deps: bump the uv-minor-and-patch group with 9 updates#403
Merged
liujuanjuan1984 merged 1 commit intomainfrom Apr 9, 2026
Merged
deps: bump the uv-minor-and-patch group with 9 updates#403liujuanjuan1984 merged 1 commit intomainfrom
liujuanjuan1984 merged 1 commit intomainfrom
Conversation
Bumps the uv-minor-and-patch group with 9 updates: | Package | From | To | | --- | --- | --- | | [a2a-sdk](https://github.com/a2aproject/a2a-python) | `0.3.25` | `0.3.26` | | [fastapi](https://github.com/fastapi/fastapi) | `0.133.0` | `0.135.3` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.48` | `2.0.49` | | [sse-starlette](https://github.com/sysid/sse-starlette) | `3.2.0` | `3.3.4` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.44.0` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.2` | `0.15.10` | Updates `a2a-sdk` from 0.3.25 to 0.3.26 - [Release notes](https://github.com/a2aproject/a2a-python/releases) - [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md) - [Commits](a2aproject/a2a-python@v0.3.25...v0.3.26) Updates `fastapi` from 0.133.0 to 0.135.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.133.0...0.135.3) Updates `sqlalchemy` from 2.0.48 to 2.0.49 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `sse-starlette` from 3.2.0 to 3.3.4 - [Release notes](https://github.com/sysid/sse-starlette/releases) - [Commits](sysid/sse-starlette@v3.2.0...v3.3.4) Updates `uvicorn` from 0.41.0 to 0.44.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.41.0...0.44.0) Updates `mypy` from 1.19.1 to 1.20.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v1.20.0) Updates `pytest` from 9.0.2 to 9.0.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.0.3) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `ruff` from 0.15.2 to 0.15.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.2...0.15.10) --- updated-dependencies: - dependency-name: a2a-sdk dependency-version: 0.3.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-minor-and-patch - dependency-name: fastapi dependency-version: 0.135.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-minor-and-patch - dependency-name: sqlalchemy dependency-version: 2.0.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-minor-and-patch - dependency-name: sse-starlette dependency-version: 3.3.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-minor-and-patch - dependency-name: uvicorn dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-minor-and-patch - dependency-name: mypy dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-minor-and-patch - dependency-name: pytest dependency-version: 9.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-minor-and-patch - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-minor-and-patch - dependency-name: ruff dependency-version: 0.15.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv-minor-and-patch group with 9 updates:
0.3.250.3.260.133.00.135.32.0.482.0.493.2.03.3.40.41.00.44.01.19.11.20.09.0.29.0.37.0.07.1.00.15.20.15.10Updates
a2a-sdkfrom 0.3.25 to 0.3.26Release notes
Sourced from a2a-sdk's releases.
Changelog
Sourced from a2a-sdk's changelog.
Commits
ead75f9chore(main): release 0.3.26 (#935)538715achore(deps): bump cryptography from 46.0.6 to 46.0.7 (#953)b941eefci: use commit hashes for actions instead of tags (#937)5e0dcd7feat: Add support for more Task Message and Artifact fields in the Vertex Tas...8672785ci: pin check-spelling to fix "Unsafe Permissions" (#929)c0afd5cchore: revert "ci: fix spelling action failure (#926)" (#927)a8eced8ci: fix spelling action failure (#926)5d49f4achore(deps): bump requests from 2.32.4 to 2.33.0 (#909)629078fchore(deps): bump the all group with 19 updates (#918)0b38305chore(deps): bump the github-actions group with 4 updates (#917)Updates
fastapifrom 0.133.0 to 0.135.3Release notes
Sourced from fastapi's releases.
... (truncated)
Commits
1f442c4🔖 Release version 0.135.38f5d157📝 Update release notes428452a📝 Update release notes70580da✨ Add support for@app.vibe()(#15280)6ee8747📝 Update release notes3e72c09👥 Update FastAPI People - Experts (#15279)96df35f📝 Update release notes6c81125⬆ Bump orjson from 3.11.7 to 3.11.8 (#15276)428f82c📝 Update release notes5599c59⬆ Bump ruff from 0.15.0 to 0.15.8 (#15277)Updates
sqlalchemyfrom 2.0.48 to 2.0.49Release notes
Sourced from sqlalchemy's releases.
... (truncated)
Commits
Updates
sse-starlettefrom 3.2.0 to 3.3.4Release notes
Sourced from sse-starlette's releases.
Commits
c938db3Bump version to 3.3.4eefd6dcMerge pull request #179 from sysid/dependabot/uv/cryptography-46.0.6d9e9b82chore(deps): bump cryptography from 46.0.5 to 46.0.628cd775Merge pull request #178 from sysid/dependabot/uv/requests-2.33.02e52732Merge pull request #176 from sysid/dependabot/uv/ujson-5.12.0bac335eMerge pull request #177 from sysid/dependabot/uv/cbor2-5.9.0d465468chore(deps): bump requests from 2.32.5 to 2.33.07434cd3chore(deps): bump cbor2 from 5.8.0 to 5.9.0fc2455achore(deps): bump ujson from 5.11.0 to 5.12.05f84539Bump version to 3.3.3Updates
uvicornfrom 0.41.0 to 0.44.0Release notes
Sourced from uvicorn's releases.
Changelog
Sourced from uvicorn's changelog.
Commits
edb54c4Version 0.44.0 (#2890)029be08Implement websocket keepalive pings for websockets-sansio (#2888)8d397c7Version 0.43.0 (#2885)587042d🐛 Emithttp.disconnectASGIreceive()event on server shutting down for s...c9a75fbchore(deps): bump the github-actions group with 3 updates (#2878)84fd578chore(deps): bump pygments from 2.19.2 to 2.20.0 (#2877)cd52d34Use nativecontextparameter forcreate_taskon Python 3.11+ (#2859)5211880Drop cast in ASGI types (#2875)1cb8e74Add websocket 500 fallback header test (#2874)28efbb2chore(deps-dev): bump cryptography from 46.0.5 to 46.0.6 (#2873)Updates
mypyfrom 1.19.1 to 1.20.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
770d3caRemove +dev from version4738ffaChangelog updates for 1.20 (#21109)b4f07a7Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)7bec7b7[mypyc] Document librt and librt.base64 (#21114)c482596--allow-redefinition-new is no longer experimental (#21110)c916ca3sdist: includemisc/{diff-cache,apply-cache-diff}.pyfor `mypy/test/test_di...b137e4e[mypyc] Speed up native-to-native imports within the same group (#21101)978b711[mypyc] Fix range loop variable off-by-one after loop exit (#21098)67ada30[stubtest] Check runtime availability of private types not marked `@type_chec...bdef6eflibrt cache tests: build respecting MYPY_TEST_PREFIX (#21097)Updates
pytestfrom 9.0.2 to 9.0.3Release notes
Sourced from pytest's releases.
Commits
a7d58d7Prepare release version 9.0.3089d981Merge pull request #14366 from bluetech/revert-14193-backport8127eafRevert "Fix: assertrepr_compare respects dict insertion order (#14050) (#14193)"99a7e60Merge pull request #14363 from pytest-dev/patchback/backports/9.0.x/95d8423bd...ddee02aMerge pull request #14343 from bluetech/cve-2025-71176-simple74eac69doc: Update training info (#14298) (#14301)f92dee7Merge pull request #14267 from pytest-dev/patchback/backports/9.0.x/d6fa26c62...7ee58acMerge pull request #12378 from Pierre-Sassoulas/fix-implicit-str-concat-and-d...37da870Merge pull request #14259 from mitre88/patch-4 (#14268)c34bfa3Add explanation for string context diffs (#14257) (#14266)Updates
pytest-covfrom 7.0.0 to 7.1.0Changelog
Sourced from pytest-cov's changelog.
Commits
66c8a52Bump version: 7.0.0 → 7.1.0f707662Make the examples use pypy 3.11.6049a78Make context test use the old ctracer (seems the new sysmon tracer behaves di...8ebf20bUpdate changelog.861d30eRemove the backup context manager - shouldn't be needed since coverage 5.0, ...fd4c956Pass the precision on the nulled total (seems that there's some caching goion...78c9c4eOnly run the 3.9 on older deps.4849a92Punctuation.197c35eUpdate changelog and hopefully I don't forget to publish release again :))14dc1c9Update examples to use 3.11 and make the adhoc layout example look a bit more...Updates
rufffrom 0.15.2 to 0.15.10Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
252f761Bump 0.15.10 (#24519)37a1ec8[ty] Fix assignability of intersections with bounded typevars (#24502)f518cc9[ty] Allow partially stringifiedtype[…]annotations (#24518)16c4090docs: fix JSON typo in settings example (#24517)99d97bd[ty] Tighten up a few edge cases inConcatenatetype-expression parsing (#2...2714e34[ty] Enablepull-diagnosticsby default in E2E tests (#24516)d8bc700LSP: Add support for custom extensions (#24463)a45f96d[ty] stop special-casing str constructor (#24514)87a0f01[ruff] Treat f-string interpolation as potential side effect in RUF019 (#24426)e9ba848[ty] Fix excess subscript argument inference for non-generic types (#24354)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions