chore(deps): bump the python-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #233 · CatholicOS/ontokit-api

dependabot · 2026-09-18T22:17:16Z

Bumps the python-dependencies group with 8 updates in the / directory:

Package	From	To
sqlalchemy	`2.0.52`	`2.0.54`
alembic	`1.19.1`	`1.20.0`
gitpython	`3.1.61`	`3.1.62`
pygit2	`1.20.0`	`1.20.1`
pyjwt	`2.13.0`	`2.14.0`
ruff	`0.16.5`	`0.16.7`
pyright	`1.1.411`	`1.1.414`
httpx2	`2.12.0`	`2.13.0`

Updates sqlalchemy from 2.0.52 to 2.0.54

Release notes

Sourced from sqlalchemy's releases.

2.0.54

Released: September 15, 2026

platform

[platform] [change] Binary wheels are no longer built for Python 3.7. PyPI now rejects wheel files whose filename does not begin with the normalized project name, and the packaging tools that can be installed on Python 3.7 do not produce such a filename. As a result, SQLAlchemy 2.0.44 was the last release to publish Python 3.7 wheels to PyPI, and releases 2.0.45 and later have been available on Python 3.7 only as a source distribution; the wheel builds for Python 3.7 are now removed. Python 3.7 remains supported by the 2.0 series.

[platform] [bug] Fixed issue where the Cython extensions were compiled without the freethreading_compatible directive, so that they did not declare themselves as safe to run without the GIL. On a free-threaded Python interpreter such as Python 3.13t or 3.14t, importing SQLAlchemy would cause the interpreter to re-enable the GIL, emitting a RuntimeWarning. The directive is now set when building for Python 3.13 and above, and a test has been added which confirms that importing SQLAlchemy on a free-threaded build does not enable the GIL.

References: #13592

2.0.53

Released: September 14, 2026

orm

[orm] [bug] Fixed issue where an expression passed to _orm.with_expression() that embedded a _sql.select(), such as a correlated _sql.exists(), would fail to populate the attribute correctly on the second and subsequent executions of an otherwise identical statement, when the _orm.query_expression() attribute was loaded by a relationship loader that emits a second query, i.e. _orm.selectinload(), _orm.lazyload() or _orm.immediateload().

References: #13560

[orm] [bug] Fixed memory issue where mapped classes, along with their Table and _orm.Mapper objects, would not be garbage collected after the _orm.registry in which they were mapped had been disposed and dereferenced. The issue would occur for mappings that made use of _orm.relationship() together with constructs such as an

... (truncated)

Commits

See full diff in compare view

Updates alembic from 1.19.1 to 1.20.0

Release notes

Sourced from alembic's releases.

1.20.0

Released: September 11, 2026

usecase

[usecase] [batch] Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any ~sqlalchemy.schema.CheckConstraint in Operations.batch_alter_table.table_args is taken to indicate that the case has been accommodated, and no warning is emitted.

References: #1846

[usecase] [autogenerate] Autogenerate now renders a warning comment above any rendered Operations.drop_constraint() directive for which the constraint name is None, as is the case when a constraint that has no name in the model is dropped, most typically within the downgrade() function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.

References: #916

bug

[bug] [batch] Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with ~sqlalchemy.types.Boolean.create_constraint set to True, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.

References: #1768

[bug] [batch] Fixed bug in batch mode where a CHECK constraint generated by a type such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.

... (truncated)

Commits

See full diff in compare view

Updates gitpython from 3.1.61 to 3.1.62

Release notes

Sourced from gitpython's releases.

3.1.62

What's Changed

prepare next release by @Byron in gitpython-developers/GitPython#2222

Keep bare-repository worktrees non-bare by @Byron in gitpython-developers/GitPython#2224

Reject unsafe submodule checkout paths by @Byron in gitpython-developers/GitPython#2225

build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @dependabot[bot] in gitpython-developers/GitPython#2226

fix: join backslash line continuations when reading config values by @nkbeast in gitpython-developers/GitPython#2227

New Contributors

@nkbeast made their first contribution in gitpython-developers/GitPython#2227

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

Commits

db47516 prepare new release
10ec385 get better commit messages from agents
b754897 test: cover subdirectory discovery and pathspec commands in bare-repo worktre...
9ebf8b6 Merge pull request #2227 from nkbeast/fix-config-backslash-continuation
a15f791 fix: parse joined config values as a whole
60dd946 fix: ignore continuation markers in config comments
075a664 fix: join backslash line continuations when reading config values
62d1e2f Merge pull request #2226 from gitpython-developers/dependabot/pre_commit/pre-...
23d0e92 build(deps): bump https://github.com/astral-sh/ruff-pre-commit
8a14adc Merge pull request #2225 from gitpython-developers/submodule-path-hardening
Additional commits viewable in compare view

Updates pygit2 from 1.20.0 to 1.20.1

Release notes

Sourced from pygit2's releases.

1.20.1 (2026-09-12)

Update wheels to libgit2 1.9.7

New exception hierarchy: AlreadyExistsError, InvalidSpecError, InvalidError, NotFoundError, AmbiguousError, AuthError, and CertificateError all inherit from GitError and the appropriate Python built-in exception (ValueError/KeyError) for backward compatibility #830

Fix DiffDelta.is_binary and DiffDelta.flags returning stale values for deltas obtained from Diff.deltas; flags are now loaded lazily #962 #1100

Fix repo.submodules.get() and name in repo.submodules raising AlreadyExistsError when a repository exists at the submodule path but was never registered as a submodule; they now return None and False respectively as documented #1487

Fix BlobIO cleanup deadlock on partial reads #1488 #1491

Fix leaks and crashes in error paths #1478 #1479 #1480 #1481

Fix custom ODB and refdb backend callbacks overwriting a pending Python exception (e.g. RuntimeError) with a stale libgit2 error message.

Documentation fixes #1490

CI (macOS): build architecture-specific OpenSSL/libssh2/libgit2 dependencies instead of universal binaries, producing smaller wheels.

Changelog

Sourced from pygit2's changelog.

1.20.1 (2026-09-12)

Update wheels to libgit2 1.9.7

New exception hierarchy: AlreadyExistsError, InvalidSpecError, InvalidError, NotFoundError, AmbiguousError, AuthError, and CertificateError all inherit from GitError and the appropriate Python built-in exception (ValueError/KeyError) for backward compatibility #830

Fix DiffDelta.is_binary and DiffDelta.flags returning stale values for deltas obtained from Diff.deltas; flags are now loaded lazily #962 #1100

Fix repo.submodules.get() and name in repo.submodules raising AlreadyExistsError when a repository exists at the submodule path but was never registered as a submodule; they now return None and False respectively as documented #1487

Fix BlobIO cleanup deadlock on partial reads #1488 #1491

Fix leaks and crashes in error paths #1478 #1479 #1480 #1481

Fix custom ODB and refdb backend callbacks overwriting a pending Python exception (e.g. RuntimeError) with a stale libgit2 error message.

Documentation fixes #1490

CI (macOS): build architecture-specific OpenSSL/libssh2/libgit2 dependencies instead of universal binaries, producing smaller wheels.

Commits

5a8e1ff Release 1.20.1
0620bbf Update changelog
c33d3e1 Skip non-unicode branchname and status path tests on macOS
487817e chore(CI): bump actions/cache from 4 to 6 in the actions group
2f9ec69 tests: Add BlobIO test for reading bigger-than-chunk files
be67bec Fix BlobIO cleanup deadlock
4e0803c Clarify Commit.commit_time and commit_time_offset documentation
87c2a39 Return None from submodules.get() for a nested plain repository
d532da7 Update wheels to libgit2 1.9.7
1fa0dfe fix(build.sh): clear ci directory without removing mount point
Additional commits viewable in compare view

Updates pyjwt from 2.13.0 to 2.14.0

Release notes

Sourced from pyjwt's releases.

PyJWT 2.14.0

See the 2.14.0 changelog for the complete release details and related security advisories.

Changelog

Sourced from pyjwt's changelog.

`v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__

Security


- Harden HMAC key validation against public-key material supplied as JWK,
  JWKS, array, encoded, BOM-prefixed, DER, or PEM input. See
  `GHSA-r6x4-923q-g947 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947>`__,
  `GHSA-ffc3-869f-jxw9 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9>`__,
  `GHSA-p4g4-x82p-q773 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773>`__,
  and `GHSA-w2cx-738m-mc7w <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w>`__.
- Reject automatic redirects when ``PyJWKClient`` fetches a JWKS, preventing
  redirected destinations from being treated as trusted key sources. See
  `GHSA-9v7f-9g4p-ffgj <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj>`__.
- Limit repeated JWKS refreshes caused by unknown key IDs while preserving
  normal key-rotation behavior. See
  `GHSA-2gx3-rcp4-g85q <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q>`__.
- Handle deeply nested and malformed JWS/JWK input without uncaught recursion
  errors or whole-set parsing failures. See
  `GHSA-8wjv-2p76-3863 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863>`__
  and `GHSA-w6j9-cwv2-h6wq <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq>`__.
- Enforce compact JWS encoding rules during decoding. See
  `GHSA-hxm8-2xgr-2p9m <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m>`__.
- Reject detached-payload arguments for attached JWS inputs. Thanks to `@xclow3n
  <https://github.com/xclow3n>`__ for reporting this behavior; fixed in commit
  `37b54877 <https://github.com/jpadilla/pyjwt/commit/37b54877bf7bea67e8149130e96929e3ec798122>`__.
Fixed

- Apply HMAC key validation consistently when keys are loaded through
  ``PyJWK`` and ``PyJWKClient``. See
  `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
- Reject empty HMAC keys when represented as JWKs.
  See `GHSA-pxh4-856f-4h89 &lt;https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89&gt;`__.
Fixed



Raise the documented PyJWTError subclass instead of leaking a

TypeError when the exp, nbf, or iat claim decodes to a

non-numeric, non-string value such as a list, dict, or null.

Commits

c6fe464 release: prepare v2.14.0
f541302 style: apply Ruff formatting
801cd12 fix: reject public JWK container HMAC keys
af8181c fix: reject empty HMAC keys from JWKs
ba4853a Throttle repeated PyJWKClient refreshes
2798504 fix: reject DER public keys as HMAC secrets
8b4e233 fix: reject loader-accepted PEM variants
1f8180a fix: format JWS tests
cff1ac5 Fix redirect handler return annotation
0a795b8 Reject redirects in PyJWKClient fetches
Additional commits viewable in compare view

Updates ruff from 0.16.5 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

[ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

Alternate nested quotes inside format spec interpolations (#28259)

[flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)

[flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)

[pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

Correct D211 and D203 rule conflict diagnostic (#28444)

Recognize slice and frozendict generics (#28477)

Stop defining __cached__ for Python 3.15 (#28476)

[pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

Reuse parser name lookups when interning (#28399)

Speed up inherited configuration resolution (#28299)

Documentation

Fix line-length path in --config example (#28392)

Remove the "Who’s Using Ruff?" list (#28455)

Other changes

Embed archive checksums in the shell installer (#28281)

Contributors

@The-Compiler

@mdiniz97

@zsol

@gorewilliams

@RafaelJohn9

@qatcod

@zanieb

@MichaReiser

@ntBre

@charliermarsh

@nightt5879

... (truncated)

Commits

b5dba86 Bump version to 0.16.7 (#28496)
5992d05 Install rustfmt before linting releases (#28495)
1713a1f ensure prepare release changes pass prek (#28488)
18cdbb4 use scoped token for release workflow (#28484)
c3813a5 add a workflow for preparing releases (#28486)
00948c0 Remove the "Who’s Using Ruff?" list (#28455)
86a2eba [pyupgrade] Stop recommending removed typing.no_type_check_decorator (`UP...
609e184 Stop defining __cached__ for Python 3.15 (#28476)
859ff2f [ty] Track symlinked directory status in listings (#28482)
77f6538 Use paid GitHub-hosted runners for Linux (#28478)
Additional commits viewable in compare view

Updates pyright from 1.1.411 to 1.1.414

Commits

1aa6dfe Pyright NPM Package update to 1.1.414 (#370)
5ecb4df tests: retry network tests (#369)
978501b chore: bump timeout for pylance version check
474b7be Pyright NPM Package update to 1.1.413 (#365)
4502e5d ci: auto merge version bumps (#368)
f9a9a6e [pyright updated to 1.1.412] Update Version (#364)
See full diff in compare view

Updates httpx2 from 2.12.0 to 2.13.0

Release notes

Sourced from httpx2's releases.

v2.13.0

Highlights

🔐 Reliable TLS verification controls

The CLI --no-verify flag now disables TLS certificate verification as intended, and --verify provides an explicit counterpart (pydantic/httpx2#1140, pydantic/httpx2#1186).

🧹 Safer async stream cleanup

Stopping a streamed response early no longer risks a nested async generator finalization error (pydantic/httpx2#1204).

httpx2

Changed

Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations in pydantic/httpx2#1179

Fixed

Make the --no-verify CLI flag disable TLS certificate verification and add an explicit --verify counterpart in pydantic/httpx2#1140 and pydantic/httpx2#1186

Avoid nested async generator finalization errors when streamed responses are abandoned early in pydantic/httpx2#1204

httpcore2

Changed

Require Trio 0.34.0 or later for the trio extra in pydantic/httpx2#1179

Fixed

Avoid nested async generator finalization errors when streamed responses are abandoned early in pydantic/httpx2#1204

Full Changelog: pydantic/httpx2@v2.12.0...v2.13.0

Changelog

Sourced from httpx2's changelog.

2.13.0 (September 14th, 2026)

Changed

Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations. (#1179)

Fixed

Make the --no-verify CLI flag disable TLS certificate verification and add an explicit --verify counterpart. (#1140, #1186)

Avoid nested async generator finalization errors when streamed responses are abandoned early. (#1204)

Commits

f295185 Prepare version 2.13.0 (#1208)
8f215b5 Use portable links in API docstrings (#1202)
36d636a Group httpx2.__all__ exports by source module (#1188)
f1064aa Bump the python-packages group across 1 directory with 11 updates (#1179)
bc27137 Update uv-dynamic-versioning requirement from >=0.14.0 to >=0.14.1 (#1180)
62e0827 Restore --no-verify CLI flag (#1186)
c9b1d33 Replace --no-verify flag with --verify (#1140)
e3a87b1 Convert Timeout and Limits to dataclasses (#1167)
4c02c4b Fixed a grammatical mistake. (#1154)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 8 updates Bumps the python-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.52` | `2.0.54` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.19.1` | `1.20.0` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.61` | `3.1.62` | | [pygit2](https://github.com/libgit2/pygit2) | `1.20.0` | `1.20.1` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.13.0` | `2.14.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.5` | `0.16.7` | | [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` | | [httpx2](https://github.com/pydantic/httpx2) | `2.12.0` | `2.13.0` | Updates `sqlalchemy` from 2.0.52 to 2.0.54 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` from 1.19.1 to 1.20.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `gitpython` from 3.1.61 to 3.1.62 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.61...3.1.62) Updates `pygit2` from 1.20.0 to 1.20.1 - [Release notes](https://github.com/libgit2/pygit2/releases) - [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md) - [Commits](libgit2/pygit2@v1.20.0...v1.20.1) Updates `pyjwt` from 2.13.0 to 2.14.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.13.0...2.14.0) Updates `ruff` from 0.16.5 to 0.16.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.5...0.16.7) Updates `pyright` from 1.1.411 to 1.1.414 - [Release notes](https://github.com/RobertCraigie/pyright-python/releases) - [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414) Updates `httpx2` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md) - [Commits](pydantic/httpx2@v2.12.0...v2.13.0) --- updated-dependencies: - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: alembic dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: gitpython dependency-version: 3.1.62 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pygit2 dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pyjwt dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pyright dependency-version: 1.1.414 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: httpx2 dependency-version: 2.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-18T22:17:39Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8ee69a57-a13b-4ead-b4d9-a5d103e618b2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 18, 2026

JohnRDOrazio approved these changes Sep 18, 2026

View reviewed changes

github-actions Bot enabled auto-merge (rebase) September 18, 2026 22:17

github-actions Bot merged commit fcdbbe0 into dev Sep 18, 2026
14 checks passed

dependabot Bot deleted the dependabot/uv/python-dependencies-1bfecd025b branch September 18, 2026 22:19

Navigation Menu

chore(deps): bump the python-dependencies group across 1 directory with 8 updates - #233

chore(deps): bump the python-dependencies group across 1 directory with 8 updates#233
github-actions[bot] merged 1 commit into
devfrom
dependabot/uv/python-dependencies-1bfecd025b

dependabot Bot commented on behalf of github Sep 18, 2026

Uh oh!

coderabbitai Bot commented Sep 18, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 18, 2026

2.0.54

platform

2.0.53

orm

1.20.0

usecase

bug

3.1.62

What's Changed

New Contributors

1.20.1 (2026-09-12)

1.20.1 (2026-09-12)

PyJWT 2.14.0

v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>__

0.16.7

Release Notes

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

0.16.7

Preview features

Bug fixes

Rule changes

Performance

Documentation

Other changes

Contributors

v2.13.0

Highlights

🔐 Reliable TLS verification controls

🧹 Safer async stream cleanup

httpx2

Changed

Fixed

httpcore2

Changed

Fixed

2.13.0 (September 14th, 2026)

Changed

Fixed

Uh oh!

coderabbitai Bot commented Sep 18, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__