chore(deps): bump the all group with 11 updates by dependabot[bot] · Pull Request #1387 · developmentseed/titiler

dependabot · 2026-05-02T21:40:03Z

Bumps the all group with 11 updates:

Package	From	To
obstore	`0.9.3`	`0.9.4`
boto3	`1.42.91`	`1.42.96`
pre-commit	`4.5.1`	`4.6.0`
ipython	`9.10.1`	`9.13.0`
matplotlib	`3.10.8`	`3.10.9`
opentelemetry-api	`1.41.0`	`1.41.1`
opentelemetry-sdk	`1.41.0`	`1.41.1`
opentelemetry-instrumentation-fastapi	`0.62b0`	`0.62b1`
opentelemetry-instrumentation-logging	`0.62b0`	`0.62b1`
opentelemetry-exporter-otlp	`1.41.0`	`1.41.1`
uvicorn	`0.44.0`	`0.46.0`

Updates obstore from 0.9.3 to 0.9.4

Commits

See full diff in compare view

Updates boto3 from 1.42.91 to 1.42.96

Commits

60921ee Merge branch 'release-1.42.96'
508588d Bumping version to 1.42.96
fd3d177 Add changelog entries from botocore
4be6bbd chore: enable dependabot for pre-commit and refresh hook pins (#4775)
a47ce81 Merge branch 'release-1.42.95'
4ccdda8 Merge branch 'release-1.42.95' into develop
03cc5cd Bumping version to 1.42.95
ab160a5 Add changelog entries from botocore
1009404 Merge branch 'release-1.42.94'
0017b80 Merge branch 'release-1.42.94' into develop
Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Commits

f35134b v4.6.0
2a51ffc Merge pull request #3662 from pre-commit/hook-impl-optional-hook-dir
d7dee32 make --hook-dir optional for hook-impl
965aeb1 Merge pull request #3661 from pre-commit/hook-impl-required
2eacc06 --hook-type is required for hook-impl
f5678bf Merge pull request #3657 from pre-commit/pre-commit-ci-update-config
054cc5b [pre-commit.ci] pre-commit autoupdate
5c0f302 Merge pull request #3652 from pre-commit/pre-commit-ci-update-config
a5d9114 [pre-commit.ci] pre-commit autoupdate
129a1f5 Merge pull request #3641 from pre-commit/mxr-patch-1
Additional commits viewable in compare view

Updates ipython from 9.10.1 to 9.13.0

Commits

7c1654d release 9.13.0
d7cd8a4 Fix reStructuredText heading underline consistency in whatsnew (#15189)
6542c95 Fix RST header levels in whatsnew/version9.rst
0ca3e92 Prepare release notes for 9.13 (#15188)
9c8ce11 Revert release.py change, keep as dev
1fb2f7d Prepare release notes for 9.13
be4179d Implement support for image/png format in terminal (#15184)
1ec6bc9 Implement support for image/png format in terminal
c6f48bc solves #14901 illegible yellow string on yellow background issue (#15156)
8635f71 fix: CapturedIO.init type annotations to accept Optional[StringIO] (#15172)
Additional commits viewable in compare view

Updates matplotlib from 3.10.8 to 3.10.9

Release notes

Sourced from matplotlib's releases.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

Various minor bug and doc fixes

Security hardening validation of cyclers - Removing eval usage

Security hardening in Latex and PS calls - Removing shell escapes

Commits

dd8d78b REL: v3.10.9
2fb1891 REL: Release prep v3.10.9
d0e923a Merge branch 'v3.10.8-doc' into v3.10.x
1637932 Merge pull request #31558 from meeseeksmachine/auto-backport-of-pr-31556-on-v...
a83faac Backport PR #31556: FIX: Inverted PyErr_Occurred check in enum type caster (_...
a4f57ab Merge pull request #31545 from ksunden/backport-of-pr-31282-on-v3.10.x
063288d Merge pull request #31544 from ksunden/backport-of-pr-31248-on-v3.10.x
b2ed196 Backport PR #31248: SEC: Remove eval() from validate_cycler
acc6024 Merge pull request #31282 from scottshambaugh/tex_no_shell
e3fb541 Merge pull request #31078 from meeseeksmachine/auto-backport-of-pr-31075-on-v...
Additional commits viewable in compare view

Updates opentelemetry-api from 1.41.0 to 1.41.1

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.41.1/0.62b1 (2026-04-24)

Commits

760e024 Prepare release 1.41.1/0.62b1 (#5138)
90e06bc Unreleased changelog for 1.41.1 (#5137)
See full diff in compare view

Updates opentelemetry-sdk from 1.41.0 to 1.41.1

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.41.1/0.62b1 (2026-04-24)

Commits

760e024 Prepare release 1.41.1/0.62b1 (#5138)
90e06bc Unreleased changelog for 1.41.1 (#5137)
See full diff in compare view

Updates opentelemetry-instrumentation-fastapi from 0.62b0 to 0.62b1

Changelog

Sourced from opentelemetry-instrumentation-fastapi's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[!NOTE] The following components are released independently and maintain individual CHANGELOG files. Use this search for a list of all CHANGELOG.md files in this repo.

Unreleased

Added

Bump pylint to 4.0.5 (#4244)

opentelemetry-instrumentation-sqlite3: Add uninstrument, error status, suppress, and no-op tests (#4335)

Expand AGENTS.md with instrumentation/GenAI guidance and add PR review instructions. (#4457)

Fixed

opentelemetry-instrumentation-pika Use ObjectProxy instead of BaseObjectProxy for ReadyMessagesDequeProxy to restore iterability with wrapt 2.x (#4461)

opentelemetry-instrumentation-dbapi Use ObjectProxy instead of BaseObjectProxy for TracedCursorProxy to restore iterability with wrapt 2.x (#4427)

opentelemetry-instrumentation-flask: Clean up environ keys in _teardown_request to prevent duplicate execution (#4341)

opentelemetry-instrumentation-flask: Stop reading the deprecated (from 3.1) flask.__version__ attribute; resolve the Flask version via importlib.metadata (#4422)

opentelemetry-instrumentation-celery: Coerce non-string values to strings in CeleryGetter.get() to prevent TypeError in TraceState.from_header() when Celery request attributes contain ints (#4360)

opentelemetry-instrumentation-aiohttp-server: Use canonical attribute of the Resource as a span name (#3896)

Breaking changes

Drop Python 3.9 support (#4412)

Commits

See full diff in compare view

Updates opentelemetry-instrumentation-logging from 0.62b0 to 0.62b1

Changelog

Sourced from opentelemetry-instrumentation-logging's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[!NOTE] The following components are released independently and maintain individual CHANGELOG files. Use this search for a list of all CHANGELOG.md files in this repo.

Unreleased

Added

Bump pylint to 4.0.5 (#4244)

opentelemetry-instrumentation-sqlite3: Add uninstrument, error status, suppress, and no-op tests (#4335)

Expand AGENTS.md with instrumentation/GenAI guidance and add PR review instructions. (#4457)

Fixed

opentelemetry-instrumentation-pika Use ObjectProxy instead of BaseObjectProxy for ReadyMessagesDequeProxy to restore iterability with wrapt 2.x (#4461)

opentelemetry-instrumentation-dbapi Use ObjectProxy instead of BaseObjectProxy for TracedCursorProxy to restore iterability with wrapt 2.x (#4427)

opentelemetry-instrumentation-flask: Clean up environ keys in _teardown_request to prevent duplicate execution (#4341)

opentelemetry-instrumentation-flask: Stop reading the deprecated (from 3.1) flask.__version__ attribute; resolve the Flask version via importlib.metadata (#4422)

opentelemetry-instrumentation-celery: Coerce non-string values to strings in CeleryGetter.get() to prevent TypeError in TraceState.from_header() when Celery request attributes contain ints (#4360)

opentelemetry-instrumentation-aiohttp-server: Use canonical attribute of the Resource as a span name (#3896)

Breaking changes

Drop Python 3.9 support (#4412)

Commits

See full diff in compare view

Updates opentelemetry-exporter-otlp from 1.41.0 to 1.41.1

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.41.1/0.62b1 (2026-04-24)

Commits

760e024 Prepare release 1.41.1/0.62b1 (#5138)
90e06bc Unreleased changelog for 1.41.1 (#5137)
See full diff in compare view

Updates uvicorn from 0.44.0 to 0.46.0

Release notes

Sourced from uvicorn's releases.

Version 0.46.0

What's Changed

Support ws_max_size in wsproto implementation by @Kludex in Kludex/uvicorn#2915

Support ws_ping_interval and ws_ping_timeout in wsproto implementation by @Kludex in Kludex/uvicorn#2916

Use bytearray for incoming WebSocket message buffer in websockets-sansio by @Kludex in Kludex/uvicorn#2917

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

Preserve forwarded client ports in proxy headers middleware by @Kludex in Kludex/uvicorn#2903

Accept os.PathLike for log_config by @Kludex in Kludex/uvicorn#2905

Accept log_level strings case-insensitively by @Kludex in Kludex/uvicorn#2907

Raise helpful ImportError when PyYAML is missing for YAML log config by @Kludex in Kludex/uvicorn#2906

Revert empty context for ASGI runs by @Kludex in Kludex/uvicorn#2911

Add --reset-contextvars flag to isolate ASGI request context by @Kludex in Kludex/uvicorn#2912

Revert "Emit http.disconnect on server shutdown for streaming responses" (#2829) by @Kludex in Kludex/uvicorn#2913

New Contributors

@Krishnachaitanyakc made their first contribution in Kludex/uvicorn#2870

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Changelog

Sourced from uvicorn's changelog.

0.46.0 (April 23, 2026)

Added

Support ws_max_size in wsproto implementation (#2915)

Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

Add --reset-contextvars flag to isolate ASGI request context (#2912)

Accept os.PathLike for log_config (#2905)

Accept log_level strings case-insensitively (#2907)

Changed

Revert "Emit http.disconnect on server shutdown for streaming responses" (#2913)

Revert "Explicitly start ASGI run with empty context" (#2911)

Fixed

Preserve forwarded client ports in proxy headers middleware (#2903)

Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)

Commits

b224045 Version 0.46.0 (#2918)
7375b5b Use bytearray for incoming WebSocket message buffer in websockets-sansio (#...
d438fb1 Support ws_ping_interval and ws_ping_timeout in wsproto implementation ...
3e6b964 Support ws_max_size in wsproto implementation (#2915)
2c423bd Version 0.45.0 (#2914)
7f027f8 Revert "Emit http.disconnect on server shutdown for streaming responses" (#...
73a80c3 Add --reset-contextvars flag to isolate ASGI request context (#2912)
45c0b56 Revert empty context for ASGI runs (#2911)
850d926 Raise helpful ImportError when PyYAML is missing for YAML log config (#2906)
fdcacb4 Accept log_level strings case-insensitively (#2907)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 11 updates: | Package | From | To | | --- | --- | --- | | [obstore](https://github.com/geospatial-jeff/pyasyncio-benchmark) | `0.9.3` | `0.9.4` | | [boto3](https://github.com/boto/boto3) | `1.42.91` | `1.42.96` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` | | [ipython](https://github.com/ipython/ipython) | `9.10.1` | `9.13.0` | | [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.8` | `3.10.9` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.41.0` | `1.41.1` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.41.0` | `1.41.1` | | [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.62b0` | `0.62b1` | | [opentelemetry-instrumentation-logging](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.62b0` | `0.62b1` | | [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.41.0` | `1.41.1` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.44.0` | `0.46.0` | Updates `obstore` from 0.9.3 to 0.9.4 - [Commits](https://github.com/geospatial-jeff/pyasyncio-benchmark/commits) Updates `boto3` from 1.42.91 to 1.42.96 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.91...1.42.96) Updates `pre-commit` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0) Updates `ipython` from 9.10.1 to 9.13.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.10.1...9.13.0) Updates `matplotlib` from 3.10.8 to 3.10.9 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.10.8...v3.10.9) Updates `opentelemetry-api` from 1.41.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.0...v1.41.1) Updates `opentelemetry-sdk` from 1.41.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.0...v1.41.1) Updates `opentelemetry-instrumentation-fastapi` from 0.62b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-logging` from 0.62b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-exporter-otlp` from 1.41.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.0...v1.41.1) Updates `uvicorn` from 0.44.0 to 0.46.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.44.0...0.46.0) --- updated-dependencies: - dependency-name: obstore dependency-version: 0.9.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: boto3 dependency-version: 1.42.96 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: ipython dependency-version: 9.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: matplotlib dependency-version: 3.10.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: opentelemetry-api dependency-version: 1.41.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: opentelemetry-sdk dependency-version: 1.41.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: opentelemetry-instrumentation-fastapi dependency-version: 0.62b1 dependency-type: direct:development dependency-group: all - dependency-name: opentelemetry-instrumentation-logging dependency-version: 0.62b1 dependency-type: direct:development dependency-group: all - dependency-name: opentelemetry-exporter-otlp dependency-version: 1.41.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: uvicorn dependency-version: 0.46.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 2, 2026

dependabot Bot temporarily deployed to ci May 2, 2026 21:40 Inactive

vincentsarago merged commit 88a56a1 into main May 5, 2026
10 checks passed

vincentsarago deleted the dependabot/uv/all-08b93d3aba branch May 5, 2026 15:18

github-actions Bot mentioned this pull request May 5, 2026

chore: release main #1383

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all group with 11 updates#1387

chore(deps): bump the all group with 11 updates#1387
vincentsarago merged 1 commit into
mainfrom
dependabot/uv/all-08b93d3aba

dependabot Bot commented on behalf of github May 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 2, 2026

pre-commit v4.6.0

Features

Fixes

4.6.0 - 2026-04-21

Features

Fixes

v3.10.9

Version 1.41.1/0.62b1 (2026-04-24)

Version 1.41.1/0.62b1 (2026-04-24)

Changelog

Unreleased

Added

Fixed

Breaking changes

Changelog

Unreleased

Added

Fixed

Breaking changes

Version 1.41.1/0.62b1 (2026-04-24)

Version 0.46.0

What's Changed

Version 0.45.0

What's Changed

New Contributors

0.46.0 (April 23, 2026)

Added

Changed

0.45.0 (April 21, 2026)

Added

Changed

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant