Skip to content

chore(deps): bump the project-python group with 6 updates - #126

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/project-python-9d7981d313
Closed

chore(deps): bump the project-python group with 6 updates#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/project-python-9d7981d313

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the project-python group with 6 updates:

Package From To
genai-prices 0.1.9 0.1.10
griffelib 2.3.0 2.3.2
openai 3.24.0 3.28.0
opentelemetry-api 1.45.0 1.45.1
pydantic 2.13.5 2.14.0
boto3 1.43.108 1.43.111

Updates genai-prices from 0.1.9 to 0.1.10

Commits
  • 0f22c26 Add OpenAI Decisions pricing (#768)
  • 2372393 Add provider models and mark catalog removals (#764)
  • 97af0df Consolidate daily provider price checks (#767)
  • c781b0c Require evidence before changing provider prices (#766)
  • 1879142 Run the triage pilot only on issue events (#763)
  • 6b932aa Run the triage pilot on the upstream pydantic-ai engine with GLM 5.3 Flash ...
  • ea81a74 Create daily price-update PRs and notify Slack (#758)
  • 065fe71 Add AWS Bedrock gpt-6.1-sol pricing (#743)
  • e5a85d2 Add Claude Haiku 5.5 pricing (#757)
  • bd966a9 Add decision-model prices for Cloudflare, Together, Perplexity, and OpenRoute...
  • Additional commits viewable in compare view

Updates griffelib from 2.3.0 to 2.3.2

Updates openai from 3.24.0 to 3.28.0

Release notes

Sourced from openai's releases.

v3.28.0

3.28.0 (2026-10-09)

Features

  • api: add agent environment suspension and expiration (#4046) (6aa25a9)

Chores

  • deps: bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (#4026) (8bfffd4)
  • deps: bump CodeQL init and analyze to 4.38.2 (#4025) (4f5e618)
  • deps: update PyJWT security constraint to 2.14.0 (#3991) (aaed2a7)

v3.27.0

3.27.0 (2026-10-09)

Features

v3.26.1

3.26.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#4038) (b9bc5c1)

v3.26.0

3.26.0 (2026-10-06)

Features

v3.25.0

3.25.0 (2026-10-06)

Features

  • agents: observe local tool failures (#4028) (95d9645)
  • agents: run local tools during streamed session creation (#4027) (919b623)
  • api: add agent turn items and usage source grouping (#4030) (bd74c4e)
  • lib: export type_to_response_format_param publicly (#2993) (becc1d2)
  • tools: support tool search (defer_loading=true) in typed function helpers (#4029) (eec627f)
Changelog

Sourced from openai's changelog.

3.28.0 (2026-10-09)

Features

  • api: add agent environment suspension and expiration (#4046) (6aa25a9)

Chores

  • deps: bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (#4026) (8bfffd4)
  • deps: bump CodeQL init and analyze to 4.38.2 (#4025) (4f5e618)
  • deps: update PyJWT security constraint to 2.14.0 (#3991) (aaed2a7)

3.27.0 (2026-10-09)

Features

3.26.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#4038) (b9bc5c1)

3.26.0 (2026-10-06)

Features

3.25.0 (2026-10-06)

Features

  • agents: observe local tool failures (#4028) (95d9645)
  • agents: run local tools during streamed session creation (#4027) (919b623)
  • api: add agent turn items and usage source grouping (#4030) (bd74c4e)
  • lib: export type_to_response_format_param publicly (#2993) (becc1d2)
  • tools: support tool search (defer_loading=true) in typed function helpers (#4029) (eec627f)
Commits
  • ef676db release: 3.28.0 (#4045)
  • 6aa25a9 feat(api): add agent environment suspension and expiration (#4046)
  • 1a90f1c chore(deps): bump the python-maintenance group across 1 directory with 14 upd...
  • 4f5e618 chore(deps): bump CodeQL init and analyze to 4.38.2 (#4025)
  • aaed2a7 chore(deps): update PyJWT security constraint to 2.14.0 (#3991)
  • 8bfffd4 chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 (#4026)
  • 4374b13 release: 3.27.0 (#4044)
  • c511a77 feat(api): add prewarmed hosted environments (#4043)
  • 8e1fd25 test: run release environment policy checks only in CI (#4037)
  • 9301e31 release: 3.26.1 (#4039)
  • Additional commits viewable in compare view

Updates opentelemetry-api from 1.45.0 to 1.45.1

Release notes

Sourced from opentelemetry-api's releases.

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Changelog

Sourced from opentelemetry-api's changelog.

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

  • opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)
  • opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)
  • opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)
  • opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)
Commits
  • 14971ce Prepare release 1.45.1/0.66b1 (#5752)
  • 44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
  • a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
  • d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
  • db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
  • See full diff in compare view

Updates pydantic from 2.13.5 to 2.14.0

Release notes

Sourced from pydantic's releases.

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

Full Changelog: pydantic/pydantic@v2.13.0...v2.14.0

v2.14.0b2 2026-09-09

What's Changed

This pre-release adds full support for Python 3.15 specific features, such as support for frozendict, making use of TypeForm and stabilizing the MISSING sentinel type.

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

v2.14.0b2 (2026-09-09)

GitHub release

... (truncated)

Commits

Updates boto3 from 1.43.108 to 1.43.111

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the project-python group with 6 updates
29b4076 
Bumps the project-python group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [genai-prices](https://github.com/pydantic/genai-prices) | `0.1.9` | `0.1.10` |
| griffelib | `2.3.0` | `2.3.2` |
| [openai](https://github.com/openai/openai-python) | `3.24.0` | `3.28.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.45.0` | `1.45.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.108` | `1.43.111` |


Updates `genai-prices` from 0.1.9 to 0.1.10
- [Release notes](https://github.com/pydantic/genai-prices/releases)
- [Changelog](https://github.com/pydantic/genai-prices/blob/main/RELEASE.md)
- [Commits](pydantic/genai-prices@v0.1.9...v0.1.10)

Updates `griffelib` from 2.3.0 to 2.3.2

Updates `openai` from 3.24.0 to 3.28.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.24.0...v3.28.0)

Updates `opentelemetry-api` from 1.45.0 to 1.45.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.45.0...v1.45.1)

Updates `pydantic` from 2.13.5 to 2.14.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.0)

Updates `boto3` from 1.43.108 to 1.43.111
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.108...1.43.111)

---
updated-dependencies:
- dependency-name: genai-prices
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: project-python
- dependency-name: griffelib
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: project-python
- dependency-name: openai
  dependency-version: 3.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: project-python
- dependency-name: opentelemetry-api
  dependency-version: 1.45.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: project-python
- dependency-name: pydantic
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: project-python
- dependency-name: boto3
  dependency-version: 1.43.111
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: project-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/python Python dependencies or runtime behavior dependencies Dependency update labels Oct 13, 2026
@github-actions github-actions Bot added area/docs Documentation or generated docs area/release Affected repository area security Security-sensitive report or hardening status/needs-triage Triage status type/pr Issue or PR type labels Oct 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 15, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/project-python-9d7981d313 branch October 15, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/docs Documentation or generated docs area/python Python dependencies or runtime behavior area/release Affected repository area dependencies Dependency update security Security-sensitive report or hardening status/needs-triage Triage status type/pr Issue or PR type

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants