Skip to content

chore(deps): bump the all group with 11 updates#1395

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-2b72077dd0
Open

chore(deps): bump the all group with 11 updates#1395
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/all-2b72077dd0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 9, 2026 •
edited
Loading

Bumps the all group with 11 updates:

Package From To
fsspec 2026.3.0 2026.4.0
s3fs 2026.3.0 2026.4.0
starlette-cramjam 0.5.1 0.7.0
pydantic-settings 2.13.1 2.14.0
fastapi 0.135.2 0.136.1
geojson-pydantic 2.1.0 2.1.1
pydantic 2.12.5 2.13.3
rio-tiler 9.0.4 9.0.6
simplejson 3.20.2 4.1.1
xarray 2026.2.0 2026.4.0
gcsfs 2026.3.0 2026.4.0

Updates fsspec from 2026.3.0 to 2026.4.0

Commits

Updates s3fs from 2026.3.0 to 2026.4.0

Commits

Updates starlette-cramjam from 0.5.1 to 0.7.0

Release notes

Sourced from starlette-cramjam's releases.

0.7.0

What's Changed

New Contributors

Full Changelog: developmentseed/starlette-cramjam@0.6.0...0.7.0

0.6.0

What's Changed

New Contributors

Full Changelog: developmentseed/starlette-cramjam@0.5.1...0.6.0

Changelog

Sourced from starlette-cramjam's changelog.

0.7.0 (2026-04-27)

  • change: skip compression for 204 NO_CONTENT response

0.6.0 (2026-01-15)

  • remove support for python 3.9 and 3.10
  • use uv for project managment
Commits
  • 333ce4e Bump version: 0.6.0 → 0.7.0
  • a6e7a78 Merge pull request #29 from developmentseed/feat/204-skip-compression
  • d828cdb feat: skip compression for 204 responses
  • 2ad507f Merge pull request #27 from developmentseed/dependabot/github_actions/all-205...
  • 0434be4 Merge pull request #28 from developmentseed/dependabot/uv/all-5035f4443d
  • 020ed0d Bump the all group across 1 directory with 4 updates
  • 1a10dae Bump the all group across 1 directory with 4 updates
  • b940e7a update pre-commit config
  • 67b68bd update release process
  • 7f8de06 Merge pull request #24 from developmentseed/fix/pin-github-actions
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.13.1 to 2.14.0

Release notes

Sourced from pydantic-settings's releases.

v2.14.0

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.13.1...v2.14.0

Commits
  • 8916bee Prepare release 2.14.0 (#848)
  • 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
  • 9ed7f48 Bump the python-packages group with 4 updates (#847)
  • 617c690 Fix cli_ignore_unknown_args=True not working on subcommands (#844)
  • 577c05f Add note about Mypy plugin for BaseSettings.__init__() (#842)
  • 2355bc5 Fix CliPositionalArg[list[CustomType]] crash for custom types (#839)
  • 16bd6fd Introduce zizmor (#838)
  • df8b239 Bump boto3 from 1.42.82 to 1.42.83 in the python-packages group (#837)
  • c5401a2 Introduce yamlfmt (#836)
  • 953e28e Bump the python-packages group with 3 updates (#833)
  • Additional commits viewable in compare view

Updates fastapi from 0.135.2 to 0.136.1

Release notes

Sourced from fastapi's releases.

0.136.1

Upgrades

Internal

0.136.0

Upgrades

0.135.4

Refactors

Internal

0.135.3

... (truncated)

Commits

Updates geojson-pydantic from 2.1.0 to 2.1.1

Release notes

Sourced from geojson-pydantic's releases.

2.1.1

What's Changed

New Contributors

Full Changelog: developmentseed/geojson-pydantic@2.1.0...2.1.1

Changelog

Sourced from geojson-pydantic's changelog.

[2.1.1] - 2026-04-07

Commits
  • 402ec8b Bump version: 2.1.0 → 2.1.1
  • 01ad63d update changelog
  • 0829967 update dependabot config
  • 742975e Merge pull request #185 from developmentseed/chore/switch-to-uv
  • 9642f63 chore: switch to uv
  • 73ed7d3 Merge pull request #184 from psobolewskiPhD/clear_ring_warning
  • 15627a8 style: run pre-commit
  • 4e063d6 fix codecov action
  • 7841dde Merge pull request #182 from developmentseed/dependabot/github_actions/action...
  • 8338493 Merge pull request #181 from developmentseed/dependabot/github_actions/codeco...
  • Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.3

Release notes

Sourced from pydantic's releases.

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

Packaging

  • Add zizmor for GitHub Actions workflow linting by @​Viicos in #13039
  • Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @​Viicos in #13064

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

  • Allow default factories of private attributes to take validated model data by @​Viicos in #13013

Changes

... (truncated)

Commits
  • 9e9a111 Fix backported test
  • 1ec8c6a Prepare release v2.13.3
  • fb4f204 Handle AttributeError subclasses with from_attributes
  • ca3ddd1 Prepare release v2.13.2
  • 000e823 Fix ValidationInfo.field_name missing with model_validate_json()
  • d45d8be Prepare release 2.13.1
  • 54aca60 Fix ValidationInfo.data missing with model_validate_json()
  • 46bf4fa Fix Pydantic release workflow (#13067)
  • 1b359ed Prepare release v2.13.0 (#13065)
  • b1bf194 Fix model equality when using runtime extra configuration (#13062)
  • Additional commits viewable in compare view

Updates rio-tiler from 9.0.4 to 9.0.6

Release notes

Sourced from rio-tiler's releases.

9.0.6

What's Changed

Full Changelog: cogeotiff/rio-tiler@9.0.5...9.0.6

9.0.5

What's Changed

New Contributors

Full Changelog: cogeotiff/rio-tiler@9.0.4...9.0.5

Changelog

Sourced from rio-tiler's changelog.

9.0.6 (2026-04-08)

  • fix: typing-extensions dependency for python <3.15

9.0.5 (2026-04-02)

  • fix: incorect default band descriptions expression
Commits

Updates simplejson from 3.20.2 to 4.1.1

Release notes

Sourced from simplejson's releases.

v4.1.1

What's Changed

Full Changelog: simplejson/simplejson@v4.1.0...v4.1.1

v4.1.0

What's Changed

Full Changelog: simplejson/simplejson@v4.0.1...v4.1.0

v4.0.1

What's Changed

Full Changelog: simplejson/simplejson@v4.0.0...v4.0.1

v4.0.0

What's Changed

Version 4.0.0 released 2026-04-18

  • simplejson 4 requires Python 2.7 or Python 3.8+. Older Python versions (2.5, 2.6, 3.0-3.7) are no longer supported. pip will not install simplejson 4 on unsupported versions.

  • The C extension now uses heap types and per-module state instead of static types and global state. This is required for free-threading support and sub-interpreter isolation. The Python-level API is unchanged.

  • Full support for Python 3.13+ free-threading (PEP 703). The C extension is now safe to use with the GIL disabled (python3.14t):

  • Numerous C extension memory safety fixes:

    • Fix use-after-free and leak in encoder ident handling
    • Fix NULL dereferences on OOM in module init and static string init

... (truncated)

Changelog

Sourced from simplejson's changelog.

Version 4.1.1 released 2026-04-24

  • The build_wheels_py27 CI job now also builds Python 2.7 wheels for Windows AMD64 and Windows x86, joining the existing Py2.7 manylinux1 / manylinux2010 x86_64 wheels. This unblocks offline / --no-index installs on Py2.7-on-Windows (the original reporter's case), which previously had no matching binary wheel on PyPI, fell through to the sdist, and failed on the PEP 517 isolated-build step complaining that setuptools>=42 was not in the wheelhouse. simplejson/simplejson#377

Version 4.1.0 released 2026-04-22

  • The C extension now accelerates encoding when indent= is set. Previously the encoder fell back to the pure-Python implementation whenever a non-None indent was passed; now the C encoder emits the newline-plus-indent prefix, the level-aware item separator, and the closing indent directly. A representative nested-dict workload benchmarks about 4-5x faster end-to-end, and the indent=0 and empty-container edge cases continue to match the Python output byte-for-byte.

  • The C extension now emits PEP 678 exc.add_note() annotations on serialization failures, matching the pure-Python encoder. A chained error on {'a': [1, object(), 3]} produces the same three notes (when serializing object object, when serializing list item 1, when serializing dict item 'a') whether the speedups are loaded or not, so the add_note assertions in test_errors.py no longer need indent=2 to force the Python path.

Version 4.0.1 released 2026-04-18

  • Skip uploading Pyodide/wasm wheels to PyPI, which rejects them with "unsupported platform tag 'pyodide_2024_0_wasm32'". The wheels are still built in CI and preserved as workflow artifacts. simplejson/simplejson#375

Version 4.0.0 released 2026-04-18

  • simplejson 4 requires Python 2.7 or Python 3.8+. Older Python versions (2.5, 2.6, 3.0-3.7) are no longer supported. pip will not install simplejson 4 on unsupported versions.

  • The C extension now uses heap types and per-module state instead of static types and global state. This is required for free-threading support and sub-interpreter isolation. The Python-level API is unchanged.

  • Full support for Python 3.13+ free-threading (PEP 703). The C

... (truncated)

Commits
  • 639b2ee Add Python 2.7 wheel builds for Windows platforms (#378)
  • 0fd3185 Accelerate indented encoding in the C extension; release 4.1.0 (#376)
  • 19b5f94 Exclude Pyodide wheels from PyPI uploads (#375)
  • 1608c05 Use JSONDecodeError for out-of-range end indices in C scanstring (#374)
  • 3bba179 Encoder parity fixes (for_json/_asdict) and TSan stress CI job (#373)
  • 7b22d65 Error parity for the C and Python scanstring in surrogate and truncated strin...
  • 825100a Release version 4.0.0: free-threading, CPython json parity, Python 2.7 fixes ...
  • 0dbb9d8 C extension: dead code cleanup, fast paths for dict/list/string encoding, cor...
  • e2e5f0b Add Python 3.13+ free-threading support to dict operations (#369)
  • e817370 Fix free-threading (3.14t) crashes: heap types, unified per-module state, tem...
  • Additional commits viewable in compare view

Updates xarray from 2026.2.0 to 2026.4.0

Release notes

Sourced from xarray's releases.

v2026.04.0

This release bumps the minimum supported zarr version to 3.0, finalizes the deprecation of timedelta decoding via units, adds col_wrap='auto' for plots, a new inherit='all_coords' option for :py:meth:DataTree.to_dataset, and a facetgrid_figsize option for :py:func:~xarray.set_options.

Thanks to the 22 contributors to this release: Adam Newgas, Alfonso Ladino, Copilot, Deepak Cherian, Emmanuel Ferdman, Ian Hunt-Isaak, Ilan Gold, Illviljan, Jakob Harteg, Joe Hamman, Julia Signell, Justus Magin, Kai Mühlbauer, Max Jones, Michael Niklas, Nick Hodgskin, Pieter Eendebak, Spencer Clark, frostByte, kkollsga, rsignell and yaochengchen

What's Changed

@dependabot
chore(deps): bump the all group with 11 updates
1017163 
Bumps the all group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [fsspec](https://github.com/fsspec/filesystem_spec) | `2026.3.0` | `2026.4.0` |
| [s3fs](https://github.com/fsspec/s3fs) | `2026.3.0` | `2026.4.0` |
| [starlette-cramjam](https://github.com/developmentseed/starlette-cramjam) | `0.5.1` | `0.7.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.135.2` | `0.136.1` |
| [geojson-pydantic](https://github.com/developmentseed/geojson-pydantic) | `2.1.0` | `2.1.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.3` |
| [rio-tiler](https://github.com/cogeotiff/rio-tiler) | `9.0.4` | `9.0.6` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.2` | `4.1.1` |
| [xarray](https://github.com/pydata/xarray) | `2026.2.0` | `2026.4.0` |
| [gcsfs](https://github.com/fsspec/gcsfs) | `2026.3.0` | `2026.4.0` |


Updates `fsspec` from 2026.3.0 to 2026.4.0
- [Commits](fsspec/filesystem_spec@2026.3.0...2026.4.0)

Updates `s3fs` from 2026.3.0 to 2026.4.0
- [Changelog](https://github.com/fsspec/s3fs/blob/main/release-procedure.md)
- [Commits](fsspec/s3fs@2026.3.0...2026.4.0)

Updates `starlette-cramjam` from 0.5.1 to 0.7.0
- [Release notes](https://github.com/developmentseed/starlette-cramjam/releases)
- [Changelog](https://github.com/developmentseed/starlette-cramjam/blob/main/CHANGES.md)
- [Commits](developmentseed/starlette-cramjam@0.5.1...0.7.0)

Updates `pydantic-settings` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.0)

Updates `fastapi` from 0.135.2 to 0.136.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.2...0.136.1)

Updates `geojson-pydantic` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/developmentseed/geojson-pydantic/releases)
- [Changelog](https://github.com/developmentseed/geojson-pydantic/blob/main/CHANGELOG.md)
- [Commits](developmentseed/geojson-pydantic@2.1.0...2.1.1)

Updates `pydantic` from 2.12.5 to 2.13.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.3)

Updates `rio-tiler` from 9.0.4 to 9.0.6
- [Release notes](https://github.com/cogeotiff/rio-tiler/releases)
- [Changelog](https://github.com/cogeotiff/rio-tiler/blob/main/CHANGES.md)
- [Commits](cogeotiff/rio-tiler@9.0.4...9.0.6)

Updates `simplejson` from 3.20.2 to 4.1.1
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/main/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.2...v4.1.1)

Updates `xarray` from 2026.2.0 to 2026.4.0
- [Release notes](https://github.com/pydata/xarray/releases)
- [Commits](pydata/xarray@v2026.02.0...v2026.04.0)

Updates `gcsfs` from 2026.3.0 to 2026.4.0
- [Release notes](https://github.com/fsspec/gcsfs/releases)
- [Commits](fsspec/gcsfs@2026.3.0...2026.4.0)

---
updated-dependencies:
- dependency-name: fsspec
  dependency-version: 2026.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: s3fs
  dependency-version: 2026.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: starlette-cramjam
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pydantic-settings
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: fastapi
  dependency-version: 0.136.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: geojson-pydantic
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: pydantic
  dependency-version: 2.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rio-tiler
  dependency-version: 9.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: simplejson
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: xarray
  dependency-version: 2026.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: gcsfs
  dependency-version: 2026.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants