Skip to content

deps(pip): bump the pip-patch-minor group across 1 directory with 24 updates#1262

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-patch-minor-391ea2c25c
Open

deps(pip): bump the pip-patch-minor group across 1 directory with 24 updates#1262
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-patch-minor-391ea2c25c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-patch-minor group with 24 updates in the / directory:

Package From To
aiohappyeyeballs 2.6.2 2.7.1
anthropic 0.109.1 0.115.1
anyio 4.13.0 4.14.1
certifi 2026.5.20 2026.6.17
cisco-ai-skill-scanner 2.0.11 2.0.12
click 8.4.1 8.4.2
fastapi 0.137.1 0.139.0
fsspec 2026.4.0 2026.6.0
huggingface-hub 1.19.0 1.21.0
jiter 0.15.0 0.16.0
litellm 1.89.1 1.90.2
mcp 1.27.2 1.28.1
msgpack 1.2.0 1.2.1
openai 2.41.1 2.44.0
pydantic 2.12.5 2.13.4
pydantic-core 2.41.5 2.47.0
pydantic-settings 2.14.1 2.14.2
regex 2026.5.9 2026.6.28
sse-starlette 3.4.4 3.4.5
tiktoken 0.12.0 0.13.0
tqdm 4.68.2 4.68.3
tree-sitter 0.25.2 0.26.0
typer 0.25.1 0.26.8
yara-x 1.17.0 1.19.0

Updates aiohappyeyeballs from 2.6.2 to 2.7.1

Release notes

Sourced from aiohappyeyeballs's releases.

v2.7.1 (2026-07-01)

Performance Improvements

  • Use defaultdict to help with performance (#239, e10f335)

Refactoring

  • Collapse collect-then-remove pattern in utils helpers (#227, 0dd3fd1)

  • Merge identical except blocks in _connect_sock cleanup (#229, b7c186e)

  • Simplify _interleave_addrinfos family grouping (#226, fdf6548)


Detailed Changes: v2.7.0...v2.7.1

v2.7.0 (2026-05-20)

Features


Detailed Changes: v2.6.2...v2.7.0

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.7.1 (2026-07-01)

Performance improvements

  • Use defaultdict to help with performance (e10f335)

Refactoring

  • Simplify _interleave_addrinfos family grouping (fdf6548)
  • Collapse collect-then-remove pattern in utils helpers (0dd3fd1)
  • Merge identical except blocks in _connect_sock cleanup (b7c186e)

v2.7.0 (2026-05-20)

Features

  • Add python 3.14 support (10e7d43)
Commits
  • 4dfc926 2.7.1
  • e10f335 perf: use defaultdict to help with performance (#239)
  • 338277b chore: stop tracking .DS_Store files (#251)
  • 1697869 ci: add codspeed benchmark suite for addrinfo reordering hot paths (#250)
  • d40a848 chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#242)
  • 51d4266 chore(deps-dev): bump cryptography from 46.0.7 to 48.0.1 (#243)
  • 2df44b3 chore(pre-commit.ci): pre-commit autoupdate (#241)
  • 3e3cb61 chore(deps-dev): bump pytest from 9.0.3 to 9.1.1 (#244)
  • 922dcd7 chore(deps-ci): bump the github-actions group with 4 updates (#245)
  • 70461c5 ci: drop .github/FUNDING.yml to inherit org-wide config (#247)
  • Additional commits viewable in compare view

Updates anthropic from 0.109.1 to 0.115.1

Release notes

Sourced from anthropic's releases.

v0.115.1

0.115.1 (2026-07-01)

Full Changelog: v0.115.0...v0.115.1

Chores

  • api: remove some nonfunctional types from the SDKs (5e7c431)

v0.115.0

0.115.0 (2026-06-30)

Full Changelog: v0.114.0...v0.115.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (8c23f7e)

v0.114.0

0.114.0 (2026-06-30)

Full Changelog: v0.113.0...v0.114.0

Features

  • api: add support for claude-sonnet-5 (b893033)

Bug Fixes

  • agent_toolset: allow absolute paths that resolve inside workdir (#121) (0105529)

v0.113.0

0.113.0 (2026-06-29)

Full Changelog: v0.112.0...v0.113.0

Features

  • api: add support for 20260318 web fetch and support tools (88dbfb1)

Bug Fixes

  • async count_tokens missing output_format/output_config merge block (#162) (122c958)

Chores

  • api: accept user profile ID's when counting tokens (0b4d17a)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.115.1 (2026-07-01)

Full Changelog: v0.115.0...v0.115.1

Chores

  • api: remove some nonfunctional types from the SDKs (5e7c431)

0.115.0 (2026-06-30)

Full Changelog: v0.114.0...v0.115.0

Features

  • api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (8c23f7e)

0.114.0 (2026-06-30)

Full Changelog: v0.113.0...v0.114.0

Features

  • api: add support for claude-sonnet-5 (b893033)

Bug Fixes

  • agent_toolset: allow absolute paths that resolve inside workdir (#121) (0105529)

0.113.0 (2026-06-29)

Full Changelog: v0.112.0...v0.113.0

Features

  • api: add support for 20260318 web fetch and support tools (88dbfb1)

Bug Fixes

  • async count_tokens missing output_format/output_config merge block (#162) (122c958)

Chores

  • api: accept user profile ID's when counting tokens (0b4d17a)
  • docs: updates to descriptions and example values (f3ab694)

0.112.0 (2026-06-24)

... (truncated)

Commits
  • 5e98d72 release: 0.115.1
  • 5385af6 chore(api): remove some nonfunctional types from the SDKs
  • e4283c3 release: 0.115.0
  • d1a933e feat(api): add support for Managed Agents event delta streaming, agent overri...
  • 53582ad codegen metadata
  • 6e9f197 release: 0.114.0
  • ab10964 feat(api): add support for claude-sonnet-5
  • 8a004a2 fix(agent_toolset): allow absolute paths that resolve inside workdir (#121)
  • 67a004d release: 0.113.0
  • 5849d19 feat(api): add support for 20260318 web fetch and support tools
  • Additional commits viewable in compare view

Updates anyio from 4.13.0 to 4.14.1

Release notes

Sourced from anyio's releases.

4.14.1

  • Fixed teardown of higher-scoped async fixtures failing on asyncio with RuntimeError: Attempted to exit cancel scope in a different task than it was entered in when an async test raise an outcome exception (e.g., pytest.skip(), pytest.xfail(), or pytest.fail()) (#1179; PR by @​EmmanuelNiyonshuti)
  • Fixed CapacityLimiter.total_tokens rejecting a value of 0 when the limiter was instantiated outside of an event loop, contradicting the documented behavior of allowing 0 total tokens (#1183; PR by @​nyxst4ck)

4.14.0

  • Added support for Python 3.15

  • Added an asynchronous implementation of the itertools module (#998; PR by @​11kkw)

  • Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @​nullwiz)

  • Added support for custom capacity limiters in async path and file I/O functions and classes

  • Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

  • Changed TaskGroup.start_soon() to return a TaskHandle

  • Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

  • Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

  • Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @​EmmanuelNiyonshuti)

  • Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @​EmmanuelNiyonshuti)

  • Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @​SAY-5)

  • Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

    • TaskGroup.start_soon()
    • TaskGroup.start()
    • anyio.from_thread.run()

    This reverts an earlier change from v3.7.0 which was made in error. (#1153)

  • Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @​gschaffner)

  • Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

    • anyio.CancelScope
    • anyio.CapacityLimiter
    • anyio.Condition
    • anyio.Event
    • anyio.Lock
    • anyio.ResourceGuard
    • anyio.Semaphore
  • Fixed cancellation exception escaping a cancel scope when triggered via check_cancelled() in a worker thread (#1113)

  • Fixed TaskGroup raising AttributeError instead of a clear error when entered more than once (#1109; PR by @​bahtya)

... (truncated)

Commits
  • 149b9e9 Bumped up the version
  • 377518c Bump actions/checkout from 6 to 7 in the github-actions group (#1186)
  • b42a2f5 [pre-commit.ci] pre-commit autoupdate (#1185)
  • 3ceb6ff Allow 0 tokens in a CapacityLimiter instantiated outside an event loop (#1183)
  • e10d1db Add missing await to open_file() in file I/O concurrency example (#1182)
  • 1dbc3b6 OutcomeException should not discard test runner_task (#1180)
  • ffe9133 Bumped up the version
  • f8b9f01 Fixed asyncio lock waiter deadlocks after cancellation (#1145)
  • d517ee1 [pre-commit.ci] pre-commit autoupdate (#1176)
  • 550b68e Make anyio.run support Awaitable at runtime on all backends (#1171)
  • Additional commits viewable in compare view

Updates certifi from 2026.5.20 to 2026.6.17

Commits

Updates cisco-ai-skill-scanner from 2.0.11 to 2.0.12

Release notes

Sourced from cisco-ai-skill-scanner's releases.

2.0.12

What's Changed

New Contributors

Full Changelog: cisco-ai-defense/skill-scanner@2.0.11...2.0.12

Commits
  • 605afdc fix ci audit and formatting failures (#127)
  • 0cf5ae8 feat(llm): allow temperature override + omit for newer Claude/o1 models (#122)
  • 08a65b7 feat(llm): support OpenAI user request field (#108)
  • 356974c feat: Extending Scanner to Pass Repo Name (#90)
  • d12579a feat: add jailbreak detection YARA rule (#17)
  • c620a55 feat: detect ASCII smuggling via Unicode Tag Block (closes #92) (#94)
  • 543ecf4 fix: avoid vulnerable LiteLLM versions (#113)
  • 027f579 fix(sarif): emit scan-root-relative artifact URIs (#118)
  • 3f39d48 fix(api): return validation errors for malformed skills (#112)
  • e857711 Fix/issue 114 parser error colon (#117)
  • Additional commits viewable in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582
Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates fastapi from 0.137.1 to 0.139.0

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

0.138.1

Refactors

  • ♻️ Refactor Library Skills, make info easier to find for agents. PR #15841 by @​tiangolo.

Internal

... (truncated)

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Updates fsspec from 2026.4.0 to 2026.6.0

Commits
  • a245700 changelog (#2049)
  • 652325d Fix async cat ranges on error (#2045)
  • 073aac8 Forward kwargs from cat_ranges to cat_file (#2044)
  • 2818611 FTP: preserve filenames containing whitespace in _mlsd2 (#2043)
  • c879384 Prevent attribute error by checking for 'forced' attribute before flushing ca...
  • 71b8a6b Reflect async _walk correctly (#2040)
  • 5eec9f9 Fix: Omit threading.get_ident() from cache token for async implementations ...
  • 8643878 Small safety improvements (#2039)
  • a1c16ab Honour simple_templates everywhere in referenceFS (#2029)
  • 85facaa Fix infinite recursion in expand_path when resolving paths with glob magic ch...
  • Additional commits viewable in compare view

Updates huggingface-hub from 1.19.0 to 1.21.0

Release notes

Sourced from huggingface-hub's releases.

[v1.21.0] Jobs filtering & pagination

📊 Jobs listing revamped: filter, paginate, and ls instead of ps

The Jobs listing API and CLI have been overhauled with server-side filtering, proper pagination, and a CLI rename that aligns with the rest of hf. list_jobs() now accepts status and labels parameters that push filtering to the server, and returns a lazy iterator (matching list_models, list_datasets, etc.) so large result sets are fetched page by page. On the CLI side, hf jobs ps has been renamed to hf jobs ls for consistency with hf repos ls, hf models ls, and friends — ps and list still work as aliases.

⚠️ Breaking changes:

  • list_jobs() now returns an Iterable[JobInfo] instead of list[JobInfo]. If you indexed the result (jobs[0]), wrap it with list(...).
  • -f/--filter in hf jobs ls is deprecated. Use --status and --label instead. Glob patterns (data-*), negation (key!=value), and filtering by id/image/command are no longer supported.
from huggingface_hub import list_jobs
Filter by status and labels
list_jobs(status=["RUNNING", "SCHEDULING"], labels={"env": "prod"})
Iterate lazily
for job in list_jobs():
print(job.id)
Materialize all results
all_jobs = list(list_jobs())

# Filter by status and labels
hf jobs ls --status running,scheduling --label env=prod --label team=ml
Paginate with --limit
hf jobs ls -a --limit 500
hf jobs ls -a --limit 0  # no limit

  • [Jobs] Add stage/label filtering to list_jobs API and CLI by @​Wauplin in #4395
  • [Jobs] Paginate list_jobs and add --limit to hf jobs ps by @​Wauplin in #4403
  • [CLI] [Jobs] Rename job listing to 'hf jobs ls' (and keep 'hf jobs ps' alias) by @​Wauplin in #4409

📚 Documentation: CLI guide, Jobs guide

🐛 Fix circular import on from huggingface_hub import login

A regression introduced in v1.20.0 caused from huggingface_hub import login to raise an ImportError on a fresh interpreter, due to a circular dependency between _oauth_device and utils._http. The fix moves _oauth_device.py into the utils layer so all imports resolve downward, eliminating the cycle. No lazy imports or workarounds required.

🔧 Other QoL Improvements

📖 Documentation

... (truncated)

Commits
  • aea9b9d Release: v1.21.0
  • 2e2ed56 Release: v1.21.0.rc0
  • 4bd4c90 [CLI] [Jobs] Rename job listing to 'hf jobs ls' (and keep 'hf jobs ps' alias)...
  • fa3eb45 [Jobs] Paginate list_jobs and add --limit to hf jobs ps (#4403)
  • ecfd4c5 [CLI] Fix ty/mypy errors with click 8.4.2 (#4408)
  • 341469f Update hardware flavor enums (automated commit) (#4406)
  • 2fbcdfe [i18n-HI] Add Hindi translation for guides overview (#4405)
  • 5bc6bfa [Jobs] Add stage/label filtering to list_jobs API and CLI (#4395)
  • d991f09 Fix IndexError in filter_repo_objects on an empty pattern (#4402)
  • 0df783f Retry requests on httpx.RemoteProtocolError (#4398)
  • Additional commits viewable in compare view

Updates jiter from 0.15.0 to 0.16.0

Commits

Updates litellm from 1.89.1 to 1.90.2

Release notes

Sourced from litellm's releases.

v1.90.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the o...

Description has been truncated

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 1, 2026
@greptile-apps

greptile-apps Bot commented Jul 1, 2026

Copy link
Copy Markdown

PR author is not in the allowed authors list.

@kilo-code-bot

kilo-code-bot Bot commented Jul 1, 2026

Copy link
Copy Markdown

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 files)
  • docker-requirements.txt - 0 issues (generated lockfile - dependency hash updates)
Previous Review Summary (commit 30b2fa4)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 30b2fa4)

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 files)
  • docker-requirements.txt

Reviewed by laguna-m.1-20260312:free · Input: 790.1K · Output: 10.9K · Cached: 3.2M

…updates

Bumps the pip-patch-minor group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.6.2` | `2.7.1` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.109.1` | `0.115.1` |
| [anyio](https://github.com/agronholm/anyio) | `4.13.0` | `4.14.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.5.20` | `2026.6.17` |
| [cisco-ai-skill-scanner](https://github.com/cisco-ai-defense/skill-scanner) | `2.0.11` | `2.0.12` |
| [click](https://github.com/pallets/click) | `8.4.1` | `8.4.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.137.1` | `0.139.0` |
| [fsspec](https://github.com/fsspec/filesystem_spec) | `2026.4.0` | `2026.6.0` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.19.0` | `1.21.0` |
| [jiter](https://github.com/pydantic/jiter) | `0.15.0` | `0.16.0` |
| [litellm](https://github.com/BerriAI/litellm) | `1.89.1` | `1.90.2` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.2` | `1.28.1` |
| [msgpack](https://github.com/msgpack/msgpack-python) | `1.2.0` | `1.2.1` |
| [openai](https://github.com/openai/openai-python) | `2.41.1` | `2.44.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.47.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.1` | `2.14.2` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.5.9` | `2026.6.28` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.4.4` | `3.4.5` |
| [tiktoken](https://github.com/openai/tiktoken) | `0.12.0` | `0.13.0` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.2` | `4.68.3` |
| [tree-sitter](https://github.com/tree-sitter/py-tree-sitter) | `0.25.2` | `0.26.0` |
| [typer](https://github.com/fastapi/typer) | `0.25.1` | `0.26.8` |
| [yara-x](https://github.com/VirusTotal/yara-x) | `1.17.0` | `1.19.0` |



Updates `aiohappyeyeballs` from 2.6.2 to 2.7.1
- [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases)
- [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md)
- [Commits](aio-libs/aiohappyeyeballs@v2.6.2...v2.7.1)

Updates `anthropic` from 0.109.1 to 0.115.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.109.1...v0.115.1)

Updates `anyio` from 4.13.0 to 4.14.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.13.0...4.14.1)

Updates `certifi` from 2026.5.20 to 2026.6.17
- [Commits](certifi/python-certifi@2026.05.20...2026.06.17)

Updates `cisco-ai-skill-scanner` from 2.0.11 to 2.0.12
- [Release notes](https://github.com/cisco-ai-defense/skill-scanner/releases)
- [Commits](cisco-ai-defense/skill-scanner@2.0.11...2.0.12)

Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `fastapi` from 0.137.1 to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.137.1...0.139.0)

Updates `fsspec` from 2026.4.0 to 2026.6.0
- [Commits](fsspec/filesystem_spec@2026.4.0...2026.6.0)

Updates `huggingface-hub` from 1.19.0 to 1.21.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.19.0...v1.21.0)

Updates `jiter` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/pydantic/jiter/releases)
- [Commits](pydantic/jiter@v0.15.0...v0.16.0)

Updates `litellm` from 1.89.1 to 1.90.2
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

Updates `mcp` from 1.27.2 to 1.28.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.2...v1.28.1)

Updates `msgpack` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.2.0...v1.2.1)

Updates `openai` from 2.41.1 to 2.44.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.41.1...v2.44.0)

Updates `pydantic` from 2.12.5 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.4)

Updates `pydantic-core` from 2.41.5 to 2.47.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `regex` from 2026.5.9 to 2026.6.28
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.5.9...2026.6.28)

Updates `sse-starlette` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.4.4...v3.4.5)

Updates `tiktoken` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.12.0...0.13.0)

Updates `tqdm` from 4.68.2 to 4.68.3
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.2...v4.68.3)

Updates `tree-sitter` from 0.25.2 to 0.26.0
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](tree-sitter/py-tree-sitter@v0.25.2...v0.26.0)

Updates `typer` from 0.25.1 to 0.26.8
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.25.1...0.26.8)

Updates `yara-x` from 1.17.0 to 1.19.0
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.17.0...v1.19.0)

---
updated-dependencies:
- dependency-name: aiohappyeyeballs
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: anthropic
  dependency-version: 0.115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: anyio
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: certifi
  dependency-version: 2026.6.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: cisco-ai-skill-scanner
  dependency-version: 2.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: fsspec
  dependency-version: 2026.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: huggingface-hub
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: jiter
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: litellm
  dependency-version: 1.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: msgpack
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: openai
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: pydantic-core
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: regex
  dependency-version: 2026.6.28
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: sse-starlette
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: tiktoken
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: tqdm
  dependency-version: 4.68.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-minor
- dependency-name: tree-sitter
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: typer
  dependency-version: 0.26.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
- dependency-name: yara-x
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-patch-minor-391ea2c25c branch from 30b2fa4 to 9f2e1e0 Compare July 2, 2026 04:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants