Skip to content

Bump the prod-deps group across 1 directory with 10 updates#1153

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-5ad5d77b8b
Closed

Bump the prod-deps group across 1 directory with 10 updates#1153
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-5ad5d77b8b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 29, 2025

Bumps the prod-deps group with 10 updates in the / directory:

Package From To
jq 1.9.1 1.10.0
click 8.1.8 8.2.1
termcolor 2.5.0 3.1.0
starlette 0.45.3 0.46.2
fastapi 0.115.14 0.116.1
together 1.5.17 1.5.21
prometheus-client 0.21.1 0.22.1
huggingface-hub 0.30.2 0.34.3
openai 1.93.0 1.97.1
pyarrow 20.0.0 21.0.0

Updates jq from 1.9.1 to 1.10.0

Changelog

Sourced from jq's changelog.

1.10.0

  • Update to jq 1.8.1.
Commits

Updates click from 8.1.8 to 8.2.1

Release notes

Sourced from click's releases.

8.2.1

This is the Click 8.2.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-1 Milestone: https://github.com/pallets/click/milestone/24?closed=1

  • Fix flag value handling for flag options with a provided type. #2894 #2897
  • Fix shell completion for nested groups. #2906
  • Flush sys.stderr at the end of CliRunner.invoke. #2682
  • Fix EOF handling for stdin input in CliRunner. #2787

8.2.0

This is the Click 8.2.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.2.0/ Changes: https://click.palletsprojects.com/en/stable/changes/ Milestone https://github.com/pallets/click/milestone/15

  • Drop support for Python 3.7, 3.8,and 3.9. #2588, #2893
  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. #2438
  • Use flit_core instead of setuptools as build backend. #2543
  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. #2598
  • BaseCommand is deprecated. Command is the base class for all commands. #2589
  • MultiCommand is deprecated. Group is the base class for all group commands. #2590
  • The current parser and related classes and methods, are deprecated. #2205
    • OptionParser and the parser module, which is a modified copy of optparse in the standard library.
    • Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.
    • Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.
    • split_arg_string is moved from parser to shell_completion.
  • Enable deferred evaluation of annotations with from __future__ import annotations. #2270
  • When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. #2322
  • Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. #2356
  • Do not display default values in prompts when Option.show_default is False. #2509
  • Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. #2516 #2517
  • Keep stdout and stderr streams independent in CliRunner. Always collect stderr output and never raise an exception. Add a new output stream to simulate what the user sees in its terminal. Removes the mix_stderr parameter in CliRunner. #2522 #2523
  • Option.show_envvar now also shows environment variable in error messages. #2695 #2696
  • Context.close will be called on exit. This results in all Context.call_on_close callbacks and context managers added via Context.with_resource to be closed on exit as well. #2680
  • Add ProgressBar(hidden: bool) to allow hiding the progressbar. #2609
  • A UserWarning will be shown when multiple parameters attempt to use the same name. #2396
  • When using Option.envvar with Option.flag_value, the flag_value will always be used instead of the value of the environment variable. #2746 #2788
  • Add Choice.get_invalid_choice_message method for customizing the invalid choice message. #2621 #2622
  • If help is shown because no_args_is_help is enabled (defaults to True for groups, False for commands), the exit code is 2 instead of 0. #1489 #1489
  • Contexts created during shell completion are closed properly, fixing a ResourceWarning when using click.File. #2644 #2800 #2767
  • click.edit(filename) now supports passing an iterable of filenames in case the editor supports editing multiple files at once. Its return type is now also typed: AnyStr if text is passed, otherwise None. #2067 #2068

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.2.1

Released 2025-05-20

  • Fix flag value handling for flag options with a provided type. :issue:2894 :issue:2897 :pr:2930
  • Fix shell completion for nested groups. :issue:2906 :pr:2907
  • Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
  • Fix EOF handling for stdin input in CliRunner. :issue:2787

Version 8.2.0

Released 2025-05-10

  • Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

  • Use modern packaging metadata with pyproject.toml instead of setup.cfg. :pr:2438

  • Use flit_core instead of setuptools as build backend. :pr:2543

  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("click"), instead. :issue:2598

  • BaseCommand is deprecated. Command is the base class for all commands. :issue:2589

  • MultiCommand is deprecated. Group is the base class for all group commands. :issue:2590

  • The current parser and related classes and methods, are deprecated. :issue:2205

    • OptionParser and the parser module, which is a modified copy of optparse in the standard library.
    • Context.protected_args is unneeded. Context.args contains any remaining arguments while parsing.
    • Parameter.add_to_parser (on both Argument and Option) is unneeded. Parsing works directly without building a separate parser.
    • split_arg_string is moved from parser to shell_completion.
  • Enable deferred evaluation of annotations with from __future__ import annotations. :pr:2270

  • When generating a command's name from a decorated function's name, the suffixes _command, _cmd, _group, and _grp are removed. :issue:2322

  • Show the types.ParamType.name for types.Choice options within --help message if show_choices=False is specified. :issue:2356

  • Do not display default values in prompts when Option.show_default is False. :pr:2509

  • Add get_help_extra method on Option to fetch the generated extra items used in get_help_record to render help text. :issue:2516 :pr:2517

... (truncated)

Commits
  • fd183b2 release version 8.2.1
  • 262bdf0 Raise an exception on end of input in CliRunner (#2934)
  • 80efdf6 Raise an exception on end of input in CliRunner
  • cfa6f4a Flush sys.stderr when CliRunner finalizes (#2933)
  • f3a4363 flush sys.stderr when CliRunner.invoke finalizes
  • b7cf069 fix shell completion for nested groups (#2935)
  • 7c575d6 parametrize test
  • ac6a2ac Fix shell completion for nested groups
  • 884af5c Fix flag value set when is_flag=True and type is provided (#2930)
  • 4fd2fea Fix condition for setting flag value when type is provided
  • Additional commits viewable in compare view

Updates termcolor from 2.5.0 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

Changed

Release 3.0.1

Fixed

Release 3.0.0

Added

Changed

  • Only apply FORCE_COLOR, NO_COLOR and ANSI_COLORS_DISABLED when present and not an empty string (#92) @​hugovk
  • Replace deprecated classifier with licence expression (PEP 639) (#95) @​hugovk
  • Speedup: move typing imports into type-checking block (#94) @​hugovk
  • Lint with faster action-pre-commit-uv: 1m22s -> 48s and 21s -> 15s (#86) @​hugovk

Removed

Commits

Updates starlette from 0.45.3 to 0.46.2

Release notes

Sourced from starlette's releases.

Version 0.46.2

What's Changed

New Contributors

Full Changelog: Kludex/starlette@0.46.1...0.46.2

Version 0.46.1

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

Full Changelog: Kludex/starlette@0.46.0...0.46.1

Version 0.46.0

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.

New Contributors

Full Changelog: Kludex/starlette@0.45.3...0.46.0

Changelog

Sourced from starlette's changelog.

0.46.2 (April 13, 2025)

Fixed

  • Prevents reraising of exception from BaseHttpMiddleware #2911.
  • Use correct index on backwards compatible logic in TemplateResponse #2909.

0.46.1 (March 8, 2025)

Fixed

  • Allow relative directory path when follow_symlinks=True #2896.

0.46.0 (February 22, 2025)

Added

  • GZipMiddleware: Make sure Vary header is always added if a response can be compressed #2865.

Fixed

  • Raise exception from background task on BaseHTTPMiddleware #2812.
  • GZipMiddleware: Don't compress on server sent events #2871.

Changed

  • MultiPartParser: Rename max_file_size to spool_max_size #2780.

Deprecated

  • Add deprecated warning to TestClient(timeout=...) #2840.
Commits

Updates fastapi from 0.115.14 to 0.116.1

Release notes

Sourced from fastapi's releases.

0.116.1

Upgrades

  • ⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.48.0. PR #13884 by @​tiangolo.

Docs

  • 📝 Add notification about impending changes in Translations to docs/en/docs/contributing.md. PR #13886 by @​YuriiMotov.

Internal

0.116.0

Features

  • ✨ Add support for deploying to FastAPI Cloud with fastapi deploy. PR #13870 by @​tiangolo.

Installing fastapi[standard] now includes fastapi-cloud-cli.

This will allow you to deploy to FastAPI Cloud with the fastapi deploy command.

If you want to install fastapi with the standard dependencies but without fastapi-cloud-cli, you can install instead fastapi[standard-no-fastapi-cloud-cli].

Translations

Internal

Commits
  • 3137234 🔖 Release version 0.116.1
  • 095dab0 📝 Update release notes
  • cad6880 ⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.48.0 (#13884)
  • a6e79e6 📝 Update release notes
  • 2c13b1b 📝 Add notification about impending changes in Translations to `docs/en/docs/c...
  • 7179d48 📝 Update release notes
  • 07bcb18 ⬆ [pre-commit.ci] pre-commit autoupdate (#13871)
  • bd8f358 🔖 Release version 0.116.0
  • 18eb7a7 📝 Update release notes
  • dd906a9 📝 Update release notes
  • Additional commits viewable in compare view

Updates together from 1.5.17 to 1.5.21

Release notes

Sourced from together's releases.

1.5.21

What's Changed

New Contributors

Full Changelog: togethercomputer/together-python@v1.5.20...1.5.21

v1.5.20

What's Changed

New Contributors

Full Changelog: togethercomputer/together-python@v1.5.19...v1.5.20

v1.5.19

What's Changed

New Contributors

Full Changelog: togethercomputer/together-python@v1.5.18...v1.5.19

v1.5.18

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.17...v1.5.18

Commits

Updates prometheus-client from 0.21.1 to 0.22.1

Release notes

Sourced from prometheus-client's releases.

v0.22.1

What's Changed

Full Changelog: prometheus/client_python@v0.22.0...v0.22.1

v0.22.0

What's Changed

Full Changelog: prometheus/client_python@v0.21.0...v0.22.0

Commits

Updates huggingface-hub from 0.30.2 to 0.34.3

Release notes

Sourced from huggingface-hub's releases.

[v0.34.3] Jobs improvements and whoami user prefix

Full Changelog: huggingface/huggingface_hub@v0.34.2...v0.34.3

[v0.34.2] Bug fixes: Windows path handling & resume download size fix

Full Changelog: huggingface/huggingface_hub@v0.34.1...v0.34.2

[v0.34.1] [CLI] print help if no command provided

Full Changelog: huggingface/huggingface_hub@v0.34.0...v0.34.1

[v0.34.0] Announcing Jobs: a new way to run compute on Hugging Face!

🔥🔥🔥 Announcing Jobs: a new way to run compute on Hugging Face!

We're thrilled to introduce a powerful new command-line interface for running and managing compute jobs on Hugging Face infrastructure! With the new hf jobs command, you can now seamlessly launch, monitor, and manage jobs using a familiar Docker-like experience. Run any command in Docker images (from Docker Hub, Hugging Face Spaces, or your own custom images) on a variety of hardware including CPUs, GPUs, and TPUs - all with simple, intuitive commands.

Key features:

  • 🐳 Docker-like CLI: Familiar commands (run, ps, logs, inspect, cancel) to run and manage jobs
  • 🔥 Any Hardware: Instantly access CPUs, T4/A10G/A100 GPUs, and TPUs with a simple flag
  • 📦 Run Anything: Use Docker images, HF Spaces, or custom containers
  • 📊 Live Monitoring: Stream logs in real-time, just like running locally
  • 💰 Pay-as-you-go: Only pay for the seconds you use
  • 🧬 UV Runner: Run Python scripts with inline dependencies using uv (experimental)

All features are available both from Python (run_job, list_jobs, etc.) and the CLI (hf jobs).

Example usage:

# Run a Python script on the cloud
hf jobs run python:3.12 python -c "print('Hello from the cloud!')"
Use a GPU
hf jobs run --flavor=t4-small --namespace=huggingface ubuntu nvidia-smi
List your jobs
hf jobs ps
Stream logs from a job
hf jobs logs <job-id>
Inspect job details
hf jobs inspect <job-id>
Cancel a running job
</tr></table>

... (truncated)

Commits

Updates openai from 1.93.0 to 1.97.1

Release notes

Sourced from openai's releases.

v1.97.1

1.97.1 (2025-07-22)

Full Changelog: v1.97.0...v1.97.1

Bug Fixes

  • parsing: ignore empty metadata (58c359f)
  • parsing: parse extra field types (d524b7e)

Chores

  • api: event shapes more accurate (f3a9a92)

v1.97.0

1.97.0 (2025-07-16)

Full Changelog: v1.96.1...v1.97.0

Features

v1.96.1

1.96.1 (2025-07-15)

Full Changelog: v1.96.0...v1.96.1

Chores

  • api: update realtime specs (b68b71b)

v1.96.0

1.96.0 (2025-07-15)

Full Changelog: v1.95.1...v1.96.0

Features

  • clean up environment call outs (87c2e97)

Chores

  • api: update realtime specs, build config (bf06d88)

v1.95.1

1.95.1 (2025-07-11)

... (truncated)

Changelog

Sourced from openai's changelog.

1.97.1 (2025-07-22)

Full Changelog: v1.97.0...v1.97.1

Bug Fixes

  • parsing: ignore empty metadata (58c359f)
  • parsing: parse extra field types (d524b7e)

Chores

  • api: event shapes more accurate (f3a9a92)

1.97.0 (2025-07-16)

Full Changelog: v1.96.1...v1.97.0

Features

1.96.1 (2025-07-15)

Full Changelog: v1.96.0...v1.96.1

Chores

  • api: update realtime specs (b68b71b)

1.96.0 (2025-07-15)

Full Changelog: v1.95.1...v1.96.0

Features

  • clean up environment call outs (87c2e97)

Chores

  • api: update realtime specs, build config (bf06d88)

1.95.1 (2025-07-11)

Full Changelog: v1.95.0...v1.95.1

Bug Fixes

  • client: don't send Content-Type header on GET requests (182b763)

... (truncated)

Commits

Updates pyarrow from 20.0.0 to 21.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 21.0.0

Release Notes URL: https://arrow.apache.org/release/21.0.0.html

Apache Arrow 21.0.0 RC6

Release Notes: Release Candidate: 21.0.0 RC6

Apache Arrow 21.0.0 RC5

Release Notes: Release Candidate: 21.0.0 RC5

Apache Arrow 21.0.0 RC4

Release Notes: Release Candidate: 21.0.0 RC4

Apache Arrow 21.0.0 RC3

Release Notes: Release Candidate: 21.0.0 RC3

Apache Arrow 21.0.0 RC2

Release Notes: Release Candidate: 21.0.0 RC2

Commits

Bumps the prod-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [jq](https://github.com/mwilliamson/jq.py) | `1.9.1` | `1.10.0` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.2.1` |
| [termcolor](https://github.com/termcolor/termcolor) | `2.5.0` | `3.1.0` |
| [starlette](https://github.com/encode/starlette) | `0.45.3` | `0.46.2` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.14` | `0.116.1` |
| [together](https://github.com/togethercomputer/together-python) | `1.5.17` | `1.5.21` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.21.1` | `0.22.1` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.30.2` | `0.34.3` |
| [openai](https://github.com/openai/openai-python) | `1.93.0` | `1.97.1` |
| [pyarrow](https://github.com/apache/arrow) | `20.0.0` | `21.0.0` |



Updates `jq` from 1.9.1 to 1.10.0
- [Changelog](https://github.com/mwilliamson/jq.py/blob/master/CHANGELOG.rst)
- [Commits](mwilliamson/jq.py@1.9.1...1.10.0)

Updates `click` from 8.1.8 to 8.2.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.8...8.2.1)

Updates `termcolor` from 2.5.0 to 3.1.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@2.5.0...3.1.0)

Updates `starlette` from 0.45.3 to 0.46.2
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](Kludex/starlette@0.45.3...0.46.2)

Updates `fastapi` from 0.115.14 to 0.116.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.14...0.116.1)

Updates `together` from 1.5.17 to 1.5.21
- [Release notes](https://github.com/togethercomputer/together-python/releases)
- [Commits](togethercomputer/together-python@v1.5.17...1.5.21)

Updates `prometheus-client` from 0.21.1 to 0.22.1
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.21.1...v0.22.1)

Updates `huggingface-hub` from 0.30.2 to 0.34.3
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.30.2...v0.34.3)

Updates `openai` from 1.93.0 to 1.97.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.93.0...v1.97.1)

Updates `pyarrow` from 20.0.0 to 21.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-20.0.0...apache-arrow-21.0.0)

---
updated-dependencies:
- dependency-name: jq
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: click
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: termcolor
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: starlette
  dependency-version: 0.46.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: fastapi
  dependency-version: 0.116.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: together
  dependency-version: 1.5.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: prometheus-client
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: huggingface-hub
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: openai
  dependency-version: 1.97.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pyarrow
  dependency-version: 21.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 29, 2025
@dependabot dependabot Bot requested a review from a team as a code owner July 29, 2025 19:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 29, 2025
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 29, 2025 19:56 Failure
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 29, 2025 19:56 Error
@dependabot dependabot Bot had a problem deploying to Scheduled Testing July 29, 2025 19:56 Error
@github-actions
Copy link
Copy Markdown

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Aug 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2025
@dependabot dependabot Bot deleted the dependabot/pip/prod-deps-5ad5d77b8b branch August 4, 2025 23:38
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 4, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants