From a145dcba3b84672bf737998f77a099cf733a9073 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 04:40:53 +0000 Subject: [PATCH] build(deps): bump the dev-dependencies group with 28 updates Updates the requirements on [pydantic](https://github.com/pydantic/pydantic), [starlette](https://github.com/Kludex/starlette), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy), [jsonpath-ng](https://github.com/jsonpath-ng/jsonpath-ng), [asyncpg](https://github.com/MagicStack/asyncpg), [asyncmy](https://github.com/long2ice/asyncmy), [aio-pika](https://github.com/mosquito/aio-pika), [fastapi](https://github.com/fastapi/fastapi), [granian](https://github.com/emmett-framework/granian), [openfeature-flagd-core](https://github.com/open-feature/python-sdk-contrib), [gitpython](https://github.com/gitpython-developers/GitPython), [websockets](https://github.com/python-websockets/websockets), [boto3](https://github.com/boto/boto3), [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-starlette](https://github.com/open-telemetry/opentelemetry-python-contrib), [pyjwt](https://github.com/jpadilla/pyjwt), [cryptography](https://github.com/pyca/cryptography), [uvloop](https://github.com/MagicStack/uvloop), [playwright](https://github.com/microsoft/playwright-python), [coverage](https://github.com/coveragepy/coveragepy), [mypy](https://github.com/python/mypy), [ruff](https://github.com/astral-sh/ruff), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [markdown](https://github.com/Python-Markdown/markdown), [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) and [pdfplumber](https://github.com/jsvine/pdfplumber) to permit the latest version. Updates `pydantic` to 2.14.1 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.5...v2.14.1) Updates `starlette` to 1.8.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.7.0...1.8.0) Updates `sqlalchemy` to 2.1.5 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `jsonpath-ng` to 1.11.0 - [Release notes](https://github.com/jsonpath-ng/jsonpath-ng/releases) - [Changelog](https://github.com/jsonpath-ng/jsonpath-ng/blob/main/CHANGELOG.rst) - [Commits](https://github.com/jsonpath-ng/jsonpath-ng/compare/v1.8.0...v1.11.0) Updates `asyncpg` to 0.32.0 - [Release notes](https://github.com/MagicStack/asyncpg/releases) - [Commits](https://github.com/MagicStack/asyncpg/compare/v0.31.0...v0.32.0) Updates `asyncmy` to 0.2.16 - [Release notes](https://github.com/long2ice/asyncmy/releases) - [Changelog](https://github.com/long2ice/asyncmy/blob/dev/CHANGELOG.md) - [Commits](https://github.com/long2ice/asyncmy/compare/v0.2.11...v0.2.16) Updates `aio-pika` to 10.1.1 - [Release notes](https://github.com/mosquito/aio-pika/releases) - [Changelog](https://github.com/mosquito/aio-pika/blob/master/CHANGELOG.md) - [Commits](https://github.com/mosquito/aio-pika/compare/10.0.4...10.1.1) Updates `fastapi` to 0.143.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.141.1...0.143.3) Updates `granian` to 2.8.4 - [Release notes](https://github.com/emmett-framework/granian/releases) - [Commits](https://github.com/emmett-framework/granian/compare/v2.8.3...v2.8.4) Updates `openfeature-flagd-core` to 2.0.0 - [Release notes](https://github.com/open-feature/python-sdk-contrib/releases) - [Commits](https://github.com/open-feature/python-sdk-contrib/compare/openfeature-flagd-core/v1.0.0...openfeature-flagd-core/v2.0.0) Updates `gitpython` to 3.2.1 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst) - [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.62...3.2.1) Updates `websockets` to 17.2 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](https://github.com/python-websockets/websockets/compare/17.1...17.2) Updates `boto3` to 1.43.114 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.43.103...1.43.114) Updates `azure-storage-blob` to 12.31.0 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-storage-blob_12.30.3...azure-storage-blob_12.31.0) Updates `opentelemetry-api` to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.45.0...v1.45.1) Updates `opentelemetry-sdk` to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.45.0...v1.45.1) Updates `opentelemetry-instrumentation-starlette` to 0.66b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `pyjwt` to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1) Updates `cryptography` to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.1...50.0.2) Updates `uvloop` to 0.23.0 - [Release notes](https://github.com/MagicStack/uvloop/releases) - [Commits](https://github.com/MagicStack/uvloop/compare/v0.22.1...v0.23.0) Updates `playwright` to 1.64.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](https://github.com/microsoft/playwright-python/compare/v1.63.0...v1.64.0) Updates `coverage` to 7.16.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.16.1...7.16.2) Updates `mypy` to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.3.1...v2.4.0) Updates `ruff` to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.9...0.17.1) Updates `opentelemetry-exporter-otlp-proto-http` to 1.45.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.45.0...v1.45.1) Updates `markdown` to 3.11.1 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](https://github.com/Python-Markdown/markdown/compare/3.11.0...3.11.1) Updates `pymdown-extensions` to 12.3 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](https://github.com/facelessuser/pymdown-extensions/compare/12.1...12.3) Updates `pdfplumber` to 0.11.10 - [Release notes](https://github.com/jsvine/pdfplumber/releases) - [Changelog](https://github.com/jsvine/pdfplumber/blob/stable/CHANGELOG.md) - [Commits](https://github.com/jsvine/pdfplumber/compare/v0.11.9...v0.11.10) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.14.1 dependency-type: direct:production dependency-group: dev-dependencies - dependency-name: starlette dependency-version: 1.8.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: sqlalchemy dependency-version: 2.1.5 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: jsonpath-ng dependency-version: 1.11.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: asyncpg dependency-version: 0.32.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: asyncmy dependency-version: 0.2.16 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: aio-pika dependency-version: 10.1.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: fastapi dependency-version: 0.143.3 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: granian dependency-version: 2.8.4 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: openfeature-flagd-core dependency-version: 2.0.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: gitpython dependency-version: 3.2.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: websockets dependency-version: '17.2' dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: boto3 dependency-version: 1.43.114 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: azure-storage-blob dependency-version: 12.31.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: opentelemetry-api dependency-version: 1.45.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: opentelemetry-sdk dependency-version: 1.45.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: opentelemetry-instrumentation-starlette dependency-version: 0.66b1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: uvloop dependency-version: 0.23.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: playwright dependency-version: 1.64.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: coverage dependency-version: 7.16.2 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.1 dependency-type: direct:development dependency-group: dev-dependencies - dependency-name: markdown dependency-version: 3.11.1 dependency-type: direct:production dependency-group: dev-dependencies - dependency-name: pymdown-extensions dependency-version: '12.3' dependency-type: direct:production dependency-group: dev-dependencies - dependency-name: pdfplumber dependency-version: 0.11.10 dependency-type: direct:production dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] --- book/requirements.txt | 6 ++--- pyproject.toml | 58 +++++++++++++++++++++---------------------- 2 files changed, 32 insertions(+), 32 deletions(-) diff --git a/book/requirements.txt b/book/requirements.txt index fe00f19d..28d3867a 100644 --- a/book/requirements.txt +++ b/book/requirements.txt @@ -1,7 +1,7 @@ -Markdown>=3.11,<4 +Markdown>=3.11.1,<4 Pygments>=2.21.0,<3 PyYAML>=6,<7 WeasyPrint>=70.0,<71 -pymdown-extensions>=12.1,<13 +pymdown-extensions>=12.3,<13 CairoSVG>=2.9.1,<3 -pdfplumber>=0.11.9,<0.12 +pdfplumber>=0.11.10,<0.12 diff --git a/pyproject.toml b/pyproject.toml index 4dbf4fc3..5d730dcc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ classifiers = [ "Typing :: Typed", ] dependencies = [ - "pydantic>=2.13.5", + "pydantic>=2.14.1", "pyyaml>=6.0.3", ] @@ -40,12 +40,12 @@ Issues = "https://github.com/fireflyframework/fireflyframework-pyfly/issues" templates = ["jinja2>=3.1.6"] webapp = ["pyfly[web,templates,security]"] web = [ - "starlette>=1.7.0", + "starlette>=1.8.0", "uvicorn[standard]>=0.54.0", "python-multipart>=0.0.32", ] data-relational = [ - # Requires SQLAlchemy >= 2.0.50 (2.0.49 broke pool pre-ping on the MySQL/MariaDB async drivers, C089) and is + # Requires SQLAlchemy >= 2.1.5 (2.0.49 broke pool pre-ping on the MySQL/MariaDB async drivers, C089) and is # tested on the 2.0 and 2.1 lines: the lock holds the latest release, and CI runs the suite on the newest 2.0 # release too (test-sqlalchemy-2-0). No upper bound; what differs between the lines is bridged in # pyfly.data.relational.sqlalchemy.compat. @@ -54,7 +54,7 @@ data-relational = [ "aiosqlite>=0.22.1", ] testing = [ - "jsonpath-ng>=1.8.0", + "jsonpath-ng>=1.11.0", ] argon2 = [ "argon2-cffi>=25.1.0", # Argon2PasswordEncoder (OWASP-preferred password hashing) @@ -67,7 +67,7 @@ data-document = [ "beanie>=2.2.0", ] postgresql = [ - "asyncpg>=0.31.0", + "asyncpg>=0.32.0", ] mysql = [ # MySQL and MariaDB (mysql+asyncmy:// and mariadb+asyncmy://). asyncmy rather than aiomysql: aiomysql @@ -75,17 +75,17 @@ mysql = [ # checkout raised TypeError (C089); asyncmy's pre-ping worked there and works on every later 2.0.x. # 0.2.11 is the oldest release the MySQL/MariaDB lanes were run on (with SQLAlchemy 2.0.50) and the # oldest with wheels for Python 3.12 and 3.13. - "asyncmy>=0.2.11", + "asyncmy>=0.2.16", ] eda = [ "aiokafka>=0.14.0", - "aio-pika>=10.0.4", + "aio-pika>=10.1.1", ] fastapi = [ - "fastapi>=0.141.1", + "fastapi>=0.143.3", ] granian = [ - "granian>=2.8.3", + "granian>=2.8.4", ] hypercorn = [ "hypercorn>=0.18.0", @@ -94,7 +94,7 @@ kafka = [ "aiokafka>=0.14.0", ] rabbitmq = [ - "aio-pika>=10.0.4", + "aio-pika>=10.1.1", ] redis = [ "redis[hiredis]>=8.1.0", @@ -109,17 +109,17 @@ client = [ feature-flags = [ # OpenFeature SDK + flagd's reference in-process evaluator (FlagdCore, spec D3); httpx serves the http source. "openfeature-sdk>=0.10.0", - "openfeature-flagd-core>=1.0.0", + "openfeature-flagd-core>=2.0.0", "httpx>=0.28", ] config-server-git = [ - "GitPython>=3.1.62", + "GitPython>=3.2.1", ] grpc = [ "grpcio>=1.84.0", ] websocket = [ - "websockets>=17.1", + "websockets>=17.2", ] idp-azure = [ "httpx>=0.28.1", @@ -128,19 +128,19 @@ idp-keycloak = [ "httpx>=0.28.1", ] idp-cognito = [ - "boto3>=1.43.103", + "boto3>=1.43.114", ] ecm-aws = [ - "boto3>=1.43.103", + "boto3>=1.43.114", ] ecm-azure = [ - "azure-storage-blob>=12.30.3", + "azure-storage-blob>=12.31.0", ] observability = [ "prometheus-client>=0.26.0", - "opentelemetry-api>=1.45.0", - "opentelemetry-sdk>=1.45.0", - "opentelemetry-instrumentation-starlette>=0.66b0", + "opentelemetry-api>=1.45.1", + "opentelemetry-sdk>=1.45.1", + "opentelemetry-instrumentation-starlette>=0.66b1", "structlog>=26.1.0", ] scheduling = [ @@ -152,9 +152,9 @@ pii = [ "presidio-anonymizer @ git+https://github.com/data-privacy-stack/presidio.git@5e2fcea990aa3b99660d2aea9121d0ba74a8940b#subdirectory=presidio-anonymizer", ] security = [ - "pyjwt[crypto]>=2.15.0", + "pyjwt[crypto]>=2.15.1", "bcrypt>=5.0.0", - "cryptography>=50.0.1", + "cryptography>=50.0.2", "pyotp>=2.10.0", ] notifications = [ @@ -171,33 +171,33 @@ shell = [ ] web-fast = [ "pyfly[web,granian]", - "uvloop>=0.22.1; sys_platform != 'win32'", + "uvloop>=0.23.0; sys_platform != 'win32'", ] web-fastapi = [ "pyfly[fastapi,granian]", - "uvloop>=0.22.1; sys_platform != 'win32'", + "uvloop>=0.23.0; sys_platform != 'win32'", ] full = [ "pyfly[web,templates,data-relational,data-document,postgresql,mysql,eda,cache,client,grpc,websocket,ecm-aws,ecm-azure,observability,security,scheduling,cli,shell,kafka,rabbitmq,redis,granian,fastapi,hypercorn,idp-azure,idp-keycloak,idp-cognito,notifications,config-server-git,feature-flags]", ] [dependency-groups] -browser = ["playwright>=1.63.0"] +browser = ["playwright>=1.64.0"] dev = [ "pytest>=9.1.1", "pytest-asyncio>=1.4.0", "pytest-cov>=7.1.0", - "coverage[toml]>=7.16.1", - "mypy>=2.3.1", - "ruff>=0.16.9", - "jsonpath-ng>=1.8.0", + "coverage[toml]>=7.16.2", + "mypy>=2.4.0", + "ruff>=0.17.1", + "jsonpath-ng>=1.11.0", "respx>=0.23.1", "aiosmtpd>=1.4.6", # The OTLP exporter is the DEFAULT tracing exporter (auto_configuration selects it as soon as an # endpoint is configured), yet it appears in no extra, so nothing in CI ever imported it and the # whole OTLP path — including how the endpoint is built — went unexercised. It is a dev dependency # rather than a new runtime one: applications choose their exporter and pay for it deliberately. - "opentelemetry-exporter-otlp-proto-http>=1.45.0", + "opentelemetry-exporter-otlp-proto-http>=1.45.1", # The second MySQL/MariaDB async driver the docs name (mysql+aiomysql://). The integration lanes run # pool pre-ping through both drivers, so neither can regress unseen (C089). "aiomysql>=0.3.2",