69 Skip decorator field checks when no field decorators exist
  • 2771e57 Make JSON validation by iteration consistent with Python approach
  • 8102e3f Avoid Python tuple allocation during model fields validation
  • dd139b5 Bump pydantic.v1 namespace to v1.10.27
  • 66155f9 Prepare release v2.14.2
  • Additional commits viewable in compare view

Updates fastapi from 0.161.1 to 0.162.0

Release notes

Sourced from fastapi's releases.

0.162.0

Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This applies to individual form parameters, form models, and unions of form models.

Omitted boolean model fields are excluded from model_dump(exclude_unset=True), and their defaults no longer count as submitted fields during union selection. Default factories and validate_default follow the usual rules.

For HTML checkboxes, declare a boolean with a default of False. See Boolean Form Fields.

Breaking Changes

  • 🐛 Restore default handling for omitted boolean form fields. PR #16605 by @​tiangolo.
Commits

Updates openai from 3.37.0 to 3.41.0

Release notes

Sourced from openai's releases.

v3.41.0

3.41.0 (2026-10-28)

Features

  • api: accept typed references in Realtime response inputs (#4189) (8ecb487)
  • api: add response tool usage models (#4201) (55fc500)
  • api: filter agent sessions by metadata (#4200) (77fd116)
  • websocket: recover queued binary frames after reconnect (#4191) (f079868)

Bug Fixes

  • examples: detect incomplete WebSocket responses (#4187) (8559299)
  • examples: handle interruptions and disconnects in push-to-talk (#4192) (35fc9f3)
  • keep consumer fixtures clean under strict Pyright (#4204) (5012565)

Chores

v3.40.0

3.40.0 (2026-10-27)

Features

  • api: add prompt cache breakpoint TTL options (#4188) (3596d18)

Bug Fixes

  • ci: use an explicit browser demo dependency (#4185) (a3f4302)

Chores

  • api: record completed generated-code separation (#4190) (d7ab5ee)
  • deps-dev: bump griffe from 1.14.0 to 2.3.0 (#4069) (766b849)
  • deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#4178) (06dbb5d)
  • deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#4110) (2404d04)
  • deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4107) (0adf711)
  • deps: bump github/codeql-action/analyze from 4.38.2 to 4.39.0 (#4177) (1e42321)
  • deps: bump openai/codex-action from 1.12 to 1.13 (#4070) (904ed3f)
  • update generated-code verification and preserve SDK helpers (#4186) (9412200)

... (truncated)

Changelog

Sourced from openai's changelog.

3.41.0 (2026-10-28)

Features

  • api: accept typed references in Realtime response inputs (#4189) (8ecb487)
  • api: add response tool usage models (#4201) (55fc500)
  • api: filter agent sessions by metadata (#4200) (77fd116)
  • websocket: recover queued binary frames after reconnect (#4191) (f079868)

Bug Fixes

  • examples: detect incomplete WebSocket responses (#4187) (8559299)
  • examples: handle interruptions and disconnects in push-to-talk (#4192) (35fc9f3)
  • keep consumer fixtures clean under strict Pyright (#4204) (5012565)

Chores

3.40.0 (2026-10-27)

Features

  • api: add prompt cache breakpoint TTL options (#4188) (3596d18)

Bug Fixes

  • ci: use an explicit browser demo dependency (#4185) (a3f4302)

Chores

  • api: record completed generated-code separation (#4190) (d7ab5ee)
  • deps-dev: bump griffe from 1.14.0 to 2.3.0 (#4069) (766b849)
  • deps: bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#4178) (06dbb5d)
  • deps: bump actions/download-artifact from 8.0.1 to 8.0.2 (#4110) (2404d04)
  • deps: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4107) (0adf711)
  • deps: bump github/codeql-action/analyze from 4.38.2 to 4.39.0 (#4177) (1e42321)
  • deps: bump openai/codex-action from 1.12 to 1.13 (#4070) (904ed3f)
  • update generated-code verification and preserve SDK helpers (#4186) (9412200)

3.39.0 (2026-10-26)

... (truncated)

Commits
  • b7d440b release: 3.41.0 (#4195)
  • 5012565 fix: keep consumer fixtures clean under strict Pyright (#4204)
  • 45b9531 chore: migrate development type checking to ty (#4202)
  • 35fc9f3 fix(examples): handle interruptions and disconnects in push-to-talk (#4192)
  • 55fc500 feat(api): add response tool usage models (#4201)
  • 77fd116 feat(api): filter agent sessions by metadata (#4200)
  • 5b43cce chore(api): document upcoming model shutdowns (#4199)
  • f079868 feat(websocket): recover queued binary frames after reconnect (#4191)
  • 8559299 fix(examples): detect incomplete WebSocket responses (#4187)
  • fa67521 chore(api): update image-model documentation (#4198)
  • Additional commits viewable in compare view

Updates huggingface-hub from 2.3.0 to 2.4.0

Release notes

Sourced from huggingface-hub's releases.

[v2.4.0] Copy files into Buckets with HfFileSystem, outdated CLI extension hints

🪣 Copy files into Buckets with HfFileSystem

HfFileSystem raised NotImplementedError on any copy involving a Bucket. Copying into a Bucket now works from the same Bucket, from another Bucket, or from a model, dataset or Space repo. Files stored with Xet are copied on the Hub by hash, so nothing is downloaded. Other repo files are downloaded and then uploaded to the Bucket. fsspec moves a file by copying it and deleting the source, so mv and rename now work inside a Bucket too.

>>> from huggingface_hub import hffs
>>> hffs.cp_file("buckets/my-username/my-bucket/data/train.csv", "buckets/my-username/my-bucket/backup/train.csv")
>>> hffs.mv("buckets/my-username/my-bucket/data/tmp.csv", "buckets/my-username/my-bucket/data/final.csv")
>>> hffs.copy("buckets/my-username/my-bucket/data", "buckets/my-username/other-bucket/data", recursive=True)
>>> hffs.cp_file("datasets/my-username/my-dataset/train.parquet", "buckets/my-username/my-bucket/train.parquet")

Copying from a Bucket to a repo is not supported yet.

🧩 See when a CLI extension is outdated

hf extensions list only showed when each extension was installed, so there was no way to know that an update was available. It now has a VERSION column (the commit the extension was installed from) and a LATEST column, plus a hint naming the outdated extensions. Running an outdated extension also prints a hint, at most once a day. To stay within GitHub's rate limits, hf looks up the latest commit of each extension at most once a day. Set HF_HUB_DISABLE_UPDATE_CHECK=1 to turn these checks off.

hf extensions update also repairs Python extensions that no longer start. After a Homebrew upgrade removed the Python an extension was installed with, running it failed with dyld: Library not loaded, and hf extensions update said it was already up to date. It now recreates the extension's virtual environment when its Python doesn't start, even if no newer commit exists.

$ hf extensions update speedtest
Creating virtualenv at: ~/.local/share/hf/extensions/hf-speedtest/venv
✓ Extension updated

🔧 Other QoL improvements

  • Add auth hint to HfFileSystem "repository not found" error by @​davanstrien in #5258. A private repo accessed without a token gave the same (repository not found) error as a typo in the repo name. The error now also tells you to check that you are authenticated.

🐛 Bug and typo fixes

  • [Webhooks] Use "discussion" domain and default to all domains by @​hanouticelina in #5263. hf webhooks create failed unless you passed --domain repo, and watching discussions was not possible because the accepted value was discussions instead of discussion. create_webhook now watches both domains when domains is omitted.
  • Validate filename against path traversal in try_to_load_from_cache by @​bodapatisaikrishna in #5249. Filenames with ../ or absolute paths could resolve outside the cache folder. They are now rejected, as in hf_hub_download.
  • [HfFileSystem] Return file info from find(detail=True) on a file path by @​ontdepart in #5246. It returned an empty dict, which broke datatrove readers pointing at a single hf:// file.
  • [Cache] Skip local-dir metadata when verifying checksums by @​alphasafal in #5257. hf cache verify --local-dir reported the .cache/huggingface/ metadata as extra files, so --fail-on-extra-files failed on every clean download.
  • [CLI] Don't crash hf cache verify on Windows redirected stdout by @​Sonica-B in #5255. When output was piped or redirected, hf cache verify crashed with UnicodeEncodeError instead of listing the files that failed verification.

📖 Documentation

... (truncated)

Commits
  • 3739729 Release: v2.4.0
  • 454824d Release: v2.4.0.rc0
  • 178e1a1 [HfFileSystem] Support same-bucket file copies (#5080)
  • db254a3 Docs: build English only, other languages are machine-translated (#5276)
  • 4a99335 Bump the actions group with 7 updates (#5268)
  • 70de21c [CLI] Make hf extensions update repair broken Python extensions (#5270)
  • b763f13 [CLI] Show extension versions and hint when one is outdated (#5269)
  • a43cbe3 [Webhooks] Use "discussion" domain and default to all domains (#5263)
  • e255f04 [Cache] Skip local-dir metadata when verifying checksums (#5257)
  • 289492b [CI] Drop urllib3<2.0 test pin broken by vcrpy 9 (#5262)
  • Additional commits viewable in compare view

Updates cachetools from 7.2.4 to 7.2.7

Changelog

Sourced from cachetools's changelog.

v7.2.7 (2026-10-28)

  • Various performance improvements.

  • Minor unit test improvements.

v7.2.6 (2026-10-26)

  • Various performance improvements.

v7.2.5 (2026-10-25)

  • Fix @cachedmethod with condition for decorated methods taking a pending keyword argument (broken since v7.0.0).

  • Fix pickling and deep-copying of instances using @cachedmethod (broken since v7.0.0).

  • Fix calling @cachedmethod decorated methods through the class with the receiver (self) passed as a keyword argument (broken since v7.2.4).

  • Various documentation improvements.

Commits

Updates genai-prices from 0.1.13 to 0.2.0

Commits
  • 0001f5a Update provider prices from official sources (#897)
  • d0aeefe Add Kimi K3.1 Pro and GLM-5.3-FlashX-Legal prices (#894)
  • 8f99f8c Read Z.ai blockquoted price tables and skip unpriced Mistral rows (#892)
  • bf7fc14 Update provider prices from official sources (#881)
  • 0104518 Read the Baseten model catalog from the docs page HTML (#891)
  • 1fc7338 Read Moonshot AI prices from the pricing page's compiled MDX (#893)
  • e3118b4 Read MiniMax LLM prices from the plain Markdown pricing page (#890)
  • 0990ffb Add GPT-6.1 Terra to GitHub Copilot prices (#889)
  • 4ac5106 Bump the price-check engine to pydantic-ai-harness 0.60.0 (#888)
  • d7be193 Add a native Rust pricing crate (#870)
  • Additional commits viewable in compare view

Updates torch from 2.14.1 to 2.15.0

Release notes

Sourced from torch's releases.

PyTorch 2.15.0 Release Notes

Highlights

For more details about these highlighted features, you can look at the release blogpost. Below are the full release notes for this release.

Backwards Incompatible Changes

Python Frontend

import torch can no longer be re-executed in the same process, including via importlib.reload(torch) (#194654)

importlib.reload(torch) and del sys.modules["torch"] + re-import now raise, as does retrying import torch after it failed. Re-running the module body was already unsafe in exactly the same way as the retry, so the new check does not distinguish the two. Normal use is unaffected: a successful import leaves torch in sys.modules so the body never re-runs, and re-entrant imports from a backend extension during autoload still short-circuit on sys.modules without reaching the check.

Version 2.14:

import importlib
import torch
importlib.reload(torch)
RuntimeError: Only a single TORCH_LIBRARY can be used to register the namespace triton; ...
(re-importing after a failed import torch failed with similarly misleading errors or could segfault)

Version 2.15:

import importlib
import torch
importlib.reload(torch)
</tr></table>

... (truncated)

Commits
  • 31a77fc [release/2.15] Keep ruff targeting Python 3.10 until the 3.10 code is removed...
  • d0f2af8 [release/2.15] Raise the minimum Python to 3.11 in the package metadata (#202...
  • 30c000d [release/2.15] Revert "[inductor] Prefetch Inductor cache keys at torch.compi...
  • 4893744 [release/2.15] [c10d][nccl2] Make endCoalescing cover all ops in the window (...
  • 469a3f4 [release/2.15][Windows] Remove the zlibwapi.dll install (#201873) (#201880)
  • e581e2d [release/2.15] [c10d][nccl2] Do not treat zero-sized output tensors as aliase...
  • ef10301 [release/2.15] Update xpu commit to revert kernel refactor introduced correct...
  • a3f1751 [inductor] Fix the prologue zero-mask analysis on low-precision rounding cast...
  • e47ff36 Ship top_level.txt in wheel dist-info (#201435)
  • 5dc0495 Skip vectorized gather and scatter_add kernel for short rows (#201426)
  • Additional commits viewable in compare view

Updates transformers from 5.20.2 to 5.22.1

Release notes

Sourced from transformers's releases.

Patch release v5.22.1

We just had to fix the documentation!

** [Fix] Remove WIP doc for Ml4 (huggingface/transformers#50124) from @​remi-or

v5.22.0: Mistral Large 4 (Le Chonk)

New Models

Mistral Large 4 (Le Chonk)

Mistral Large 4 is Mistral's largest and most capable model to date: a 1 trillion-parameter natively multimodal Mixture-of-Experts model with 49 billion active parameters per token (52 billion including embeddings and output layers), trained from scratch on 3,800 NVIDIA Grace Blackwell GPUs in Mistral's own datacenters in Europe.

Mistral Large 4 unifies instruction following, reasoning, coding, and agentic workflows in a single set of weights. While a generalist model, it shows especially good performance on workloads such as cybersecurity, finance, and law, and it surpasses frontier closed models on visual grounding. It is natively fluent in 160+ languages, including every official language of the European Union.

Key Features

Mistral Large 4 includes the following architectural choices:

  • ~1T total / ~52B active parameters: granular Mixture-of-Experts with 128 routed experts (4 active per token) and 1 shared expert.
  • 1M context length, for long-context workloads.
  • Multimodal input: accepts text and image input, with text output. Pixtral-style vision encoder trained to handle variable image sizes and aspect ratios.
  • Instruct and Reasoning functionalities with function calls, reasoning effort configurable per request.

Mistral Large 4 offers the following capabilities:

  • Reasoning Mode: three reasoning efforts — low, medium, high (default) — so the same model can answer a quick chat reply or work through a complex agentic run.
  • Vision: analyzes images, charts, technical drawings, and documents, with state-of-the-art visual grounding among open weights.
  • Multilingual: natively fluent in 160+ languages, including all official languages of the European Union.
  • System Prompt: strong adherence and support for system prompts.
  • Agentic: native function calling, JSON output, and strict JSON schema enforcement.
  • Cybersecurity: state of the art among open-weight models for security work, while refusing malicious requests.
  • Large Context Window: supports a 1M context window.

The model is released under the Mistral Ecosystem Open-Weight License: a modified version of the MIT license, for both commercial and non-commercial use — operating a Model-as-a-Service business requires a separate commercial license with Mistral.

Recommended Settings

  • Reasoning Effort:
    • 'low' / 'medium' / 'high' — default is 'high'.
    • Use reasoning_effort="high" for complex prompts and agentic usage, 'low' for fast chat replies and 'medium' for day to day usage.
  • Sampling: for all reasoning efforts, we recommend the following sampling parameters:
    • temperature=1.0
    • top_p=0.95
  • System Prompt: define a clear environment and use case, including guidance on how to effectively leverage tools in agentic systems.
  • Tools: keep the set of tools well-defined and limit their number to the minimum required for the use case.
  • Context: the checkpoint supports a 1M context window.

... (truncated)

Commits

Updates inspect-ai from 0.3.283 to 0.3.286

Release notes

Sourced from inspect-ai's releases.

v0.3.286

0.3.286 (2026-10-28)

Breaking Changes

  • Docker read_file() now uses the container's default execution user instead of Docker's privileged copy API. Callers needing privileged reads must request user="root"; callers acting for a different sandbox user must pass that user. Docker reads require tar with --no-recurs...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file norelease Merges without cutting a release labels Nov 2, 2026
@github-actions

github-actions Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Coverage report

Click to see where and how coverage changed

FileStatementsMissingCoverageCoverage
(new stmts)		Lines missing
  src/glossogen/scenarios/move_a_box
  scenario.py
  src/glossogen/scenarios/signal_game
  scenario.py
  src/glossogen/testing
  simulation_harness.py
Project Total  

This report was generated by python-coverage-comment-action

@NewtonSander NewtonSander added release:patch Merging cuts a patch release (0.1.2 -> 0.1.3) and removed norelease Merges without cutting a release labels Nov 2, 2026
@dependabot
build(deps): Bump the python-minor-patch group across 1 directory wit…
78cf00a 
…h 15 updates

Bumps the python-minor-patch group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `2.2.0` | `2.3.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.14.1` | `2.14.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.161.1` | `0.162.0` |
| [openai](https://github.com/openai/openai-python) | `3.37.0` | `3.41.0` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `2.3.0` | `2.4.0` |
| [cachetools](https://github.com/tkem/cachetools) | `7.2.4` | `7.2.7` |
| [genai-prices](https://github.com/pydantic/genai-prices) | `0.1.13` | `0.2.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.14.1` | `2.15.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.20.2` | `5.22.1` |
| [inspect-ai](https://github.com/UKGovernmentBEIS/inspect_ai) | `0.3.283` | `0.3.286` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.0` | `1.4.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.2` | `0.17.3` |
| [modal](https://github.com/modal-labs/modal-client) | `1.6.2` | `1.6.3` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.7.7` | `9.8.0` |



Updates `anthropic` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v2.2.0...v2.3.0)

Updates `pydantic` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.1...v2.14.2)

Updates `fastapi` from 0.161.1 to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.161.1...0.162.0)

Updates `openai` from 3.37.0 to 3.41.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.37.0...v3.41.0)

Updates `huggingface-hub` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v2.3.0...v2.4.0)

Updates `cachetools` from 7.2.4 to 7.2.7
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.2.4...v7.2.7)

Updates `genai-prices` from 0.1.13 to 0.2.0
- [Release notes](https://github.com/pydantic/genai-prices/releases)
- [Changelog](https://github.com/pydantic/genai-prices/blob/main/RELEASE.md)
- [Commits](pydantic/genai-prices@v0.1.13...v0.2.0)

Updates `torch` from 2.14.1 to 2.15.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.14.1...v2.15.0)

Updates `transformers` from 5.20.2 to 5.22.1
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.20.2...v5.22.1)

Updates `inspect-ai` from 0.3.283 to 0.3.286
- [Release notes](https://github.com/UKGovernmentBEIS/inspect_ai/releases)
- [Changelog](https://github.com/UKGovernmentBEIS/inspect_ai/blob/main/CHANGELOG.md)
- [Commits](UKGovernmentBEIS/inspect_ai@0.3.283...0.3.286)

Updates `pytest` from 9.1.1 to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.1...9.2.0)

Updates `pytest-asyncio` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.4.0...v1.4.1)

Updates `ruff` from 0.17.2 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.2...0.17.3)

Updates `modal` from 1.6.2 to 1.6.3
- [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG_DEV.md)
- [Commits](modal-labs/modal-client@py/v1.6.2...py/v1.6.3)

Updates `mkdocs-material` from 9.7.7 to 9.8.0
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.7.7...9.8.0)

---
updated-dependencies:
- dependency-name: anthropic
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: cachetools
  dependency-version: 7.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: fastapi
  dependency-version: 0.162.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: genai-prices
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: huggingface-hub
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: inspect-ai
  dependency-version: 0.3.286
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: mkdocs-material
  dependency-version: 9.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: modal
  dependency-version: 1.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: openai
  dependency-version: 3.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pydantic
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytest-asyncio
  dependency-version: 1.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: torch
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: transformers
  dependency-version: 5.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump the python-minor-patch group with 15 updates build(deps): Bump the python-minor-patch group across 1 directory with 15 updates Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-minor-patch-578e34a3e8 branch from d815376 to 78cf00a Compare November 2, 2026 08:51
@NewtonSander
NewtonSander merged commit f07802d into main Nov 2, 2026
8 checks passed
@NewtonSander
NewtonSander deleted the dependabot/uv/python-minor-patch-578e34a3e8 branch November 2, 2026 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file release:patch Merging cuts a patch release (0.1.2 -> 0.1.3)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@NewtonSander