Skip to content

chore(deps): bump the python group across 1 directory with 13 updates#33

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-8c942c6fa6
Open

chore(deps): bump the python group across 1 directory with 13 updates#33
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-8c942c6fa6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 11, 2026

Bumps the python group with 13 updates in the / directory:

Package From To
fastapi 0.134.0 0.135.3
uvicorn 0.41.0 0.44.0
python-multipart 0.0.22 0.0.26
tavily-python 0.7.22 0.7.23
e2b-code-interpreter 2.4.1 2.6.0
langchain-mcp-adapters 0.2.1 0.2.2
mcp 1.26.0 1.27.0
python-dotenv 1.2.1 1.2.2
prometheus-client 0.24.1 0.25.0
crawl4ai 0.8.0 0.8.6
browser-use 0.12.0 0.12.6
ruff 0.15.4 0.15.10
pytest 9.0.2 9.0.3

Updates fastapi from 0.134.0 to 0.135.3

Release notes

Sourced from fastapi's releases.

0.135.3

Features

Docs

  • ✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #14946 by @​bysiber.

Internal

0.135.2

Upgrades

  • ⬆️ Increase lower bound to pydantic >=2.9.0. and fix the test suite. PR #15139 by @​svlandeg.

Docs

Translations

... (truncated)

Commits

Updates uvicorn from 0.41.0 to 0.44.0

Release notes

Sourced from uvicorn's releases.

Version 0.44.0

What's Changed

Full Changelog: Kludex/uvicorn@0.43.0...0.44.0

Version 0.43.0

Changed

  • Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#2829)
  • Use native context parameter for create_task on Python 3.11+ (#2859)
  • Drop cast in ASGI types (#2875)

Full Changelog: Kludex/uvicorn@0.42.0...0.43.0

Version 0.42.0

Changed

  • Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

  • Escape brackets and backslash in httptools HEADER_RE regex (#2824)
  • Fix multiple issues in websockets sans-io implementation (#2825)

New Contributors

Full Changelog: Kludex/uvicorn@0.41.0...0.42.0

Changelog

Sourced from uvicorn's changelog.

0.44.0 (April 6, 2026)

Added

  • Implement websocket keepalive pings for websockets-sansio (#2888)

0.43.0 (April 3, 2026)

You can quit Uvicorn now. We heard you, @​pamelafox - all 47 of your Ctrl+C's (thanks for flagging it, and thanks to @​tiangolo for the fix 🙏). See the tweet.

Changed

  • Emit http.disconnect ASGI receive() event on server shutting down for streaming responses (#2829)
  • Use native context parameter for create_task on Python 3.11+ (#2859)
  • Drop cast in ASGI types (#2875)

0.42.0 (March 16, 2026)

Changed

  • Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies (#2845)

Fixed

  • Escape brackets and backslash in httptools HEADER_RE regex (#2824)
  • Fix multiple issues in websockets sans-io implementation (#2825)
Commits
  • edb54c4 Version 0.44.0 (#2890)
  • 029be08 Implement websocket keepalive pings for websockets-sansio (#2888)
  • 8d397c7 Version 0.43.0 (#2885)
  • 587042d 🐛 Emit http.disconnect ASGI receive() event on server shutting down for s...
  • c9a75fb chore(deps): bump the github-actions group with 3 updates (#2878)
  • 84fd578 chore(deps): bump pygments from 2.19.2 to 2.20.0 (#2877)
  • cd52d34 Use native context parameter for create_task on Python 3.11+ (#2859)
  • 5211880 Drop cast in ASGI types (#2875)
  • 1cb8e74 Add websocket 500 fallback header test (#2874)
  • 28efbb2 chore(deps-dev): bump cryptography from 46.0.5 to 46.0.6 (#2873)
  • Additional commits viewable in compare view

Updates python-multipart from 0.0.22 to 0.0.26

Release notes

Sourced from python-multipart's releases.

Version 0.0.26

What's Changed

Full Changelog: Kludex/python-multipart@0.0.25...0.0.26

Version 0.0.25

What's Changed

Full Changelog: Kludex/python-multipart@0.0.24...0.0.25

Version 0.0.24

What's Changed

Full Changelog: Kludex/python-multipart@0.0.23...0.0.24

Version 0.0.23

What's Changed

New Contributors

Full Changelog: Kludex/python-multipart@0.0.22...0.0.23

Changelog

Sourced from python-multipart's changelog.

0.0.26 (2026-04-10)

  • Skip preamble before the first multipart boundary more efficiently #262.
  • Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

  • Add MIME content type info to File #143.
  • Handle CTE values case-insensitively #258.
  • Remove custom FormParser classes #257.
  • Add UPLOAD_DELETE_TMP to FormParser config #254.
  • Emit field_end for trailing bare field names on finalize #230.
  • Handle multipart headers case-insensitively #252.
  • Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

  • Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

  • Remove unused trust_x_headers parameter and X-File-Name fallback #196.
  • Return processed length from QuerystringParser._internal_write #229.
  • Cleanup metadata dunders from __init__.py #227.
Commits

Updates tavily-python from 0.7.22 to 0.7.23

Commits

Updates e2b-code-interpreter from 2.4.1 to 2.6.0

Commits

Updates langchain-mcp-adapters from 0.2.1 to 0.2.2

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.2.2

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.1...langchain-mcp-adapters==0.2.2

Commits
  • fa2a083 release: 0.2.2 (#440)
  • bdfe8d9 fix: resolve ${VAR} env variable references in stdio config (#438)
  • df0bd8c build(deps): bump the uv group across 1 directory with 2 updates (#433)
  • 3f48e5a build(deps): bump actions/upload-artifact from 6 to 7 (#428)
  • db004a8 build(deps): bump actions/download-artifact from 7 to 8 (#427)
  • 141be26 build(deps): bump the uv group across 2 directories with 4 updates (#422)
  • ccdcfbe build(deps): bump the uv group across 2 directories with 6 updates (#415)
  • e6897f9 chore: pin ncipollo/release-action to v1.20.0 (#414)
  • f15d1b6 build(deps): bump actions/upload-artifact from 5 to 6 (#395)
  • c9a34fe build(deps): bump actions/download-artifact from 6 to 7 (#396)
  • Additional commits viewable in compare view

Updates mcp from 1.26.0 to 1.27.0

Release notes

Sourced from mcp's releases.

v1.27.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/python-sdk@v1.26.0...v1.27.0

Commits
  • 6524782 [v1.x] fix: handle ClosedResourceError when transport closes mid-request (#2334)
  • 2e9897e [v1.x] fix: handle non-UTF-8 bytes in stdio server stdin (#2303)
  • f8d98b6 Backport: Add missing TasksCallCapability to v1.x (#2137)
  • c68e254 docs: add server-side tool error handling documentation (#2129)
  • 1ef124e docs: add snippet verification for docs/ pages (#2115)
  • cfbbd7d docs: fix GitHub links to point to v1.x branch (#2102)
  • 1f9fb34 docs: fix stub pages and improve docs structure (#2101)
  • c86477c docs: comprehensive feature documentation for SEP-1730 Tier 1 (#2090)
  • a77462b docs: restructure README into docs/ pages (#2091)
  • b1adfcd Add VERSIONING.md, ROADMAP.md, and DEPENDENCY_POLICY.md (#2084)
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Commits

Updates prometheus-client from 0.24.1 to 0.25.0

Release notes

Sourced from prometheus-client's releases.

v0.25.0

What's Changed

Full Changelog: prometheus/client_python@v0.24.1...v0.25.0

Commits

Updates crawl4ai from 0.8.0 to 0.8.6

Release notes

Sourced from crawl4ai's releases.

Release v0.8.5

🎉 Crawl4AI v0.8.5 Released!

📦 Installation

PyPI:

pip install crawl4ai==0.8.5

Docker:

docker pull unclecode/crawl4ai:0.8.5
docker pull unclecode/crawl4ai:latest

Note: Docker images are being built and will be available shortly. Check the Docker Release workflow for build status.

📝 What's Changed

See CHANGELOG.md for details.

Changelog

Sourced from crawl4ai's changelog.

Changelog

All notable changes to Crawl4AI will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Commits
  • 4e4a996 fix: replace litellm with unclecode-litellm due to PyPI supply chain compromise
  • f4bda05 release: bump version to 0.8.6
  • 01c685c fix: pin litellm to safe fork (v1.81.13) due to PyPI supply chain compromise
  • 1a40ccf Merge pull request #1844 from hafezparast/fix/maysam-browser-none-guard-1842
  • 6eb2530 Merge pull request #1849 from hafezparast/fix/maysam-serialize-skip-non-confi...
  • fb24ee5 Merge pull request #1851 from hafezparast/fix/maysam-mcp-sse-asgi-1850
  • 3846b73 Merge branch 'develop' of https://github.com/unclecode/crawl4ai into main
  • 1a597cb Merge pull request #1836 from unclecode/release/v0.8.5
  • 219416e fix: MCP SSE endpoint crash on Starlette >=0.50 (#1850)
  • e603e4a fix: skip non-allowlisted types in serialization/deserialization (#1848)
  • Additional commits viewable in compare view

Updates browser-use from 0.12.0 to 0.12.6

Release notes

Sourced from browser-use's releases.

0.12.6

What's Changed

New Contributors

@dependabot
chore(deps): bump the python group across 1 directory with 13 updates
3e06294 
Bumps the python group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.134.0` | `0.135.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.44.0` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.26` |
| [tavily-python](https://github.com/tavily-ai/tavily-python) | `0.7.22` | `0.7.23` |
| [e2b-code-interpreter](https://github.com/e2b-dev/code-interpreter) | `2.4.1` | `2.6.0` |
| [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters) | `0.2.1` | `0.2.2` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.26.0` | `1.27.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.24.1` | `0.25.0` |
| [crawl4ai](https://github.com/unclecode/crawl4ai) | `0.8.0` | `0.8.6` |
| [browser-use](https://github.com/browser-use/browser-use) | `0.12.0` | `0.12.6` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.10` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` |



Updates `fastapi` from 0.134.0 to 0.135.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.134.0...0.135.3)

Updates `uvicorn` from 0.41.0 to 0.44.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.44.0)

Updates `python-multipart` from 0.0.22 to 0.0.26
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.22...0.0.26)

Updates `tavily-python` from 0.7.22 to 0.7.23
- [Commits](https://github.com/tavily-ai/tavily-python/commits)

Updates `e2b-code-interpreter` from 2.4.1 to 2.6.0
- [Release notes](https://github.com/e2b-dev/code-interpreter/releases)
- [Commits](https://github.com/e2b-dev/code-interpreter/compare/@e2b/code-interpreter-python@2.4.1...@e2b/code-interpreter-python@2.6.0)

Updates `langchain-mcp-adapters` from 0.2.1 to 0.2.2
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases)
- [Commits](langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.1...langchain-mcp-adapters==0.2.2)

Updates `mcp` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.27.0)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `prometheus-client` from 0.24.1 to 0.25.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.24.1...v0.25.0)

Updates `crawl4ai` from 0.8.0 to 0.8.6
- [Release notes](https://github.com/unclecode/crawl4ai/releases)
- [Changelog](https://github.com/unclecode/crawl4ai/blob/main/CHANGELOG.md)
- [Commits](unclecode/crawl4ai@v0.8.0...v0.8.6)

Updates `browser-use` from 0.12.0 to 0.12.6
- [Release notes](https://github.com/browser-use/browser-use/releases)
- [Commits](browser-use/browser-use@0.12.0...0.12.6)

Updates `ruff` from 0.15.4 to 0.15.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.4...0.15.10)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uvicorn
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: python-multipart
  dependency-version: 0.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: tavily-python
  dependency-version: 0.7.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: e2b-code-interpreter
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: langchain-mcp-adapters
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: mcp
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: prometheus-client
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: crawl4ai
  dependency-version: 0.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: browser-use
  dependency-version: 0.12.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.15.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants