build(deps): bump python-dotenv from 1.0.1 to 1.2.2

[dependabot]

Bumps python-dotenv from 1.0.1 to 1.2.2.

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

• The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by @​bbc2 in #790c5
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by @​JYOuyang in theskumar/python-dotenv#590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

• skip 000 permission tests for root user by @​burnout-projects in theskumar/python-dotenv#561
• Bump actions/checkout from 5 to 6 in the github-actions group by @​dependabot[bot] in theskumar/python-dotenv#593
• Add Windows testing to CI by @​bbc2 in theskumar/python-dotenv#604
• Improve workflow efficiency with best practices by @​theskumar in theskumar/python-dotenv#609
• Remove the use of sh in tests by @​bbc2 in theskumar/python-dotenv#612

New Contributors

• @​JYOuyang made their first contribution in theskumar/python-dotenv#590
• @​burnout-projects made their first contribution in theskumar/python-dotenv#561
• @​cpackham-atlnz made their first contribution in theskumar/python-dotenv#597

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

v1.2.1

What's Changed

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

• Move more config to pyproject.toml, removed setup.cfg
• Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

• Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@​EpicWink] in #583
• Add support for Python 3.14 by [@​23f3001135] in #579
• Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@​matthewfranglen] in #569

[1.1.1] - 2025-06-24

Fixed

• CLI: Ensure find_dotenv work reliably on python 3.13 by [@​theskumar] in #563

... (truncated)

Commits

• 36004e0 Bump version: 1.2.1 → 1.2.2
• eb20252 docs: update changelog for v1.2.2
• 790c5c0 Merge commit from fork
• 43340da Remove the use of sh in tests (#612)
• 09d7cee docs: clarify override behavior and document FIFO support (#610)
• c8de288 ci: improve workflow efficiency with best practices (#609)
• 7bd9e3d Add Windows testing to CI (#604)
• 1baaf04 Drop Python 3.9 support and update to PyPy 3.11 (#608)
• 4a22cf8 ci: enable testing on Python 3.14t (free-threaded) (#588)
• e2e8e77 Fix license specifier (#597)
• Additional commits viewable in compare view

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[greptile-apps]

Greptile Summary

This is an automated Dependabot PR that bumps python-dotenv from 1.0.1 to 1.2.2 in both pyproject.toml and uv.lock. The upgrade spans three minor versions and includes breaking changes to set_key/unset_key symlink-following behavior, but a grep of the repository confirms these APIs are not used anywhere in the litellm source — only load_dotenv and dotenv_values are called, which are unaffected.

Confidence Score: 5/5

Safe to merge — breaking changes in the new version do not affect any code path in this repository.

The only breaking changes in python-dotenv 1.2.2 are around set_key/unset_key symlink behavior and file mode handling. A full codebase search confirms neither API is used anywhere in litellm source or tests. The APIs that are used (load_dotenv, dotenv_values) are unaffected. The lock file hashes are consistent with the PyPI published artifacts.

No files require special attention.

Important Files Changed

Filename	Overview
pyproject.toml	Single-line version pin change from python-dotenv==1.0.1 to python-dotenv==1.2.2; no other changes.
uv.lock	Lock file updated with new package hashes/URLs for python-dotenv 1.2.2 and a minor exclude-newer timestamp bump; consistent with the pyproject.toml change.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[python-dotenv 1.0.1] -->|bump| B[python-dotenv 1.2.2]
    B --> C{Breaking changes?}
    C -->|set_key / unset_key symlink behavior| D[Check codebase usage]
    D --> E[No usage found in litellm source]
    E --> F[Safe to merge ✅]

Loading

_{Reviews (4): Last reviewed commit: "build(deps): bump python-dotenv from 1.0..." | Re-trigger Greptile}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[techgeniuswang]

Cooooooool!!!!

This upgrade would also help resolve dependency conflicts with FastMCP >=3.0.0, which requires python-dotenv>=1.1.0. Currently litellm 1.83.x pins python-dotenv==1.0.1 and makes uv resolution fail in projects that need both.

[techgeniuswang]

Hi @yuneng-berri and @ishaan-berri — could you please help take a look at this PR when you have a chance, or help assign a reviewer to move it forward?

This dependency bump would help resolve a real downstream compatibility issue for us:

• fastmcp>=3.0.0 requires python-dotenv>=1.1.0
• litellm 1.83.x currently pins python-dotenv==1.0.1

Because of that, uv lock / uv sync fails in projects that need both packages.

Would appreciate any help reviewing this PR or routing it to the right reviewer. Thanks!

[dependabot]

Looks like python-dotenv is up-to-date now, so this is no longer needed.

[techgeniuswang]

Hi @dependabot and maintainers,

I noticed that PR #26188 was closed but not merged.

The issue #26333 regarding python-dotenv being pinned to 1.0.1 is still present in the main branch and in the released versions of LitLLM (e.g., 1.83.7 and v1.83.13-nightly).

Since this PR bumps python-dotenv to >=1.1.0, merging it would properly address #26333. Could someone please review or re-open this PR to merge it, or provide guidance on the upstream fix?

My environment:
- Python 3.11
- LitLLM 1.83.7
- FastMCP >=3.0.0

Thanks!

I noticed that the changes from this PR (#26188) were later incorporated into #26365 on branch litellm_yj_apr23, which bumps python-dotenv to >=1.1.0.

Since this branch addresses the issue reported in #26333, it would be great if litellm_yj_apr23 could be merged into the release branch soon, so downstream projects can benefit from the fix.

Thanks for your work!