Skip to content

Bump the prod-deps group with 9 updates#1110

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-05c1c80004
Closed

Bump the prod-deps group with 9 updates#1110
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-05c1c80004

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 1, 2025 •
edited
Loading

Bumps the prod-deps group with 9 updates:

Package From To
jq 1.8.0 1.9.1
click 8.1.8 8.2.1
termcolor 2.5.0 3.1.0
pydantic 2.11.5 2.11.7
starlette 0.45.3 0.46.2
fastapi 0.115.12 0.115.14
together 1.5.13 1.5.17
prometheus-client 0.21.1 0.22.1
llama-api-client 0.1.1 0.1.2

Updates jq from 1.8.0 to 1.9.1

Changelog

Sourced from jq's changelog.

1.9.1

  • Apply a patch to jq to fix musl builds.

  • Drop support for Python 3.7 and PyPy 3.8.

1.9.0

Note: this version was never released due a bug in jq breaking builds with musl.

  • Update to jq 1.8.0.

  • Drop support for Python 3.6.

  • Distribute Cython sources instead of C sources to improve compatibility.

Commits
  • b9930d4 Remove PyPy 3.8 from tests in GitHub Actions workflow
  • 288ea0a Add dropping of PyPy 3.8 support in changelog
  • 85131bb Drop support for PyPy 3.8
  • 7b6092b Remove support for PyPy 3.7
  • 4697b3a Use Python 3.13 instead of 3.13-dev in GitHub Actions workflow
  • a837a9c Drop support for Python 3.7
  • afc257c Update cython to 3.1.2
  • 66cc0cc Update cibuildwheel to 2.23.3
  • 41a3b57 Always build wheels for cp310-macosx_x86_64
  • 19d6d10 Bump version to 1.9.1
  • Additional commits viewable in compare view

Updates click from 8.1.8 to 8.2.1

Release notes

Sourced from click's releases.

8.2.1

This is the Click 8.2.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-1 Milestone: https://github.com/pallets/click/milestone/24?closed=1

  • Fix flag value handling for flag options with a provided type. #2894 #2897
  • Fix shell completion for nested groups. #2906
  • Flush sys.stderr at the end of CliRunner.invoke. #2682
  • Fix EOF handling for stdin input in CliRunner. #2787

8.2.0

This is the Click 8.2.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.2.0/ Changes: https://click.palletsprojects.com/en/stable/changes/ Milestone https://github.com/pallets/click/milestone/15

  • Drop support for Python 3.7, 3.8,and 3.9. #2588, #2893
  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. #2438
  • Use flit_core instead of setuptools as build backend. #2543
  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. #2598
  • BaseCommand is deprecated. Command is the base class for all commands. #2589
  • MultiCommand is deprecated. Group is the base class for all group commands. #2590
  • The current parser and related classes and methods, are deprecated. #2205
    • OptionParser and the parser module, which is a modified copy of optparse in the standard library.
    • Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.
    • Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.
    • split_arg_string is moved from parser to shell_completion.
  • Enable deferred evaluation of annotations with from __future__ import annotations. #2270
  • When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. #2322
  • Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. #2356
  • Do not display default values in prompts when Option.show_default is False. #2509
  • Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. #2516 #2517
  • Keep stdout and stderr streams independent in CliRunner. Always collect stderr output and never raise an exception. Add a new output stream to simulate what the user sees in its terminal. Removes the mix_stderr parameter in CliRunner. #2522 #2523
  • Option.show_envvar now also shows environment variable in error messages. #2695 #2696
  • Context.close will be called on exit. This results in all Context.call_on_close callbacks and context managers added via Context.with_resource to be closed on exit as well. #2680
  • Add ProgressBar(hidden: bool) to allow hiding the progressbar. #2609
  • A UserWarning will be shown when multiple parameters attempt to use the same name. #2396
  • When using Option.envvar with Option.flag_value, the flag_value will always be used instead of the value of the environment variable. #2746 #2788
  • Add Choice.get_invalid_choice_message method for customizing the invalid choice message. #2621 #2622
  • If help is shown because no_args_is_help is enabled (defaults to True for groups, False for commands), the exit code is 2 instead of 0. #1489 #1489
  • Contexts created during shell completion are closed properly, fixing a ResourceWarning when using click.File. #2644 #2800 #2767
  • click.edit(filename) now supports passing an iterable of filenames in case the editor supports editing multiple files at once. Its return type is now also typed: AnyStr if text is passed, otherwise None. #2067 #2068

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.2.1

Released 2025-05-20

  • Fix flag value handling for flag options with a provided type. :issue:2894 :issue:2897 :pr:2930
  • Fix shell completion for nested groups. :issue:2906 :pr:2907
  • Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
  • Fix EOF handling for stdin input in CliRunner. :issue:2787

Version 8.2.0

Released 2025-05-10

  • Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. :pr:2438

  • Use flit_core instead of setuptools as build backend. :pr:2543

  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. :issue:2598

  • BaseCommand is deprecated. Command is the base class for all commands. :issue:2589

  • MultiCommand is deprecated. Group is the base class for all group commands. :issue:2590

  • The current parser and related classes and methods, are deprecated. :issue:2205

    • OptionParser and the parser module, which is a modified copy of optparse in the standard library.
    • Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.
    • Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.
    • split_arg_string is moved from parser to shell_completion.

  • Enable deferred evaluation of annotations with from __future__ import annotations. :pr:2270

  • When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. :issue:2322

  • Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. :issue:2356

  • Do not display default values in prompts when Option.show_default is False. :pr:2509

  • Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. :issue:2516 :pr:2517

... (truncated)

Commits
  • fd183b2 release version 8.2.1
  • 262bdf0 Raise an exception on end of input in CliRunner (#2934)
  • 80efdf6 Raise an exception on end of input in CliRunner
  • cfa6f4a Flush sys.stderr when CliRunner finalizes (#2933)
  • f3a4363 flush sys.stderr when CliRunner.invoke finalizes
  • b7cf069 fix shell completion for nested groups (#2935)
  • 7c575d6 parametrize test
  • ac6a2ac Fix shell completion for nested groups
  • 884af5c Fix flag value set when is_flag=True and type is provided (#2930)
  • 4fd2fea Fix condition for setting flag value when type is provided
  • Additional commits viewable in compare view

Updates termcolor from 2.5.0 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

Changed

Release 3.0.1

Fixed

Release 3.0.0

Added

Changed

  • Only apply FORCE_COLOR, NO_COLOR and ANSI_COLORS_DISABLED when present and not an empty string (#92) @​hugovk
  • Replace deprecated classifier with licence expression (PEP 639) (#95) @​hugovk
  • Speedup: move typing imports into type-checking block (#94) @​hugovk
  • Lint with faster action-pre-commit-uv: 1m22s -> 48s and 21s -> 15s (#86) @​hugovk

Removed

Commits

Updates pydantic from 2.11.5 to 2.11.7

Release notes

Sourced from pydantic's releases.

v2.11.7 2025-06-14

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.11.6...v2.11.7

v2.11.6 2025-06-13

v2.11.6 (2025-06-13)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.11.5...v2.11.6

Changelog

Sourced from pydantic's changelog.

v2.11.7 (2025-06-14)

GitHub release

What's Changed

Fixes

  • Copy FieldInfo instance if necessary during FieldInfo build by @​Viicos in #11898

v2.11.6 (2025-06-13)

GitHub release

What's Changed

Fixes

Commits
  • 5f033e4 Prepare release v2.11.7
  • c3368b8 Copy FieldInfo instance if necessary during FieldInfo build (#11980)
  • 3987b23 Prepare release v2.11.6
  • dc7a9d2 Always store the original field assignment on FieldInfo
  • c284c27 Rebuild dataclass fields before schema generation
  • See full diff in compare view

Updates starlette from 0.45.3 to 0.46.2

Release notes

Sourced from starlette's releases.

Version 0.46.2

What's Changed

New Contributors

Full Changelog: Kludex/starlette@0.46.1...0.46.2

Version 0.46.1

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

Full Changelog: Kludex/starlette@0.46.0...0.46.1

Version 0.46.0

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.

New Contributors

Full Changelog: Kludex/starlette@0.45.3...0.46.0

Changelog

Sourced from starlette's changelog.

0.46.2 (April 13, 2025)

Fixed

  • Prevents reraising of exception from BaseHttpMiddleware #2911.
  • Use correct index on backwards compatible logic in TemplateResponse #2909.

0.46.1 (March 8, 2025)

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

0.46.0 (February 22, 2025)

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.
Commits

Updates fastapi from 0.115.12 to 0.115.14

Release notes

Sourced from fastapi's releases.

0.115.14

Fixes

Docs

Translations

Internal

0.115.13

Fixes

  • 🐛 Fix truncating the model's description with form feed (\f) character for Pydantic V2. PR #13698 by @​YuriiMotov.

Refactors

Upgrades

Docs

... (truncated)

Commits
  • ebdeda2 🔖 Release version 0.115.14
  • 8fa19a6 📝 Update release notes
  • 3ecb4c5 📝 Update release notes
  • 9d0d882 🐛 Fix support for unions when using Form (#13827)
  • df35896 📝 Update release notes
  • 8f64d09 ⬆ [pre-commit.ci] pre-commit autoupdate (#13823)
  • 3b09dd8 📝 Update release notes
  • c30821f 🌐 Add Ukrainian translation for docs/uk/docs/tutorial/response-model.md (#1...
  • 666890a 📝 Update release notes
  • 937af92 🌐 Add Ukrainian translation for docs/uk/docs/tutorial/security/index.md (#1...
  • Additional commits viewable in compare view

Updates together from 1.5.13 to 1.5.17

Release notes

Sourced from together's releases.

v1.5.17

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.16...v1.5.17

v1.5.16

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.15...v1.5.16

v1.5.15

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.14...v1.5.15

v1.5.14

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.13...v1.5.14

Commits
  • 2479615 Fix dpo defaults for cli + turn on the checks removed previously (#330)
  • 4655ead Hotfix: remove DPO hyperparameter validations (#329)
  • 2d8a0d2 Fix simpo_gamma default value for CLI (#328)
  • 5151fd5 New options for preference tuning: rpo alpha, logprobs normalization, referen...
  • See full diff in compare view

Updates prometheus-client from 0.21.1 to 0.22.1

Release notes

Sourced from prometheus-client's releases.

v0.22.1

What's Changed

Full Changelog: prometheus/client_python@v0.22.0...v0.22.1

v0.22.0

What's Changed

Full Changelog: prometheus/client_python@v0.21.0...v0.22.0

Commits

Updates llama-api-client from 0.1.1 to 0.1.2

Release notes

Sourced from llama-api-client's releases.

v0.1.2

What's Changed

Full Changelog: meta-llama/llama-api-python@v0.1.1...v0.1.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the prod-deps group with 9 updates
9d89d73 
Bumps the prod-deps group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [jq](https://github.com/mwilliamson/jq.py) | `1.8.0` | `1.9.1` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.2.1` |
| [termcolor](https://github.com/termcolor/termcolor) | `2.5.0` | `3.1.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.5` | `2.11.7` |
| [starlette](https://github.com/encode/starlette) | `0.45.3` | `0.46.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.12` | `0.115.14` |
| [together](https://github.com/togethercomputer/together-python) | `1.5.13` | `1.5.17` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.21.1` | `0.22.1` |
| [llama-api-client](https://github.com/meta-llama/llama-api-python) | `0.1.1` | `0.1.2` |


Updates `jq` from 1.8.0 to 1.9.1
- [Changelog](https://github.com/mwilliamson/jq.py/blob/master/CHANGELOG.rst)
- [Commits](mwilliamson/jq.py@1.8.0...1.9.1)

Updates `click` from 8.1.8 to 8.2.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.8...8.2.1)

Updates `termcolor` from 2.5.0 to 3.1.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@2.5.0...3.1.0)

Updates `pydantic` from 2.11.5 to 2.11.7
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.5...v2.11.7)

Updates `starlette` from 0.45.3 to 0.46.2
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](Kludex/starlette@0.45.3...0.46.2)

Updates `fastapi` from 0.115.12 to 0.115.14
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.12...0.115.14)

Updates `together` from 1.5.13 to 1.5.17
- [Release notes](https://github.com/togethercomputer/together-python/releases)
- [Commits](togethercomputer/together-python@v1.5.13...v1.5.17)

Updates `prometheus-client` from 0.21.1 to 0.22.1
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.21.1...v0.22.1)

Updates `llama-api-client` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/meta-llama/llama-api-python/releases)
- [Commits](meta-llama/llama-api-python@v0.1.1...v0.1.2)

---
updated-dependencies:
- dependency-name: jq
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: click
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: termcolor
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: pydantic
  dependency-version: 2.11.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: starlette
  dependency-version: 0.46.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: fastapi
  dependency-version: 0.115.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: together
  dependency-version: 1.5.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: prometheus-client
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: llama-api-client
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 1, 2025
@dependabot dependabot Bot requested a review from a team as a code owner July 1, 2025 03:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 1, 2025
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 1, 2025 03:44 Error
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 1, 2025 03:44 Failure
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 1, 2025 03:44 Error
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jul 1, 2025

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jul 7, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 7, 2025
@dependabot dependabot Bot deleted the dependabot/pip/prod-deps-05c1c80004 branch July 7, 2025 15:54
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 7, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants