chore(deps): bump the uv group across 4 directories with 21 updates - #10
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps): bump the uv group across 4 directories with 21 updates#10dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: indirect dependency-group: uv - dependency-name: langchain-text-splitters dependency-version: 1.1.2 dependency-type: indirect dependency-group: uv - dependency-name: fastmcp dependency-version: 3.2.0 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: uv - dependency-name: langchain-core dependency-version: 1.4.9 dependency-type: indirect dependency-group: uv - dependency-name: langsmith dependency-version: 0.8.18 dependency-type: indirect dependency-group: uv - dependency-name: pillow dependency-version: 12.2.0 dependency-type: indirect dependency-group: uv - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: indirect dependency-group: uv - dependency-name: authlib dependency-version: 1.6.12 dependency-type: indirect dependency-group: uv - dependency-name: pyjwt dependency-version: 2.13.0 dependency-type: indirect dependency-group: uv - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: indirect dependency-group: uv - dependency-name: tornado dependency-version: 6.5.7 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: indirect dependency-group: uv - dependency-name: transformers dependency-version: 5.5.0 dependency-type: indirect dependency-group: uv - dependency-name: idna dependency-version: '3.15' dependency-type: indirect dependency-group: uv - dependency-name: lxml dependency-version: 6.1.0 dependency-type: indirect dependency-group: uv - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: indirect dependency-group: uv - dependency-name: soupsieve dependency-version: 2.8.4 dependency-type: indirect dependency-group: uv - dependency-name: starlette dependency-version: 1.3.1 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: uv - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: indirect dependency-group: uv - dependency-name: idna dependency-version: '3.15' dependency-type: indirect dependency-group: uv - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: indirect dependency-group: uv - dependency-name: agno dependency-version: 2.6.6 dependency-type: direct:production dependency-group: uv - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: uv - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production dependency-group: uv - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: direct:production dependency-group: uv - dependency-name: pyjwt dependency-version: 2.13.0 dependency-type: direct:production dependency-group: uv - dependency-name: python-multipart dependency-version: 0.0.31 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: indirect dependency-group: uv - dependency-name: idna dependency-version: '3.15' dependency-type: indirect dependency-group: uv - dependency-name: starlette dependency-version: 1.3.1 dependency-type: indirect dependency-group: uv - dependency-name: json-repair dependency-version: 0.60.1 dependency-type: indirect dependency-group: uv - dependency-name: urllib3 dependency-version: 2.7.0 dependency-type: indirect dependency-group: uv - dependency-name: cryptography dependency-version: 48.0.1 dependency-type: indirect dependency-group: uv - dependency-name: pyjwt dependency-version: 2.13.0 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: indirect dependency-group: uv - dependency-name: idna dependency-version: '3.15' dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Skipping PR review because a bot author is detected. If you want to trigger CodeAnt AI, comment |
|
 |
|
Overall Grade |
Security Reliability Complexity Hygiene |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| Docker |  |
Jul 14, 2026 12:09a.m. | Review ↗ |
| Go | |
Jul 14, 2026 12:09a.m. | Review ↗ |
| JavaScript | |
Jul 14, 2026 12:09a.m. | Review ↗ |
| Python | |
Jul 14, 2026 12:09a.m. | Review ↗ |
| Rust | |
Jul 14, 2026 12:09a.m. | Review ↗ |
| Shell | |
Jul 14, 2026 12:09a.m. | Review ↗ |
| Secrets | |
Jul 14, 2026 12:09a.m. | Review ↗ |
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
Code Review SummaryStatus: No Issues Found | Recommendation: Merge Files Reviewed (10 files)
NotesThis is an automated Dependabot bump of the Reviewed by hy3:free · Input: 68.6K · Output: 2.6K · Cached: 216.6K |
ThePlenkov
pushed a commit
that referenced
this pull request
Jul 14, 2026
…izing them (vectorize-io#1766) * chore: regenerate docs skill (sync Tigris S3 config notes) Drift picked up by the generate-docs-skill pre-commit hook — keeps skills/hindsight-docs/ in sync with the upstream hindsight-docs/ sources. * perf(api): derive entity edges from unit_entities instead of materializing them Stop writing link_type='entity' rows to memory_links and derive entity edges on demand in the /graph endpoint (from the unit_entities self-join recall already uses) and in /stats (by replicating the historical writer cap). Why: on the recall-perf-medium bench bank (10k units), entity rows were 53% of all memory_links — 345k rows, ~190 MB of table+index — and recall never read them (entity expansion in link_expansion_retrieval.py uses unit_entities, not memory_links). Retain was running a synchronous pairwise loop per shared entity to write rows nothing read; per-unit entity degree was uncapped (max 326 outgoing on a single unit), and overall per-unit total degree averaged 130 with a p99 of 462. Changes: - Drop Phase 3 entity-link build/insert from retain orchestrator. Keep entity_resolver.flush_pending_stats() so entity_cooccurrences (which feeds /entities/graph) still updates. - Delete build_entity_links_from_resolved, insert_entity_links_batch, MAX_LINKS_PER_ENTITY, EntityLink, Phase3Context, and the now-dead fetch_entity_unit_fanout op (PG + Oracle). - /graph: filter memory_links query to link_type <> 'entity'; broaden the existing observation-inferred entity-pair loop to cover all visible units; cap at 10 units per entity to bound hot entities. - /stats: split link_breakdown into a memory_links query (non-entity) and a unit_entities-based derivation for entity, sized to the historical writer cap so link_counts.entity stays in the same magnitude. - Migration e9b2c7d1f3a4: drop idx_memory_links_entity_covering and chunk-delete existing entity rows (PG + Oracle paths). - Tests: rewrite test_entity_links_creation and test_all_link_types_together to assert via /graph + /stats; assert no entity rows in memory_links. API response shapes (graph edges, stats link_counts/links_breakdown) are unchanged at the boundary, so SDKs and the control plane do not need to be regenerated. * fix(graph): cap entity edges per unit, not per entity list The previous derivation kept only the first 10 units per entity before pairing, so any unit beyond #10 for a hot entity had zero entity edges in /graph — even though it shared the entity with many visible units. Switch to a sliding window: each unit links to its next N neighbors in the per-entity list. Every unit that shares an entity with another visible unit gets edges (its successors directly, predecessors via their pairs), and total edges stay bounded at ~N * cap per entity instead of N². Adds a regression test that retains 15 facts mentioning the same person and asserts every retained unit appears in at least one entity edge in /graph. * fix(migration): re-parent entity-link drop after e1b2c3d4f5a6 landed on main vectorize-io#1762 landed e1b2c3d4f5a6_drop_unused_indexes between this PR opening and CI run, which also drops idx_memory_links_entity_covering. Our migration's down_revision still pointed at the prior head, leaving Alembic with two heads and tripping test_alembic_dag.test_single_head. Re-parent to e1b2c3d4f5a6 to unify the head. The DROP INDEX IF EXISTS line becomes a defensive no-op (since vectorize-io#1762 already dropped it), but is retained in case this migration runs against a snapshot taken before vectorize-io#1762.
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
ThePlenkov
pushed a commit
that referenced
this pull request
Jul 14, 2026
…ever (vectorize-io#2092) * blog: Hindsight is the fastest-growing open-source AI memory project ever Equal-age GitHub star analysis (per-star timestamps) plus third-party validation from OSSCAR (#10 fastest-growing OSS org, ahead of Mem0) and dope.security (#1 MCP server in enterprise traffic). Adds cdbartholomew to blog authors. * blog: add truncate marker, featured image, fix Slack invite link - Add <!-- truncate --> after the lead (fixes the build warning addressed repo-wide in vectorize-io#2065) - Add featured/social image and hero image - Replace workspace login URL with the canonical join.slack.com invite * blog: clean up featured image (remove curve overlapping the headline) * blog: add captured star-history chart (Hindsight steepest slope); align featured image to brand palette - Embed a static capture of the overlaid star-history graph in the 'still accelerating' section; Hindsight shows the steepest slope of any project. Replaces the unreliable live-URL embed (rate-limited). - Recolor the featured/OG card to the Hindsight brand palette (#0074d9 -> #009296 gradient, #09090b background) instead of off-palette mint. * blog: add star-history chart to featured image (text left, chart right)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by cubic
Upgrades the uv dependency group across four directories, refreshing lockfiles and standardizing tests on
pytest9.1.1 to pick up security and compatibility fixes.Dependencies
pytest9.1.1 inhindsight-all-slim,hindsight-all,hindsight-api-slim(dev group too),hindsight-clients/python,hindsight-dev, andhindsight-embed.uv.lockin the repo root and inhindsight-integrations/{agno,crewai,hermes}.agno2.6.6,aiohttp3.14.1,urllib32.7.0,idna3.15,python-multipart0.0.31,pydantic-settings2.14.2,cryptography48.0.1,pyjwt2.13.0,starlette1.3.1,pillow12.2.0.Migration
uv syncafter pulling (root and underhindsight-integrations/*).pytestplugins support 9.1.x.Written for commit 82b6a73. Summary will update on new commits.