Repository navigation
deps: bump the minor-and-patch group with 4 updates - #531
Merged
Merged
Conversation
Bumps the minor-and-patch group with 4 updates: [anyio](https://github.com/agronholm/anyio), [fsspec](https://github.com/fsspec/filesystem_spec), [pydantic-core](https://github.com/pydantic/pydantic) and [sse-starlette](https://github.com/sysid/sse-starlette). Updates `anyio` from 4.15.0 to 4.15.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.15.0...4.15.1) Updates `fsspec` from 2026.6.0 to 2026.7.0 - [Commits](fsspec/filesystem_spec@2026.6.0...2026.7.0) Updates `pydantic-core` from 2.46.5 to 2.48.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@core-v2.46.5...core-v2.48.0) Updates `sse-starlette` from 3.4.10 to 3.4.11 - [Release notes](https://github.com/sysid/sse-starlette/releases) - [Commits](sysid/sse-starlette@v3.4.10...v3.4.11) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fsspec dependency-version: 2026.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pydantic-core dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sse-starlette dependency-version: 3.4.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
Dependabot updates pyproject.toml and uv.lock but not the derived requirements/*.txt (generated by scripts/generate_pip_constraints.py), which is why `uv lock --check` followed by the constraints-agreement check fails Lint on this PR. Regenerated with uv 0.11.3 and Python 3.12, matching CI's pins exactly; confirmed the resulting pins (anyio 4.15.0, fsspec 2026.6.0, etc.) already match this branch's own uv.lock, so this is a sync, not a version change. Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01LSTGMnuSuUXWs7ZBofW1AW
…estly
Dependabot's commit for this PR only hand-patched requirements/*.txt
(anyio, fsspec, pydantic-core, sse-starlette), leaving pyproject.toml and
uv.lock untouched — the source of truth this repo's generator script
derives those files from. My previous commit on this branch regenerated
requirements/*.txt straight from uv.lock without first bringing uv.lock
up to date, which silently reverted Dependabot's anyio and sse-starlette
bumps back to their old versions. This commit supersedes it.
`uv lock --upgrade-package` for all four names resolved anyio 4.15.0 ->
4.15.1 and sse-starlette 3.4.10 -> 3.4.11 as proposed. fsspec stayed at
2026.6.0 (capped by huggingface-hub's declared range) and pydantic-core
stayed at 2.46.5 (pinned exactly by the installed pydantic==2.13.5, which
this PR does not bump) — both are real upstream constraints, not staleness;
forcing either would need bumping their parent package too, out of scope
for a routine dependency-PR pass. requirements/*.txt regenerated from the
corrected uv.lock.
Verified: pytest tests_py/{core,shared,hooks} -> 4381 passed, 175 skipped.
Co-Authored-By: Claude Sonnet 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01LSTGMnuSuUXWs7ZBofW1AW
Owner
|
ZETETIC-REVIEW: APPROVE Dependabot dependency bump: anyio 4.15.0 to 4.15.1 and sse-starlette 3.4.10 to 3.4.11 (the two of four proposed updates actually resolvable). fsspec and pydantic-core stay at their current pins: real upstream constraints (huggingface-hub's declared range for fsspec; pydantic==2.13.5's own exact pydantic-core requirement), confirmed by letting uv's resolver pick freely for all four names and watching only two move. Dependabot's own commit had hand-patched requirements/*.txt directly without touching uv.lock, which is why Lint failed (uv.lock --check / constraints-agreement); fixed at the source with Evidence: pytest tests_py/{core,shared,hooks} -> 4381 passed, 175 skipped, on the corrected lock. CI: 24 checks pass, 4 skipping, none failing. |
cdeust
added a commit
that referenced
this pull request
Sep 15, 2026
#574) #531's title announced four updates, but its diff changes only anyio and sse-starlette; uv.lock still pins fsspec 2026.6.0 and pydantic-core 2.46.5. The 4.22.0 entry is corrected and says so. Claude-Session: https://claude.ai/code/session_016CwRqZLmNxZ6LatpmKrKvH Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 4 updates: anyio, fsspec, pydantic-core and sse-starlette.
Updates
anyiofrom 4.15.0 to 4.15.1Release notes
Sourced from anyio's releases.
Commits
ffcd154Bumped up the version0ecf5edAdded a workaround for third party code accessing unimported submodules (#1309)Updates
fsspecfrom 2026.6.0 to 2026.7.0Commits
9e22b60Changelog (#2089)33e6da3Shut down background cache workers on file close (#2069)4adecd3tar: make members with duplicate slashes reachable via ls/find/glob (#1947) (...59f98d7Forward ls kwargs from cached filesystems (#2068)5e266e0Single-pass MemoryFileSystem.find() to avoid quadratic listing (#2055)19a042breplay DEP: de-duplicate and sort optional dependencies (#2021) (#2031)fec09b0Propagate storage_options to all backends resolved by GenericFileSystem (#185...dee64dbfixes for deprecation: https://docs.pytest.org/en/stable/deprecations.html#cl...7a9b98bPermit composite URI protocol schemes ininfer_storage_options(#2085)901282cFix incorrect glob docstring for '[!]' (empty negated class) (#2084)Updates
pydantic-corefrom 2.46.5 to 2.48.0Commits
5922459Prepare release v2.14.0b1 (#13597)111c942Refactor model namespace inspection (#13596)b348cf0Add initial support for Python 3.15 (#13587)4792336Bump PyO3 to 0.29.2 (#13572)57d0ad8Raise explicitTypeErroron invalidindex_keyserialization wrap handler ...53b39c3Add anamed-tuplecore schema (#13505)98a08d3Revert movingpydantic-coretests (#13589)5f49d85AddAllowInfNantype to the field metadata gathering (#13586)2e5f0e2TryFormat.VALUEbeforeFORWARDREFwhen evaluating annotations in `ModelM...de3175cMigratepydantic-coretests to main tests directory (#13582)Updates
sse-starlettefrom 3.4.10 to 3.4.11Release notes
Sourced from sse-starlette's releases.
Commits
6754ef3Bump version to 3.4.1125bcc15fix(examples): make broadcast stream terminal after cleanupfaa2c1cMerge pull request #209 from varadfromeast/fix/broadcasting-backpressurecb2205efix(examples): close send-timeout leak and harden broadcasting testsb2362d5fix(examples): handle slow broadcasting clientsdd0cdb2fix: uv.lockDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions