Skip to content

Bump the python-minor-and-patch group across 1 directory with 24 updates - #41

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-0136181d5d
Closed

Bump the python-minor-and-patch group across 1 directory with 24 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-0136181d5d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-minor-and-patch group with 24 updates in the / directory:

Package From To
python-dotenv 1.2.2 1.2.4
ruamel-yaml 0.18.17 0.19.1
requests 2.33.0 2.34.2
pydantic 2.13.4 2.13.5
prompt-toolkit 3.0.52 3.0.53
croniter 6.0.0 6.2.4
uvicorn[standard] 0.41.0 0.54.0
edge-tts 7.2.7 7.2.8
hindsight-client 0.6.1 0.10.2
debugpy 1.8.20 1.8.22
pytest 9.0.2 9.1.1
pytest-asyncio 1.3.0 1.4.0
starlette 1.0.1 1.7.0
ty 0.0.21 0.0.84
ruff 0.15.10 0.16.10
sounddevice 0.5.5 0.5.6
numpy 2.4.3 2.4.6
honcho-ai 2.0.1 2.5.1
agent-client-protocol 0.9.0 0.12.1
boto3 1.42.89 1.43.107
azure-identity 1.25.3 1.26.0
google-api-python-client 2.194.0 2.201.0
google-auth-oauthlib 1.3.1 1.5.0
google-auth-httplib2 0.3.1 0.4.4

Updates python-dotenv from 1.2.2 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • Additional commits viewable in compare view

Updates ruamel-yaml from 0.18.17 to 0.19.1

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates prompt-toolkit from 3.0.52 to 3.0.53

Release notes

Sourced from prompt-toolkit's releases.

3.0.53

Fixes:

  • Fix get_word_before_cursor behavior.
  • Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).
  • Treat OSError on add_reader as EOFError (macOS kqueue).
  • Handle surrogate pairs in FileHistory.store_string.
  • Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.
  • Handle ascii decode errors in terminal type decoding of telnet protocol. (thanks: @​SunandM)
  • Update return types of dialog shortcuts to include None when cancelled.
  • Set missing minimal requirement on wcwidth.

New features:

  • Lazy load __version__.
  • Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Changelog

Sourced from prompt-toolkit's changelog.

3.0.53: 2026-07-26

Fixes:

  • Fix get_word_before_cursor behavior.
  • Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).
  • Treat OSError on add_reader as EOFError (macOS kqueue).
  • Handle surrogate pairs in FileHistory.store_string.
  • Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.
  • Handle ascii decode errors in terminal type decoding of telnet protocol.
  • Update return types of dialog shortcuts to include None when cancelled.
  • Set missing minimal requirement on wcwidth.

New features:

  • Lazy load __version__.
  • Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Commits
  • 583b341 Release 3.0.53
  • b6fc80c Fix some incorrect rst markups (#2074)
  • f4a5a80 Update return types of dialog shortcuts to include None when cancelled
  • c6c8930 Handle ascii decode errors in terminal type decoding of telnet protocol. (#2080)
  • 25ff042 Typing fix in breakpointhook.
  • 236bfb7 Allow to specify show_numbers in ChoiceInput (#2059)
  • 8f3212d Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter (#2070)
  • 42f2251 Fix: handle surrogate pairs in FileHistory.store_string (#2062)
  • 9146317 Fix typo (#2064)
  • 1041a42 fix(vt100): treat OSError on add_reader as EOFError (macOS kqueue) (#2065)
  • Additional commits viewable in compare view

Updates croniter from 6.0.0 to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

  • Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @​alhudz)

Packaging

  • Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

6.2.3

No release notes provided.

6.2.2

No release notes provided.

6.2.1

No release notes provided.

6.2.0

No release notes provided.

6.1.0

No release notes provided.

6.1.0rc3

No release notes provided.

6.1.0rc2

No release notes provided.

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]

Packaging

  • Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]

Bugfixes


- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]

Packaging




    

  • Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
    • 

  • Bump pinned build and CI dependencies via dependabot.
    • 

  • Upgrade locked development and build dependencies (uv lock --upgrade).
    • 



6.2.2 (2026-03-15)


Packaging


- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = "MIT"``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]

6.2.1 (2026-03-15)


Bugfixes


- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

</tr></table> 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7"><code>5853499</code></a> Prepare for release 6.2.4 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/241">#241</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5"><code>fd13d2e</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/240">#240</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85"><code>44e3090</code></a> wrap sunday in expand_from_start_time day-of-week low bound (<a href="https://redirect.github.com/pallets-eco/croniter/issues/239">#239</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3"><code>5cd2e46</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/238">#238</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5"><code>f1eeddd</code></a> Prepare for 6.2.4 development (<a href="https://redirect.github.com/pallets-eco/croniter/issues/237">#237</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f"><code>22b59e0</code></a> Prepare for release 6.2.3 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/236">#236</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e"><code>ab27767</code></a> reject zero step in equal and reversed cron ranges (<a href="https://redirect.github.com/pallets-eco/croniter/issues/232">#232</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96"><code>f329964</code></a> fix expand_from_start_time month low bound off-by-one (<a href="https://redirect.github.com/pallets-eco/croniter/issues/235">#235</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f"><code>9810279</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/233">#233</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7"><code>d051aaf</code></a> Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (<a href="https://redirect.github.com/pallets-eco/croniter/issues/234">#234</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pallets-eco/croniter/compare/6.0.0...6.2.4">compare view</a></li>
</ul>
</details>

&lt;br /&gt;</code></pre>

Updates `uvicorn[standard]` from 0.41.0 to 0.54.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn[standard]'s releases</a>.</em></p>
<blockquote>
<h2>Version 0.54.0</h2>
<h2>📨 Send metadata after the response body</h2>
<p><code>uvicorn</code> 0.54.0 adds response trailers and <code>103 Early Hints</code> to its experimental HTTP/2 implementation through <code>zttp</code>.</p>
<pre lang="console"><code>uv add uvicorn==0.54.0 &quot;zttp&gt;=0.0.34&quot;
</code></pre>
<ul>
<li><strong>Send HTTP/2 response trailers</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3146">#3146</a>). The ASGI <code>http.response.trailers</code> extension lets applications send metadata, such as checksums, after the response body. Clients must send <code>TE: trailers</code> to receive them. Multiple trailer messages are combined before completing the response.</li>
<li><strong>HTTP/2 remains experimental and opt-in.</strong> Enable it with <code>--http zttp --http2</code>. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.</li>
</ul>
<h2>💡 Hint at resources before the final response</h2>
<ul>
<li><strong>Send <code>103 Early Hints</code> over HTTP/2</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3137">#3137</a>). Applications can use the ASGI <code>http.response.early_hint</code> extension to send resource hints before the final response. Each supplied link becomes a separate <code>Link</code> header.</li>
</ul>
<p><strong>Full changelog:</strong> <a href="https://github.com/Kludex/uvicorn/compare/0.53.0...0.54.0">0.53.0...0.54.0</a></p>
<h2>Version 0.53.0</h2>
<h2>🌐 Opt-in HTTP/2 support</h2>
<p><code>uvicorn</code> 0.53.0 adds experimental HTTP/2 through <code>zttp</code>, alongside a new <code>zuvloop</code> integration and connection-handling improvements.</p>
<pre lang="console"><code>uv add uvicorn==0.53.0
</code></pre>
<ul>
<li><strong>Serve HTTP/1.1 and HTTP/2 with <code>zttp</code></strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/2982">#2982</a>, <a href="https://redirect.github.com/Kludex/uvicorn/pull/3101">#3101</a>). Install <code>zttp</code>, then enable HTTP/2 with <code>--http zttp --http2</code>. Uvicorn negotiates HTTP/2 over TLS with ALPN and supports cleartext prior knowledge.</li>
<li><strong>HTTP/2 remains experimental.</strong> Upgrade-based h2c and WebSockets over HTTP/2 are not supported.</li>
</ul>
<h2>⚙️ More event loop choice</h2>
<ul>
<li><strong>Run Uvicorn with <code>zuvloop</code></strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3104">#3104</a>). Install <code>zuvloop</code> separately and select it explicitly with <code>--loop zuvloop</code> on CPython 3.14 or newer.</li>
</ul>
<h2>🛡️ More reliable connections and proxies</h2>
<ul>
<li><strong>Honor <code>Connection: close</code> token lists</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3103">#3103</a>). Uvicorn now parses comma-separated tokens case-insensitively across HTTP implementations.</li>
<li><strong>Trust IPv6 loopback proxies by default</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3119">#3119</a>). The default <code>FORWARDED_ALLOW_IPS</code> value now includes <code>::1</code>.</li>
<li><strong>Keep upgraded WebSockets alive</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3107">#3107</a>). Uvicorn cancels the HTTP keep-alive timer when the connection becomes a WebSocket.</li>
</ul>
<p><strong>Full changelog:</strong> <a href="https://github.com/Kludex/uvicorn/compare/0.52.4...0.53.0">0.52.4...0.53.0</a></p>
<h2>Version 0.52.4</h2>
<h3>Fixed</h3>
<ul>
<li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4">https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4</a></p>
<h2>Version 0.52.3</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn[standard]'s changelog</a>.</em></p>
<blockquote>
<h2>0.54.0 (September 24, 2026)</h2>
<p>HTTP/2 support remains experimental. Install <code>zttp&gt;=0.0.34</code> and enable it with <code>--http zttp --http2</code>.</p>
<h3>Added</h3>
<ul>
<li>Add HTTP/2 response trailers through the ASGI <code>http.response.trailers</code> extension. Clients must send <code>TE: trailers</code> to receive them (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3146">#3146</a>)</li>
<li>Add HTTP/2 <code>103 Early Hints</code> through the ASGI <code>http.response.early_hint</code> extension (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3137">#3137</a>)</li>
</ul>
<h2>0.53.0 (September 14, 2026)</h2>
<p>This release adds experimental HTTP/2 support through <code>zttp</code>. Enable it with <code>--http zttp --http2</code>.
Upgrade-based h2c and WebSockets over HTTP/2 are not supported.</p>
<h3>Added</h3>
<ul>
<li>Add experimental HTTP/2 support through <code>zttp</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/2982">#2982</a>, <a href="https://redirect.github.com/Kludex/uvicorn/pull/3101">#3101</a>)</li>
<li>Add support for <code>zuvloop</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3104">#3104</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Handle comma-separated, case-insensitive <code>Connection: close</code> tokens across HTTP implementations (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3103">#3103</a>)</li>
<li>Trust IPv6 loopback in the default <code>FORWARDED_ALLOW_IPS</code> value (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3119">#3119</a>)</li>
<li>Cancel the HTTP keep-alive timer when upgrading to WebSocket (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3107">#3107</a>)</li>
</ul>
<h2>0.52.4 (August 18, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Remove duplicate <code>Date</code> headers from accepted WebSocket handshakes with <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3078">#3078</a>)</li>
</ul>
<h2>0.52.3 (August 13, 2026)</h2>
<h3>Changed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3067">#3067</a>)</li>
</ul>
<h2>0.52.2 (August 13, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Update <code>zttp</code> to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3063">#3063</a>)</li>
</ul>
<h2>0.52.1 (August 1, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Complete the closing handshake on server-initiated WebSocket closes in the <code>websockets-sansio</code> and <code>wsproto</code> implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li>
<li>Add missing write flow control to the <code>websockets-sansio</code> implementation, preventing data truncation on server-initiated closes with large in-flight payloads (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li>
<li>Handle connection loss while a WebSocket write is waiting on backpressure (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Kludex/uvicorn/commit/3eb9a9ab9af69005c687728097461c1fd2a95db9"><code>3eb9a9a</code></a> Version 0.54.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3161">#3161</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/cd7ef6d31c1a09a3653f326cda7813d35ffd6082"><code>cd7ef6d</code></a> Remove races from supervisor tests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3134">#3134</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/a56c7cce64aaa37e5864f882a5cbce8aa1dac47a"><code>a56c7cc</code></a> Support HTTP/2 response trailers (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3146">#3146</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/9bd4404cca9506e9ba4f46b69ef72d011ceef2bd"><code>9bd4404</code></a> chore(deps): bump anyio from 4.13.0 to 4.14.2 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3145">#3145</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/21f39ef7988366f77fb3172569bd235ac5de34cc"><code>21f39ef</code></a> Add HTTP/2 Early Hints support (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3137">#3137</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/421708fbc1a704dac8bd4053a7c4c0bf4d3704ee"><code>421708f</code></a> Version 0.53.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3136">#3136</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/f1a1bff7be819f5724d6fdf86dfd448a97c62e23"><code>f1a1bff</code></a> Unset the keep-alive timer when upgrading to WebSocket (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3107">#3107</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/63971ed952090438896e6eba7d07178b616d97cc"><code>63971ed</code></a> Document HTTP/2 support (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3130">#3130</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/7d1a0055aee5e281accc646b559ddd147486bf8a"><code>7d1a005</code></a> Remove race from multiprocess health check test (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3128">#3128</a>)</li>
<li><a href="https://github.com/Kludex/uvicorn/commit/5ac6265a01ff6dcadb0e4250152c3deaf8a168a9"><code>5ac6265</code></a> Add ::1 to FORWARDED_ALLOW_IPS (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3119">#3119</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.41.0...0.54.0">compare view</a></li>
</ul>
</details>
<br />

Updates `edge-tts` from 7.2.7 to 7.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/rany2/edge-tts/releases">edge-tts's releases</a>.</em></p>
<blockquote>
<h2>7.2.8</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: replace metadata-based offset compensation with CBR byte-count math by <a href="https://github.com/hcgiub001"><code>@​hcgiub001</code></a> in <a href="https://redirect.github.com/rany2/edge-tts/pull/468">rany2/edge-tts#468</a></li>
<li>perf: cache SSL context at module level to avoid per-call overhead in <a href="https://redirect.github.com/rany2/edge-tts/pull/469">rany2/edge-tts#469</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hcgiub001"><code>@​hcgiub001</code></a> made their first contribution in <a href="https://redirect.github.com/rany2/edge-tts/pull/468">rany2/edge-tts#468</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/rany2/edge-tts/compare/7.2.7...7.2.8">https://github.com/rany2/edge-tts/compare/7.2.7...7.2.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/rany2/edge-tts/commit/4bdb8e4c6ea62f151a45a3fceb4cf6ff696bb89f"><code>4bdb8e4</code></a> Bump edge_tts version to 7.2.8</li>
<li><a href="https://github.com/rany2/edge-tts/commit/b1055c8458e49ebeb1bbed2af5ab09bcd2fb9a9b"><code>b1055c8</code></a> perf: cache SSL context at module level to avoid per-call overhead (<a href="https://redirect.github.com/rany2/edge-tts/issues/469">#469</a>)</li>
<li><a href="https://github.com/rany2/edge-tts/commit/9965046b981dbe9419972be2d65a53b93262086f"><code>9965046</code></a> fix: replace metadata-based offset compensation with CBR byte-count math (<a href="https://redirect.github.com/rany2/edge-tts/issues/468">#468</a>)</li>
<li>See full diff in <a href="https://github.com/rany2/edge-tts/compare/7.2.7...7.2.8">compare view</a></li>
</ul>
</details>
<br />

Updates `hindsight-client` from 0.6.1 to 0.10.2

Updates `debugpy` from 1.8.20 to 1.8.22
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/microsoft/debugpy/releases">debugpy's releases</a>.</em></p>
<blockquote>
<h2>debugpy v1.8.22</h2>
<h2>Fixes</h2>
<ul>
<li>Fix invalid type annotation in test_pydev_monkey comprehension by <a href="https://github.com/pdepetro"><code>@​pdepetro</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2033">microsoft/debugpy#2033</a></li>
<li>Fix PEP 768 code injection SyntaxError when temp path contains backslashes by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2038">microsoft/debugpy#2038</a></li>
<li>Fix race between adapter connection publication and session attachment by <a href="https://github.com/aperez"><code>@​aperez</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2049">microsoft/debugpy#2049</a></li>
<li>Fix debugger hang when expanding objects with blocking property getters (<a href="https://redirect.github.com/microsoft/debugpy/issues/2053">#2053</a>) by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2055">microsoft/debugpy#2055</a></li>
<li>Fix duplicate stopped event when two threads hit a breakpoint at once by <a href="https://github.com/aperez"><code>@​aperez</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2056">microsoft/debugpy#2056</a></li>
<li>Avoid exceptions in environment diagnostics by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2059">microsoft/debugpy#2059</a></li>
<li>Fix thread identity when the first traced call is another thread's is_alive() by <a href="https://github.com/aperez"><code>@​aperez</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2061">microsoft/debugpy#2061</a></li>
<li>Respect isolated mode when patching sys.path by <a href="https://github.com/karandhaodiyal28-hash"><code>@​karandhaodiyal28-hash</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2050">microsoft/debugpy#2050</a></li>
</ul>
<h2>Enhancements</h2>
<ul>
<li>Add trigger_exception_handler() for post-mortem debugging of caught exceptions by <a href="https://github.com/nshepperd"><code>@​nshepperd</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/1996">microsoft/debugpy#1996</a></li>
<li>Add lldb attach-to-PID option for debugpy on Linux by <a href="https://github.com/pdepetro"><code>@​pdepetro</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2052">microsoft/debugpy#2052</a></li>
<li>Populate hitBreakpointIds in the DAP stopped event by <a href="https://github.com/aperez"><code>@​aperez</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2060">microsoft/debugpy#2060</a></li>
<li>Return the endpoint from listen() with the in-process adapter by <a href="https://github.com/karandhaodiyal28-hash"><code>@​karandhaodiyal28-hash</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2051">microsoft/debugpy#2051</a></li>
</ul>
<h2>Infrastructure work</h2>
<ul>
<li>Add Dependabot configuration for pip and GitHub Actions by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2041">microsoft/debugpy#2041</a></li>
<li>Update vendored pydevd 3.4.1 -&gt; 3.5.0 (maintenance refresh) by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2044">microsoft/debugpy#2044</a></li>
<li>Pin secure test dependency floors and drop EOL Python 3.9/3.8 by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2045">microsoft/debugpy#2045</a></li>
<li>Add more typing to debugpy and switch to 'standard' type checking mode by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/1637">microsoft/debugpy#1637</a></li>
<li>Add debugpy release agent by <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2062">microsoft/debugpy#2062</a></li>
<li>Pin GitHub Actions to full-length commit SHAs by <a href="https://github.com/danfiedler-msft"><code>@​danfiedler-msft</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2063">microsoft/debugpy#2063</a></li>
<li>Add python 3.15 to tests by <a href="https://github.com/finnagin"><code>@​finnagin</code></a> in <a href="https://redirect.github.com/microsoft/debugpy/pull/2069">microsoft/debugpy#2069</a></li>
</ul>
<p>Thanks to <a href="https://github.com/pdepetro"><code>@​pdepetro</code></a>, <a href="https://github.com/rchiodo"><code>@​rchiodo</code></a>, <a href="https://github.com/nshepperd"><code>@​nshepperd</code></a>, <a href="https://github.com/aperez"><code>@​aperez</code></a>, <a href="https://github.com/karandhaodiyal28-hash"><code>@​karandhaodiyal28-hash</code></a>, <a href="https://github.com/danfiedler-msft"><code>@​danfiedler-msft</code></a>, and <a href="https://github.com/finnagin"><code>@​finnagin</code></a> for the commits.</p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/microsoft/debugpy/compare/v1.8.21...v1.8.22">https://github.com/microsoft/debugpy/compare/v1.8.21...v1.8.22</a></p>
<h2>debugpy v1.8.21</h2>
<p>Fixes for:</p>
<ul>
<li>Return evaluate result in DAP response body instead of writing to stdout: <a href="https://redirect.github.com/microsoft/debugpy/pull/2027">#2027</a></li>
<li>Prevent invalid <code>scopes</code> request from crashing debug session: <a href="https://redirect.github.com/microsoft/debugpy/pull/2026">#2026</a></li>
<li>Skip uninitialized <code>__slots__</code> in variable resolver: <a href="https://redirect.github.com/microsoft/debugpy/pull/2024">#2024</a></li>
<li>Handle <code>-c</code> arguments that are <code>bytes</code> instead of <code>str</code>: <a href="https://redirect.github.com/microsoft/debugpy/pull/2021">#2021</a></li>
<li>Fix evaluation of variables from chained exception frames: <a href="https://redirect.github.com/microsoft/debugpy/pull/2018">#2018</a></li>
<li><code>ContinueRequest</code> with a specific <code>threadId</code> no longer resumes all threads (in-process adapter): <a href="https://redirect.github.com/microsoft/debugpy/pull/2012">#2012</a></li>
<li>Avoid strong reference to exceptions during unwind: <a href="https://redirect.github.com/microsoft/debugpy/pull/2008">#2008</a></li>
<li>Show error message on evaluate failures in the hover context: <a href="https://redirect.github.com/microsoft/debugpy/pull/2006">#2006</a></li>
<li>Display <code>dlerror</code> output when <code>dlopen</code> fails: <a href="https://redirect.github.com/microsoft/debugpy/pull/2000">#2000</a></li>
<li>Replace removed <code>pkgutil.get_loader</code> with <code>importlib.util.find_spec</code> in <code>get_fullname</code>: <a href="https://redirect.github.com/microsoft/debugpy/pull/1998">#1998</a></li>
</ul>
<p>Enhancements:</p>
<ul>
<li>Add option to ignore all system exit codes: <a href="https://redirect.github.com/microsoft/debugpy/pull/2017">#2017</a></li>
<li>Pull changes from pydevd up to March 2026: <a href="https://redirect.github.com/microsoft/debugpy/pull/2010">#2010</a></li>
</ul>
<p>Infrastructure work:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/microsoft/debugpy/commit/e2208059db34fa1055c809ff0b303ae1cf1868d7"><code>e220805</code></a> Add python 3.15 to tests (<a href="https://redirect.github.com/microsoft/debugpy/issues/2069">#2069</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/e5743d3a00c6dee7d8140275c7df7e719ebb132f"><code>e5743d3</code></a> Pin GitHub Actions to full-length commit SHAs (<a href="https://redirect.github.com/microsoft/debugpy/issues/2063">#2063</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/7959635126d23680e88e266b42ba7c1b91cf4b16"><code>7959635</code></a> Respect isolated mode when patching sys.path (<a href="https://redirect.github.com/microsoft/debugpy/issues/2050">#2050</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/6dd019a6fb8e45bf84ce9c648234ebc703f35dd5"><code>6dd019a</code></a> Add debugpy release agent (<a href="https://redirect.github.com/microsoft/debugpy/issues/2062">#2062</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/d98001c459bf01df0e285ecb5515dad483f776f8"><code>d98001c</code></a> Fix thread identity when the first traced call is another thread's is_alive()...</li>
<li><a href="https://github.com/microsoft/debugpy/commit/7ca4578da46cf172a00994f4f327f733695bb955"><code>7ca4578</code></a> Return the endpoint from listen() with the in-process adapter (<a href="https://redirect.github.com/microsoft/debugpy/issues/2051">#2051</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/9832f3f99be7c5c12587ed0df122ce51b3fb735c"><code>9832f3f</code></a> Add more typing to debugpy and switch to 'standard' type checking mode (<a href="https://redirect.github.com/microsoft/debugpy/issues/1637">#1637</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/2f73444688e6d617c2fafb629e42c92133361e62"><code>2f73444</code></a> Populate hitBreakpointIds in the DAP stopped event (<a href="https://redirect.github.com/microsoft/debugpy/issues/2060">#2060</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/7d3f86119e5e9fc435983839ea732a58e86ceaeb"><code>7d3f861</code></a> Avoid exceptions in environment diagnostics (<a href="https://redirect.github.com/microsoft/debugpy/issues/2059">#2059</a>)</li>
<li><a href="https://github.com/microsoft/debugpy/commit/f77d44824c13ca56f907155a940a5bafb1467d87"><code>f77d448</code></a> Fix duplicate stopped event when two threads hit a breakpoint at once (<a href="https://redirect.github.com/microsoft/debugpy/issues/2056">#2056</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/microsoft/debugpy/compare/v1.8.20...v1.8.22">compare view</a></li>
</ul>
</details>
<br />

Updates `pytest` from 9.0.2 to 9.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/releases">pytest's releases</a>.</em></p>
<blockquote>
<h2>9.1.1</h2>
<h1>pytest 9.1.1 (2026-06-19)</h1>
<h2>Bug fixes</h2>
<ul>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14220">#14220</a>: Fixed a logic bug in <code>pytest.RaisesGroup</code> which would might cause it to display incorrect &quot;It matches <!-- raw HTML omitted -->FooError()<!-- raw HTML omitted --> which was paired with <!-- raw HTML omitted -->BarError<!-- raw HTML omitted -->&quot; messages.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14591">#14591</a>: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect <!-- raw HTML omitted --><a href="https://github.com/pytest"><code>@​pytest</code></a>.mark.parametrize<!-- raw HTML omitted --> to fail with &quot;duplicate parametrization of '&lt;fixture name&gt;'&quot;.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14606">#14606</a>: Fixed <code>list-item</code> typing errors from mypy in <code>@pytest.mark.parametrize &lt;pytest.mark.parametrize ref&gt;</code> <code>argvalues</code> parameter.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14608">#14608</a>: Fixed a regression in pytest 9.1.0 where <code>conftest.py</code> files located in <code>&lt;invocation dir&gt;/test*</code> were no longer loaded as initial conftests when invoked without arguments.
This could cause certain hooks (like <code>pytest_addoption</code>) in these files to not fire.</li>
</ul>
<h2>9.1.0</h2>
<h1>pytest 9.1.0 (2026-06-13)</h1>
<h2>Removals and backward incompatible breaking changes</h2>
<ul>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/14533">#14533</a>: When using <code>--doctest-modules</code>, autouse fixtures with <code>module</code>, <code>package</code> or <code>session</code> scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.</p>
<p>If this is undesirable, move the fixture definition to a <code>conftest.py</code> file if possible.</p>
<p>Technical explanation for those interested:
When using <!-- raw HTML omitted -->--doctest-modules<!-- raw HTML omitted -->, pytest possibly collects Python modules twice, once as <code>pytest.Module</code> and once as a <code>DoctestModule</code> (depending on the configuration).
Due to improvements in pytest's fixture implementation, if e.g. the <code>DoctestModule</code> collects a fixture, it is now visible to it only, and not to the <code>Module</code>.
This means that both need to register the fixtures independently.</p>
</li>
</ul>
<h2>Deprecations (removal in next major release)</h2>
<ul>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/10819">#10819</a>: Added a deprecation warning for class-scoped fixtures defined as instance methods (without <code>@classmethod</code>). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use <code>@classmethod</code> decorator instead -- by <code>yastcher</code>.</p>
<p>See <code>10819</code> and <code>14011</code>.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/12882">#12882</a>: Calling <code>request.getfixturevalue() &lt;pytest.FixtureRequest.getfixturevalue&gt;</code> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.</p>
<p>See <code>dynamic-fixture-request-during-teardown</code> for details.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13409">#13409</a>: Using non-<code>~collections.abc.Collection</code> iterables (such as generators, iterators, or custom iterable objects) for the <code>argvalues</code> parameter in <code>@pytest.mark.parametrize &lt;pytest.mark.parametrize ref&gt;</code> and <code>metafunc.parametrize &lt;pytest.Metafunc.parametrize&gt;</code> is now deprecated.</p>
<p>These iterables get exhausted after the first iteration,
leading to tests getting unexpectedly skipped in cases such as running <code>pytest.main()</code> multiple times,
using class-level parametrize decorators,
or collecting tests multiple times.</p>
<p>See <code>parametrize-iterators</code> for details and suggestions.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13946">#13946</a>: The private <code>config.inicfg</code> attribute is now deprecated.
Use <code>config.getini() &lt;pytest.Config.getini&gt;</code> to access configuration values instead.</p>
<p>See <code>config-inicfg</code> for more details.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/14004">#14004</a>: Passing <code>baseid</code> to <code>~pytest.FixtureDef</code> or <code>nodeid</code> strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (trun...

_Description has been truncated_

@dependabot
Bump the python-minor-and-patch group across 1 directory with 24 updates
3beabc9 
Bumps the python-minor-and-patch group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.4` |
| ruamel-yaml | `0.18.17` | `0.19.1` |
| [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.52` | `3.0.53` |
| [croniter](https://github.com/pallets-eco/croniter) | `6.0.0` | `6.2.4` |
| [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.54.0` |
| [edge-tts](https://github.com/rany2/edge-tts) | `7.2.7` | `7.2.8` |
| hindsight-client | `0.6.1` | `0.10.2` |
| [debugpy](https://github.com/microsoft/debugpy) | `1.8.20` | `1.8.22` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.1.1` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` |
| [starlette](https://github.com/Kludex/starlette) | `1.0.1` | `1.7.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.21` | `0.0.84` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.10` | `0.16.10` |
| [sounddevice](https://github.com/spatialaudio/python-sounddevice) | `0.5.5` | `0.5.6` |
| [numpy](https://github.com/numpy/numpy) | `2.4.3` | `2.4.6` |
| [honcho-ai](https://github.com/plastic-labs/honcho) | `2.0.1` | `2.5.1` |
| [agent-client-protocol](https://github.com/agentclientprotocol/python-sdk) | `0.9.0` | `0.12.1` |
| [boto3](https://github.com/boto/boto3) | `1.42.89` | `1.43.107` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.25.3` | `1.26.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.194.0` | `2.201.0` |
| [google-auth-oauthlib](https://github.com/googleapis/google-cloud-python) | `1.3.1` | `1.5.0` |
| [google-auth-httplib2](https://github.com/googleapis/google-cloud-python) | `0.3.1` | `0.4.4` |



Updates `python-dotenv` from 1.2.2 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.4)

Updates `ruamel-yaml` from 0.18.17 to 0.19.1

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `prompt-toolkit` from 3.0.52 to 3.0.53
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.52...3.0.53)

Updates `croniter` from 6.0.0 to 6.2.4
- [Release notes](https://github.com/pallets-eco/croniter/releases)
- [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst)
- [Commits](pallets-eco/croniter@6.0.0...6.2.4)

Updates `uvicorn[standard]` from 0.41.0 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.54.0)

Updates `edge-tts` from 7.2.7 to 7.2.8
- [Release notes](https://github.com/rany2/edge-tts/releases)
- [Commits](rany2/edge-tts@7.2.7...7.2.8)

Updates `hindsight-client` from 0.6.1 to 0.10.2

Updates `debugpy` from 1.8.20 to 1.8.22
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](microsoft/debugpy@v1.8.20...v1.8.22)

Updates `pytest` from 9.0.2 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.1.1)

Updates `pytest-asyncio` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `starlette` from 1.0.1 to 1.7.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.1...1.7.0)

Updates `ty` from 0.0.21 to 0.0.84
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.21...0.0.84)

Updates `ruff` from 0.15.10 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.16.10)

Updates `sounddevice` from 0.5.5 to 0.5.6
- [Release notes](https://github.com/spatialaudio/python-sounddevice/releases)
- [Changelog](https://github.com/spatialaudio/python-sounddevice/blob/master/NEWS.rst)
- [Commits](spatialaudio/python-sounddevice@0.5.5...0.5.6)

Updates `numpy` from 2.4.3 to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.3...v2.4.6)

Updates `honcho-ai` from 2.0.1 to 2.5.1
- [Release notes](https://github.com/plastic-labs/honcho/releases)
- [Changelog](https://github.com/plastic-labs/honcho/blob/main/CHANGELOG.md)
- [Commits](plastic-labs/honcho@v2.0.1...v2.5.1)

Updates `agent-client-protocol` from 0.9.0 to 0.12.1
- [Release notes](https://github.com/agentclientprotocol/python-sdk/releases)
- [Commits](agentclientprotocol/python-sdk@0.9.0...0.12.1)

Updates `boto3` from 1.42.89 to 1.43.107
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.89...1.43.107)

Updates `azure-identity` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.3...azure-identity_1.26.0)

Updates `google-api-python-client` from 2.194.0 to 2.201.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.194.0...v2.201.0)

Updates `google-auth-oauthlib` from 1.3.1 to 1.5.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-oauthlib-v1.3.1...google-auth-oauthlib-v1.5.0)

Updates `google-auth-httplib2` from 0.3.1 to 0.4.4
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-httplib2-v0.3.1...google-auth-httplib2-v0.4.4)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruamel-yaml
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: prompt-toolkit
  dependency-version: 3.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: croniter
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: uvicorn[standard]
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: edge-tts
  dependency-version: 7.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: hindsight-client
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: debugpy
  dependency-version: 1.8.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: starlette
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.84
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: sounddevice
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: honcho-ai
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: agent-client-protocol
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.107
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: azure-identity
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-api-python-client
  dependency-version: 2.201.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-auth-oauthlib
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-auth-httplib2
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-and-patch-0136181d5d branch October 12, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants