chore(deps): uv: bump the all-python group across 1 directory with 8 updates by dependabot[bot] · Pull Request #737 · aws-samples/sample-autonomous-cloud-coding-agents

dependabot · 2026-08-08T06:15:11Z

Bumps the all-python group with 8 updates in the /agent directory:

Package	From	To
boto3	`1.43.40`	`1.43.67`
bedrock-agentcore	`1.18.1`	`1.21.0`
claude-agent-sdk	`0.2.110`	`0.2.134`
fastapi	`0.139.0`	`0.141.1`
uvicorn	`0.50.0`	`0.52.1`
aws-opentelemetry-distro	`0.18.0`	`0.19.0`
ruff	`0.15.20`	`0.16.2`
ty	`0.0.56`	`0.0.69`

Updates boto3 from 1.43.40 to 1.43.67

Commits

ca719c8 Merge branch 'release-1.43.67'
fc8af6b Bumping version to 1.43.67
254a8c9 Add changelog entries from botocore
f53e30a Merge branch 'release-1.43.66'
e08b015 Merge branch 'release-1.43.66' into develop
7ac6cf8 Bumping version to 1.43.66
c69aee1 Add changelog entries from botocore
b74eb20 Merge branch 'release-1.43.65'
75469d6 Merge branch 'release-1.43.65' into develop
d25fa39 Bumping version to 1.43.65
Additional commits viewable in compare view

Updates bedrock-agentcore from 1.18.1 to 1.21.0

Release notes

Sourced from bedrock-agentcore's releases.

Bedrock AgentCore SDK v1.21.0

Installation
pip install bedrock-agentcore==1.21.0
What's Changed

See CHANGELOG.md for details.

What's Changed

propagate X-Amz-Bedrock-AgentCore-Identity-WAT on outbound calls by @Sudip2403 in aws/bedrock-agentcore-sdk-python#607

feat(memory): add AgentCoreMemoryStore Strands integration by @strandly-the-agent in aws/bedrock-agentcore-sdk-python#588

Release v1.21.0 by @agentcore-devx-automation[bot] in aws/bedrock-agentcore-sdk-python#623

New Contributors

@Sudip2403 made their first contribution in aws/bedrock-agentcore-sdk-python#607

@strandly-the-agent made their first contribution in aws/bedrock-agentcore-sdk-python#588

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.20.0...v1.21.0

Bedrock AgentCore SDK v1.20.0

Installation
pip install bedrock-agentcore==1.20.0
What's Changed

See CHANGELOG.md for details.

What's Changed

ci: wire shared composite actions by @JunyangHe in aws/bedrock-agentcore-sdk-python#601

feat: third-party eval metrics adapter (DeepEval + Autoevals) with strands-evals mappers by @stone-coding in aws/bedrock-agentcore-sdk-python#568

fix(ci): add pinned deepeval and autoevals to dev group by @jariy17 in aws/bedrock-agentcore-sdk-python#609

ci: install deepeval and autoevals for evaluation integ tests by @jariy17 in aws/bedrock-agentcore-sdk-python#608

fix(test): repair four unit tests drifting behind source and upstream APIs by @jariy17 in aws/bedrock-agentcore-sdk-python#610

Validate agent input in sample agents and runtime docs by @jariy17 in aws/bedrock-agentcore-sdk-python#612

fix(test): repair eval adapter integ fixture and wire LLM judge key by @jariy17 in aws/bedrock-agentcore-sdk-python#614

fix(a2a): bind the A2A contract port, ignore generic PORT by @jariy17 in aws/bedrock-agentcore-sdk-python#615

fix(test): pin autoevals judge to the OpenAI API by @jariy17 in aws/bedrock-agentcore-sdk-python#617

Release v1.20.0 by @agentcore-devx-automation[bot] in aws/bedrock-agentcore-sdk-python#619

New Contributors

@stone-coding made their first contribution in aws/bedrock-agentcore-sdk-python#568

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.19.0...v1.20.0

Bedrock AgentCore SDK v1.19.0

Installation

... (truncated)

Changelog

Sourced from bedrock-agentcore's changelog.

[1.21.0] - 2026-08-06

Other Changes

feat(memory): add AgentCoreMemoryStore Strands integration (#588) (439d788)

feat(runtime): propagate X-Amz-Bedrock-AgentCore-Identity-WAT on outbound calls (#607) (01d3800)

[1.20.0] - 2026-08-04

Added

feat: third-party eval metrics adapter (DeepEval + Autoevals) with strands-evals mappers (#568) (9b7d38e)

Fixed

fix: validate sample agent inputs (#612) (528471e)

Other Changes

fix(test): pin autoevals judge to the OpenAI API (#617) (703ccfd)

fix(a2a): bind the A2A contract port, ignore generic PORT (#615) (207adb7)

fix(test): repair eval adapter integ fixture and wire LLM judge key (#614) (9d8cc26)

fix(test): repair four unit tests drifting behind source and upstream APIs (#610) (53b0b48)

ci: install deepeval and autoevals for evaluation integ tests (#608) (5d23292)

fix(ci): add pinned deepeval and autoevals to dev group (#609) (70165d9)

ci: wire shared composite actions (#601) (a3382a4)

[1.19.0] - 2026-07-28

Fixed

fix: preserve generated API reference content (#595) (4a7a8c4)

fix: convert RST admonition to ADOC (#594) (641000d)

Other Changes

fix(a2a): advertise resolved port on explicit cards (#605) (34e06f0)

fix(memory-integ): address capacity cap and update failures in tests (#604) (59cbff3)

ci: migrate workflows to shared reusable workflows (#597) (f1a7106)

fix(ci): pin Twine to 6.2.0 (#600) (c707388)

fix(a2a): honor PORT when serving locally (#593) (331f441)

feat(a2a): migrate runtime integration to a2a-sdk v1 (#591) (16f732f)

Add LLM issue auto-triage: type and high-severity labelers (#584) (3000d50)

Commits

5d4ca0d chore: bump version to 1.21.0 (#623)
439d788 feat(memory): add AgentCoreMemoryStore Strands integration (#588)
01d3800 feat(runtime): propagate X-Amz-Bedrock-AgentCore-Identity-WAT on outbound cal...
9195576 chore: bump version to 1.20.0 (#619)
703ccfd fix(test): pin autoevals judge to the OpenAI API (#617)
207adb7 fix(a2a): bind the A2A contract port, ignore generic PORT (#615)
9d8cc26 fix(test): repair eval adapter integ fixture and wire LLM judge key (#614)
528471e fix: validate sample agent inputs (#612)
53b0b48 fix(test): repair four unit tests drifting behind source and upstream APIs (#...
5d23292 ci: install deepeval and autoevals for evaluation integ tests (#608)
Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.110 to 0.2.134

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.134

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.226

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.134/
pip install claude-agent-sdk==0.2.134
v0.2.133

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.225

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.133/
pip install claude-agent-sdk==0.2.133
v0.2.132

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.224

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.132/
pip install claude-agent-sdk==0.2.132
v0.2.131

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.223

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.134

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.226

0.2.133

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.225

0.2.132

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.224

0.2.131

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.223

0.2.130

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.222

0.2.129

Breaking Changes

Skill name validation in ClaudeAgentOptions.skills: Skill names containing parentheses, commas, control characters, wildcards (*, :*), leading /, surrounding whitespace, or surrogate code points now raise ValueError at connect time. skills=["plugin:*"] and skills=["*"] should be replaced with skills="all" or a Skill(...) rule in allowed_tools. Names with leading whitespace or / previously built rules that could never match (silently disabling the skill) and now raise explicitly (#1145)

Bug Fixes

Validated skill names to prevent --allowedTools injection: Skill names from ClaudeAgentOptions(skills=[...]) were passed unchecked into the CLI's --allowedTools value, which splits on commas and spaces. A crafted name could inject extra permission rules. The transport now validates each name and rejects delimiter-carrying or malformed values (#1145)

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.221

0.2.128

Internal/Other Changes

Updated bundled Claude CLI to version 2.1.220

... (truncated)

Commits

0982371 docs: update changelog for v0.2.134
af03cc3 chore: release v0.2.134
a20f44d chore: bump bundled CLI version to 2.1.226
d58db4f docs: update changelog for v0.2.133
5a7a706 chore: release v0.2.133
2c643ad chore: bump bundled CLI version to 2.1.225
6c754df docs: update changelog for v0.2.132
7d28ac3 chore: release v0.2.132
b95e101 chore: bump bundled CLI version to 2.1.224
71142da docs: update changelog for v0.2.131
Additional commits viewable in compare view

Updates fastapi from 0.139.0 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo.

Docs

📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

0.141.0

Features

✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @tiangolo.

0.140.13

Fixes

🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @SAURABHSALVE.

Docs

📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @AshNicolus.

📝 Add API reference page for fastapi.sse. PR #15930 by @SAURABHSALVE.

0.140.12

Fixes

🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @Zawwarsami16.

0.140.11

Fixes

🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @YuriiMotov.

0.140.10

Fixes

🐛 Fix handling sequences with nested Annotated types. PR #14874 by @YuriiMotov.

Internal

🐛 Accept any base test failure as regression. PR #16092 by @tiangolo.

🐛 Preserve pytest exit code in regression check. PR #16091 by @tiangolo.

✅ Test PR regressions against base code. PR #16090 by @tiangolo.

0.140.9

Fixes

🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @MBGrao.

... (truncated)

Commits

95f8322 🔖 Release version 0.141.1 (#16106)
f137944 📝 Update release notes
d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
1d211b9 📝 Update release notes
8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
c7e7b65 🔖 Release version 0.141.0 (#16103)
6bceb84 📝 Update release notes
5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
628663f 🔖 Release version 0.140.13 (#16096)
0b54fd0 📝 Update release notes
Additional commits viewable in compare view

Updates uvicorn from 0.50.0 to 0.52.1

Release notes

Sourced from uvicorn's releases.

Version 0.52.1

Fixed

Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)

Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)

Handle connection loss while a WebSocket write is waiting on backpressure (#3050)

Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @Kludex in Kludex/uvicorn#3025

Remove colorama from the standard extra by @Kludex in Kludex/uvicorn#3027

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.2

What's Changed

Require websockets>=13.0 for the default sansio implementation by @Kludex in Kludex/uvicorn#3021

Full Changelog: Kludex/uvicorn@0.50.1...0.50.2

Version 0.50.1

What's Changed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation by @Aayush7352 in Kludex/uvicorn#3019

New Contributors

@Aayush7352 made their first contribution in Kludex/uvicorn#3019

Full Changelog: Kludex/uvicorn@0.50.0...0.50.1

Changelog

Sourced from uvicorn's changelog.

0.52.1 (August 1, 2026)

Fixed

Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)

Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)

Handle connection loss while a WebSocket write is waiting on backpressure (#3050)

Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

0.50.1 (July 6, 2026)

Fixed

Split comma-separated Sec-WebSocket-Protocol values in the websockets-sansio implementation (#3019)

Commits

ee8e45c Version 0.52.1 (#3056)
b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
e148451 Handle connection loss during WebSocket write backpressure (#3050)
e16a69b Add missing write flow control to websockets-sansio (#3048)
ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
8f1b884 Version 0.52.0 (#3044)
f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
Additional commits viewable in compare view

Updates aws-opentelemetry-distro from 0.18.0 to 0.19.0

Release notes

Sourced from aws-opentelemetry-distro's releases.

Release v0.19.0

What's Changed

fix(mcp): fall back to HTTP headers for server-side trace context when params._meta is absent (#829)

fix(mcp-instrumentation): always inject W3C trace context into outbound HTTP request headers so MCP servers that read context only from HTTP (API Gateways, service meshes, non-Python MCP servers) can join the caller's trace, even with OTEL_MCP_SUPPRESS_HTTP_INSTRUMENTATION enabled (#827)

Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)

feat(genai): capture user input and agent output on llama_index invoke_agent spans (#824)

fix(crewai): use native per-call token usage when crewai provides it (#822)

fix(crewai): normalize tool description across crewai versions (#821)

fix(serviceevents): key the incident-snapshot dedup hash on operation + bounded throw-site origin (module/path.function) (#825)

fix(crewai): report per-call LLM token usage instead of cumulative total (#806)

fix(genai): serialize tool call arguments/results and blob bytes to match OTel util-genai (primitives kept native, bytes base64-encoded) (#817)

feat(genai): capture user input and agent output on invoke_agent spans (#815)

refactor(serviceevents): make the endpoint span processor framework-agnostic

fix(serviceevents): gate incident trace correlation on the SAMPLED flag and harden incident dedup/rate-limiting

fix(genai): serialize list-valued message content into typed parts so multimodal/reasoning content is no longer stringified to a Python repr in gen_ai.input/output.messages across langchain, llama_index, and crewai (#805)

feat: add OTel lite SDK for Lambda cold start optimization (#789)

Upstream Components

opentelemetry-api - 1.44.0

opentelemetry-sdk - 1.44.0

opentelemetry-exporter-otlp-proto-grpc - 1.44.0

opentelemetry-exporter-otlp-proto-http - 1.44.0

opentelemetry-propagator-b3 - 1.44.0

opentelemetry-propagator-jaeger - 1.44.0

opentelemetry-exporter-otlp-proto-common - 1.44.0

opentelemetry-sdk-extension-aws - 2.1.0

opentelemetry-propagator-aws-xray - 1.0.2

opentelemetry-distro - 0.65b0

opentelemetry-processor-baggage - 0.65b0

opentelemetry-propagator-ot-trace - 0.65b0

opentelemetry-instrumentation - 0.65b0

opentelemetry-instrumentation-aws-lambda - 0.65b0

opentelemetry-instrumentation-aio-pika - 0.65b0

opentelemetry-instrumentation-aiohttp-client - 0.65b0

opentelemetry-instrumentation-aiokafka - 0.65b0

opentelemetry-instrumentation-aiopg - 0.65b0

opentelemetry-instrumentation-asgi - 0.65b0

opentelemetry-instrumentation-asyncpg - 0.65b0

opentelemetry-instrumentation-boto3sqs - 0.65b0

opentelemetry-instrumentation-botocore - 0.65b0

opentelemetry-instrumentation-celery - 0.65b0

opentelemetry-instrumentation-confluent-kafka - 0.65b0

opentelemetry-instrumentation-dbapi - 0.65b0

opentelemetry-instrumentation-django - 0.65b0

opentelemetry-instrumentation-falcon - 0.65b0

opentelemetry-instrumentation-fastapi - 0.65b0

opentelemetry-instrumentation-flask - 0.65b0

opentelemetry-instrumentation-grpc - 0.65b0

opentelemetry-instrumentation-httpx - 0.65b0

... (truncated)

Changelog

Sourced from aws-opentelemetry-distro's changelog.

v0.19.0 - 2026-07-22

fix(mcp): fall back to HTTP headers for server-side trace context when params._meta is absent (#829)

fix(mcp-instrumentation): always inject W3C trace context into outbound HTTP request headers so MCP servers that read context only from HTTP (API Gateways, service meshes, non-Python MCP servers) can join the caller's trace, even with OTEL_MCP_SUPPRESS_HTTP_INSTRUMENTATION enabled (#827)

Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)

feat(genai): capture user input and agent output on llama_index invoke_agent spans (#824)

fix(crewai): use native per-call token usage when crewai provides it (#822)

fix(crewai): normalize tool description across crewai versions (#821)

fix(serviceevents): key the incident-snapshot dedup hash on operation + bounded throw-site origin (module/path.function) (#825)

fix(crewai): report per-call LLM token usage instead of cumulative total (#806)

fix(genai): serialize tool call arguments/results and blob bytes to match OTel util-genai (primitives kept native, bytes base64-encoded) (#817)

feat(genai): capture user input and agent output on invoke_agent spans (#815)

refactor(serviceevents): make the endpoint span processor framework-agnostic

fix(serviceevents): gate incident trace correlation on the SAMPLED flag and harden incident dedup/rate-limiting

fix(genai): serialize list-valued message content into typed parts so multimodal/reasoning content is no longer stringified to a Python repr in gen_ai.input/output.messages across langchain, llama_index, and crewai (#805)

feat: add OTel lite SDK for Lambda cold start optimization (#789)

Commits

821465a Pre-release: Update version to 0.19.0 (#834)
ed8782f Backport #797 to release/v0.19.x: add Python 3.14 Lambda runtime (#835)
4dcbf60 test(e2e): wire Python Lambda Lite SDK test into Application Signals E2E (#833)
315bddd fix(mcp): extract server-side trace context from HTTP headers when _meta is a...
76f8f2d Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)
ffa8c72 fix(mcp-instrumentation): inject W3C trace context into outbound HTTP headers...
d7e49b5 Revert "feat(genai): extract gen_ai.tool.call.arguments/result as LLO content...
f9bb4f5 feat(genai): capture user input and agent output on llama_index invoke_agent ...
2b43f03 Add best-effort public ECR image signing to release workflow (#828)
9356e72 Key incident-snapshot dedup hash on operation + throw-site origin (#825)
Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

[flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

@MeGaGiGaGon

@charliermarsh

@epage

@sharkdp

@ntBre

Install ruff 0.16.2

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"
Download ruff 0.16.2

File Platform Checksum

ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ruff-i686-pc-windows-msvc.zip x86 Windows checksum

ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum

ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

ruff-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum

ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

[flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

@MeGaGiGaGon

@charliermarsh

@epage

@sharkdp

@ntBre

0.16.1

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

... (truncated)

Commits

5b48a04 Bump 0.16.2 (#27555)
1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
17a00de [ty] Reuse primer commands in memory reports (#27553)
6ea296b [ty] Normalize type labels in structured docstrings (#26923)
2fc445f [ty] Diagnose invalid getattr calls (#27502)
22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
baea3d0 [ty] Expose strict analysis options in the playground (#27543)
c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
Additional commits viewable in compare view

Updates ty from 0.0.56 to 0.0.69

Release notes

Sourced from ty's releases.

0.0.69

Release Notes

Released on 2026-08-06.

Core type checking
isinstance narrowing for generic classes is now more gradual by default (#27308)

This new behavior is more similar to what other major type checkers do. For example:
def f(xs: object):
    if isinstance(xs, list):
        reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`
Note: you might consider enabling analysis.strict-generic-narrowing if you prefer the strictly correct behavior.
Contributors

@sharkdp

Install ty 0.0.69

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.ps1 | iex"
Download ty 0.0.69

File Platform Checksum

ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum

ty-x86_64-apple-darwin.tar.gz Intel macOS checksum

ty-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

ty-i686-pc-windows-msvc.zip x86 Windows checksum

ty-x86_64-pc-windows-msvc.zip x64 Windows checksum

ty-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

ty-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

ty-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux

…updates Bumps the all-python group with 8 updates in the /agent directory: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.43.40` | `1.43.67` | | [bedrock-agentcore](https://github.com/aws/bedrock-agentcore-sdk-python) | `1.18.1` | `1.21.0` | | [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) | `0.2.110` | `0.2.134` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.141.1` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.50.0` | `0.52.1` | | [aws-opentelemetry-distro](https://github.com/aws-observability/aws-otel-python-instrumentation) | `0.18.0` | `0.19.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.2` | | [ty](https://github.com/astral-sh/ty) | `0.0.56` | `0.0.69` | Updates `boto3` from 1.43.40 to 1.43.67 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.40...1.43.67) Updates `bedrock-agentcore` from 1.18.1 to 1.21.0 - [Release notes](https://github.com/aws/bedrock-agentcore-sdk-python/releases) - [Changelog](https://github.com/aws/bedrock-agentcore-sdk-python/blob/main/CHANGELOG.md) - [Commits](aws/bedrock-agentcore-sdk-python@v1.18.1...v1.21.0) Updates `claude-agent-sdk` from 0.2.110 to 0.2.134 - [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-python@v0.2.110...v0.2.134) Updates `fastapi` from 0.139.0 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.141.1) Updates `uvicorn` from 0.50.0 to 0.52.1 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.50.0...0.52.1) Updates `aws-opentelemetry-distro` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/aws-observability/aws-otel-python-instrumentation/releases) - [Changelog](https://github.com/aws-observability/aws-otel-python-instrumentation/blob/main/CHANGELOG.md) - [Commits](aws-observability/aws-otel-python-instrumentation@v0.18.0...v0.19.0) Updates `ruff` from 0.15.20 to 0.16.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.16.2) Updates `ty` from 0.0.56 to 0.0.69 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.56...0.0.69) --- updated-dependencies: - dependency-name: aws-opentelemetry-distro dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python - dependency-name: bedrock-agentcore dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python - dependency-name: boto3 dependency-version: 1.43.62 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python - dependency-name: claude-agent-sdk dependency-version: 0.2.128 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-python - dependency-name: ty dependency-version: 0.0.65 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-python - dependency-name: uvicorn dependency-version: 0.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 8, 2026

dependabot Bot requested review from a team as code owners August 8, 2026 06:15

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 8, 2026

dependabot Bot force-pushed the dependabot/uv/agent/all-python-762b7ad4aa branch from 79db04a to 0179d3f Compare August 15, 2026 06:14

Navigation Menu

Uh oh!

chore(deps): uv: bump the all-python group across 1 directory with 8 updates - #737

chore(deps): uv: bump the all-python group across 1 directory with 8 updates#737
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/agent/all-python-762b7ad4aa

dependabot Bot commented on behalf of github Aug 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
ruff-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

File	Platform	Checksum
ty-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ty-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ty-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ty-i686-pc-windows-msvc.zip	x86 Windows	checksum
ty-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ty-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ty-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ty-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bedrock AgentCore SDK v1.21.0

Installation

What's Changed

What's Changed

New Contributors

Bedrock AgentCore SDK v1.20.0

Installation

What's Changed

What's Changed

New Contributors

Bedrock AgentCore SDK v1.19.0

Installation

[1.21.0] - 2026-08-06

Other Changes

[1.20.0] - 2026-08-04

Added

Fixed

Other Changes

[1.19.0] - 2026-07-28

Fixed

Other Changes

v0.2.134

Internal/Other Changes

v0.2.133

Internal/Other Changes

v0.2.132

Internal/Other Changes

v0.2.131

Internal/Other Changes

0.2.134

Internal/Other Changes

0.2.133

Internal/Other Changes

0.2.132

Internal/Other Changes

0.2.131

Internal/Other Changes

0.2.130

Internal/Other Changes

0.2.129

Breaking Changes

Bug Fixes

Internal/Other Changes

0.2.128

Internal/Other Changes

0.141.1

Fixes

Docs

0.141.0

Features

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

0.140.10

Fixes

Internal

0.140.9

Fixes

Version 0.52.1

Fixed

Version 0.52.0

Added

Fixed

Version 0.51.0

What's Changed

Version 0.50.2

What's Changed

Version 0.50.1

What's Changed

New Contributors

0.52.1 (August 1, 2026)

Fixed

dependabot Bot commented on behalf of github Aug 8, 2026 •

edited

Loading