Skip to content

chore(deps): bump the ci-python group across 1 directory with 78 updates - #1391

Closed
dependabot[bot] wants to merge 6 commits into
developfrom
dependabot/pip/ci-python-3d04c64bfd
Closed

chore(deps): bump the ci-python group across 1 directory with 78 updates#1391
dependabot[bot] wants to merge 6 commits into
developfrom
dependabot/pip/ci-python-3d04c64bfd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the ci-python group with 78 updates in the / directory:

Package From To
setuptools 83.0.0 84.0.0
strix-agent 1.0.4 1.5.3
google-cloud-aiplatform 1.160.0 1.164.0
protobuf 6.33.6 7.35.1
aiohttp 3.14.1 3.14.3
annotated-types 0.7.0 0.8.0
caido-sdk-client 0.2.0 0.3.0
certifi 2026.6.17 2026.7.22
cffi 2.1.0 2.1.1
charset-normalizer 3.4.9 3.5.0
filelock 3.29.7 3.32.3
fsspec 2026.6.0 2026.7.0
google-api-core 2.31.0 2.34.0
google-auth 2.55.2 2.56.3
google-cloud-bigquery 3.42.2 3.43.0
google-cloud-core 2.6.0 2.6.1
google-cloud-storage 3.12.1 3.13.1
google-genai 2.11.0 2.18.1
google-resumable-media 2.10.0 2.10.1
googleapis-common-protos 1.75.0 1.75.1
grpc-google-iam-v1 0.14.4 0.14.5
grpcio 1.82.1 1.83.0
grpcio-status 1.81.1 1.83.0
hf-xet 1.5.1 1.6.0
huggingface-hub 1.23.0 1.27.0
importlib-metadata 8.9.0 9.0.0
litellm 1.89.2 1.96.2
mcp 1.28.1 2.0.0
openai 2.45.0 3.0.0
openai-agents 0.14.6 0.20.0
packaging 26.2 26.3
platformdirs 4.10.0 4.11.3
proto-plus 1.28.1 1.28.3
pydantic-core 2.46.4 2.48.0
pydantic-settings 2.14.2 2.15.0
regex 2026.7.10 2026.7.19
sse-starlette 3.4.5 3.4.8
starlette 1.3.1 1.6.0
tqdm 4.68.4 4.70.0
typing-inspection 0.4.2 0.4.4
uvicorn 0.51.0 0.52.3
websockets 15.0.1 17.0.1
yarl 1.24.2 1.24.5
fastapi 0.139.0 0.141.1
sqlalchemy 2.0.51 2.0.52
alembic 1.18.5 1.19.1
greenlet 3.5.3 3.5.5
google-auth-httplib2 0.4.0 0.4.1
prometheus-fastapi-instrumentator 8.0.2 8.1.0
opentelemetry-api 1.43.0 1.44.0
opentelemetry-sdk 1.43.0 1.44.0
opentelemetry-instrumentation-fastapi 0.64b0 0.65b0
opentelemetry-exporter-otlp 1.43.0 1.44.0
wheel 0.47.0 0.48.0
icalendar 7.2.0 7.2.2
ruff 0.15.21 0.16.3
pydantic-ai-slim 2.9.0 2.30.0
genai-prices 0.0.71 0.1.2
httpcore2 2.5.0 2.10.0
httpx2 2.5.0 2.10.0
logfire-api 4.37.0 4.40.0
pydantic-graph 2.9.0 2.30.0
annotated-doc 0.0.4 0.0.5
asgiref 3.11.1 3.12.1
langchain-core 1.4.9 1.5.4
langsmith 0.10.2 0.10.18
mako 1.3.12 1.4.1
opentelemetry-exporter-otlp-proto-common 1.43.0 1.44.0
opentelemetry-exporter-otlp-proto-grpc 1.43.0 1.44.0
opentelemetry-exporter-otlp-proto-http 1.43.0 1.44.0
opentelemetry-instrumentation 0.64b0 0.65b0
opentelemetry-instrumentation-asgi 0.64b0 0.65b0
opentelemetry-proto 1.43.0 1.44.0
opentelemetry-semantic-conventions 0.64b0 0.65b0
opentelemetry-util-http 0.64b0 0.65b0
prometheus-client 0.25.0 0.26.0
wrapt 2.2.2 2.3.0
xxhash 3.8.1 4.0.0

Updates setuptools from 83.0.0 to 84.0.0

Changelog

Sourced from setuptools's changelog.

v84.0.0

Features

  • Newline-separated keywords and platformspypa/setuptools#4887old specification <https://peps.python.org/pep-0345/>_ separated items with spaces and the current one uses commas. (#4887)
  • Extensionpypa/distutils#373#5022)
  • The C compiler modules now emit log messages through their own compilers.C.* loggers instead of the distutils root logger, part of decoupling the compilers package from distutils. The logger names are normalized to a stable compilers.C.* prefix so they remain constant as the package migrates toward a standalone compilers.C distribution. (#5266)
  • The C compilers gained a Compiler.call method -- a thin wrapper over subprocess.check_call (with macOS deployment-target env injection) that is the modern replacement for Compiler.spawn. The compilers no longer depend on distutils.spawn, distutils.dir_util, distutils.file_util, distutils._modified, or distutils.util.execute/split_quoted: the generic newer/newer_group and split_quoted helpers are vendored into the compilers package, and Compiler.mkpath/move_file/execute are implemented directly on the standard library (os.makedirs/shutil.move). The methods are retained for backward compatibility. (#5267)
  • The compilers no longer depend on distutils.util, distutils.version, distutils.compat, or distutils._macos_compat. The platform-identification helpers (get_platform/get_host_platform/is_mingw) now live in distutils.compilers.platform.detect and the macOS deployment-target logic and compiler_fixup in distutils.compilers.platform.macos; CygwinCCompiler.gcc_version returns a packaging.version.Version. distutils.util re-exports the platform/macOS helpers from their new homes for backward compatibility rather than keeping duplicate copies. (sysconfig lookups still route through distutils pending its own decoupling.) (#5268)
  • The compilers now read their build configuration from the standard library's sysconfig instead of distutils.sysconfig. Per-compiler customization -- previously distutils.sysconfig.customize_compiler -- has moved into Compiler.configure_system(): a no-op on the base class, with UnixCCompiler applying the compiler/flag/archiver settings CPython recorded in sysconfig (and the usual CC/CFLAGS/LDSHARED/… environment overrides). distutils.sysconfig.customize_compiler is retained as a thin wrapper that calls compiler.configure_system(). (#5269)

Bugfixes

  • The MSVC linker now passes its arguments through a response file when the command line would exceed the Windows maximum length, fixing failures when linking a large number of objects. (#4177)
  • The Cygwin and MinGW compilers now pass -O1 instead of a bare -O. The two are equivalent to GCC, but cc1 rejected the bare form when building 32-bit extensions with -m32. -- by :user:dchaudhari7177 (#4873)
  • copy_filepypa/distutils#379#5079)
  • Setuptools wheels no longer bundled the project's own test modules. -- by :user:itscloud0 (#5212)
  • build_ext no longer fails when cross-compiling with a compiler other than MSVC (such as MinGW). Compiler now provides a no-op initialize()pypa/distutils#399

Improved Documentation

  • Clarified what "correspond exactly to the directory structure" means in the packages section of the Package Discovery user guide. (#4109)
  • Documented how bdist_wheel's py_limited_api option controls abi3 wheel tagging for extension modules -- by :user:Himanshuagrawal4 (#4741)

Deprecations and Removals

  • Compiler.spawn is deprecated in favor of the new Compiler.call. call raises native subprocess exceptions; spawn remains as a shim that emits a DeprecationWarning and translates them to DistutilsExecError. The MSVC spawn compatibility shim for third-party monkeypatches predating the env argument (numpy.distutils before 1.19, per pypa/distutils#15) has been removed. distutils.spawn.spawn is likewise reduced to a thin wrapper around subprocess.check_call: it no longer resolves cmd[0] via shutil.which (subprocess searches PATH itself) nor injects MACOSX_DEPLOYMENT_TARGET (that now lives with the compilers, the only callers to which it applied). (#5267)
  • Building an extension with a MACOSX_DEPLOYMENT_TARGET lower than the interpreter's configured value now raises compilers.errors.PlatformError instead of distutils.errors.DistutilsPlatformError (the macOS deployment-target check moved into the compilers package). CygwinCCompiler.gcc_version returns a packaging.version.Version rather than the removed distutils.version.LooseVersion. Completing the transition begun in pypa/distutils#246, UnixCCompiler.runtime_library_dir_option now returns the ["-Wl,--enable-new-dtags", "-Wl,-rpath,<dir>"] list directly for GNU ld rather than collapsing it into a single string, and the temporary distutils.compat.consolidate_linker_args shim has been removed. (#5268)
  • The compilers now define their own exception vocabulary instead of borrowing distutils' framework errors. Language-agnostic exceptions (Error, UnknownFileType, and a new PlatformError) live at distutils.compilers.errors, leaving room for future compilers.<language> siblings; the C/C++-specific CompileError/LinkError/LibError/PreprocessError remain in distutils.compilers.C.errors. The compilers now raise compilers.errors.PlatformError where they previously raised distutils.errors.DistutilsPlatformError/DistutilsModuleError, and compilers._modified.newer raises the stdlib FileNotFoundError. distutils.errors keeps its own framework exceptions and re-exports the compiler ones (CCompilerError, CompileError, etc.) for backward compatibility; because CCompilerError is compilers.errors.Error, code catching it (as distutils' top-level handlers do) still catches the new PlatformError. (#5270)
  • customize_compiler now asserts that the compiler-related config variables (CC, CXX, CFLAGS, etc.) resolve to strings, raising AssertionError if any are unexpectedly Nonepypa/distutils#363
Commits

Updates strix-agent from 1.0.4 to 1.5.3

Release notes

Sourced from strix-agent's releases.

v1.5.3

What's Changed

Full Changelog: usestrix/strix@v1.5.2...v1.5.3

v1.5.2

What's Changed

Full Changelog: usestrix/strix@v1.5.1...v1.5.2

v1.5.1

What's Changed

Full Changelog: usestrix/strix@v1.5.0...v1.5.1

v1.5.0

What's Changed

... (truncated)

Commits
  • 7cc9fa9 chore: release v1.5.3
  • 174c16f fix(llm): send OpenRouter app attribution on the request itself (#1045)
  • 94a2586 fix(container): write the browser profile as root
  • 372e27f chore(container): drop explanatory comment
  • ad727ed fix(container): keep the browser env alive where image ENV is dropped
  • 7b3c8f9 fix(container): reclaim abandoned browser sessions (#1034)
  • ae07af6 chore: drop explanatory comment
  • 649a2e2 fix(llm): omit parallel_tool_calls on tool-less requests
  • 597aae6 chore: release v1.5.2
  • 06b158d fix(runner): settle child agents before closing sessions at wind-down (#1025)
  • Additional commits viewable in compare view

Updates google-cloud-aiplatform from 1.160.0 to 1.164.0

Release notes

Sourced from google-cloud-aiplatform's releases.

v1.164.0

1.164.0 (2026-08-12)

Features

  • Add build configuration support to Vertex AI Reasoning Engine (e20c003)
  • Add encryption_spec (CMEK) support to EvaluationMetric SDK. (6dd3179)
  • Add encryption_spec (CMEK) support to EvaluationRun SDK (50a43af)
  • Add encryption_spec (CMEK) support to EvaluationSet resource (c2244f9)
  • Add endpoint field to BatchPredictionJob for bring-your-own-endpoint batch prediction (19144a4)
  • Add sandbox templates and snapshots submodules to the Vertex AI GenAI SDK for Java. (f7e3a70)
  • Add Tool.ExaAiSearch to Vertex AI v1 (19144a4)
  • Add Tool.ExaAiSearch to Vertex AI v1beta1 (19144a4)
  • Allow users to configure max wait time for prompt management queries for Python and JS (ad63bfe)
  • Allow users to search for spaces without requiring admin privileges (19144a4)
  • Forward per-request labels to RunConfig in streaming_agent_run_with_events (f8eb68c)
  • GenAI Client(evals) - async auto-create EvaluationExperiment parity (e689f0e)
  • GenAI Client(evals) - auto-create EvaluationExperiment in create_evaluation_run (eb75e14)
  • GenAI Client(evals) - Pin SDK predefined metrics to latest Gemini 3.5 Flash versions by default (f5d94b4)
  • GenAI Client(evals) - Support show() for EvaluationDataset built from eval_cases (5b1a0aa)
  • Support Endpoints module for OpenModel prediction, and .get/undeploy/delete (8848353)
  • Update Compute v1 to revision 20260722 (19144a4)

Bug Fixes

  • Add aiohttp to ADK extra requirements. (390f2d1)
  • deps: Update the Java code generator (gapic-generator-java) to v2.75.0 (19144a4)
  • Enable automatic session creation in ADK template. (f343270)
  • GenAI Client(evals) - skip agent config fetch when agent and client locations differ (8b43add)
  • Import iam_credentials_v1 lazily in the sandboxes module. (2a18bff)
  • Persist the AgentCard on Agent Engine update() (5d5a1ca), refs #7064
  • Remove the google-cloud-iam dependency from the agent_engines extra. (25deb44)
  • Update generator configuration and SDK bindings for Agent Engine Session update calls to return Session directly. (2702857)

Documentation

  • A comment for field order_by in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for field query in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for field spaces in message .google.chat.v1.SearchSpacesResponse is changed (19144a4)
  • A comment for field use_admin_access in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for method SearchSpaces in service ChatService is changed (19144a4)
  • Communicate on upcoming updates in the next major version (c64b25f)
  • Communicate on upcoming updates in the next major version (76b9616)
  • Update copyright year (19144a4)
  • Update various comments (19144a4)

v1.163.0

... (truncated)

Changelog

Sourced from google-cloud-aiplatform's changelog.

1.164.0 (2026-08-12)

Features

  • Add build configuration support to Vertex AI Reasoning Engine (e20c003)
  • Add encryption_spec (CMEK) support to EvaluationMetric SDK. (6dd3179)
  • Add encryption_spec (CMEK) support to EvaluationRun SDK (50a43af)
  • Add encryption_spec (CMEK) support to EvaluationSet resource (c2244f9)
  • Add endpoint field to BatchPredictionJob for bring-your-own-endpoint batch prediction (19144a4)
  • Add sandbox templates and snapshots submodules to the Vertex AI GenAI SDK for Java. (f7e3a70)
  • Add Tool.ExaAiSearch to Vertex AI v1 (19144a4)
  • Add Tool.ExaAiSearch to Vertex AI v1beta1 (19144a4)
  • Allow users to configure max wait time for prompt management queries for Python and JS (ad63bfe)
  • Allow users to search for spaces without requiring admin privileges (19144a4)
  • Forward per-request labels to RunConfig in streaming_agent_run_with_events (f8eb68c)
  • GenAI Client(evals) - async auto-create EvaluationExperiment parity (e689f0e)
  • GenAI Client(evals) - auto-create EvaluationExperiment in create_evaluation_run (eb75e14)
  • GenAI Client(evals) - Pin SDK predefined metrics to latest Gemini 3.5 Flash versions by default (f5d94b4)
  • GenAI Client(evals) - Support show() for EvaluationDataset built from eval_cases (5b1a0aa)
  • Support Endpoints module for OpenModel prediction, and .get/undeploy/delete (8848353)
  • Update Compute v1 to revision 20260722 (19144a4)

Bug Fixes

  • Add aiohttp to ADK extra requirements. (390f2d1)
  • deps: Update the Java code generator (gapic-generator-java) to v2.75.0 (19144a4)
  • Enable automatic session creation in ADK template. (f343270)
  • GenAI Client(evals) - skip agent config fetch when agent and client locations differ (8b43add)
  • Import iam_credentials_v1 lazily in the sandboxes module. (2a18bff)
  • Persist the AgentCard on Agent Engine update() (5d5a1ca), refs #7064
  • Remove the google-cloud-iam dependency from the agent_engines extra. (25deb44)
  • Update generator configuration and SDK bindings for Agent Engine Session update calls to return Session directly. (2702857)

Documentation

  • A comment for field order_by in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for field query in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for field spaces in message .google.chat.v1.SearchSpacesResponse is changed (19144a4)
  • A comment for field use_admin_access in message .google.chat.v1.SearchSpacesRequest is changed (19144a4)
  • A comment for method SearchSpaces in service ChatService is changed (19144a4)
  • Communicate on upcoming updates in the next major version (c64b25f)
  • Communicate on upcoming updates in the next major version (76b9616)
  • Update copyright year (19144a4)
  • Update various comments (19144a4)

1.163.0 (2026-07-28)

... (truncated)

Commits
  • e2eeff9 chore(main): release 1.164.0 (#7027)
  • f5d94b4 feat: GenAI Client(evals) - Pin SDK predefined metrics to latest Gemini 3.5 F...
  • 25deb44 fix: Remove the google-cloud-iam dependency from the agent_engines extra.
  • 50a43af feat: Add encryption_spec (CMEK) support to EvaluationRun SDK
  • 5d5a1ca fix: persist the AgentCard on Agent Engine update()
  • c2244f9 feat: Add encryption_spec (CMEK) support to EvaluationSet resource
  • 7d42b7f chore: Relax litellm pin for Python 3.14
  • 6dd3179 feat: Add encryption_spec (CMEK) support to EvaluationMetric SDK.
  • 8848353 feat: Support Endpoints module for OpenModel prediction, and .get/undeploy/de...
  • e20c003 feat: add build configuration support to Vertex AI Reasoning Engine
  • Additional commits viewable in compare view

Updates protobuf from 6.33.6 to 7.35.1

Commits

Updates aiohttp from 3.14.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.


3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates annotated-types from 0.7.0 to 0.8.0

Release notes

Sourced from annotated-types's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: annotated-types/annotated-types@v0.7.0...v0.8.0

Commits

Updates caido-sdk-client from 0.2.0 to 0.3.0

Commits

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates cffi from 2.1.0 to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

Commits

Updates charset-normalizer from 3.4.9 to 3.5.0

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.0

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).
Changelog

Sourced from charset-normalizer's changelog.

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file w...

    Description has been truncated


    Open in Devin Review

Bumps the ci-python group with 78 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [setuptools](https://github.com/pypa/setuptools) | `83.0.0` | `84.0.0` |
| [strix-agent](https://github.com/usestrix/strix) | `1.0.4` | `1.5.3` |
| [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.160.0` | `1.164.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.35.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.1` | `3.14.3` |
| [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` |
| [caido-sdk-client](https://github.com/caido-community/sdk-py) | `0.2.0` | `0.3.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.6.17` | `2026.7.22` |
| [cffi](https://github.com/python-cffi/cffi) | `2.1.0` | `2.1.1` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.9` | `3.5.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.7` | `3.32.3` |
| [fsspec](https://github.com/fsspec/filesystem_spec) | `2026.6.0` | `2026.7.0` |
| [google-api-core](https://github.com/googleapis/google-cloud-python) | `2.31.0` | `2.34.0` |
| [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.2` | `2.56.3` |
| [google-cloud-bigquery](https://github.com/googleapis/python-bigquery) | `3.42.2` | `3.43.0` |
| [google-cloud-core](https://github.com/googleapis/google-cloud-python) | `2.6.0` | `2.6.1` |
| [google-cloud-storage](https://github.com/googleapis/google-cloud-python) | `3.12.1` | `3.13.1` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.11.0` | `2.18.1` |
| [google-resumable-media](https://github.com/googleapis/google-cloud-python) | `2.10.0` | `2.10.1` |
| [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.75.0` | `1.75.1` |
| [grpc-google-iam-v1](https://github.com/googleapis/google-cloud-python) | `0.14.4` | `0.14.5` |
| [grpcio](https://github.com/grpc/grpc) | `1.82.1` | `1.83.0` |
| [grpcio-status](https://grpc.io) | `1.81.1` | `1.83.0` |
| [hf-xet](https://github.com/huggingface/xet-core) | `1.5.1` | `1.6.0` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `1.23.0` | `1.27.0` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.9.0` | `9.0.0` |
| [litellm](https://github.com/BerriAI/litellm) | `1.89.2` | `1.96.2` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.28.1` | `2.0.0` |
| [openai](https://github.com/openai/openai-python) | `2.45.0` | `3.0.0` |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.14.6` | `0.20.0` |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.10.0` | `4.11.3` |
| [proto-plus](https://github.com/googleapis/google-cloud-python) | `1.28.1` | `1.28.3` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.48.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.7.10` | `2026.7.19` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.4.5` | `3.4.8` |
| [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.6.0` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.4` | `4.70.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.3` |
| [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `17.0.1` |
| [yarl](https://github.com/aio-libs/yarl) | `1.24.2` | `1.24.5` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.141.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.52` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.18.5` | `1.19.1` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.5.3` | `3.5.5` |
| [google-auth-httplib2](https://github.com/googleapis/google-cloud-python) | `0.4.0` | `0.4.1` |
| [prometheus-fastapi-instrumentator](https://github.com/trallnag/prometheus-fastapi-instrumentator) | `8.0.2` | `8.1.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.65b0` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |
| [icalendar](https://github.com/collective/icalendar) | `7.2.0` | `7.2.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.16.3` |
| [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai) | `2.9.0` | `2.30.0` |
| [genai-prices](https://github.com/pydantic/genai-prices) | `0.0.71` | `0.1.2` |
| [httpcore2](https://github.com/pydantic/httpx2) | `2.5.0` | `2.10.0` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.5.0` | `2.10.0` |
| [logfire-api](https://github.com/pydantic/logfire) | `4.37.0` | `4.40.0` |
| [pydantic-graph](https://github.com/pydantic/pydantic-ai) | `2.9.0` | `2.30.0` |
| [annotated-doc](https://github.com/fastapi/annotated-doc) | `0.0.4` | `0.0.5` |
| [asgiref](https://github.com/django/asgiref) | `3.11.1` | `3.12.1` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.9` | `1.5.4` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.10.2` | `0.10.18` |
| [mako](https://github.com/sqlalchemy/mako) | `1.3.12` | `1.4.1` |
| [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.65b0` |
| [opentelemetry-instrumentation-asgi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.65b0` |
| [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.64b0` | `0.65b0` |
| [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.65b0` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.25.0` | `0.26.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.2.2` | `2.3.0` |
| [xxhash](https://github.com/ifduyue/python-xxhash) | `3.8.1` | `4.0.0` |



Updates `setuptools` from 83.0.0 to 84.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v83.0.0...v84.0.0)

Updates `strix-agent` from 1.0.4 to 1.5.3
- [Release notes](https://github.com/usestrix/strix/releases)
- [Commits](usestrix/strix@v1.0.4...v1.5.3)

Updates `google-cloud-aiplatform` from 1.160.0 to 1.164.0
- [Release notes](https://github.com/googleapis/python-aiplatform/releases)
- [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-aiplatform@v1.160.0...v1.164.0)

Updates `protobuf` from 6.33.6 to 7.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `aiohttp` from 3.14.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](annotated-types/annotated-types@v0.7.0...v0.8.0)

Updates `caido-sdk-client` from 0.2.0 to 0.3.0
- [Commits](https://github.com/caido-community/sdk-py/commits)

Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `cffi` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.1.0...v2.1.1)

Updates `charset-normalizer` from 3.4.9 to 3.5.0
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.9...3.5.0)

Updates `filelock` from 3.29.7 to 3.32.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.7...3.32.3)

Updates `fsspec` from 2026.6.0 to 2026.7.0
- [Commits](fsspec/filesystem_spec@2026.6.0...2026.7.0)

Updates `google-api-core` from 2.31.0 to 2.34.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-api-core-v2.31.0...google-api-core-v2.34.0)

Updates `google-auth` from 2.55.2 to 2.56.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.2...google-auth-v2.56.3)

Updates `google-cloud-bigquery` from 3.42.2 to 3.43.0
- [Release notes](https://github.com/googleapis/python-bigquery/releases)
- [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/python-bigquery/commits)

Updates `google-cloud-core` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-core-v2.6.0...google-cloud-core-v2.6.1)

Updates `google-cloud-storage` from 3.12.1 to 3.13.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.12.1...google-cloud-storage-v3.13.1)

Updates `google-genai` from 2.11.0 to 2.18.1
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.11.0...v2.18.1)

Updates `google-resumable-media` from 2.10.0 to 2.10.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-resumable-media-v2.10.0...google-resumable-media-v2.10.1)

Updates `googleapis-common-protos` from 1.75.0 to 1.75.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.75.0...googleapis-common-protos-v1.75.1)

Updates `grpc-google-iam-v1` from 0.14.4 to 0.14.5
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@grpc-google-iam-v1-v0.14.4...grpc-google-iam-v1-v0.14.5)

Updates `grpcio` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.82.1...v1.83.0)

Updates `grpcio-status` from 1.81.1 to 1.83.0

Updates `hf-xet` from 1.5.1 to 1.6.0
- [Release notes](https://github.com/huggingface/xet-core/releases)
- [Commits](huggingface/xet-core@v1.5.1...v1.6.0)

Updates `huggingface-hub` from 1.23.0 to 1.27.0
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.23.0...v1.27.0)

Updates `importlib-metadata` from 8.9.0 to 9.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.9.0...v9.0.0)

Updates `litellm` from 1.89.2 to 1.96.2
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.89.2...v1.96.2)

Updates `mcp` from 1.28.1 to 2.0.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v2.0.0)

Updates `openai` from 2.45.0 to 3.0.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.45.0...v3.0.0)

Updates `openai-agents` from 0.14.6 to 0.20.0
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.14.6...v0.20.0)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `platformdirs` from 4.10.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.0...4.11.3)

Updates `proto-plus` from 1.28.1 to 1.28.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@proto-plus-v1.28.1...proto-plus-v1.28.3)

Updates `pydantic-core` from 2.46.4 to 2.48.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.4...core-v2.48.0)

Updates `pydantic-settings` from 2.14.2 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `regex` from 2026.7.10 to 2026.7.19
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.7.10...2026.7.19)

Updates `sse-starlette` from 3.4.5 to 3.4.8
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.4.5...v3.4.8)

Updates `starlette` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.3.1...1.6.0)

Updates `tqdm` from 4.68.4 to 4.70.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.4...v4.70.0)

Updates `typing-inspection` from 0.4.2 to 0.4.4
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](pydantic/typing-inspection@v0.4.2...v0.4.4)

Updates `uvicorn` from 0.51.0 to 0.52.3
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.3)

Updates `websockets` from 15.0.1 to 17.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@15.0.1...17.0.1)

Updates `yarl` from 1.24.2 to 1.24.5
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.24.2...v1.24.5)

Updates `fastapi` from 0.139.0 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.0...0.141.1)

Updates `sqlalchemy` from 2.0.51 to 2.0.52
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `greenlet` from 3.5.3 to 3.5.5
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.5.3...3.5.5)

Updates `google-auth-httplib2` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-httplib2-v0.4.0...google-auth-httplib2-v0.4.1)

Updates `prometheus-fastapi-instrumentator` from 8.0.2 to 8.1.0
- [Release notes](https://github.com/trallnag/prometheus-fastapi-instrumentator/releases)
- [Changelog](https://github.com/trallnag/prometheus-fastapi-instrumentator/blob/master/CHANGELOG.md)
- [Commits](trallnag/prometheus-fastapi-instrumentator@v8.0.2...v8.1.0)

Updates `opentelemetry-api` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-instrumentation-fastapi` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-exporter-otlp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

Updates `icalendar` from 7.2.0 to 7.2.2
- [Release notes](https://github.com/collective/icalendar/releases)
- [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
- [Commits](collective/icalendar@v7.2.0...v7.2.2)

Updates `ruff` from 0.15.21 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.16.3)

Updates `pydantic-ai-slim` from 2.9.0 to 2.30.0
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v2.9.0...v2.30.0)

Updates `genai-prices` from 0.0.71 to 0.1.2
- [Release notes](https://github.com/pydantic/genai-prices/releases)
- [Changelog](https://github.com/pydantic/genai-prices/blob/main/RELEASE.md)
- [Commits](pydantic/genai-prices@v0.0.71...v0.1.2)

Updates `httpcore2` from 2.5.0 to 2.10.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Commits](pydantic/httpx2@v2.5.0...v2.10.0)

Updates `httpx2` from 2.5.0 to 2.10.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.5.0...v2.10.0)

Updates `logfire-api` from 4.37.0 to 4.40.0
- [Release notes](https://github.com/pydantic/logfire/releases)
- [Changelog](https://github.com/pydantic/logfire/blob/main/CHANGELOG.md)
- [Commits](pydantic/logfire@v4.37.0...v4.40.0)

Updates `pydantic-graph` from 2.9.0 to 2.30.0
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v2.9.0...v2.30.0)

Updates `annotated-doc` from 0.0.4 to 0.0.5
- [Release notes](https://github.com/fastapi/annotated-doc/releases)
- [Changelog](https://github.com/fastapi/annotated-doc/blob/main/release-notes.md)
- [Commits](fastapi/annotated-doc@0.0.4...0.0.5)

Updates `asgiref` from 3.11.1 to 3.12.1
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](django/asgiref@3.11.1...3.12.1)

Updates `langchain-core` from 1.4.9 to 1.5.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.9...langchain-core==1.5.4)

Updates `langsmith` from 0.10.2 to 0.10.18
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.10.2...v0.10.18)

Updates `mako` from 1.3.12 to 1.4.1
- [Release notes](https://github.com/sqlalchemy/mako/releases)
- [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/mako/commits)

Updates `opentelemetry-exporter-otlp-proto-common` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-instrumentation` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-asgi` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-proto` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0)

Updates `opentelemetry-semantic-conventions` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-util-http` from 0.64b0 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `prometheus-client` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.25.0...v0.26.0)

Updates `wrapt` from 2.2.2 to 2.3.0
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.2.2...2.3.0)

Updates `xxhash` from 3.8.1 to 4.0.0
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v3.8.1...v4.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 84.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: strix-agent
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-cloud-aiplatform
  dependency-version: 1.164.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: protobuf
  dependency-version: 7.35.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: annotated-types
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: caido-sdk-client
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: charset-normalizer
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: filelock
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: fsspec
  dependency-version: 2026.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-api-core
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-auth
  dependency-version: 2.56.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-cloud-bigquery
  dependency-version: 3.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-cloud-core
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: google-cloud-storage
  dependency-version: 3.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-genai
  dependency-version: 2.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: google-resumable-media
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: googleapis-common-protos
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: grpc-google-iam-v1
  dependency-version: 0.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: grpcio
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: grpcio-status
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: hf-xet
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: huggingface-hub
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: importlib-metadata
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: litellm
  dependency-version: 1.96.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: mcp
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: openai
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: openai-agents
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: platformdirs
  dependency-version: 4.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: proto-plus
  dependency-version: 1.28.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: pydantic-core
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: regex
  dependency-version: 2026.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: sse-starlette
  dependency-version: 3.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: tqdm
  dependency-version: 4.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: typing-inspection
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: uvicorn
  dependency-version: 0.52.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: websockets
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
- dependency-name: yarl
  dependency-version: 1.24.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: sqlalchemy
  dependency-version: 2.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: alembic
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: greenlet
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: google-auth-httplib2
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: prometheus-fastapi-instrumentator
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-api
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: ci-python
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: icalendar
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: pydantic-ai-slim
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: genai-prices
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: httpcore2
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: httpx2
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: logfire-api
  dependency-version: 4.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: pydantic-graph
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: annotated-doc
  dependency-version: 0.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: asgiref
  dependency-version: 3.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: langchain-core
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: langsmith
  dependency-version: 0.10.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-python
- dependency-name: mako
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-exporter-otlp-proto-common
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: ci-python
- dependency-name: opentelemetry-instrumentation-asgi
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: ci-python
- dependency-name: opentelemetry-proto
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: ci-python
- dependency-name: opentelemetry-util-http
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: ci-python
- dependency-name: prometheus-client
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: wrapt
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-python
- dependency-name: xxhash
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from seonghobae as a code owner August 17, 2026 03:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 17, 2026
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

PR governance metadata gate is not ready for f8117892ce00717a2bdab2c78e979ceda59e4338:

  • 1 unresolved current review thread(s) remain.

seonghobae and others added 2 commits August 17, 2026 17:28
…ix pins

Reuse the installable backend hash lock and keep Strix on the reviewed
strix-agent==1.0.4 / aiplatform 1.160.0 / protobuf 6.33.6 set because
strix-agent 1.5.3 requires cryptography<49.

Co-authored-by: seonghobae <seonghobae@me.com>

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode cannot approve yet because required coverage evidence did not pass.

Review outcome

1. HIGH .github/workflows/opencode-review.yml:1 - Coverage evidence did not prove required test/docstring evidence

  • Problem: The required coverage-evidence job result was failure, so OpenCode cannot establish approval sufficiency for this head.

  • Root cause: Automated approval is only valid when the same-head coverage-evidence job proves supported repository test suites passed and configured docstring gates passed or were advisory, or reports not applicable because no supported source files or package manifests exist. Missing, failed, skipped, unavailable, or unsupported-tooling test evidence is a blocker.

  • Fix: Install or configure the repository test/docstring evidence tooling when source files or package manifests exist, rerun the current-head coverage-evidence job, and approve only after it reports success with required evidence or explicit no-source not-applicable evidence.

  • Regression test: Keep the approval branch checking needs.coverage-evidence.result == success before posting APPROVE, and publish REQUEST_CHANGES when coverage-evidence blocker states such as cancelled, skipped, failed, unsupported-tooling, or below-100 evidence are present.

  • Result: REQUEST_CHANGES

  • Reason: coverage-evidence result was failure, so required test/docstring evidence was not proven for current head 08226072060ec9a55836d4897764b21daaf71b6f.

  • Head SHA: 08226072060ec9a55836d4897764b21daaf71b6f

  • Workflow run: 32137428990

  • Workflow attempt: 1

Coverage evidence

Coverage evidence job did not run or did not publish coverage evidence.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Changed file (4 files)"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Changed file (4 files)"]
  R1 --> V1["required checks"]
  Evidence --> S2["Backend (7 files)"]
  S2 --> I2["API and service runtime"]
  I2 --> R2["Review risk: Backend (7 files)"]
  R2 --> V2["backend tests"]
  Evidence --> S3["Docs: container-provenance-contract.md"]
  S3 --> I3["operator or user guidance"]
  I3 --> R3["Review risk: Docs: container-provenance-contract.md"]
  R3 --> V3["docs review"]
Loading

@opencode-agent

Copy link
Copy Markdown
Contributor

OpenCode Review Overview

  • Head SHA: 08226072060ec9a55836d4897764b21daaf71b6f
  • Workflow run: 32137428990
  • Workflow attempt: 1
  • Gate result: REQUEST_CHANGES (approval step)

Pull request overview

OpenCode cannot approve yet because required coverage evidence did not pass.

Review outcome

1. HIGH .github/workflows/opencode-review.yml:1 - Coverage evidence did not prove required test/docstring evidence

  • Problem: The required coverage-evidence job result was failure, so OpenCode cannot establish approval sufficiency for this head.

  • Root cause: Automated approval is only valid when the same-head coverage-evidence job proves supported repository test suites passed and configured docstring gates passed or were advisory, or reports not applicable because no supported source files or package manifests exist. Missing, failed, skipped, unavailable, or unsupported-tooling test evidence is a blocker.

  • Fix: Install or configure the repository test/docstring evidence tooling when source files or package manifests exist, rerun the current-head coverage-evidence job, and approve only after it reports success with required evidence or explicit no-source not-applicable evidence.

  • Regression test: Keep the approval branch checking needs.coverage-evidence.result == success before posting APPROVE, and publish REQUEST_CHANGES when coverage-evidence blocker states such as cancelled, skipped, failed, unsupported-tooling, or below-100 evidence are present.

  • Result: REQUEST_CHANGES

  • Reason: coverage-evidence result was failure, so required test/docstring evidence was not proven for current head 08226072060ec9a55836d4897764b21daaf71b6f.

  • Head SHA: 08226072060ec9a55836d4897764b21daaf71b6f

  • Workflow run: 32137428990

  • Workflow attempt: 1

Coverage evidence

Coverage evidence job did not run or did not publish coverage evidence.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Changed file (4 files)"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Changed file (4 files)"]
  R1 --> V1["required checks"]
  Evidence --> S2["Backend (7 files)"]
  S2 --> I2["API and service runtime"]
  I2 --> R2["Review risk: Backend (7 files)"]
  R2 --> V2["backend tests"]
  Evidence --> S3["Docs: container-provenance-contract.md"]
  S3 --> I3["operator or user guidance"]
  I3 --> R3["Review risk: Docs: container-provenance-contract.md"]
  R3 --> V3["docs review"]
Loading

Copy link
Copy Markdown
Contributor

@opencode-agent review

Fresh same-head review request for 08226072060ec9a55836d4897764b21daaf71b6f. Repository-owned Application CI, Security Scan, Bandit, Dependency Review, Semgrep and Docker build are terminal-success on this exact head, and the Python 3.14/Strix dependency repair is already part of the canonical Dependabot branch. Recompute same-head coverage/test/docstring evidence after the central materializer repair and return a new formal verdict; the prior coverage-evidence REQUEST_CHANGES must not be treated as a current source finding.

@seonghobae
seonghobae enabled auto-merge (squash) August 20, 2026 12:25

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

View 1 additional finding in Devin Review.

Open in Devin Review

pydantic-ai-slim[openai]==2.9.0 \
--hash=sha256:11b812833eb75cfcc31c86b6e2db75e28cade6bb746844e28a40eb51b04a09d3 \
--hash=sha256:560a860cb67cf7732b16fb40e1d9205d75c02934e75e41db7ccb104ebc9ea266
pydantic-ai-slim[openai]==2.30.0 \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Outdated version-compatibility note next to the upgraded agent dependency

The explanatory note kept next to the agent dependency (pydantic-ai-slim[openai]==2.30.0 at backend/requirements-agent.txt:17) still states the old facts after the version was raised, so it now claims a wrong compatible version and the wrong core package version.
Impact: A maintainer reading it could pick an incorrect version and break the optional agent install.

Stale pin-compatibility comment mechanism

Lines backend/requirements-agent.txt:15-16 say "Version 2.8.0 is the newest 2.x release compatible with the core requirements-hashes.txt pin of openai==2.44.0; 2.9.0 requires openai>=2.45.0." This PR bumped the actual pin to pydantic-ai-slim[openai]==2.30.0 (backend/requirements-agent.txt:17) and the core openai pin to 3.0.0 (backend/requirements.txt:16), so both the referenced core version (openai==2.44.0) and the "newest compatible 2.x = 2.8.0" claim are now factually wrong. The comment block was left unchanged while the pin it documents changed.

Prompt for agents
The comment block at backend/requirements-agent.txt lines 12-16 documents the pydantic-ai-slim pin and its compatibility with the core openai pin. It still says the core pin is openai==2.44.0 and that pydantic-ai 2.8.0 is the newest compatible 2.x release. After this PR the actual pin is pydantic-ai-slim[openai]==2.30.0 (line 17) and the core openai pin in backend/requirements.txt is 3.0.0. Update the comment so the referenced core openai version and the compatible pydantic-ai version reflect the current pins, so a future maintainer does not rely on the stale compatibility claim.
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@opencode-agent
opencode-agent Bot disabled auto-merge August 21, 2026 03:39
@seonghobae
seonghobae enabled auto-merge (squash) August 21, 2026 08:41
@opencode-agent
opencode-agent Bot disabled auto-merge August 21, 2026 11:47
@seonghobae
seonghobae dismissed opencode-agent[bot]’s stale review August 22, 2026 07:43

Stale review: cited a coverage-evidence/required-check failure on an earlier commit; current head has been verified (gh pr checks) to pass coverage-evidence and all other non-metadata-gate required checks, with no current-head review from this reviewer. Dismissing as superseded per AGENTS.md stale-review guidance.

@opencode-agent opencode-agent Bot added area: ci-cd CI, GitHub Actions, checks, release, or supply chain area: dependencies Dependency or lockfile maintenance priority: medium Normal-priority or P2 work status: needs-review Open pull request requiring current-head review or checks type: maintenance Maintenance, build, dependency, or operational upkeep labels Aug 22, 2026
@seonghobae
seonghobae enabled auto-merge (squash) August 24, 2026 00:27
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 24, 2026
auto-merge was automatically disabled August 24, 2026 02:59

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/pip/ci-python-3d04c64bfd branch August 24, 2026 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: ci-cd CI, GitHub Actions, checks, release, or supply chain area: dependencies Dependency or lockfile maintenance dependencies Pull requests that update a dependency file priority: medium Normal-priority or P2 work python Pull requests that update python code status: needs-review Open pull request requiring current-head review or checks type: maintenance Maintenance, build, dependency, or operational upkeep

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants