Skip to content

chore(deps): bump the pip group across 1 directory with 5 updates - #538

Merged
minigu5 merged 2 commits into
mainfrom
dependabot/pip/pip-d4b992f3a9
Oct 29, 2026
Merged

chore(deps): bump the pip group across 1 directory with 5 updates#538
minigu5 merged 2 commits into
mainfrom
dependabot/pip/pip-d4b992f3a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip group with 5 updates in the / directory:

Package From To
pypdf 6.21.1 6.21.2
fastapi 0.152.0 0.162.0
pyinstaller-hooks-contrib 2026.8 2026.9
certifi 2026.10.19 2026.10.23
wcwidth 0.9.2 0.9.4

Updates pypdf from 6.21.1 to 6.21.2

Release notes

Sourced from pypdf's releases.

Version 6.21.2, 2026-10-21

What's new

Security (SEC)

Bug Fixes (BUG)

Robustness (ROB)

  • Multiple fixes

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.21.2, 2026-10-21

Security (SEC)

  • Avoid repeated full file loads (#4240)
  • Limit size of standard xref table (#4239)

Bug Fixes (BUG)

  • Decode UniGB-UTF16 CMaps as UTF-16BE (#4231)
  • Keep 8-bit DeviceRGB image mode (#4230)
  • Preserve all annotation quadrilaterals when merging pages (#4223)

Robustness (ROB)

  • Multiple fixes

Full Changelog

Commits
  • 37d05f6 REL: 6.21.2
  • 68a0e50 SEC: Avoid repeated full file loads (#4240)
  • a3061e3 SEC: Limit size of standard xref table (#4239)
  • b7eb7b9 BUG: Decode UniGB-UTF16 CMaps as UTF-16BE (#4231)
  • 885e743 ROB: Reject unsupported key lengths in the /Encrypt dictionary (#4226)
  • b68a335 TST: Enable type checking for PageRange tests (#4229)
  • 3f9c7f4 ROB: Reject negative bfrange source ranges in /ToUnicode CMaps (#4225)
  • 85c46ab ROB: Raise PdfReadError for malformed /ObjStm /N and /First headers (#4216)
  • a91817a BUG: Keep 8-bit DeviceRGB image mode (#4230)
  • b32df1d ROB: Validate the /Encrypt dictionary when opening an encrypted file (#4197)
  • Additional commits viewable in compare view

Updates fastapi from 0.152.0 to 0.162.0

Release notes

Sourced from fastapi's releases.

0.162.0

Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This applies to individual form parameters, form models, and unions of form models.

Omitted boolean model fields are excluded from model_dump(exclude_unset=True), and their defaults no longer count as submitted fields during union selection. Default factories and validate_default follow the usual rules.

For HTML checkboxes, declare a boolean with a default of False. See Boolean Form Fields.

Breaking Changes

  • 🐛 Restore default handling for omitted boolean form fields. PR #16605 by @​tiangolo.

0.161.1

Fixes

  • 🐛 Fix OpenAPI schemas for standalone nullable form unions. PR #16598 by @​tiangolo.

0.161.0

Features

0.160.0

Query, header, cookie, and form parameter models now apply their extra configuration to all submitted fields in the same parameter location, consistent with Pydantic behavior. This includes fields declared in other models, individual parameters, or dependencies, which were previously excluded.

With extra="forbid", fields outside the model are rejected even if another parameter declares them. With extra="allow", those fields are included as model extras. With the default extra="ignore", they are ignored.

Breaking Changes

  • 🐛 Apply each parameter model's extra configuration to sibling fields. PR #16594 by @​tiangolo.

Internal

0.159.1

Features

0.159.0

Features

  • ✨ Add support for optional query, header, and cookie parameter models. PR #16584 by @​tiangolo.

0.158.2

Features

0.158.1

... (truncated)

Commits

Updates pyinstaller-hooks-contrib from 2026.8 to 2026.9

Release notes

Sourced from pyinstaller-hooks-contrib's releases.

v2026.9

Please see the changelog for more details

Changelog

Sourced from pyinstaller-hooks-contrib's changelog.

2026.9 (2026-10-20)

New hooks


* Add a hook for ``dogpile.cache`` to collect its dynamically loaded cache
  backends. (`[#1053](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1053)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1053>`_)

Updated hooks

  • Update chardet hook for compatibility with chardet v7.7.0. ([#1054](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1054) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1054>_)
  • Update netCDF4 hook for compatibility with netCDF4 v1.7.5. ([#1054](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1054) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1054>_)
  • Update the imageio hook to collect distribution metadata, fixing import failures in frozen applications with ImageIO 2.37.2 and newer. ([#1050](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1050) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1050>_)
Commits
  • 222e37f Release v2026.9
  • cd2e390 hooks: add hook for dogpile.cache (#1053)
  • 989b5b5 hooks: update chardet hook for compatibility with chardet v7.7.0
  • 5363737 hooks: update netCDF4 hook for compatibility with netCDF4 1.7.5
  • 60556ff Scheduled weekly dependency update for week 42 (#1054)
  • bf5aecb Scheduled weekly dependency update for week 41 (#1052)
  • fd5fa27 hooks: collect imageio distribution metadata (#1050)
  • 072f58e Scheduled weekly dependency update for week 40 (#1049)
  • See full diff in compare view

Updates certifi from 2026.10.19 to 2026.10.23

Commits

Updates wcwidth from 0.9.2 to 0.9.4

Release notes

Sourced from wcwidth's releases.

0.9.4

What's Changed

Full Changelog: jquast/wcwidth@0.9.3...0.9.4

0.9.3

What's Changed

Full Changelog: jquast/wcwidth@0.9.2...0.9.3

Changelog

Sourced from wcwidth's changelog.

0.9.4 2026-10-24

  • Bugfix Flag emojis were split by grapheme breaks when following control characters, like newline or tab, PR [#301](https://github.com/jquast/wcwidth/issues/301)_.
  • Improved performance of most general functions by +64% PR [#303](https://github.com/jquast/wcwidth/issues/303)_.

0.9.3 2026-10-20

  • Bugfix libwcwidth no longer has undefined behavior on NULL or empty input in the UTF-8 and alignment functions, PR [#293](https://github.com/jquast/wcwidth/issues/293), PR [#294](https://github.com/jquast/wcwidth/issues/294).
  • Changed HyperlinkParams.parse()_ now rejects trailing text, PR [#296](https://github.com/jquast/wcwidth/issues/296)_.
  • Bugfix wrap()_ should keep a link's own OSC 8 params across a line break, PR [#299](https://github.com/jquast/wcwidth/issues/299)_.
Commits
  • 2a8edf1 stamp for release
  • ffb4a74 Various performance gains, shortcuts and bitsets (#303)
  • 4bb1017 Add benchmarks for width and grapheme performance (#302)
  • f22d465 Bugfix flag emojis after control characters (#301)
  • d137ffb upgrade cibuildwheel for released python3.15 (#300)
  • 12a9d13 this symlink renders bad in github
  • 949a082 fix: preserve hyperlink parameters across wrapped lines (#299)
  • bcdf2c1 make CHANGELOG.rst symlink
  • ff8072d note that 0.9.3 is not released (to PyPI) yet
  • 4f35759 document and fold into test_hyperlinkparams_parse_invalid
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 26, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the pip group with 5 updates chore(deps): bump the pip group across 1 directory with 5 updates Oct 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-d4b992f3a9 branch from ff04776 to 13f18bb Compare October 27, 2026 09:46
@dependabot
chore(deps): bump the pip group across 1 directory with 5 updates
14ac4be 
Bumps the pip group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.21.1` | `6.21.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.152.0` | `0.162.0` |
| [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib) | `2026.8` | `2026.9` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.10.19` | `2026.10.23` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.9.2` | `0.9.4` |



Updates `pypdf` from 6.21.1 to 6.21.2
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.21.1...6.21.2)

Updates `fastapi` from 0.152.0 to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.152.0...0.162.0)

Updates `pyinstaller-hooks-contrib` from 2026.8 to 2026.9
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](pyinstaller/pyinstaller-hooks-contrib@v2026.8...v2026.9)

Updates `certifi` from 2026.10.19 to 2026.10.23
- [Commits](certifi/python-certifi@2026.10.19...2026.10.23)

Updates `wcwidth` from 0.9.2 to 0.9.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.9.2...0.9.4)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: fastapi
  dependency-version: 0.161.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pypdf
  dependency-version: 6.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: wcwidth
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pip-d4b992f3a9 branch from 13f18bb to 14ac4be Compare October 28, 2026 02:40
@minigu5
minigu5 merged commit 5737cec into main Oct 29, 2026
51 checks passed
@minigu5
minigu5 deleted the dependabot/pip/pip-d4b992f3a9 branch October 29, 2026 01:19
@minigu5 minigu5 mentioned this pull request Oct 29, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@minigu5 minigu5 minigu5 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@minigu5