Skip to content

Bump the python-minor-and-patch group across 1 directory with 25 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-516065ce4a
Open

Bump the python-minor-and-patch group across 1 directory with 25 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-and-patch-516065ce4a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown

Bumps the python-minor-and-patch group with 25 updates in the / directory:

Package From To
python-dotenv 1.2.2 1.2.4
tenacity 9.1.4 9.2.1
ruamel-yaml 0.18.17 0.19.1
requests 2.33.0 2.34.2
pydantic 2.13.4 2.14.1
prompt-toolkit 3.0.52 3.0.53
croniter 6.0.0 6.2.4
concurrent-log-handler 0.9.29 0.9.30
uvicorn[standard] 0.41.0 0.54.0
edge-tts 7.2.7 7.3.1
debugpy 1.8.20 1.8.22
pytest 9.0.2 9.1.1
pytest-asyncio 1.3.0 1.4.0
starlette 1.0.1 1.8.0
ty 0.0.21 0.0.88
ruff 0.15.10 0.17.1
sounddevice 0.5.5 0.5.6
numpy 2.4.3 2.4.6
honcho-ai 2.0.1 2.6.0
agent-client-protocol 0.9.0 0.12.1
boto3 1.42.89 1.43.114
azure-identity 1.25.3 1.26.0
google-api-python-client 2.194.0 2.201.0
google-auth-oauthlib 1.3.1 1.5.0
google-auth-httplib2 0.3.1 0.4.4

Updates python-dotenv from 1.2.2 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • Additional commits viewable in compare view

Updates tenacity from 9.1.4 to 9.2.1

Release notes

Sourced from tenacity's releases.

9.2.1

9.2.0 was tagged but never reached PyPI: the upload rejected its package description (#714). 9.2.1 is the first release on PyPI with everything in 9.2.0, plus the changes below.

What's Changed

New Contributors

Full Changelog: jd/tenacity@9.2.0...9.2.1

9.2.0

What's Changed

... (truncated)

Commits
  • 4410996 ci: check built distributions with twine (#742)
  • b238441 fix: restore PyPI-compatible package description (#725)
  • b6201ec fix: only treat None and 0 as "no wait" (#741)
  • 4a74682 ci: drop the Mergify queue rule (#739)
  • 9116971 ci: drop Mergify dismiss_reviews rule (#737)
  • 2374b61 ci: rely on the ruleset for the ci-gate check (#736)
  • 6df1aab ci: gate merges on a single ci-gate job (#734)
  • 5f540fa chore(mergify): replace deprecated autoqueue with auto_merge_conditions (#733)
  • 8be01b1 chore(deps-dev): bump ruff from 0.16.5 to 0.16.9 in the python group (#726)
  • 3e58094 chore(deps-dev): bump the python group with 2 updates (#707)
  • Additional commits viewable in compare view

Updates ruamel-yaml from 0.18.17 to 0.19.1

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates pydantic from 2.13.4 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • Additional commits viewable in compare view

Updates prompt-toolkit from 3.0.52 to 3.0.53

Release notes

Sourced from prompt-toolkit's releases.

3.0.53

Fixes:

  • Fix get_word_before_cursor behavior.
  • Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).
  • Treat OSError on add_reader as EOFError (macOS kqueue).
  • Handle surrogate pairs in FileHistory.store_string.
  • Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.
  • Handle ascii decode errors in terminal type decoding of telnet protocol. (thanks: @​SunandM)
  • Update return types of dialog shortcuts to include None when cancelled.
  • Set missing minimal requirement on wcwidth.

New features:

  • Lazy load __version__.
  • Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Changelog

Sourced from prompt-toolkit's changelog.

3.0.53: 2026-07-26

Fixes:

  • Fix get_word_before_cursor behavior.
  • Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).
  • Treat OSError on add_reader as EOFError (macOS kqueue).
  • Handle surrogate pairs in FileHistory.store_string.
  • Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.
  • Handle ascii decode errors in terminal type decoding of telnet protocol.
  • Update return types of dialog shortcuts to include None when cancelled.
  • Set missing minimal requirement on wcwidth.

New features:

  • Lazy load __version__.
  • Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Commits
  • 583b341 Release 3.0.53
  • b6fc80c Fix some incorrect rst markups (#2074)
  • f4a5a80 Update return types of dialog shortcuts to include None when cancelled
  • c6c8930 Handle ascii decode errors in terminal type decoding of telnet protocol. (#2080)
  • 25ff042 Typing fix in breakpointhook.
  • 236bfb7 Allow to specify show_numbers in ChoiceInput (#2059)
  • 8f3212d Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter (#2070)
  • 42f2251 Fix: handle surrogate pairs in FileHistory.store_string (#2062)
  • 9146317 Fix typo (#2064)
  • 1041a42 fix(vt100): treat OSError on add_reader as EOFError (macOS kqueue) (#2065)
  • Additional commits viewable in compare view

Updates croniter from 6.0.0 to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

  • Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @​alhudz)

Packaging

  • Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

6.2.3

No release notes provided.

6.2.2

No release notes provided.

6.2.1

No release notes provided.

6.2.0

No release notes provided.

6.1.0

No release notes provided.

6.1.0rc3

No release notes provided.

6.1.0rc2

No release notes provided.

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]

Packaging

  • Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]

Bugfixes


- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]

Packaging




    

  • Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
    • 

  • Bump pinned build and CI dependencies via dependabot.
    • 

  • Upgrade locked development and build dependencies (uv lock --upgrade).
    • 



6.2.2 (2026-03-15)


Packaging


- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = "MIT"``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]

6.2.1 (2026-03-15)


Bugfixes


- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

</tr></table> 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7"><code>5853499</code></a> Prepare for release 6.2.4 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/241">#241</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5"><code>fd13d2e</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/240">#240</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85"><code>44e3090</code></a> wrap sunday in expand_from_start_time day-of-week low bound (<a href="https://redirect.github.com/pallets-eco/croniter/issues/239">#239</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3"><code>5cd2e46</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/238">#238</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5"><code>f1eeddd</code></a> Prepare for 6.2.4 development (<a href="https://redirect.github.com/pallets-eco/croniter/issues/237">#237</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f"><code>22b59e0</code></a> Prepare for release 6.2.3 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/236">#236</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e"><code>ab27767</code></a> reject zero step in equal and reversed cron ranges (<a href="https://redirect.github.com/pallets-eco/croniter/issues/232">#232</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96"><code>f329964</code></a> fix expand_from_start_time month low bound off-by-one (<a href="https://redirect.github.com/pallets-eco/croniter/issues/235">#235</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f"><code>9810279</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/233">#233</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7"><code>d051aaf</code></a> Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (<a href="https://redirect.github.com/pallets-eco/croniter/issues/234">#234</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pallets-eco/croniter/compare/6.0.0...6.2.4">compare view</a></li>
</ul>
</details>

&lt;br /&gt;</code></pre>

Updates `concurrent-log-handler` from 0.9.29 to 0.9.30
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/Preston-Landers/concurrent-log-handler/releases">concurrent-log-handler's releases</a>.</em></p>
<blockquote>
<h2>0.9.30</h2>
<h2>What's Changed</h2>
<ul>
<li>
<p>0.9.30</p>
<ul>
<li>
<p>Mark Python 3.15 as supported.</p>
</li>
<li>
<p>Fix permission race window between file create and chmod, when the <code>chmod</code> and/or <code>owner</code> kwargs are configured.
[Issue <a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">#87</a>](<a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">Preston-Landers/concurrent-log-handler#87</a>)</p>
<p>The handler created files using the configured <code>umask</code> and applied <code>_do_chown_and_chmod()</code> afterward. In the
window between create and chmod, the file was visible in the filesystem with umask-derived (potentially
too-restrictive) permissions. A different-user process that opened the file during this window got
<code>PermissionError</code>, breaking the cross-user log sharing scenario the <code>chmod</code>/<code>owner</code> kwargs exist to support.</p>
<p>The lock file, the main log file, and rotated <code>.gz</code> files (from both handlers) are now pre-created atomically
with the correct permissions: a hidden temp file gets the owner and mode, then <code>os.link()</code> (POSIX) or
<code>os.rename()</code> (Windows) puts it in place. Other processes never see the public filename with intermediate
perms. On filesystems without hard links (FAT/exFAT, many SMB/CIFS and FUSE mounts), the handler falls back to
the previous create-then-chmod behavior. Handlers that don't configure <code>chmod</code>/<code>owner</code> are unaffected and pay
no extra syscalls.</p>
</li>
<li>
<p>Fix lost records when a process opens a lock file or log file that another user owns, with <code>chmod</code> or <code>owner</code>
configured. Only the owner of a file (or root) can chmod it, so every write from that process failed with
<code>PermissionError</code>, even though the file was writable. The handler now skips chmod/chown when the file already
has the configured mode and owner, and treats a failure as non-fatal (reported only in <code>debug</code> mode). Related
to Issue <a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">#87</a>.</p>
</li>
<li>
<p><code>ConcurrentTimedRotatingFileHandler</code> no longer creates the log file in its constructor. The standard library
created it there with the process umask, so the handler's <code>umask</code>, <code>chmod</code>, and <code>owner</code> settings did not apply
until the first write. Until then, a process running as another user could fail to create its handler, with
<code>PermissionError</code>. The file is now created on first write, as in <code>ConcurrentRotatingFileHandler</code>, and the
<code>delay</code> argument is ignored.</p>
</li>
<li>
<p><code>ConcurrentTimedRotatingFileHandler</code> now applies <code>chmod</code> and <code>owner</code> to rotated <code>.gz</code> files. Before, they kept
umask-derived permissions.</p>
</li>
<li>
<p>Fix <code>do_gzip()</code> silently ignoring the configured <code>umask</code> parameter on rotated <code>.gz</code> files. The <code>gzip.open()</code>
call previously ran outside the <code>_alter_umask()</code> context, so rotated archives picked up the process default
umask instead of the handler's. Discovered while investigating Issue <a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">#87</a>.</p>
</li>
<li>
<p>Fix a deadlock introduced in 0.9.29. If one thread was writing a log record when another thread called
<code>fork()</code>, the child process hung on its first log call. The child now resets the handler's thread lock. In the
same situation, a child that closed the handler before it logged (for example, through <code>logging.shutdown()</code>
at exit) released the parent's file lock while the parent was still writing. The child now also clears the
inherited lock state. Both fixes apply to Python 3.9 and later; on 3.7 and 3.8, logging holds handler locks
across <code>fork()</code>, so these problems do not occur.</p>
</li>
<li>
<p>Fix loss of a rotated log file after a failed gzip (for example, disk full). The failure leaves the rotated
file uncompressed. On the next rotation, <code>ConcurrentRotatingFileHandler</code> deleted that file (even when
<code>backupCount</code> allowed more), and <code>ConcurrentTimedRotatingFileHandler</code> could overwrite it with a later file from</p>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/Preston-Landers/concurrent-log-handler/blob/master/CHANGELOG.md">concurrent-log-handler's changelog</a>.</em></p>
<blockquote>
<ul>
<li>
<p>0.9.30</p>
<ul>
<li>
<p>Mark Python 3.15 as supported.</p>
</li>
<li>
<p>Fix permission race window between file create and chmod, when the <code>chmod</code> and/or <code>owner</code> kwargs are configured.
[Issue <a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">#87</a>](<a href="https://redirect.github.com/Preston-Landers/concurrent-log-handler/issues/87">Preston-Landers/concurrent-log-handler#87</a>)</p>
<p>The handler created files using the configured <code>umask</code> and applied <code>_do_chown_and_chmod()</code> afterward. In the
window between create and chmod, the file was visible in the filesystem with umask-derived (potentially
too-restrictive) permissions. A different-user process that opened the file during this window got
<code>PermissionError</code>, breaking the cross-user log sharing scenario the <code>chmod</code>/<code>owner</code> kwargs exist to support.</p>
<p>The lock file, the main log file, and rotated <code>.gz</code> files (from both handlers) are now pre-created atomically
with...

_Description has been truncated_

@dependabot
Bump the python-minor-and-patch group across 1 directory with 25 updates
f96e1dc 
Bumps the python-minor-and-patch group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.4` |
| [tenacity](https://github.com/jd/tenacity) | `9.1.4` | `9.2.1` |
| ruamel-yaml | `0.18.17` | `0.19.1` |
| [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.14.1` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.52` | `3.0.53` |
| [croniter](https://github.com/pallets-eco/croniter) | `6.0.0` | `6.2.4` |
| [concurrent-log-handler](https://github.com/Preston-Landers/concurrent-log-handler) | `0.9.29` | `0.9.30` |
| [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.54.0` |
| [edge-tts](https://github.com/rany2/edge-tts) | `7.2.7` | `7.3.1` |
| [debugpy](https://github.com/microsoft/debugpy) | `1.8.20` | `1.8.22` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.1.1` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` |
| [starlette](https://github.com/Kludex/starlette) | `1.0.1` | `1.8.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.21` | `0.0.88` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.10` | `0.17.1` |
| [sounddevice](https://github.com/spatialaudio/python-sounddevice) | `0.5.5` | `0.5.6` |
| [numpy](https://github.com/numpy/numpy) | `2.4.3` | `2.4.6` |
| [honcho-ai](https://github.com/plastic-labs/honcho) | `2.0.1` | `2.6.0` |
| [agent-client-protocol](https://github.com/agentclientprotocol/python-sdk) | `0.9.0` | `0.12.1` |
| [boto3](https://github.com/boto/boto3) | `1.42.89` | `1.43.114` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.25.3` | `1.26.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.194.0` | `2.201.0` |
| [google-auth-oauthlib](https://github.com/googleapis/google-cloud-python) | `1.3.1` | `1.5.0` |
| [google-auth-httplib2](https://github.com/googleapis/google-cloud-python) | `0.3.1` | `0.4.4` |



Updates `python-dotenv` from 1.2.2 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.4)

Updates `tenacity` from 9.1.4 to 9.2.1
- [Release notes](https://github.com/jd/tenacity/releases)
- [Commits](jd/tenacity@9.1.4...9.2.1)

Updates `ruamel-yaml` from 0.18.17 to 0.19.1

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `pydantic` from 2.13.4 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.14.1)

Updates `prompt-toolkit` from 3.0.52 to 3.0.53
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.52...3.0.53)

Updates `croniter` from 6.0.0 to 6.2.4
- [Release notes](https://github.com/pallets-eco/croniter/releases)
- [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst)
- [Commits](pallets-eco/croniter@6.0.0...6.2.4)

Updates `concurrent-log-handler` from 0.9.29 to 0.9.30
- [Release notes](https://github.com/Preston-Landers/concurrent-log-handler/releases)
- [Changelog](https://github.com/Preston-Landers/concurrent-log-handler/blob/master/CHANGELOG.md)
- [Commits](Preston-Landers/concurrent-log-handler@0.9.29...0.9.30)

Updates `uvicorn[standard]` from 0.41.0 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.54.0)

Updates `edge-tts` from 7.2.7 to 7.3.1
- [Release notes](https://github.com/rany2/edge-tts/releases)
- [Commits](rany2/edge-tts@7.2.7...7.3.1)

Updates `debugpy` from 1.8.20 to 1.8.22
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](microsoft/debugpy@v1.8.20...v1.8.22)

Updates `pytest` from 9.0.2 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.1.1)

Updates `pytest-asyncio` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `starlette` from 1.0.1 to 1.8.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.1...1.8.0)

Updates `ty` from 0.0.21 to 0.0.88
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.21...0.0.88)

Updates `ruff` from 0.15.10 to 0.17.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.10...0.17.1)

Updates `sounddevice` from 0.5.5 to 0.5.6
- [Release notes](https://github.com/spatialaudio/python-sounddevice/releases)
- [Changelog](https://github.com/spatialaudio/python-sounddevice/blob/master/NEWS.rst)
- [Commits](spatialaudio/python-sounddevice@0.5.5...0.5.6)

Updates `numpy` from 2.4.3 to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.3...v2.4.6)

Updates `honcho-ai` from 2.0.1 to 2.6.0
- [Release notes](https://github.com/plastic-labs/honcho/releases)
- [Changelog](https://github.com/plastic-labs/honcho/blob/main/CHANGELOG.md)
- [Commits](https://github.com/plastic-labs/honcho/commits)

Updates `agent-client-protocol` from 0.9.0 to 0.12.1
- [Release notes](https://github.com/agentclientprotocol/python-sdk/releases)
- [Commits](agentclientprotocol/python-sdk@0.9.0...0.12.1)

Updates `boto3` from 1.42.89 to 1.43.114
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.89...1.43.114)

Updates `azure-identity` from 1.25.3 to 1.26.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.3...azure-identity_1.26.0)

Updates `google-api-python-client` from 2.194.0 to 2.201.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.194.0...v2.201.0)

Updates `google-auth-oauthlib` from 1.3.1 to 1.5.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-oauthlib-v1.3.1...google-auth-oauthlib-v1.5.0)

Updates `google-auth-httplib2` from 0.3.1 to 0.4.4
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/gcp-sphinx-docfx-yaml/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-httplib2-v0.3.1...google-auth-httplib2-v0.4.4)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: tenacity
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ruamel-yaml
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: prompt-toolkit
  dependency-version: 3.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: croniter
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: concurrent-log-handler
  dependency-version: 0.9.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: uvicorn[standard]
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: edge-tts
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: debugpy
  dependency-version: 1.8.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: starlette
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.88
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: sounddevice
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: honcho-ai
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: agent-client-protocol
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.114
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: azure-identity
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-api-python-client
  dependency-version: 2.201.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-auth-oauthlib
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: google-auth-httplib2
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants