Skip to content

chore(deps): Bump the python-minor group across 1 directory with 21 updates#384

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-minor-d7b2820d32
Closed

chore(deps): Bump the python-minor group across 1 directory with 21 updates#384
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-minor-d7b2820d32

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 14, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Update Type: minor
Security Update: false
Risk Level: medium
Auto-merge Eligible: false

Analysis Details

  • PR Title: chore(deps): Bump the python-minor group across 1 directory with 21 updates
  • Updated by: dependabot[bot]
  • Branch: dependabot/pip/backend/python-minor-d7b2820d32

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

@github-actions
Copy link
Copy Markdown
Contributor

Manual Review Required

This dependency update requires manual review:

Reason:

  • Update Type: minor
  • Risk Level: medium
  • Auto-merge Eligible: false

Review Checklist:

  • Review changelog for breaking changes
  • Test critical application paths
  • Verify security implications
  • Check for API compatibility
  • Validate configuration changes

Next Steps:

  1. Review the changes thoroughly
  2. Test locally if needed
  3. Approve and merge when ready

cc: @maintainers

@dependabot dependabot Bot force-pushed the dependabot/pip/backend/python-minor-d7b2820d32 branch from 08da6fb to 96b593f Compare April 14, 2026 10:24
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Update Type: minor
Security Update: false
Risk Level: medium
Auto-merge Eligible: false

Analysis Details

  • PR Title: chore(deps): Bump the python-minor group across 1 directory with 21 updates
  • Updated by: dependabot[bot]
  • Branch: dependabot/pip/backend/python-minor-d7b2820d32

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

@github-actions
Copy link
Copy Markdown
Contributor

Manual Review Required

This dependency update requires manual review:

Reason:

  • Update Type: minor
  • Risk Level: medium
  • Auto-merge Eligible: false

Review Checklist:

  • Review changelog for breaking changes
  • Test critical application paths
  • Verify security implications
  • Check for API compatibility
  • Validate configuration changes

Next Steps:

  1. Review the changes thoroughly
  2. Test locally if needed
  3. Approve and merge when ready

cc: @maintainers

…pdates

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: uvicorn
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: python-multipart
  dependency-version: 0.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: sqlalchemy
  dependency-version: 2.0.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: pyjwt
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: aiohttp
  dependency-version: 3.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: pydantic
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: pydantic-settings
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: opentelemetry-api
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-minor
- dependency-name: opentelemetry-instrumentation-sqlalchemy
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-minor
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: prometheus-client
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: mypy
  dependency-version: 1.20.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: safety
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/python-minor-d7b2820d32 branch from 96b593f to d930d49 Compare April 20, 2026 04:29
@github-actions
Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Update Type: minor
Security Update: false
Risk Level: medium
Auto-merge Eligible: false

Analysis Details

  • PR Title: chore(deps): Bump the python-minor group across 1 directory with 21 updates
  • Updated by: dependabot[bot]
  • Branch: dependabot/pip/backend/python-minor-d7b2820d32

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

@github-actions
Copy link
Copy Markdown
Contributor

Manual Review Required

This dependency update requires manual review:

Reason:

  • Update Type: minor
  • Risk Level: medium
  • Auto-merge Eligible: false

Review Checklist:

  • Review changelog for breaking changes
  • Test critical application paths
  • Verify security implications
  • Check for API compatibility
  • Validate configuration changes

Next Steps:

  1. Review the changes thoroughly
  2. Test locally if needed
  3. Approve and merge when ready

cc: @maintainers

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 27, 2026
@dependabot dependabot Bot deleted the dependabot/pip/backend/python-minor-d7b2820d32 branch April 27, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file manual-review-required python Pull requests that update python code risk-medium update-minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants