Skip to content

Bump the python-minor-patch group with 6 updates - #38

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-171c9f3e8a
Closed

Bump the python-minor-patch group with 6 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-minor-patch-171c9f3e8a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the python-minor-patch group with 6 updates:

Package From To
fastapi 0.142.2 0.143.0
transformers 5.18.0 5.19.0
ty 0.0.84 0.0.85
anthropic 1.11.0 1.12.1
google-genai 2.28.0 2.29.0
openai 3.24.0 3.26.1

Updates fastapi from 0.142.2 to 0.143.0

Release notes

Sourced from fastapi's releases.

0.143.0

Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL_* environment variables, set FASTAPI_OTEL_AUTO_CONFIGURE=true or use FastAPI(telemetry={"auto_configure": True}) to retain the previous behavior.

Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.

Breaking Changes

  • 💥 Require opt-in for automatic OpenTelemetry exporter setup. PR #16476 by @​tiangolo.

0.142.4

Fixes

0.142.3

Fixes

  • 🐛 Cache OpenTelemetry tracers to preserve warning deduplication. PR #16468 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits

Updates transformers from 5.18.0 to 5.19.0

Release notes

Sourced from transformers's releases.

Release v5.19.0

New Model additions

EmbeddingGemma2

EmbeddingGemma 2 is a multimodal embedding model from Google built on the Gemma 4 architecture. It encodes text, images, audio, and video, individually or combined in one input, into a shared 768-dimensional vector space for cross-modal retrieval, semantic similarity, clustering, and classification. It uses Matryoshka Representation Learning, so embeddings can be truncated to 512, 256, or 128 dimensions. It also offers configurable visual and video token budgets, and unused vision or audio towers can be disabled at load time to save memory.

Links: Documentation

Breaking changes

All MoE models whose routers compute logits now return them when output_router_logits=True, following the Qwen3-MoE pattern (a router_logits recorder on the base model, MoeModelOutputWithPast from the backbone, and a MoE causal LM output from the head), so code that relied on the previous outputs or their absence should read the router logits from these output classes.

Owlv2ForObjectDetection.embed_image_query now selects the query box with the highest objectness score, as in the original OWLv2 notebook, instead of the OWL-ViT heuristic, so image-guided query embeddings and detections may differ from earlier releases.

The "paged|" prefix for SDPA and flash attention implementations is deprecated, so users should set the regular attention implementation (e.g. sdpa or flash_attention_2) for continuous batching instead of paged|sdpa or paged|flash_attention_2.

  • 🚨 Attention 🚨 Deprecate "paged|" prefix for SDPA and flash (#49112) by @​remi-or

The regular flash and SDPA attention functions (flash_attention.py, sdpa_attention.py) now support continuous batching directly, and "paged|..." implementations for these are redirected to them, while eager still requires the "paged|eager" prefix.

In continuous batching, the cache update for the index-based and block-table paths is now fused into a single call, which slightly changes the cache update function's behavior and affects any custom code that calls the separate update paths.

Continuous batching internals changed in preparation for removing "paged": `max

Parallelization

Expert parallelism gains a token-dispatch implementation, selected via the new ep_dispatch_experts plan rule and now the default for Qwen3 MoE and Mellum, which removes the requirement that EP size equal TP size. The Trainer was also adapted to work with expert parallelism, and the docs now note that PEFT adapters support tensor parallelism. A CI-related fix for pipeline-parallel chart2table inference was also included.

Cache

... (truncated)

Commits

Updates ty from 0.0.84 to 0.0.85

Release notes

Sourced from ty's releases.

0.0.85

Release Notes

Released on 2026-10-06.

Preview features

  • Refresh uv project metadata when uv files change (#28529)

Bug fixes

  • Avoid recursive lambda class decorator panics (#28984)
  • Compare observable notebook state for equality (#28874)
  • Detect recursive alias cycles through intersections (#28916)
  • Fix anchoring of include and exclude patterns after the project's root changed (#28995)
  • Fix stack overflow when inferring dynamic class metaclasses (#28917)
  • Normalize recursive dataclass transform metadata (#28920)
  • Normalize recursive TypedDicts during cycle recovery (#28918)
  • Preserve cycle markers in ParamSpec specialization (#29024)

CLI

  • Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

  • Add namespace package support to import completions. (#28202)
  • Avoid stale I/O diagnostics when closing deleted files (#28988)
  • Contain rendered code within Markdown fences (#28869)
  • Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

  • Add opt-in truthiness-test-of-none-union rule (#28889)
  • Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
  • Bound nested callable signature display (#29049)
  • Explain outdated uv versions in metadata errors (#28959)
  • Improve display of string literal types that include unicode characters or double quotes (#29089)
  • Improve uv metadata diagnostics (#28990)
  • Preserve constrained type-variable failure diagnostics (#28768)
  • Preserve generic inference errors during diagnostic recovery (#28811)
  • Report deprecated overloads in decorator applications (#28999)

Core type checking

  • Bound methods without a receiver are not callable (#28981)
  • Fix member lookup on union-bounded type variables (#29018)
  • Fix type variable inference for final class objects (#29097)
  • Freshen ParamSpec identities consistently (#28826)
  • Honor generic property setters in protocol compatibility (#28562)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.85

Released on 2026-10-06.

Preview features

  • Refresh uv project metadata when uv files change (#28529)

Bug fixes

  • Avoid recursive lambda class decorator panics (#28984)
  • Compare observable notebook state for equality (#28874)
  • Detect recursive alias cycles through intersections (#28916)
  • Fix anchoring of include and exclude patterns after the project's root changed (#28995)
  • Fix stack overflow when inferring dynamic class metaclasses (#28917)
  • Normalize recursive dataclass transform metadata (#28920)
  • Normalize recursive TypedDicts during cycle recovery (#28918)
  • Preserve cycle markers in ParamSpec specialization (#29024)

CLI

  • Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

  • Add namespace package support to import completions. (#28202)
  • Avoid stale I/O diagnostics when closing deleted files (#28988)
  • Contain rendered code within Markdown fences (#28869)
  • Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

  • Add opt-in truthiness-test-of-none-union rule (#28889)
  • Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
  • Bound nested callable signature display (#29049)
  • Explain outdated uv versions in metadata errors (#28959)
  • Improve display of string literal types that include unicode characters or double quotes (#29089)
  • Improve uv metadata diagnostics (#28990)
  • Preserve constrained type-variable failure diagnostics (#28768)
  • Preserve generic inference errors during diagnostic recovery (#28811)
  • Report deprecated overloads in decorator applications (#28999)

Core type checking

  • Bound methods without a receiver are not callable (#28981)
  • Fix member lookup on union-bounded type variables (#29018)
  • Fix type variable inference for final class objects (#29097)
  • Freshen ParamSpec identities consistently (#28826)
  • Honor generic property setters in protocol compatibility (#28562)
  • Infer nominal generic specializations from bounded type variables (#28812)

... (truncated)

Commits

Updates anthropic from 1.11.0 to 1.12.1

Release notes

Sourced from anthropic's releases.

v1.12.1

Chores

  • ci: check that pull requests update the changelog
  • docs: note that listing Claude Console spend limits is in early access
  • internal: match the package version in uv.lock

v1.12.0

1.12.0 (2026-10-07)

Full Changelog: v1.11.0...v1.12.0

Features

  • api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (f6346e6)
  • api: add disabled to thinking types in model capabilities (78d815d)
  • api: add display_name to RBAC roles and deprecate name (f63f99c)
  • api: add include_default parameter to list workspaces (5d4b37b)
  • api: add lifecycle stage fields and filter to /v1/models (0c96c02)
  • api: add line to model objects (a85c649)
  • api: add url_sources to the Managed Agents web_fetch tool config (78d815d)
  • api: add web search and code execution support to model capabilities (78d815d)

Bug Fixes

  • api: send the beta header by default when listing spend limits (e2690b4)
  • client: send empty strings in query params and multipart forms (80e69f1)
  • tools: keep a local edit made after a memory upload whose response was lost (#990) (78d815d)

Chores

  • client: track whether the client timeout was set explicitly (36a223f)
  • docs: correct example groups in rate limit list description (71fcf2f)
  • docs: describe a federation rule's target by its type (78d815d)
  • docs: fix example IDs in sessions, agents and vault credentials (78d815d)
  • docs: update Managed Agents multiagent and thread descriptions (78d815d)
  • docs: update the activity summaries endpoint description (d9bd4bf)
  • docs: update the description of the Model line field (4444463)
  • internal: add REVIEW.md with review instructions (78d815d)
  • internal: format the code blocks of the docs with one run of ruff (78d815d)
  • internal: refactor deprecated models (7b0c7d5)
  • tests: run tests skipped for a query param bug that is now fixed (d606929)
  • tests: run tests that an older mock server could not serve (bffd222)
  • tests: run the batch results raw and streaming response tests (#978) (78d815d)
  • tests: run the tests skipped for incomplete example responses (06a75bc)

Documentation

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.12.1 (2026-10-08)

Chores

  • ci: check that pull requests update the changelog
  • docs: note that listing Claude Console spend limits is in early access
  • internal: match the package version in uv.lock

1.12.0 (2026-10-07)

Full Changelog: v1.11.0...v1.12.0

Features

  • api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (f6346e6)
  • api: add disabled to thinking types in model capabilities (78d815d)
  • api: add display_name to RBAC roles and deprecate name (f63f99c)
  • api: add include_default parameter to list workspaces (5d4b37b)
  • api: add lifecycle stage fields and filter to /v1/models (0c96c02)
  • api: add line to model objects (a85c649)
  • api: add url_sources to the Managed Agents web_fetch tool config (78d815d)
  • api: add web search and code execution support to model capabilities (78d815d)

Bug Fixes

  • api: send the beta header by default when listing spend limits (e2690b4)
  • client: send empty strings in query params and multipart forms (80e69f1)
  • tools: keep a local edit made after a memory upload whose response was lost (#990) (78d815d)

Chores

  • client: track whether the client timeout was set explicitly (36a223f)
  • docs: correct example groups in rate limit list description (71fcf2f)
  • docs: describe a federation rule's target by its type (78d815d)
  • docs: fix example IDs in sessions, agents and vault credentials (78d815d)
  • docs: update Managed Agents multiagent and thread descriptions (78d815d)
  • docs: update the activity summaries endpoint description (d9bd4bf)
  • docs: update the description of the Model line field (4444463)
  • internal: add REVIEW.md with review instructions (78d815d)
  • internal: format the code blocks of the docs with one run of ruff (78d815d)
  • internal: refactor deprecated models (7b0c7d5)
  • tests: run tests skipped for a query param bug that is now fixed (d606929)
  • tests: run tests that an older mock server could not serve (bffd222)
  • tests: run the batch results raw and streaming response tests (#978) (78d815d)
  • tests: run the tests skipped for incomplete example responses (06a75bc)

Documentation

... (truncated)

Commits
  • 50b78d1 release: 1.12.1
  • 1ecae1a Merge pull request #1006 from anthropics/synced/published
  • d3f6be3 chore(internal): match the package version in uv.lock (#1005)
  • 4ab18df Merge pull request #1004 from anthropics/synced/published
  • 9a38f01 codegen metadata
  • 58bcd19 chore(internal): update changelog (#1002)
  • b34b270 chore(ci): check that pull requests update the changelog
  • 3d0b601 Merge branch 'main' into next
  • 22feda0 Merge pull request #2009 from anthropics/release-please--branches--main--chan...
  • 0c1e74b chore(docs): note that listing Claude Console spend limits is in early access
  • Additional commits viewable in compare view

Updates google-genai from 2.28.0 to 2.29.0

Release notes

Sourced from google-genai's releases.

v2.29.0

2.29.0 (2026-10-07)

Features

  • Support "allowlist": "disabled" in environment network config. (fa4acc7)
  • Update discovery doc (84bf19c)

Bug Fixes

  • Only log direct AFC warning when functions are present in the config (6e36aaa)

Documentation

  • Refresh docs for 2.28.0 (618f0aa)
  • Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image, and gemini-3.8-flash-tts (5673494)
  • Update generated SDK docstring examples to use gemini-flash-latest (28e0915)
Changelog

Sourced from google-genai's changelog.

2.29.0 (2026-10-07)

Features

  • Support "allowlist": "disabled" in environment network config. (fa4acc7)
  • Update discovery doc (84bf19c)

Bug Fixes

  • Only log direct AFC warning when functions are present in the config (6e36aaa)

Documentation

  • Refresh docs for 2.28.0 (618f0aa)
  • Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image, and gemini-3.8-flash-tts (5673494)
  • Update generated SDK docstring examples to use gemini-flash-latest (28e0915)
Commits
  • e81ca4a chore(main): release 2.29.0 (#3046)
  • a70095d chore: Add gemini-nano-banana-2.1 and gemini-3.1-flash-lite-image to supporte...
  • 28e0915 docs: update generated SDK docstring examples to use gemini-flash-latest
  • fa4acc7 feat: Support "allowlist": "disabled" in environment network config.
  • 84bf19c feat: update discovery doc
  • 6e36aaa fix: only log direct AFC warning when functions are present in the config
  • 5673494 docs: Update code samples to gemini-flash-latest, gemini-3.1-flash-lite-image...
  • 5d38785 test(openapi): speakeasy generator version.
  • 618f0aa docs: Refresh docs for 2.28.0
  • See full diff in compare view

Updates openai from 3.24.0 to 3.26.1

Release notes

Sourced from openai's releases.

v3.26.1

3.26.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#4038) (b9bc5c1)

v3.26.0

3.26.0 (2026-10-06)

Features

v3.25.0

3.25.0 (2026-10-06)

Features

  • agents: observe local tool failures (#4028) (95d9645)
  • agents: run local tools during streamed session creation (#4027) (919b623)
  • api: add agent turn items and usage source grouping (#4030) (bd74c4e)
  • lib: export type_to_response_format_param publicly (#2993) (becc1d2)
  • tools: support tool search (defer_loading=true) in typed function helpers (#4029) (eec627f)
Changelog

Sourced from openai's changelog.

3.26.1 (2026-10-08)

Bug Fixes

  • api: correct custom voice creation parameters (#4038) (b9bc5c1)

3.26.0 (2026-10-06)

Features

3.25.0 (2026-10-06)

Features

  • agents: observe local tool failures (#4028) (95d9645)
  • agents: run local tools during streamed session creation (#4027) (919b623)
  • api: add agent turn items and usage source grouping (#4030) (bd74c4e)
  • lib: export type_to_response_format_param publicly (#2993) (becc1d2)
  • tools: support tool search (defer_loading=true) in typed function helpers (#4029) (eec627f)
Commits
  • 9301e31 release: 3.26.1 (#4039)
  • b9bc5c1 fix(api): correct custom voice creation parameters (#4038)
  • 4e152cd release: 3.26.0 (#4034)
  • b99e3e4 feat(api): add standalone Decisions support (#4033)
  • 13fff1b release: 3.25.0 (#4019)
  • bd74c4e feat(api): add agent turn items and usage source grouping (#4030)
  • 919b623 feat(agents): run local tools during streamed session creation (#4027)
  • eec627f feat(tools): support tool search (defer_loading=true) in typed function helpe...
  • 95d9645 feat(agents): observe local tool failures (#4028)
  • becc1d2 feat(lib): export type_to_response_format_param publicly (#2993)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-minor-patch group with 6 updates
6a1602c 
Bumps the python-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.142.2` | `0.143.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.18.0` | `5.19.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.84` | `0.0.85` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.11.0` | `1.12.1` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.28.0` | `2.29.0` |
| [openai](https://github.com/openai/openai-python) | `3.24.0` | `3.26.1` |


Updates `fastapi` from 0.142.2 to 0.143.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.142.2...0.143.0)

Updates `transformers` from 5.18.0 to 5.19.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.18.0...v5.19.0)

Updates `ty` from 0.0.84 to 0.0.85
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.84...0.0.85)

Updates `anthropic` from 1.11.0 to 1.12.1
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v1.11.0...v1.12.1)

Updates `google-genai` from 2.28.0 to 2.29.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.28.0...v2.29.0)

Updates `openai` from 3.24.0 to 3.26.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.24.0...v3.26.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.143.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: transformers
  dependency-version: 5.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: ty
  dependency-version: 0.0.85
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: anthropic
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: google-genai
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: openai
  dependency-version: 3.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-171c9f3e8a branch October 19, 2026 01:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants