deps(server): bump the python-server-minor group in /server with 5 updates by dependabot[bot] · Pull Request #11 · TechNavii/LLM_code_benchmark

dependabot · 2026-01-12T11:36:58Z

Bumps the python-server-minor group in /server with 5 updates:

Package	From	To
alembic	`1.13.2`	`1.18.0`
fastapi	`0.115.6`	`0.128.0`
pydantic-settings	`2.4.0`	`2.12.0`
sqlalchemy	`2.0.32`	`2.0.45`
uvicorn[standard]	`0.30.5`	`0.40.0`

Updates alembic from 1.13.2 to 1.18.0

Release notes

Sourced from alembic's releases.

1.18.0

Released: January 9, 2026

feature

[feature] [operations] When alembic is run in "verbose" mode, alembic now logs a message to indicate from which file is used to load the configuration.

References: #1737

[feature] [autogenerate] Autogenerate reflection sweeps now use the "bulk" inspector methods introduced in SQLAlchemy 2.0, which for selected dialects including PostgreSQL and Oracle use batched queries to reflect whole collections of tables using O(1) queries rather than O(N).

References: #1771

[feature] [autogenerate] Release 1.18.0 introduces a plugin system that allows for automatic loading of third-party extensions as well as configurable autogenerate compare functionality on a per-environment basis.

The Plugin class provides a common interface for extensions that register handlers among Alembic's existing extension points such as Operations.register_operation() and Operations.implementation_for(). A new interface for registering autogenerate comparison handlers, Plugin.add_autogenerate_comparator(), provides for autogenerate compare functionality that may be custom-configured on a per-environment basis using the new EnvironmentContext.configure.autogenerate_plugins parameter.

The change does not impact well known Alembic add-ons such as alembic-utils, which continue to work as before; however, such add-ons have the option to provide plugin entrypoints going forward.

As part of this change, Alembic's autogenerate compare functionality is reorganized into a series of internal plugins under the alembic.autogenerate namespace, which may be individually or collectively identified for inclusion and/or exclusion within the EnvironmentContext.configure() call using a new parameter EnvironmentContext.configure.autogenerate_plugins. This parameter is also where third party comparison plugins may also be indicated.

See alembic.plugins.toplevel for complete documentation on the new Plugin class as well as autogenerate-specific usage instructions.

... (truncated)

Commits

See full diff in compare view

Updates fastapi from 0.115.6 to 0.128.0

Release notes

Sourced from fastapi's releases.

0.128.0

Breaking Changes

➖ Drop support for pydantic.v1. PR #14609 by @tiangolo.

Internal

✅ Run performance tests only on Pydantic v2. PR #14608 by @tiangolo.

0.127.1

Refactors

🔊 Add a custom FastAPIDeprecationWarning. PR #14605 by @tiangolo.

Docs

📝 Add documentary to website. PR #14600 by @tiangolo.

Translations

🌐 Update translations for de (update-outdated). PR #14602 by @nilslindemann.

🌐 Update translations for de (update-outdated). PR #14581 by @nilslindemann.

Internal

🔧 Update pre-commit to use local Ruff instead of hook. PR #14604 by @tiangolo.

✅ Add missing tests for code examples. PR #14569 by @YuriiMotov.

👷 Remove lint job from test CI workflow. PR #14593 by @YuriiMotov.

👷 Update secrets check. PR #14592 by @tiangolo.

👷 Run CodSpeed tests in parallel to other tests to speed up CI. PR #14586 by @tiangolo.

🔨 Update scripts and pre-commit to autofix files. PR #14585 by @tiangolo.

0.127.0

Breaking Changes

🔊 Add deprecation warnings when using pydantic.v1. PR #14583 by @tiangolo.

Translations

🔧 Add LLM prompt file for Korean, generated from the existing translations. PR #14546 by @tiangolo.

🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR #14545 by @tiangolo.

Internal

⬆️ Upgrade OpenAI model for translations to gpt-5.2. PR #14579 by @tiangolo.

0.126.0

Upgrades

➖ Drop support for Pydantic v1, keeping short temporary support for Pydantic v2's pydantic.v1. PR #14575 by @tiangolo.

... (truncated)

Commits

8322a44 🔖 Release version 0.128.0
4b2cfcf 📝 Update release notes
e300630 ➖ Drop support for pydantic.v1 (#14609)
1b3bea8 📝 Update release notes
34e8841 ✅ Run performance tests only on Pydantic v2 (#14608)
cd90c78 🔖 Release version 0.127.1
93f4dfd 📝 Update release notes
535b5da 🔊 Add a custom FastAPIDeprecationWarning (#14605)
6b53786 📝 Update release notes
d98f4eb 🔧 Update pre-commit to use local Ruff instead of hook (#14604)
Additional commits viewable in compare view

Updates pydantic-settings from 2.4.0 to 2.12.0

Release notes

Sourced from pydantic-settings's releases.

v2.12.0

What's Changed

Support for enum kebab case. by @kschwab in pydantic/pydantic-settings#686

Apply source order: init > env > dotenv > secrets > defaults and pres… by @chbndrhnns in pydantic/pydantic-settings#688

Add NestedSecretsSettings source by @makukha in pydantic/pydantic-settings#690

Strip non-explicit default values. by @kschwab in pydantic/pydantic-settings#692

Coerce env vars if strict is True. by @kschwab in pydantic/pydantic-settings#693

Restore init kwarg names before returning final state dictionary. by @kschwab in pydantic/pydantic-settings#700

Drop Python3.9 support by @hramezani in pydantic/pydantic-settings#699

Adapt test_protected_namespace_defaults for dev. Pydantic by @musicinmybrain in pydantic/pydantic-settings#637

Add Python 3.14 by @hramezani in pydantic/pydantic-settings#704

Prepare release 2.12 by @hramezani in pydantic/pydantic-settings#705

New Contributors

@chbndrhnns made their first contribution in pydantic/pydantic-settings#688

Full Changelog: pydantic/pydantic-settings@v2.11.0...v2.12.0

v2.11.0

What's Changed

CLI Serialize Support by @kschwab in pydantic/pydantic-settings#643

Inspect type aliases to determine if an annotation is complex by @tselepakis in pydantic/pydantic-settings#644

Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#611)" by @hramezani in pydantic/pydantic-settings#655

Remove parsing of command line arguments from CliSettingsSource.__init__. by @trygve-baerland in pydantic/pydantic-settings#656

turn off allow_abbrev on subparsers by @mroch in pydantic/pydantic-settings#658

CLI Serialization Fixes by @kschwab in pydantic/pydantic-settings#649

Fix PydanticModel type checking. by @kschwab in pydantic/pydantic-settings#659

Avoid env_prefix falling back to env vars without prefix by @tselepakis in pydantic/pydantic-settings#648

Warn if model_config sets unused keys for missing settings sources by @HomerusJa in pydantic/pydantic-settings#663

Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @adrianohrl in pydantic/pydantic-settings#664

Fix typo ("Accesing") in the "Adding sources" docs by @deepyaman in pydantic/pydantic-settings#668

CLI Windows Path Fix by @kschwab in pydantic/pydantic-settings#669

Cli root model support by @kschwab in pydantic/pydantic-settings#677

Snake case conversion in Azure Key Vault by @AndreuCodina in pydantic/pydantic-settings#680

Make InitSettingsSource resolution deterministic by @enrico-stauss in pydantic/pydantic-settings#681

Update deps by @hramezani in pydantic/pydantic-settings#683

New Contributors

@tselepakis made their first contribution in pydantic/pydantic-settings#644

@trygve-baerland made their first contribution in pydantic/pydantic-settings#656

@mroch made their first contribution in pydantic/pydantic-settings#658

@HomerusJa made their first contribution in pydantic/pydantic-settings#663

@adrianohrl made their first contribution in pydantic/pydantic-settings#664

@deepyaman made their first contribution in pydantic/pydantic-settings#668

@enrico-stauss made their first contribution in pydantic/pydantic-settings#681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

v2.10.1

What's Changed

... (truncated)

Commits

584983d Prepare release 2.12 (#705)
6b4d87e Add Python 3.14 (#704)
02de5b6 Adapt test_protected_namespace_defaults for dev. Pydantic (#637)
4239ea4 Drop Python3.9 support (#699)
5008c69 Restore init kwarg names before returning final state dictionary. (#700)
4433101 Coerce env vars if strict is True. (#693)
4d2ebfd Strip non-explicit default values. (#692)
4a6ffca Add NestedSecretsSettings source (#690)
7a6e96e Apply source order: init > env > dotenv > secrets > defaults and pres… (#688)
68563ed Support for enum kebab case. (#686)
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.32 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

[orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

References: #12858

[orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

References: #12952

examples

[examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

[sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

References: #12915

[sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

See full diff in compare view

Updates uvicorn[standard] from 0.30.5 to 0.40.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.40.0

What's Changed

Drop Python 3.9 by @Kludex in Kludex/uvicorn#2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

Version 0.39.0

What's Changed

explicitly start ASGI run with empty context by @pmeier in Kludex/uvicorn#2742

fix(websockets): Send close frame on ASGI return by @Kludex in Kludex/uvicorn#2769

New Contributors

@pmeier made their first contribution in Kludex/uvicorn#2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

Version 0.38.0

What's Changed

Support Python 3.14 by @Kludex in Kludex/uvicorn#2723

New Contributors

@NGANAMODEIJunior made their first contribution in Kludex/uvicorn#2713

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Version 0.37.0

What's Changed

Add --timeout-worker-healthcheck setting by @Kludex in Kludex/uvicorn#2711

Add os.PathLike[str] type to ssl_ca_certs by @rnv812 in Kludex/uvicorn#2676

New Contributors

@LincolnPuzey made their first contribution in Kludex/uvicorn#2669

@rnv812 made their first contribution in Kludex/uvicorn#2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Raise an exception when calling removed Config.setup_event_loop() by @Kludex in Kludex/uvicorn#2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

Support custom IOLOOPs by @gnir-work in Kludex/uvicorn#2435

... (truncated)

Changelog

Sourced from uvicorn[standard]'s changelog.

0.40.0 (December 21, 2025)

Remove

Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

Send close frame on ASGI return for WebSockets (#2769)

Explicitly start ASGI run with empty context (#2742)

0.38.0 (October 18, 2025)

Added

Support Python 3.14 (#2723)

0.37.0 (September 23, 2025)

Added

Add --timeout-worker-healthcheck option (#2711)

Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

Support custom IOLOOPs (#2435)

Allow to provide importable string in --http, --ws and --loop (#2658)

0.35.0 (June 28, 2025)

Added

Add WebSocketsSansIOProtocol (#2540)

Changed

Refine help message for option --proxy-headers (#2653)

0.34.3 (June 1, 2025)

... (truncated)

Commits

9ff6004 Version 0.40.0 (#2773)
19df042 Drop Python 3.9 (#2772)
865ce7c Run strict mypy on test suite (#2771)
4f40b84 Version 0.39.0 (#2770)
5692dfc fix(websockets): Send close frame on ASGI return (#2769)
4194764 chore(deps): bump the github-actions group with 2 updates (#2763)
d94bf28 explicitly start ASGI run with empty context (#2742)
8ae0bcb chore(deps): bump the github-actions group with 2 updates (#2748)
4744ff9 Add groups configuration for GitHub Actions (#2747)
0391372 chore(deps): bump astral-sh/setup-uv from 6.8.0 to 7.1.2 (#2746)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2026-01-12T11:36:59Z

Labels

The following labels could not be found: dependencies, python, server. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-01-12T11:37:04Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-01-12T11:37:35Z

Test Results (ubuntu-latest/Python 3.11)

0 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
0 suites ±0 0 💤 ±0
0 files ±0 0 ❌ ±0

Results for commit 199b4ce. ± Comparison against base commit 8d433a7.

♻️ This comment has been updated with latest results.

github-actions · 2026-01-12T11:37:36Z

Test Results (ubuntu-latest/Python 3.12)

0 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
0 suites ±0 0 💤 ±0
0 files ±0 0 ❌ ±0

Results for commit 199b4ce. ± Comparison against base commit 8d433a7.

♻️ This comment has been updated with latest results.

Bumps the python-server-minor group in /server with 5 updates: | Package | From | To | | --- | --- | --- | | [alembic](https://github.com/sqlalchemy/alembic) | `1.13.2` | `1.18.0` | | [fastapi](https://github.com/fastapi/fastapi) | `0.115.6` | `0.128.0` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.4.0` | `2.12.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.32` | `2.0.45` | | [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.30.5` | `0.40.0` | Updates `alembic` from 1.13.2 to 1.18.0 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `fastapi` from 0.115.6 to 0.128.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.6...0.128.0) Updates `pydantic-settings` from 2.4.0 to 2.12.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.4.0...v2.12.0) Updates `sqlalchemy` from 2.0.32 to 2.0.45 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `uvicorn[standard]` from 0.30.5 to 0.40.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.30.5...0.40.0) --- updated-dependencies: - dependency-name: alembic dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-server-minor - dependency-name: fastapi dependency-version: 0.128.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-server-minor - dependency-name: pydantic-settings dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-server-minor - dependency-name: sqlalchemy dependency-version: 2.0.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-server-minor - dependency-name: uvicorn[standard] dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-server-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-14T04:45:26Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot force-pushed the dependabot/pip/server/python-server-minor-ce6f002c5f branch from 263d6ef to 7f92122 Compare January 13, 2026 23:30

dependabot Bot force-pushed the dependabot/pip/server/python-server-minor-ce6f002c5f branch from 7f92122 to 199b4ce Compare January 14, 2026 02:30

TechNavii closed this Jan 14, 2026

TechNavii deleted the dependabot/pip/server/python-server-minor-ce6f002c5f branch January 14, 2026 04:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(server): bump the python-server-minor group in /server with 5 updates#11

deps(server): bump the python-server-minor group in /server with 5 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/server/python-server-minor-ce6f002c5f

dependabot Bot commented on behalf of github Jan 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jan 12, 2026

Uh oh!

coderabbitai Bot commented Jan 12, 2026

Review skipped

Uh oh!

github-actions Bot commented Jan 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jan 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jan 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.18.0

feature

0.128.0

Breaking Changes

Internal

0.127.1

Refactors

Docs

Translations

Internal

0.127.0

Breaking Changes

Translations

Internal

0.126.0

Upgrades

v2.12.0

What's Changed

New Contributors

v2.11.0

What's Changed

New Contributors

v2.10.1

What's Changed

2.0.45

orm

examples

sql

Version 0.40.0

What's Changed

Version 0.39.0

What's Changed

New Contributors

Version 0.38.0

What's Changed

New Contributors

Version 0.37.0

What's Changed

New Contributors

Version 0.36.1

What's Changed

Version 0.36.0

Added

0.40.0 (December 21, 2025)

Remove

0.39.0 (December 21, 2025)

Fixed

0.38.0 (October 18, 2025)

Added

0.37.0 (September 23, 2025)

Added

0.36.1 (September 23, 2025)

Fixed

0.36.0 (September 20, 2025)

Added

0.35.0 (June 28, 2025)

Added

Changed

0.34.3 (June 1, 2025)

Uh oh!

dependabot Bot commented on behalf of github Jan 12, 2026

Labels

Uh oh!

coderabbitai Bot commented Jan 12, 2026

Review skipped

Uh oh!

github-actions Bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results (ubuntu-latest/Python 3.11)

Uh oh!

github-actions Bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results (ubuntu-latest/Python 3.12)

Uh oh!

dependabot Bot commented on behalf of github Jan 14, 2026

Uh oh!

Reviewers

dependabot Bot commented on behalf of github Jan 12, 2026 •

edited

Loading

github-actions Bot commented Jan 12, 2026 •

edited

Loading

github-actions Bot commented Jan 12, 2026 •

edited

Loading