From 141acc079012dd1b8dc0803adeeb906f717c58cb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Nov 2026 23:56:18 +0000
Subject: [PATCH] chore(deps): bump the python-dev group across 3 directories
 with 3 updates

Updates the requirements on [litellm](https://github.com/BerriAI/litellm), [cyclonedx-bom](https://github.com/CycloneDX/cyclonedx-python) and [fastapi](https://github.com/fastapi/fastapi) to permit the latest version.

Updates `litellm` to 1.106.6
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/compare/v1.104.2...v1.106.6)

Updates `cyclonedx-bom` from 7.5.0 to 7.6.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-python/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/CycloneDX/cyclonedx-python/compare/v7.5.0...v7.6.0)

Updates `fastapi` to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.142.2...0.162.0)

Updates `fastapi` to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.142.2...0.162.0)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.106.6
  dependency-type: direct:development
  dependency-group: python-dev
- dependency-name: cyclonedx-bom
  dependency-version: 7.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dev
- dependency-name: fastapi
  dependency-version: 0.162.0
  dependency-type: direct:production
  dependency-group: python-dev
- dependency-name: fastapi
  dependency-version: 0.162.0
  dependency-type: direct:production
  dependency-group: python-dev
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 examples/api/requirements.txt     | 2 +-
 examples/observe/requirements.txt | 2 +-
 pyproject.toml                    | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/examples/api/requirements.txt b/examples/api/requirements.txt
index 4769550..96bd837 100644
--- a/examples/api/requirements.txt
+++ b/examples/api/requirements.txt
@@ -1,2 +1,2 @@
-fastapi>=0.142.2,<1
+fastapi>=0.162.0,<1
 uvicorn>=0.54.0,<1
diff --git a/examples/observe/requirements.txt b/examples/observe/requirements.txt
index 4769550..96bd837 100644
--- a/examples/observe/requirements.txt
+++ b/examples/observe/requirements.txt
@@ -1,2 +1,2 @@
-fastapi>=0.142.2,<1
+fastapi>=0.162.0,<1
 uvicorn>=0.54.0,<1
diff --git a/pyproject.toml b/pyproject.toml
index 3cc501c..b75382d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -85,7 +85,7 @@ fastmcp = ["fastmcp>=2.14,!=3.0.*,<5"]
 a2a = ["a2a-sdk>=1.1,<2"]
 # Proxy custom-guardrail contract verified against the stable 1.104.2 release.
 # Keep this line narrow; new LiteLLM minors need explicit hook compatibility checks.
-litellm = ["litellm>=1.104.2,<1.105"]
+litellm = ["litellm>=1.104.2,<1.107"]
 dev = [
   "pytest>=8",
   "pytest-asyncio>=0.23",
@@ -102,7 +102,7 @@ integration = ["testcontainers>=4"]
 # CycloneDX SBOM generator (see scripts/generate_sbom.sh). Pinned here — not in the shell
 # script — so Dependabot's pip ecosystem keeps it current, matching the repo's pinned-and-
 # maintained posture. Build-only tooling, like `build`/`twine`; never a runtime dependency.
-sbom = ["cyclonedx-bom==7.5.0"]
+sbom = ["cyclonedx-bom==7.6.0"]
 
 [project.urls]
 Homepage = "https://github.com/counterbranch/apparitor"