Bump the pip group across 9 directories with 11 updates by dependabot[bot] · Pull Request #206 · ollionorg/DataflowTemplates-fork

dependabot · 2026-02-21T21:36:48Z

Bumps the pip group with 7 updates in the /python/src/main/python/job-builder-server directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 11 updates in the /python/src/main/python/streaming-llm directory:

Package	From	To
cryptography	`44.0.1`	`46.0.5`
google-cloud-aiplatform	`1.66.0`	`1.133.0`
orjson	`3.10.7`	`3.11.5`
protobuf	`4.25.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.1`	`0.5.4`
urllib3	`2.2.3`	`2.6.3`
filelock	`3.16.0`	`3.20.3`
pillow	`10.4.0`	`12.1.1`
torch	`2.2.2`	`2.8.0`
transformers	`4.44.2`	`4.53.0`

Bumps the pip group with 7 updates in the /python/src/main/python/word-count-python directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /python/src/main/python/yaml-template directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /v2/googlecloud-to-elasticsearch/src/main/resources directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /v2/googlecloud-to-googlecloud/src/main/resources directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /v2/googlecloud-to-splunk/src/main/resources directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /v2/pubsub-binary-to-bigquery/src/main/resources directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Bumps the pip group with 7 updates in the /v2/pubsub-to-mongodb/src/main/resources directory:

Package	From	To
cryptography	`44.0.2`	`46.0.5`
google-cloud-aiplatform	`1.88.0`	`1.133.0`
orjson	`3.10.16`	`3.11.5`
protobuf	`5.29.4`	`5.29.6`
pyasn1	`0.6.1`	`0.6.2`
sqlparse	`0.5.3`	`0.5.4`
urllib3	`2.4.0`	`2.6.3`

Updates cryptography from 44.0.2 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

46.0.3 - 2025-10-15

* Fixed compilation when using LibreSSL 4.2.0. .. _v46-0-2:

46.0.2 - 2025-09-30

Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.

.. _v46-0-1:

46.0.1 - 2025-09-16

* Fixed an issue where users installing via ``pip`` on Python 3.14 development versions would not properly install a dependency. * Fixed an issue building the free-threaded macOS 3.14 wheels. .. _v46-0-0:

46.0.0 - 2025-09-16

BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been removed.

... (truncated)

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
c0af4dd release 46.0.3 (#13681)
99efe5a bump version for 46.0.2 (#13531)
e735cfc release 46.0.1 (#13450)
4e457ff Explicitly specify python in mac uv build invocation (#13447)
2726efd Depend on CFFI 2.0.0 or newer on Python > 3.8 (#13448)
6223062 release 46.0.0 (#13446)
Additional commits viewable in compare view

Updates google-cloud-aiplatform from 1.88.0 to 1.133.0

Release notes

Sourced from google-cloud-aiplatform's releases.

v1.133.0

1.133.0 (2026-01-08)

Features

Deprecate tuning public preview SDK in favor of tuning SDK (35d362c)

GenAI SDK client - Enabling Few-shot Prompt Optimization by passing either "OPTIMIZATION_TARGET_FEW_SHOT_RUBRICS" or "OPTIMIZATION_TARGET_FEW_SHOT_TARGET_RESPONSE" to the optimize_prompt method (715cc5b)

GenAI SDK client(memory): Add enable_third_person_memories (65717fa)

Support Developer Connect in AE (04f1771)

Bug Fixes

Add None check for agent_info in evals.py (c8c0f0f)

GenAI client(evals) - Fix TypeError in _build_generate_content_config (be2eaaa)

Make project_number to project_id mapping fail-open. (f1c8458)

Replace asyncio.run with create_task in ADK async thread mains. (83f4076)

Replace asyncio.run with create_task in ADK async thread mains. (8c876ef)

Require uri or staging bucket configuration for saving model to Vertex Experiment. (5448f06)

Return embedding metadata if available (d9c6eb1)

Update examples_dataframe type to PandasDataFrame in Prompt Optimizer. (a2564cc)

v1.132.0

1.132.0 (2025-12-17)

Features

Add Lustre support to the Vertex Training Custom Job API (71747e8)

Documentation

A comment for field restart_job_on_worker_restart in message .google.cloud.aiplatform.v1beta1.Scheduling is changed (71747e8)

A comment for field timeout in message .google.cloud.aiplatform.v1beta1.Scheduling is changed (71747e8)

v1.131.0

1.131.0 (2025-12-16)

Features

Allow list of events to be passed to AdkApp.async_stream_query (dd8840a)

GenAI Client(evals) - Support CustomCodeExecution metric in Vertex Gen AI Eval Service (4114728)

Updates the ADK template to direct structured JSON logs to standard output. (a65ec29)

Bug Fixes

... (truncated)

Changelog

Sourced from google-cloud-aiplatform's changelog.

1.133.0 (2026-01-08)

Features

Deprecate tuning public preview SDK in favor of tuning SDK (35d362c)

GenAI SDK client - Enabling Few-shot Prompt Optimization by passing either "OPTIMIZATION_TARGET_FEW_SHOT_RUBRICS" or "OPTIMIZATION_TARGET_FEW_SHOT_TARGET_RESPONSE" to the optimize_prompt method (715cc5b)

GenAI SDK client(memory): Add enable_third_person_memories (65717fa)

Support Developer Connect in AE (04f1771)

Bug Fixes

Add None check for agent_info in evals.py (c8c0f0f)

GenAI client(evals) - Fix TypeError in _build_generate_content_config (be2eaaa)

Make project_number to project_id mapping fail-open. (f1c8458)

Replace asyncio.run with create_task in ADK async thread mains. (83f4076)

Replace asyncio.run with create_task in ADK async thread mains. (8c876ef)

Require uri or staging bucket configuration for saving model to Vertex Experiment. (5448f06)

Return embedding metadata if available (d9c6eb1)

Update examples_dataframe type to PandasDataFrame in Prompt Optimizer. (a2564cc)

1.132.0 (2025-12-17)

Features

Add Lustre support to the Vertex Training Custom Job API (71747e8)

Add Lustre support to the Vertex Training Custom Job API (71747e8)

Documentation

A comment for field restart_job_on_worker_restart in message .google.cloud.aiplatform.v1beta1.Scheduling is changed (71747e8)

A comment for field timeout in message .google.cloud.aiplatform.v1beta1.Scheduling is changed (71747e8)

1.131.0 (2025-12-16)

Features

Allow list of events to be passed to AdkApp.async_stream_query (dd8840a)

GenAI Client(evals) - Support CustomCodeExecution metric in Vertex Gen AI Eval Service (4114728)

Updates the ADK template to direct structured JSON logs to standard output. (a65ec29)

Bug Fixes

Fix RagManagedVertexVectorSearch when using backend_config (df0976e)

GenAI Client(evals) - patch for vulnerability in visualization (8a00d43)

... (truncated)

Commits

78f2bdd chore(main): release 1.133.0 (#6211)
c8c0f0f fix: Add None check for agent_info in evals.py
9952b97 chore: rollback
83f4076 fix: Replace asyncio.run with create_task in ADK async thread mains.
937d5af Copybara import of the project:
aaaf902 chore: bump google-auth lower bound to 2.47.0 in GenAI and Vertex SDKs
8c876ef fix: Replace asyncio.run with create_task in ADK async thread mains.
5448f06 fix: Require uri or staging bucket configuration for saving model to Vertex E...
65717fa feat: GenAI SDK client(memory): Add enable_third_person_memories
be2eaaa fix: GenAI client(evals) - Fix TypeError in _build_generate_content_config
Additional commits viewable in compare view

Updates orjson from 3.10.16 to 3.11.5

Release notes

Sourced from orjson's releases.

3.11.5

Changed

Show simple error message instead of traceback when attempting to build on unsupported Python versions.

3.11.4

Changed

ABI compatibility with CPython 3.15 alpha 1.

Publish PyPI wheels for 3.14 and manylinux i686, manylinux arm7, manylinux ppc64le, manylinux s390x.

Build now requires a C compiler.

3.11.3

Fixed

Fix PyPI project metadata when using maturin 1.9.2 or later.

3.11.2

Fixed

Fix build using Rust 1.89 on amd64.

Changed

Build now depends on Rust 1.85 or later instead of 1.82.

3.11.1

Changed

Publish PyPI wheels for CPython 3.14.

Fixed

Fix str on big-endian architectures.

3.11.0

Changed

Use a deserialization buffer allocated per request instead of a shared buffer allocated on import.

ABI compatibility with CPython 3.14 beta 4.

3.10.18

Fixed

Fix incorrect escaping of the vertical tabulation character. This was introduced in 3.10.17.

3.10.17

... (truncated)

Changelog

Sourced from orjson's changelog.

3.11.5 - 2025-12-06

Changed

Show simple error message instead of traceback when attempting to build on unsupported Python versions.

3.11.4 - 2025-10-24

Changed

ABI compatibility with CPython 3.15 alpha 1.

Publish PyPI wheels for 3.14 and manylinux i686, manylinux arm7, manylinux ppc64le, manylinux s390x.

Build now requires a C compiler.

3.11.3 - 2025-08-26

Fixed

Fix PyPI project metadata when using maturin 1.9.2 or later.

3.11.2 - 2025-08-12

Fixed

Fix build using Rust 1.89 on amd64.

Changed

Build now depends on Rust 1.85 or later instead of 1.82.

3.11.1 - 2025-07-25

Changed

Publish PyPI wheels for CPython 3.14.

Fixed

Fix str on big-endian architectures. This was introduced in 3.11.0.

3.11.0 - 2025-07-15

Changed

... (truncated)

Commits

fb3eb1f 3.11.5
52688e0 Record contributors in headers
dc083e8 Further compatibility and build misc
18f0186 Compatibility and build misc
a4fdeb3 3.11.4
2e80d68 unlikely to cold_path, remove intrinsics
27edea9 FFI through crate::ffi, partial non-CPython compatibility
416a8c9 Unconditionally build yyjson
c8c1a17 edition 2024
af4179a build maintenance, panic_immediate_abort break, test 3.15
Additional commits viewable in compare view

Updates protobuf from 5.29.4 to 5.29.6

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

This version includes breaking changes to: C++, Objective-C, PHP, Python.

[Bazel] Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

[C++] Make generator headers private (protocolbuffers/protobuf@3a2af35)

[C++] Add a debug check that the target of CopyFrom is not a descendant of the source. (protocolbuffers/protobuf@7a75898)

[C++] Add [[nodiscard]] to many APIs. (protocolbuffers/protobuf@a70115f)

[C++] Make the arena-enabled constructors of RepeatedField, RepeatedPtrField, and Map private. (protocolbuffers/protobuf@ef890c3)

[C++] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[C++] Removes proto2::util::MessageDifferencer::AddIgnoreCriteria that takes a raw pointer as an argument in favor of the overload that takes a unique_ptr. Remove macro PROTOBUF_FUTURE_REMOVE_ADD_IGNORE_CRITERIA (protocolbuffers/protobuf@b115358)

[C++] Remove deprecated FieldDescriptor::has_optional_keyword() in OSS. Use is_repeated() or has_presence() instead (protocolbuffers/protobuf@68346ec)

[C++] Remove AddUnusedImportTrackFile() and ClearUnusedImportTrackFiles(). Remove PROTOBUF_FUTURE_RENAME_ADD_UNUSED_IMPORT (protocolbuffers/protobuf@837a2cd)

[C++] Remove deprecated FieldDescriptor::is_optional() in OSS. Use (!is_required() && !is_repeated()) instead (protocolbuffers/protobuf@9dbc5d4)

[C++] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

[C++] All entity names have length limit (2afb0dc)

[ObjC] Remove generate_minimal_imports generation option warning (protocolbuffers/protobuf@45b1297)

[ObjC] Fix nullability annotations on some GPB*Dictionary types. (protocolbuffers/protobuf@ea67d6d)

[ObjC] Remove -[GPBFieldDescriptor optional] (protocolbuffers/protobuf@3414dc1)

[Other] Remove deprecated flag for enabling MSVC support (protocolbuffers/protobuf@97c979b)

[PHP] Remove deprecated PHP APIs (protocolbuffers/protobuf@9c45014)

[PHP] Remove deprecated PHP APIs FieldDescriptor getLabel, use IsRepeated or isRequired instead. (protocolbuffers/protobuf@4208121, protocolbuffers/protobuf@cd76e67, protocolbuffers/protobuf@4208121)

[PHP] Add PHP typehints for setters and remove redundant GPBUtil checks (protocolbuffers/protobuf#25296) (protocolbuffers/protobuf@aee03b7)

[PHP] support default values for editions/proto2 (protocolbuffers/protobuf#25161) (protocolbuffers/protobuf@b01099d)

[Python] Raise errors in OSS when assign bool to int/enum field in Python Proto. (protocolbuffers/protobuf@5b116fe)

[Python] Remove float_format/double_format from python proto text_format (protocolbuffers/protobuf@e4854a1)

[Python] Raise TypeError when convert non-timedelta to Duration, or convert non-datetime to Timestamp in python proto. (Original code may raise ArributeError) (protocolbuffers/protobuf@00aaca1)

[Python] Remove float_precision from python proto json_format (protocolbuffers/protobuf@f027f1f)

[Python] Remove deprecated FieldDescriptor::label() in OSS. Use is_repeated() or is_required() instead (protocolbuffers/protobuf@b76faa9)

[Python] Remove deprecated FieldDescriptor.label (protocolbuffers/protobuf@0a8ff55)

[Python] Remove deprecated UseDeprecatedLegacyJsonFieldConflicts() (protocolbuffers/protobuf@c301c2c)

Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Migration Guide may include additional guidance for breaking changes.

Bazel

Fix: cc_toolchain should prefer protoc when prebuilt flag is flipped. (#25168) (protocolbuffers/protobuf@8c857c3)

Breaking change: Remove deprecated ProtoInfo.transitive_imports. Use equivalent transitive_sources instead (protocolbuffers/protobuf@0a5c2f6)

Feat(bazel): wire up prebuilt protoc toolchain (#24115) (protocolbuffers/protobuf@cc23698)

Migrate proto_descriptor_set (#23369) (protocolbuffers/protobuf@8d4dfdd)

Compiler

Ruby codegen: support generation of rbs files (#15633) (protocolbuffers/protobuf@6ebdf85)

Avoid collision name problems between a message named Xyz and a direct sibling enum named XyzView (protocolbuffers/protobuf@eba53e8)

Generalizing and implementing ValidateFeatureSupport for both Options and Features during proto parsing (protocolbuffers/protobuf@ed3c571)

Fix a bug with custom features outside of the pb package. (protocolbuffers/protobuf@872d3ce)

Fix import option handling when include_imports isn't set. (protocolbuffers/protobuf@9ef9e80)

Fix a bug in STRICT check of namespaced enums to properly check for 'reserved 1 to max' (protocolbuffers/protobuf@1229d4a)

Prevent accidental stripping of debug_redact options via import option. (protocolbuffers/protobuf@f58b098)

C++

Add EnumerateEnumValues function. (protocolbuffers/protobuf@397d5d9)

... (truncated)

Commits

See full diff in compare view

Updates pyasn1 from 0.6.1 to 0.6.2

Release notes

Sourced from pyasn1's releases.

Release 0.6.2

It's a minor release.

Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).

Added support for Python 3.14.

Added SECURITY.md policy.

Migrated to pyproject.toml packaging.

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.2, released 16-01-2026

CVE-2026-23490 (GHSA-63vm-454h-vhhq): Fixed continuation octet limits in OID/RELATIVE-OID decoder (thanks to tsigouris007)

Added support for Python 3.14 [pr #97](pyasn1/pyasn1#97)

Added SECURITY.md policy

Fixed unit tests failing due to missing code [issue #91](pyasn1/pyasn1#91) [pr #92](pyasn1/pyasn1#92)

Migrated to pyproject.toml packaging [pr #90](pyasn1/pyasn1#90)

Commits

e7356f8 Prepare release 0.6.2
3908f14 Merge commit from fork
0a7e067 Add support for Python 3.14 (#97)
33656e9 Create Security Policy
fa62307 fix for issue #91: unit tests failing due to missing code (#92)
f1ed02e Package pyasn1 with pyproject.toml (#90)
93c4d4f Switch documentation user to pyasn1 (#89)
See full diff in compare view

Updates sqlparse from 0.5.3 to 0.5.4

Changelog

Sourced from sqlparse's changelog.

Release 0.5.4 (Nov 28, 2025)

Enhancements

Add support for Python 3.14.

Add type annotations to top-level API functions and include py.typed marker for PEP 561 compliance, enabling type checking with mypy and other tools (issue756).

Add pre-commit hook support. sqlparse can now be used as a pre-commit hook to automatically format SQL files. The CLI now supports multiple files and an --in-place flag for in-place editing (issue537).

Add ATTACH and DETACH to PostgreSQL keywords (pr808).

Add INTERSECT to close keywords in WHERE clause (pr820).

Support REGEXP BINARY comparison operator (pr817).

Bug Fixes

Add additional protection against denial of service attacks when parsing very large lists of tuples. This enhances the existing recursion protections with configurable limits for token processing to prevent DoS through algorithmic complexity attacks. The new limits (MAX_GROUPING_DEPTH=100, MAX_GROUPING_TOKENS=10000) can be adjusted or disabled (by setting to None) if needed for legitimate large SQL statements.

Remove shebang from cli.py and remove executable flag (pr818).

Fix strip_comments not removing all comments when input contains only comments (issue801, pr803 by stropysh).

Fix splitting statements with IF EXISTS/IF NOT EXISTS inside BEGIN...END blocks (issue812).

Fix splitting on semicolons inside BEGIN...END blocks (issue809).

Commits

14e300b Bump version.
96a67e2 Code cleanup.
1a3bfbd Fix handling of semicolons inside BEGIN...END blocks (fixes #809).
e92a032 Fix handling of IF EXISTS statements in BEGIN...END blocks (fixes #812).
149bebf Update Changelog.
561a67e Update AUTHORS.
73c8ba3 bugfix ISSUE_801; Remove all comments when only comments
1b32387 Update action to run on all prs.
31903e0 Add pre-commit hook support (fixes #537)
1357726 docs: add AGENTS.md for project guidance and development commands
Additional commits viewable in compare view

Updates urllib3 from 2.4.0 to 2.6.3

Release notes

Sourced from urllib3's releases.

2.6.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by @D47A, 8.9 High, GHSA-38jv-5279-wg99)

Started treating Retry-After times greater than 6 hours as 6 hours by default. (urllib3/urllib3#3743)

Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. (urllib3/urllib3#3752)

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (urllib3/urllib3#3734)

2.6.1

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. (#3731)

2.6.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security

Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (CVE-2025-66471 reported by @Cycloctane, 8.9 High, GHSA-2xpw-w6gg-jr37)

Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (CVE-2025-66418 reported by @illia-v, 8.9 High, GHSA-gm62-xv2j-4w53)

[!IMPORTANT]

If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using urllib3[brotli] to install a compatible Brotli package automatically.

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.6.3 (2026-01-07)

Fixed a high-severity security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)

Started treating Retry-After times greater than 6 hours as 6 hours by default. ([#3743](https://github.com/urllib3/urllib3/issues/3743) <https://github.com/urllib3/urllib3/issues/3743>__)

Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. ([#3752](https://github.com/urllib3/urllib3/issues/3752) <https://github.com/urllib3/urllib3/issues/3752>__)

2.6.2 (2025-12-11)

Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. ([#3734](https://github.com/urllib3/urllib3/issues/3734) <https://github.com/urllib3/urllib3/issues/3734>__)

2.6.1 (2025-12-08)

Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. ([#3731](https://github.com/urllib3/urllib3/issues/3731) <https://github.com/urllib3/urllib3/issues/3731>__)

2.6.0 (2025-12-05)

Security

Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (GHSA-2xpw-w6gg-jr37 <https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37>__)

Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (GHSA-gm62-xv2j-4w53 <https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53>__)

.. caution::

If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using

... (truncated)

Commits

0248277 Release 2.6.3
8864ac4 Merge commit from fork
70cecb2 Fix Scorecard issues related to vulnerable dev dependencies (#3755)
41f249a Move "v2.0 Migration Guide" to the end of the table of contents (#3747)
fd4dffd Patch VerifiedHTTPSConnection for Emscripten (#3752)
13f0bfd Handle massive values in Retry-After when calculating time to sleep for (#3743)
8c480bf Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#3748)
4b40616 Bump actions/cache from 4.3.0 to 5.0.1 (#3750)
82b8479 Bump actions/download-artifact from 6.0.0 to 7.0.0 (#3749)
34284cb Mention experimental features in the security policy (#3746)
Additional commits viewable in compare view

Updates cryptography from 44.0.1 to 46.0.5

Changelog

Sourced from cryptography's changelog.

46.0.5 - 2026-02-10


* An attacker could create a malicious public key that reveals portions of your
  private key when using certain uncommon elliptic curves (binary curves).
  This version now includes additional security checks to prevent this attack.
  This issue only affects binary elliptic curves, which are rarely used in
  real-world applications. Credit to **XlabAI Team of Tencent Xuanwu Lab and
  Atuin Automated Vulnerability Discovery Engine** for reporting the issue.
  **CVE-2026-26007**
* Support for ``SECT*`` binary elliptic curves is deprecated and will be
  removed in the next release.
.. v46-0-4:
46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels_.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.

.. _v46-0-3:

46.0.3 - 2025-10-15

* Fixed compilation when using LibreSSL 4.2.0. .. _v46-0-2:

46.0.2 - 2025-09-30

Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.

.. _v46-0-1:

46.0.1 - 2025-09-16

* Fixed an issue where users installing via ``pip`` on Python 3.14 development versions would not properly install a dependency. * Fixed an issue building the free-threaded macOS 3.14 wheels. .. _v46-0-0:

46.0.0 - 2025-09-16

BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been removed.

... (truncated)

Commits

06e120e bump version for 46.0.5 release (#14289)
0eebb9d EC check key on cofactor > 1 (#14287)
bedf6e1 fix openssl version on 46 branch (#14220)
e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
c0af4dd release 46.0.3 (#13681)
99efe5a bump version for 46.0.2 (#13531)
e735cfc release 46.0.1 (#13450)
4e457ff Explicitly specify python in mac uv build invocation (#13447)
2726efd Depend on CFFI 2.0.0 or newer on Python > 3.8 (#13448)
6223062 release 46.0.0 (#13446)
Additional commits viewable in compare view

Updates google-cloud-aiplatform from 1.66.0 to 1.133.0

Release notes

Sourced from google-cloud-aiplatform's releases.

v1.133.0

1.133.0 (2026-01-08)

Features

Deprecate tuning public preview SDK in favor of tuning SDK (35d362c)

GenAI SDK client - Enabling Few-shot Prompt Optimization by passing either "OPTIMIZATION_TARGET_FEW_SHOT_RUBRICS" or "OPTIMIZATION_TARGET_FEW_SHOT_TARGET_RESPONSE" to the optimize_prompt method (715cc5b)

GenAI SDK client(memory): Add enable_third_person_memories (65717fa)

Support Developer Connect in AE (04f1771)

Bug Fixes

Add None check for agent_info in evals.py (c8c0f0f)

GenAI client(evals) - Fix TypeError in _build_generate_content_config (be2eaaa)

Make project_number to project_id mapping fail-open. (f1c8458)

Replace asyncio.run with create_task in ADK async thread mains. (83f4076)

Replace asyncio.run with cre...
Description has been truncated

Bumps the pip group with 7 updates in the /python/src/main/python/job-builder-server directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 11 updates in the /python/src/main/python/streaming-llm directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.1` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.66.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.7` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `4.25.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.1` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.2.3` | `2.6.3` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.16.0` | `3.20.3` | | [pillow](https://github.com/python-pillow/Pillow) | `10.4.0` | `12.1.1` | | [torch](https://github.com/pytorch/pytorch) | `2.2.2` | `2.8.0` | | [transformers](https://github.com/huggingface/transformers) | `4.44.2` | `4.53.0` | Bumps the pip group with 7 updates in the /python/src/main/python/word-count-python directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /python/src/main/python/yaml-template directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /v2/googlecloud-to-elasticsearch/src/main/resources directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /v2/googlecloud-to-googlecloud/src/main/resources directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /v2/googlecloud-to-splunk/src/main/resources directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /v2/pubsub-binary-to-bigquery/src/main/resources directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Bumps the pip group with 7 updates in the /v2/pubsub-to-mongodb/src/main/resources directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `44.0.2` | `46.0.5` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.88.0` | `1.133.0` | | [orjson](https://github.com/ijl/orjson) | `3.10.16` | `3.11.5` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `5.29.4` | `5.29.6` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.5.4` | | [urllib3](https://github.com/urllib3/urllib3) | `2.4.0` | `2.6.3` | Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.1 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.66.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.7 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 4.25.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.1 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.2.3 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `filelock` from 3.16.0 to 3.20.3 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.16.0...3.20.3) Updates `pillow` from 10.4.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@10.4.0...12.1.1) Updates `torch` from 2.2.2 to 2.8.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.2.2...v2.8.0) Updates `transformers` from 4.44.2 to 4.53.0 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.44.2...v4.53.0) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) Updates `cryptography` from 44.0.2 to 46.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.2...46.0.5) Updates `google-cloud-aiplatform` from 1.88.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.88.0...v1.133.0) Updates `orjson` from 3.10.16 to 3.11.5 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.16...3.11.5) Updates `protobuf` from 5.29.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) Updates `sqlparse` from 0.5.3 to 0.5.4 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.3...0.5.4) Updates `urllib3` from 2.4.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.4.0...2.6.3) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: filelock dependency-version: 3.20.3 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.1.1 dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-version: 2.8.0 dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-version: 4.53.0 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.5 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: orjson dependency-version: 3.11.5 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-version: 0.5.4 dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 9 directories with 11 updates#206

Bump the pip group across 9 directories with 11 updates#206
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python/src/main/python/job-builder-server/pip-4155842f30

dependabot bot commented on behalf of github Feb 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 21, 2026

v1.133.0

1.133.0 (2026-01-08)

Features

Bug Fixes

v1.132.0

1.132.0 (2025-12-17)

Features

Documentation

v1.131.0

1.131.0 (2025-12-16)

Features

Bug Fixes

1.133.0 (2026-01-08)

Features

Bug Fixes

1.132.0 (2025-12-17)

Features

Documentation

1.131.0 (2025-12-16)

Features

Bug Fixes

3.11.5

Changed

3.11.4

Changed

3.11.3

Fixed

3.11.2

Fixed

Changed

3.11.1

Changed

Fixed

3.11.0

Changed

3.10.18

Fixed

3.10.17

3.11.5 - 2025-12-06

Changed

3.11.4 - 2025-10-24

Changed

3.11.3 - 2025-08-26

Fixed

3.11.2 - 2025-08-12

Fixed

Changed

3.11.1 - 2025-07-25

Changed

Fixed

3.11.0 - 2025-07-15

Changed

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

Release 0.6.2

Revision 0.6.2, released 16-01-2026

Release 0.5.4 (Nov 28, 2025)

2.6.3

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.1

🚀 urllib3 is fundraising for HTTP/2 support

Changes

2.6.0

🚀 urllib3 is fundraising for HTTP/2 support

Security

2.6.3 (2026-01-07)

2.6.2 (2025-12-11)

2.6.1 (2025-12-08)

2.6.0 (2025-12-05)

Security

v1.133.0