Skip to content

chore(deps): update uv: bump the uv-version-updates group across 1 directory with 11 updates#284

Merged
anasstahr merged 1 commit into
mainfrom
dependabot/uv/uv-version-updates-9b8f3715bf
May 18, 2026
Merged

chore(deps): update uv: bump the uv-version-updates group across 1 directory with 11 updates#284
anasstahr merged 1 commit into
mainfrom
dependabot/uv/uv-version-updates-9b8f3715bf

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the uv-version-updates group with 11 updates in the / directory:

Package From To
fastmcp 3.2.4 3.3.1
boto3 1.43.6 1.43.9
black 26.3.1 26.5.0
mypy 2.0.0 2.1.0
commitizen 4.15.1 4.16.2
ruff 0.15.12 0.15.13
agent-framework 1.3.0 1.4.0
langchain 1.2.18 1.3.1
langchain-aws 1.4.6 1.4.7
llama-index 0.14.21 0.14.22
strands-agents 1.39.0 1.40.0

Updates fastmcp from 3.2.4 to 3.3.1

Release notes

Sourced from fastmcp's releases.

v3.3.1: Loop There It Is

FastMCP 3.3.1 is a hotfix for the 3.3 packaging split. Clean installs of 3.3.0 could fail on standalone component imports like from fastmcp.tools import tool because component modules reached auth and task primitives through fastmcp.server, pulling in the server/provider stack and exposing a circular import.

Component-level auth and task primitives now live in lightweight utility modules, with the old server import paths preserved as compatibility re-exports. Component imports stay lightweight, existing server-facing imports continue to work, and the release also includes small docs corrections from the 3.3 rollout.

What's Changed

Fixes 🐞

Full Changelog: PrefectHQ/fastmcp@v3.3.0...v3.3.1

v3.3.0: Slim Reaper

FastMCP 3.3 ships fastmcp-slim, a new lightweight distribution that separates the client from the server stack. It also closes out a meaningful backlog of security hardening, observability improvements, and auth additions that accumulated through the 3.2 cycle.

fastmcp-slim

The full FastMCP package pulls in Starlette, Uvicorn, and the rest of the server machinery — necessary for running a server, but wasteful if you're writing a client, a script, or an agent that just needs to talk to MCP. fastmcp-slim is a dependency-light distribution that ships the client and transport layer without any of that.

The import namespace is unchanged:

from fastmcp import Client
async with Client("https://example.com/mcp") as client:
result = await client.call_tool("my_tool", {"arg": "value"})

Install fastmcp-slim[client] anywhere you want FastMCP's client without the server footprint — CI environments, lightweight agents, library dependencies that shouldn't force Uvicorn on downstream users.

Security

The OAuth proxy received three hardening upgrades. Silent consent is now guarded against AS-in-the-middle attacks — a malicious authorization server can no longer silently approve a consent it wasn't meant to handle. Redirect URI allowlist matching now rejects dot-segment paths (/../, /./) that could otherwise bypass prefix checks. And ResponseCachingMiddleware partitions its cache by access token, closing a gap where different users could see each other's cached responses.

Auth

AzureB2CProvider adds first-class support for Azure AD B2C user flows. The OCI provider is fixed for 3.x installs. And OAuthProxy gains a public update_scopes() API for updating the proxy's required scopes after initialization — useful for servers that determine scope requirements at runtime.

Observability

OTEL instrumentation is now fully compliant with MCP semantic conventions. List operations (list_tools, list_resources, list_prompts, list_resource_templates) are instrumented, and delegate spans on proxy servers are enriched with backend attributes.

Thread Affinity

Sync tools run in a thread pool by default. If your tool holds thread-local state or is bound to a specific thread (UI frameworks, some database drivers), you can now opt out:

... (truncated)

Commits
  • d8dcc27 Decouple component imports from server (#4150)
  • 255e3e4 fix(docs): use valid FA icon on client-only package page (#4139)
  • 73df4dc chore: Update SDK documentation (#4096)
  • ee48a0f Refine fastmcp-slim packaging (#4125)
  • bb4894d Add fastmcp-slim for client-only installs (#4122)
  • 8209093 fix(http): terminate active streamable-HTTP transports before lifespan shutdo...
  • cf59a45 Fix OCI Provider issue in 3.x version. Add OCI auth provider example … (#4116)
  • 89b99ec fix(proxy): fall back to live identifier for backend_* span attributes (#4109)
  • 310314c fix: cli option --no-banner is NOT passed to cli but server-spec in-correctly...
  • 28722f8 fix: drop exc_info for expected tool failures, remove unreachable ValidationE...
  • Additional commits viewable in compare view

Updates boto3 from 1.43.6 to 1.43.9

Commits
  • 6d47260 Merge branch 'release-1.43.9'
  • 7fb9872 Bumping version to 1.43.9
  • 1881c7f Add changelog entries from botocore
  • 7a82579 Merge branch 'release-1.43.8'
  • 9ff48ec Merge branch 'release-1.43.8' into develop
  • 06a1d63 Bumping version to 1.43.8
  • 2b6e7bd Add changelog entries from botocore
  • e6aee5d Merge branch 'release-1.43.7'
  • 05566d2 Merge branch 'release-1.43.7' into develop
  • 37e8136 Bumping version to 1.43.7
  • Additional commits viewable in compare view

Updates black from 26.3.1 to 26.5.0

Release notes

Sourced from black's releases.

26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Output

  • Improve parse error readability by showing multi-line output with an error pointer. (#5068)
  • Add SourceASTParseError to distinguish source parse failures from internal safety errors, improving error reporting when Black's lenient parser accepts input that ast.parse() rejects (#5080)

Blackd

  • Return HTTP 400 (Bad Request) for source parse failures instead of HTTP 500, keeping HTTP 500 only for genuine internal safety errors (#5080)

Integrations

  • Added documentation for doctest formatting tools and updated the integrations index to match (#4916)

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Output

  • Improve parse error readability by showing multi-line output with an error pointer. (#5068)
  • Add SourceASTParseError to distinguish source parse failures from internal safety errors, improving error reporting when Black's lenient parser accepts input that ast.parse() rejects (#5080)

Blackd

  • Return HTTP 400 (Bad Request) for source parse failures instead of HTTP 500, keeping HTTP 500 only for genuine internal safety errors (#5080)

Integrations

  • Added documentation for doctest formatting tools and updated the integrations index to match (#4916)

... (truncated)

Commits

Updates mypy from 2.0.0 to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

  • Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)
  • Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)
  • Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

  • Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)
  • Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

Changes to Messages

... (truncated)

Commits

Updates commitizen from 4.15.1 to 4.16.2

Release notes

Sourced from commitizen's releases.

v4.16.2 (2026-05-15)

Fix

  • tags: widen prerelease and devrelease tag regexes for SemVer2 (#1972)

v4.16.1 (2026-05-15)

Fix

  • cz_customize: derive bump_map_major_version_zero from bump_map (#1977)

v4.16.0 (2026-05-12)

Feat

  • hooks: support interactive hooks scripts
Commits
  • 953e1ba bump: version 4.16.1 → 4.16.2
  • c6b8c44 fix(tags): widen prerelease and devrelease tag regexes for SemVer2 (#1972)
  • 6715164 bump: version 4.16.0 → 4.16.1
  • 3f8b8ca fix(cz_customize): derive bump_map_major_version_zero from bump_map (#1977)
  • 1d89cc5 docs(cli/screenshots): update CLI screenshots
  • 9707a58 bump: version 4.15.1 → 4.16.0
  • 80b92f1 ci: place --no-raise before bump subcommand (#1954)
  • ecc4da4 docs(cli/screenshots): update CLI screenshots
  • ce07c77 test: use match in pytest.raises (#1846)
  • 9bd9e8b docs(cli/screenshots): update CLI screenshots
  • Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.15.13

Release notes

Sourced from ruff's releases.

0.15.13

Release Notes

Released on 2026-05-14.

Preview features

  • Add a rule to flag lazy imports that are eagerly evaluated (#25016)
  • [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

  • Fix F811 false positive for class methods (#24933)
  • Fix setting selection for multi-folder workspace (#24819)
  • [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
  • [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

  • Always include panic payload in panic diagnostic message (#24873)
  • Restrict PYI034 for in-place operations to enclosing class (#24511)
  • Improve error message for parameters that are declared global (#24902)
  • Update known stdlib (#25103)

Performance

  • [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

  • Add TOML examples to --config help text (#25013)
  • Colorize ruff check 'All checks passed' (#25085)

Configuration

  • Increase max allowed value of line-length setting (#24962)

Documentation

  • Add D203 to rules that conflict with the formatter (#25044)
  • Clarify COM819 and formatter interaction (#25045)
  • Clarify that NotImplemented is a value, not an exception (F901) (#25054)
  • Update number of lint rules supported (#24942)

Other changes

  • Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.13

Released on 2026-05-14.

Preview features

  • Add a rule to flag lazy imports that are eagerly evaluated (#25016)
  • [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

  • Fix F811 false positive for class methods (#24933)
  • Fix setting selection for multi-folder workspace (#24819)
  • [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
  • [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

  • Always include panic payload in panic diagnostic message (#24873)
  • Restrict PYI034 for in-place operations to enclosing class (#24511)
  • Improve error message for parameters that are declared global (#24902)
  • Update known stdlib (#25103)

Performance

  • [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

  • Add TOML examples to --config help text (#25013)
  • Colorize ruff check 'All checks passed' (#25085)

Configuration

  • Increase max allowed value of line-length setting (#24962)

Documentation

  • Add D203 to rules that conflict with the formatter (#25044)
  • Clarify COM819 and formatter interaction (#25045)
  • Clarify that NotImplemented is a value, not an exception (F901) (#25054)
  • Update number of lint rules supported (#24942)

Other changes

  • Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Commits
  • 2afb467 Bump 0.15.13 (#25157)
  • 3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
  • 79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
  • 2522549 Remove shellcheck from prek (#25154)
  • 7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
  • bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
  • 828cdb7 [ty] Isolate file-watching test environment (#25151)
  • 89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
  • 86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
  • ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
  • Additional commits viewable in compare view

Updates agent-framework from 1.3.0 to 1.4.0

Release notes

Sourced from agent-framework's releases.

python-1.4.0

[1.4.0] - 2026-05-14

Added

  • agent-framework-core: Forward MCP tool call metadata (#5815)
  • agent-framework-core: Support list[str] arguments for file-based skill scripts (#5850)
  • agent-framework-core: Strip server-issued response item IDs under storage (#5690)
  • agent-framework-ag-ui: Add tool result display channel (#5762)
  • agent-framework-ag-ui: Promote to release candidate stage (#5844)
  • agent-framework-devui: Improvements for DevUI (#5840)

Changed

  • agent-framework-core: [BREAKING] — experimental skills API] Align file skill folder discovery with agentskills.io spec (#5807)
  • agent-framework-core: [BREAKING] — experimental skills API] Extract skill spec metadata into SkillFrontmatter (#5775)
  • agent-framework-devui: [BREAKING] Tighten default access controls and CORS posture (#5740)
  • agent-framework-a2a: [BREAKING] Migrate to a2a-sdk v1.0 (#5752)

Fixed

  • agent-framework-a2a: Fix A2A v1.0 non-streaming response and sample runtime issues (#5849)
  • agent-framework-foundry-hosting: Reject path-traversal context IDs in checkpoint storage (#5851)
  • agent-framework-core: Prevent MCP message_handler deadlock on notification reload (#4866)
Commits
  • e7dc3b9 .NET: Add Microsoft.Agents.AI.Hyperlight package for CodeAct integration (.NE...
  • d7ca9c8 Python: Core: add experimental session-mode harness context provider (#5611)
  • 57c901a Python: Fix hyperlight WasmSandbox cross-thread Drop and harden hosted-agent ...
  • 36b9b41 Update version for release (#5636)
  • 550209f Python: Core: add experimental todo-list harness context provider (#5612)
  • 27f9266 Python: Fix incorrect workflow timings in DevUI by adding created_at to exe...
  • 7476049 docs: enhance README with 1.0 features and improved structure (#5534)
  • 5a08788 Python: Add hosted agent sample with observability (#5608)
  • 4b5a847 .NET: Hosting updates to declarative workflows (#5589)
  • 330d3d7 fix(openai): drop completed continuation_token from shared options in tool lo...
  • Additional commits viewable in compare view

Updates langchain from 1.2.18 to 1.3.1

Release notes

Sourced from langchain's releases.

langchain-core==1.3.1

Changes since langchain-core==1.3.0

release(core): 1.3.1 (#36972) feat(core): allow _format_output to pass through list of ToolOutputMixin instances (#36963) chore: bump nbconvert from 7.17.0 to 7.17.1 in /libs/core (#36923) feat(core): Update inheritance behavior for tracer metadata for special keys (#36900) chore: bump langsmith from 0.7.13 to 0.7.31 in /libs/core (#36813)

langchain-fireworks==1.3.1

Changes since langchain-fireworks==1.3.0

fix(fireworks): require api_key in FireworksEmbeddings (#37193) release(fireworks): 1.3.1 (#37189) fix(fireworks): strip non-wire keys from ToolMessage text content blocks (#37187)

langchain==1.3.1

Changes since langchain==1.3.0

release(langchain): 1.3.1 (#37454) fix(langchain): alias Bedrock providers in summarization token check (#37453)

langchain-core==1.3.0

Changes since langchain-core==1.2.31

release(core): release 1.3.0 (#36851) release(core): 1.3.0a3 (#36829) chore(core): keep checkpoint_ns behavior in streaming metadata for backwards compat (#36828) feat(core): Add chat model and LLM invocation params to traceable metadata (#36771) fix(core): restore cloud metadata IPs and link-local range in SSRF policy (#36816) chore(deps): bump pytest to 9.0.3 (#36801) chore(core): harden private SSRF utilities (#36768) fix(openai): handle content blocks without type key in responses api conversion (#36725) chore: bump pytest from 9.0.2 to 9.0.3 in /libs/core (#36719) release(core): 1.3.0.a2 (#36698) fix(core): Use reference counting for storing inherited run trees to support garbage collection (#36660) docs(core): nit (#36685) release(core): 1.3.0a1 (#36656) chore(core): reduce streaming metadata / perf (#36588)

langchain-fireworks==1.3.0

Changes since langchain-fireworks==1.2.1

release(fireworks): 1.3.0 (#37144) feat(fireworks): service_tier init kwarg on ChatFireworks (#37143) chore(model-profiles): refresh model profile data (#37122)

langchain==1.3.0

This release adds support for version="v3" in stream_events / astream_events for langchain agents. Refer to the event streaming guide for details.

... (truncated)

Commits
  • b6b769b release(langchain): 1.3.1 (#37454)
  • 36c381b fix(langchain): alias Bedrock providers in summarization token check (#37453)
  • 0831e44 docs(openai): document base_url env var fallback chain (#37436)
  • e208f38 chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/xai (#37411)
  • a4a2be9 chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/qdrant (#37412)
  • f5322d9 chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/perplexity (#37413)
  • 5d9ac69 chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/openrouter (#37414)
  • f42d80c fix(core): preserve chunk additional_kwargs across v3 stream assembly (#37435)
  • 649d82f fix(core): preserve reasoning blocks alongside tool_call in v3 stream (#37434)
  • 9f9a8a7 chore: bump langsmith from 0.8.0 to 0.8.4 in /libs/partners/ollama (#37415)
  • Additional commits viewable in compare view

Updates langchain-aws from 1.4.6 to 1.4.7

Release notes

Sourced from langchain-aws's releases.

langchain-aws==1.4.7

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-aws@langchain-aws==1.4.6...langchain-aws==1.4.7

Commits
  • fc79456 release(aws): 1.4.7 (#1044)
  • 1bd9df6 revert: fix(aws): Add ls_provider to message response_metadata (#1043)
  • 85a7557 feat: Add new method for structured output - "prompt_prefill" (#1026)
  • 1d3ab94 chore(model-profiles): refresh model profile data (#1041)
  • ed35b42 chore(model-profiles): refresh model profile data (#1039)
  • a258f8a chore(model-profiles): refresh model profile data (#1038)
  • 6853c1c chore: bump the uv group across 3 directories with 1 update (#1037)
  • 3cead35 chore(model-profiles): refresh model profile data (#1030)
  • 0d4c32f chore: Update model profiles tests to Claude 4.6 (#1033)
  • fb3a041 fix(aws): strip streaming-only fields from invalid tool_use blocks (#1007)
  • Additional commits viewable in compare view

Updates llama-index from 0.14.21 to 0.14.22

Release notes

Sourced from llama-index's releases.

v0.14.22

Release Notes

[2026-05-14]

llama-index-agent-agentmesh [0.2.0]

  • mass uv lock --upgrade (#21638)

llama-index-callbacks-agentops [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-callbacks-aim [0.4.1]

  • mass uv lock --upgrade (#21638)

llama-index-callbacks-argilla [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)

llama-index-callbacks-arize-phoenix [0.7.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-callbacks-honeyhive [0.5.0]

  • mass uv lock --upgrade (#21638)

llama-index-callbacks-langfuse [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-callbacks-literalai [1.4.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-callbacks-openinference [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-callbacks-opik [1.3.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

... (truncated)

Changelog

Sourced from llama-index's changelog.

llama-index-core [0.14.22]

  • fix(instrumentation): let SparseEmbeddingStartEvent inherit EmbeddingStartEvent (#21119)
  • fix: remove stale exports from public all lists (#21133)
  • Preserve cache writes from multiprocessing workers in IngestionPipeline (#21301)
  • feat(core): Multimodal synthesis (#21374)
  • fix: avoid mutating response.raw in LLM event model_dump methods (#21424)
  • fix(memory): handle DocumentBlock in Memory._estimate_token_count (#21529)
  • fix: propagate contextvars in sync_to_async for FunctionTool (#21558)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-adapter [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-alephalpha [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-alibabacloud-aisearch [0.4.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-anyscale [0.5.1]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-autoembeddings [0.3.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-azure-inference [0.5.0]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-azure-openai [0.5.2]

  • chore(deps): bump the pip group across 55 directories with 3 updates (#21435)
  • mass uv lock --upgrade (#21638)

llama-index-embeddings-baseten [0.2.1]

  • chore(deps): bump the pip group across 55 directories with 3 updates (

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 18, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 18, 2026 11:15
@dependabot dependabot Bot requested review from arangatang and jinet May 18, 2026 11:15
@anasstahr anasstahr enabled auto-merge (squash) May 18, 2026 12:06
…rectory with 11 updates

Bumps the uv-version-updates group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.2.4` | `3.3.1` |
| [boto3](https://github.com/boto/boto3) | `1.43.6` | `1.43.9` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.0` |
| [mypy](https://github.com/python/mypy) | `2.0.0` | `2.1.0` |
| [commitizen](https://github.com/commitizen-tools/commitizen) | `4.15.1` | `4.16.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.12` | `0.15.13` |
| [agent-framework](https://github.com/microsoft/agent-framework) | `1.3.0` | `1.4.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `1.2.18` | `1.3.1` |
| [langchain-aws](https://github.com/langchain-ai/langchain-aws) | `1.4.6` | `1.4.7` |
| [llama-index](https://github.com/run-llama/llama_index) | `0.14.21` | `0.14.22` |
| [strands-agents](https://github.com/strands-agents/sdk-python) | `1.39.0` | `1.40.0` |



Updates `fastmcp` from 3.2.4 to 3.3.1
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.2.4...v3.3.1)

Updates `boto3` from 1.43.6 to 1.43.9
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.6...1.43.9)

Updates `black` from 26.3.1 to 26.5.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.3.1...26.5.0)

Updates `mypy` from 2.0.0 to 2.1.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.0.0...v2.1.0)

Updates `commitizen` from 4.15.1 to 4.16.2
- [Release notes](https://github.com/commitizen-tools/commitizen/releases)
- [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md)
- [Commits](commitizen-tools/commitizen@v4.15.1...v4.16.2)

Updates `ruff` from 0.15.12 to 0.15.13
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.12...0.15.13)

Updates `agent-framework` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@dotnet-1.3.0...dotnet-1.4.0)

Updates `langchain` from 1.2.18 to 1.3.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.2.18...langchain==1.3.1)

Updates `langchain-aws` from 1.4.6 to 1.4.7
- [Release notes](https://github.com/langchain-ai/langchain-aws/releases)
- [Commits](langchain-ai/langchain-aws@langchain-aws==1.4.6...langchain-aws==1.4.7)

Updates `llama-index` from 0.14.21 to 0.14.22
- [Release notes](https://github.com/run-llama/llama_index/releases)
- [Changelog](https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md)
- [Commits](run-llama/llama_index@v0.14.21...v0.14.22)

Updates `strands-agents` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/strands-agents/sdk-python/releases)
- [Commits](strands-agents/sdk-python@v1.39.0...v1.40.0)

---
updated-dependencies:
- dependency-name: fastmcp
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: boto3
  dependency-version: 1.43.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-version-updates
- dependency-name: black
  dependency-version: 26.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: mypy
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: commitizen
  dependency-version: 4.16.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: ruff
  dependency-version: 0.15.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-version-updates
- dependency-name: agent-framework
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: langchain
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
- dependency-name: langchain-aws
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-version-updates
- dependency-name: llama-index
  dependency-version: 0.14.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-version-updates
- dependency-name: strands-agents
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@anasstahr anasstahr force-pushed the dependabot/uv/uv-version-updates-9b8f3715bf branch from 2df983b to 62350fa Compare May 18, 2026 12:06
@anasstahr anasstahr merged commit dd38749 into main May 18, 2026
8 checks passed
@anasstahr anasstahr deleted the dependabot/uv/uv-version-updates-9b8f3715bf branch May 18, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants