Skip to content

Bump the prod-deps group across 1 directory with 21 updates#1376

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-788c52e462
Closed

Bump the prod-deps group across 1 directory with 21 updates#1376
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/prod-deps-788c52e462

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 21 updates in the / directory:

Package From To
termcolor 3.1.0 3.2.0
pip 25.2 25.3
scipy 1.15.3 1.16.3
zstandard 0.24.0 0.25.0
pydantic 2.11.9 2.12.3
tomli 2.2.1 2.3.0
fastapi 0.118.0 0.121.0
together 1.5.26 1.5.29
anthropic 0.69.0 0.72.0
azure-ai-ml 1.29.0 1.30.0
google-api-python-client 2.183.0 2.186.0
google-genai 1.39.1 1.48.0
google-auth 2.41.1 2.42.1
mistralai 1.6.0 1.9.11
boto3 1.40.42 1.40.65
prometheus-client 0.22.1 0.23.1
llama-api-client 0.3.0 0.5.0
huggingface-hub 0.34.6 1.0.1
openai 1.109.1 2.6.1
pyarrow 21.0.0 22.0.0
tiktoken 0.11.0 0.12.0

Updates termcolor from 3.1.0 to 3.2.0

Release notes

Sourced from termcolor's releases.

Release 3.2.0

Added

Changed

Commits

Updates pip from 25.2 to 25.3

Changelog

Sourced from pip's changelog.

25.3 (2025-10-24)

Deprecations and Removals

  • Remove support for the legacy setup.py develop editable method in setuptools editable installs; setuptools >= 64 is now required. ([#11457](https://github.com/pypa/pip/issues/11457) <https://github.com/pypa/pip/issues/11457>_)

  • Remove the deprecated --global-option and --build-option. --config-setting is now the only way to pass options to the build backend. ([#11859](https://github.com/pypa/pip/issues/11859) <https://github.com/pypa/pip/issues/11859>_)

  • Deprecate the PIP_CONSTRAINT environment variable for specifying build constraints.

    Use the --build-constraint option or the PIP_BUILD_CONSTRAINT environment variable instead. When build constraints are used, PIP_CONSTRAINT no longer affects isolated build environments. To enable this behavior without specifying any build constraints, use --use-feature=build-constraint. ([#13534](https://github.com/pypa/pip/issues/13534) <https://github.com/pypa/pip/issues/13534>_)

  • Remove support for non-standard legacy wheel filenames. ([#13581](https://github.com/pypa/pip/issues/13581) <https://github.com/pypa/pip/issues/13581>_)

  • Remove support for the deprecated setup.py bdist_wheel mechanism. Consequently, --use-pep517 is now always on, and --no-use-pep517 has been removed. ([#6334](https://github.com/pypa/pip/issues/6334) <https://github.com/pypa/pip/issues/6334>_)

Features

  • When :pep:658 metadata is available, full distribution files are no longer downloaded when using pip lock or pip install --dry-run. ([#12603](https://github.com/pypa/pip/issues/12603) <https://github.com/pypa/pip/issues/12603>_)
  • Add support for installing an editable requirement written as a Direct URL (PackageName @ URL). ([#13495](https://github.com/pypa/pip/issues/13495) <https://github.com/pypa/pip/issues/13495>_)
  • Add support for build constraints via the --build-constraint option. This allows constraining the versions of packages used during the build process (e.g., setuptools) without affecting the final installation. ([#13534](https://github.com/pypa/pip/issues/13534) <https://github.com/pypa/pip/issues/13534>_)
  • On ResolutionImpossible errors, include a note about causes with no candidates. ([#13588](https://github.com/pypa/pip/issues/13588) <https://github.com/pypa/pip/issues/13588>_)
  • Building pip itself from source now uses flit-core instead of setuptools. This does not affect how pip installs or builds packages you use. ([#13473](https://github.com/pypa/pip/issues/13473) <https://github.com/pypa/pip/issues/13473>_)

Bug Fixes

  • Handle malformed Version metadata entries and show a sensible error message instead of crashing. ([#13443](https://github.com/pypa/pip/issues/13443) <https://github.com/pypa/pip/issues/13443>_)
  • Permit spaces between a filepath and extras in an install requirement. ([#13523](https://github.com/pypa/pip/issues/13523) <https://github.com/pypa/pip/issues/13523>_)
  • Ensure the self-check files in the cache have the same permissions as the rest of the cache. ([#13528](https://github.com/pypa/pip/issues/13528) <https://github.com/pypa/pip/issues/13528>_)
  • Avoid concurrency issues and improve performance when caching locally built wheels, especially when the temporary build directory is on a different filesystem than the cache. The wheel directory passed to the build backend is now a temporary subdirectory inside the cache directory. ([#13540](https://github.com/pypa/pip/issues/13540) <https://github.com/pypa/pip/issues/13540>_)
  • Include relevant user-supplied constraints in logs when reporting dependency conflicts. ([#13545](https://github.com/pypa/pip/issues/13545) <https://github.com/pypa/pip/issues/13545>_)
  • Fix a regression in configuration parsing that was turning a single value into a list and thus leading to a validation error. ([#13548](https://github.com/pypa/pip/issues/13548) <https://github.com/pypa/pip/issues/13548>_)
  • For Python versions that do not support :pep:706, pip will now raise an installation error for a source distribution when it includes a symlink that points outside the source distribution archive. ([#13550](https://github.com/pypa/pip/issues/13550) <https://github.com/pypa/pip/issues/13550>_)
  • Prevent --user installs if site.ENABLE_USER_SITE is set to False. ([#8794](https://github.com/pypa/pip/issues/8794) <https://github.com/pypa/pip/issues/8794>_)

... (truncated)

Commits
  • a520693 Bump for release
  • 0f2973e Fix up authors by adding entry to .mailmap
  • 87828dc Update AUTHORS.txt
  • ce6a38c Merge pull request #13628 from sbidoul/imp-doc-pep517-sbi
  • ee16c81 Merge pull request #13629 from notatallshaw/bump-gone_in="25.3"
  • 3e227aa Bump gone_in="25.3"
  • 4ad1828 Merge pull request #13495 from ichard26/feat/direct-editables
  • 66ded3b Merge pull request #13570 from ShubhamNagure/fix-constraint-reporting-13545
  • 67e8ac2 Merge pull request #13588 from notatallshaw/hint-on-resolution-impossible-whe...
  • 990ca8a Merge pull request #8796 from pelson/honour_user_site
  • Additional commits viewable in compare view

Updates scipy from 1.15.3 to 1.16.3

Release notes

Sourced from scipy's releases.

SciPy 1.16.3 Release Notes

SciPy 1.16.3 is a bug-fix release with no new features compared to 1.16.2.

Authors

  • Name (commits)
  • ChrisAB (1) +
  • Lucas Colley (1)
  • Ralf Gommers (3)
  • Matt Haberland (8)
  • Nick ODell (2)
  • Ilhan Polat (1)
  • Tyler Reddy (28)
  • Lucas Roberts (2)

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

The full issue and pull request lists, and the release asset hashes are available in the associated README.txt file.

SciPy 1.16.2 Release Notes

SciPy 1.16.2 is a bug-fix release with no new features compared to 1.16.1. This is the first stable release of SciPy to provide Windows on ARM wheels on PyPI.

Authors

  • Name (commits)
  • Dietrich Brunn (1)
  • Ralf Gommers (6)
  • Adam Jones (1)
  • Gleb Khmyznikov (1) +
  • Jost Migenda (1) +
  • newyork_loki (1)
  • Nick ODell (3)
  • Dimitri Papadopoulos Orfanos (1)
  • Ilhan Polat (2)
  • Tyler Reddy (26)
  • Mugunthan Selvanayagam (1) +
  • Shuhei Watanabe (1) +

A total of 12 people contributed to this release.

... (truncated)

Commits
  • b9105cc REL: 1.16.3 rel commit [wheel build]
  • 4b7699c Merge pull request #23805 from tylerjereddy/treddy_backports_1.16.3
  • 874b75b MAINT: PR 23805 wheel builds [wheel build]
  • de06a58 DOC: PR 23805 revisions
  • f642304 TST: linalg.svd: skip on 32-bit due to limited memory
  • df47908 CI: PR 23805 revisions
  • f584063 TST: stats.boxcox_llf: bump test tolerance for Accelerate (#23864)
  • fc60b2f DOC: PR 23805 revisions
  • 0dd12ec BLD: stats.multivariate_normal: silence pythran build warning
  • d3b1e62 Revert "BLD: stats.multivariate_normal: suppress pythran build warning"
  • Additional commits viewable in compare view

Updates zstandard from 0.24.0 to 0.25.0

Release notes

Sourced from zstandard's releases.

0.25.0

  • PyO3 Rust created upgraded from 0.24 to 0.25. (#273)
  • We now use Py_REFCNT(obj) instead of accessing (*obj)->ob_refcnt directly. This fixes a nogil / multi-threaded compile error. (#201, #275)
  • A zstandard commit to fix qsort detection on BSD operating systems has been backported. (#272)
  • The PYTHON_ZSTANDARD_IMPORT_POLICY environment variable now has leading and trailing whitespace stripped. Values like cffi and cffi are now equivalent to cffi.
  • The CI jobs for building wheels have been overhauled to always use cibuildwheel and uv (where possible). This change should be backwards compatible. But wheel building for this project has historically been fragile and there may be unwanted changes. We're optimistic that standardizing on uv (except for musllinux ppc64le and s390x where uv isn't available) will lead to more stability over time.
  • CI now runs tests against the wheels we distribute. Previously, we ran tests against a separate build that was theoretically identical. But the builds may have been subtly different, leading to preventable bugs in our wheels. (Enabling this test coverage did not uncover any failures.)
  • The pyproject.toml build backend has been switched from setuptools.build_meta:__legacy__ to setuptools.build_meta.
  • The setuptools build dependency has been upgraded from <69.0.0 to >=77.0.0. Modern versions of setuptools broke --config-settings=--build-option=... as part of implementing PEP 660. A workaround is to use --config-settings=--global-option=... instead. --global-option apparently is deprecated and the setuptools folks have yet to figure out how to thread config settings into setup.py invocations. (--build-option is sent to the build_wheel command but not the build_editable command.)
  • Python 3.14 wheels are now built with manylinux_2_28 (versus manylinux2014) for older Python versions. This may raise the minimum glibc version, effectively dropping support for Debian 8 and 9, Ubuntu 13.10 through 18.04, Fedora 19 to 28, and RHEL/Centos 7. However, in practice most platforms don't container newer glibc symbols and are still ABI compatible with manylinux2014 and glibc 2.17.
  • We now require cffi >= 2.0.0b on Python 3.14. <3.14 still requires 1.17. (#274)
  • The cffi backend is now automatically disabled for free-threaded builds on Python <3.14, as cffi didn't implement free-threaded support until the 2.0 release. (#274)
  • Added CI coverage for free-threaded CPython 3.13 and 3.14. We do not yet formally support free-threaded builds. (#276)
  • The C and Rust backends now declare the GIL as unused.
  • The pythoncapi_compat.h file has been upgraded to the latest version. (#278)
  • setup.py now depends on packaging and uses packaging.version.Version for version comparisons. This removes some deprecation warnings from usage of legacy distutils Version classes.
  • Relax run-time libzstd version checking in C extension from exactly 1.5.7 to >=1.5.6. (#254, #267)
  • C extension types now (correctly) declare their fully qualified type names

... (truncated)

Changelog

Sourced from zstandard's changelog.

0.25.0 (released 2025-09-14)

  • PyO3 Rust created upgraded from 0.24 to 0.25. (#273)
  • We now use Py_REFCNT(obj) instead of accessing (*obj)->ob_refcnt directly. This fixes a nogil / multi-threaded compile error. (#201, #275)
  • A zstandard commit to fix qsort detection on BSD operating systems has been backported. (#272)
  • The PYTHON_ZSTANDARD_IMPORT_POLICY environment variable now has leading and trailing whitespace stripped. Values like cffi and cffi are now equivalent to cffi.
  • The CI jobs for building wheels have been overhauled to always use cibuildwheel and uv (where possible). This change should be backwards compatible. But wheel building for this project has historically been fragile and there may be unwanted changes. We're optimistic that standardizing on uv (except for musllinux ppc64le and s390x where uv isn't available) will lead to more stability over time.
  • CI now runs tests against the wheels we distribute. Previously, we ran tests against a separate build that was theoretically identical. But the builds may have been subtly different, leading to preventable bugs in our wheels. (Enabling this test coverage did not uncover any failures.)
  • The pyproject.toml build backend has been switched from setuptools.build_meta:__legacy__ to setuptools.build_meta.
  • The setuptools build dependency has been upgraded from <69.0.0 to >=77.0.0. Modern versions of setuptools broke --config-settings=--build-option=... as part of implementing PEP 660. A workaround is to use --config-settings=--global-option=...`` instead. --global-optionapparently is deprecated and the setuptools folks have yet to figure out how to thread config settings intosetup.py invocations. (`--build-option is sent to the build_wheel command but not the build_editable command.)
  • Python 3.14 wheels are now built with manylinux_2_28 (versus manylinux2014) for older Python versions. This may raise the minimum glibc version, effectively dropping support for Debian 8 and 9, Ubuntu 13.10 through 18.04, Fedora 19 to 28, and RHEL/Centos 7. However, in practice most platforms don't container newer glibc symbols and are still ABI compatible with manylinux2014 and glibc 2.17.
  • We now require cffi >= 2.0.0b on Python 3.14. <3.14 still requires 1.17. (#274)
  • The cffi backend is now automatically disabled for free-threaded builds on Python <3.14, as cffi didn't implement free-threaded support until the 2.0 release. (#274)
  • Added CI coverage for free-threaded CPython 3.13 and 3.14. We do not yet formally support free-threaded builds. (#276)
  • The C and Rust backends now declare the GIL as unused.
  • The pythoncapi_compat.h file has been upgraded to the latest version. (#278)
  • setup.py now depends on packaging and uses packaging.version.Version for version comparisons. This removes some deprecation warnings from usage of legacy distutils Version classes.
  • Relax run-time libzstd version checking in C extension from exactly 1.5.7

... (truncated)

Commits
  • 7a77a75 global: release 0.25.0
  • 7935539 rust: cargo upgrade
  • bc3074c rust: update dependencies
  • 51a277a c-ext: correctly define fully qualified type names to zstandard.*
  • 9ccbc39 docs: fix ReST in news.rst
  • 58c68a1 zstd: synchronize qsort code with upstream
  • 395f693 docs: document existence of compression.zstd in stdlib
  • 6967817 docs: update comparisons to other implementations
  • e4e829a docs: document new libzstd version constraint behaviors
  • 604a65a Relax libzstd version checking
  • Additional commits viewable in compare view

Updates pydantic from 2.11.9 to 2.12.3

Release notes

Sourced from pydantic's releases.

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also adds back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

Full Changelog: pydantic/pydantic@v2.12.2...v2.12.3

v2.12.2 2025-10-14

v2.12.2 (2025-10-14)

What's Changed

Fixes

  • Release a new pydantic-core version, as a corrupted CPython 3.10 manylinux2014_aarch64 wheel got uploaded (pydantic-core#1843).
  • Fix issue with recursive generic models with a parent model class by @​Viicos in #12398

Full Changelog: pydantic/pydantic@v2.12.1...v2.12.2

v2.12.1 2025-10-13

v2.12.1 (2025-10-13)

GitHub release

What's Changed

This is the first 2.12 patch release, addressing most (but not all yet) regressions from the initial 2.12.0 release.

Fixes

New Contributors

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.3 (2025-10-17)

GitHub release

What's Changed

This is the third 2.12 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

  • Raise a warning when an invalid after model validator function signature is raised by @​Viicos in #12414. Starting in 2.12.0, using class methods for after model validators raised an error, but the error wasn't raised concistently. We decided to emit a deprecation warning instead.
  • Add FieldInfo.asdict() method, improve documentation around FieldInfo by @​Viicos in #12411. This also add back support for mutations on FieldInfo classes, that are reused as Annotated metadata. However, note that this is still not a supported pattern. Instead, please refer to the added example in the documentation.

The blog post section on changes was also updated to document the changes related to serialize_as_any.

v2.12.2 (2025-10-14)

GitHub release

What's Changed

Fixes

  • Release a new pydantic-core version, as a corrupted CPython 3.10 manylinux2014_aarch64 wheel got uploaded (pydantic-core#1843).
  • Fix issue with recursive generic models with a parent model class by @​Viicos in #12398

v2.12.1 (2025-10-13)

GitHub release

What's Changed

This is the first 2.12 patch release, addressing most (but not all yet) regressions from the initial 2.12.0 release.

Fixes

New Contributors

... (truncated)

Commits
  • 1a8850d Prepare release 2.12.3
  • 09dbcf2 Add FieldInfo.asdict() method, improve documentation around FieldInfo
  • 5da4331 Improve documentation about serialize as any behavior
  • 9c86324 Raise a warning when an invalid after model validator function signature is r...
  • 36a73c6 Update pydantic-extra-types dependency to version >=2.10.6
  • 1e616a3 Prepare release v2.12.2
  • dc302e2 Fix issue with recursive generic models with a parent model class
  • 6876485 Bump pydantic-core to v2.41.4
  • b4076c6 Prepare release 2.12.1
  • b67f072 Bump pydantic-core to v2.41.3
  • Additional commits viewable in compare view

Updates tomli from 2.2.1 to 2.3.0

Changelog

Sourced from tomli's changelog.

2.3.0

  • Added
    • Binary wheels for Python 3.14 (also free-threaded)
  • Performance
    • Reduced import time
Commits
  • 3fccd16 Bump version: 2.2.1 → 2.3.0
  • 6504016 Add 2.3.0 changelog
  • 0bc66fc Remove now off-by-default PyPy from cibuildwheel skip list
  • 0aa242f Update license metadata to appease PEP 639
  • a18221e Bump GitHub CI actions
  • 6fa4d90 [pre-commit.ci] pre-commit autoupdate (#260)
  • b974fa1 [pre-commit.ci] pre-commit autoupdate (#248)
  • f574f36 Update mypy to 1.15 and use --strict mode (#257)
  • 1da01ef Reduce import time by removing typing import (#251)
  • 4188188 Reduce import time by removing string and tomli._types imports
  • Additional commits viewable in compare view

Updates fastapi from 0.118.0 to 0.121.0

Release notes

Sourced from fastapi's releases.

0.121.0

Features

Internal

0.120.4

Fixes

  • 🐛 Fix security schemes in OpenAPI when added at the top level app. PR #14266 by @​YuriiMotov.

0.120.3

Refactors

  • ♻️ Reduce internal cyclic recursion in dependencies, from 2 functions calling each other to 1 calling itself. PR #14256 by @​tiangolo.
  • ♻️ Refactor internals of dependencies, simplify code and remove get_param_sub_dependant. PR #14255 by @​tiangolo.
  • ♻️ Refactor internals of dependencies, simplify using dataclasses. PR #14254 by @​tiangolo.

Docs

0.120.2

Fixes

  • 🐛 Fix separation of schemas with nested models introduced in 0.119.0. PR #14246 by @​tiangolo.

Internal

0.120.1

Upgrades

Internal

  • 🔧 Add license and license-files to pyproject.toml, remove License from classifiers. PR #14230 by @​YuriiMotov.

... (truncated)

Commits
  • 4efae81 🔖 Release version 0.121.0
  • 3690140 📝 Update release notes
  • ad4d8f2 📝 Update release notes
  • ac438b9 ✨ Add support for dependencies with scopes, support scope="request" for dep...
  • 425a4c5 📝 Update release notes
  • 3a223b9 📝 Update release notes
  • 566e0d6 👥 Update FastAPI People - Contributors and Translators (#14273)
  • 940ee0c 📝 Update release notes
  • f8df43d 👥 Update FastAPI People - Sponsors (#14274)
  • dbb7020 👥 Update FastAPI GitHub topic repositories (#14280)
  • Additional commits viewable in compare view

Updates together from 1.5.26 to 1.5.29

Release notes

Sourced from together's releases.

v.1.5.29

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.28...v.1.5.29

v1.5.28

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.27...v1.5.28

v1.5.27

What's Changed

Full Changelog: togethercomputer/together-python@v1.5.26...v1.5.27

Commits

Updates anthropic from 0.69.0 to 0.72.0

Release notes

Sourced from anthropic's releases.

v0.72.0

0.72.0 (2025-10-28)

Full Changelog: v0.71.1...v0.72.0

Features

  • api: add ability to clear thinking in context management (27c8f17)

v0.71.1

0.71.1 (2025-10-28)

Full Changelog: v0.71.0...v0.71.1

Bug Fixes

  • client: resolve non-functional default socket options (4606137)

Chores

  • api: mark older sonnet models as deprecated (7906595)
  • bump httpx-aiohttp version to 0.1.9 (5d27492)

v0.71.0

0.71.0 (2025-10-16)

Full Changelog: v0.70.0...v0.71.0

Features

  • api: adding support for agent skills (51a606f)

v0.70.0

0.70.0 (2025-10-15)

Full Changelog: v0.69.0...v0.70.0

Features

Chores

  • client: add context-management-2025-06-27 beta header (36dd334)
  • client: add model-context-window-exceeded-2025-08-26 beta header (2cbdb0f)
  • internal: detect missing future annotations with ruff (b2a2b05)
Changelog

Sourced from anthropic's changelog.

0.72.0 (2025-10-28)

Full Changelog: v0.71.1...v0.72.0

Features

  • api: add ability to clear thinking in context management (27c8f17)

0.71.1 (2025-10-28)

Full Changelog: v0.71.0...v0.71.1

Bug Fixes

  • client: resolve non-functional default socket options (4606137)

Chores

  • api: mark older sonnet models as deprecated (7906595)
  • bump httpx-aiohttp version to 0.1.9 (5d27492)

0.71.0 (2025-10-16)

Full Changelog: v0.70.0...v0.71.0

Features

  • api: adding support for agent skills (51a606f)

0.70.0 (2025-10-15)

Full Changelog: v0.69.0...v0.70.0

Features

Chores

  • client: add context-management-2025-06-27 beta header (36dd334)
  • client: add model-context-window-exceeded-2025-08-26 beta header (2cbdb0f)
  • internal: detect missing future annotations with ruff (b2a2b05)
Commits
  • 2e2f663 release: 0.72.0
  • b0cced1 feat(api): add ability to clear thinking in context management
  • 7263b5d release: 0.71.1
  • 7216ed8 chore(api): mark older sonnet models as deprecated
  • b1a5cc0 fix(client): resolve non-functional default socket options
  • 90cb7ea chore: bump httpx-aiohttp version to 0.1.9
  • 4022488 release: 0.71.0
  • 84aa153 feat(api): adding support for agent skills
  • 16eb640 release: 0.70.0
  • c96f6eb feat(api): manual updates
  • Additional commits viewable in compare view

Updates azure-ai-ml from 1.29.0 to 1.30.0

Release notes

Sourced from azure-ai-ml's releases.

azure-ai-ml_1.30.0

1.30.0 (2025-10-29)

Features Added

  • Removed the dependencies - msrest and six
  • Added support for Deployment Templates along with the following operations:
    • ml_client.deployment_templates.create_or_update()
    • ml_client.deployment_templates.list()
    • ml_client.deployment_templates.get()
    • ml_client.deployment_templates.archive()
    • ml_client.deployment_templates.restore()
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 3, 2025
@dependabot dependabot Bot requested a review from a team as a code owner November 3, 2025 23:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 3, 2025
@dependabot dependabot Bot had a problem deploying to Scheduled Testing November 3, 2025 23:25 Failure
@github-actions

github-actions Bot commented Nov 3, 2025 •
edited
Loading

Copy link
Copy Markdown

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

@dependabot
Bump the prod-deps group across 1 directory with 21 updates
793d014 
Bumps the prod-deps group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [termcolor](https://github.com/termcolor/termcolor) | `3.1.0` | `3.2.0` |
| [pip](https://github.com/pypa/pip) | `25.2` | `25.3` |
| [scipy](https://github.com/scipy/scipy) | `1.15.3` | `1.16.3` |
| [zstandard](https://github.com/indygreg/python-zstandard) | `0.24.0` | `0.25.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.9` | `2.12.3` |
| [tomli](https://github.com/hukkin/tomli) | `2.2.1` | `2.3.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.118.0` | `0.121.0` |
| [together](https://github.com/togethercomputer/together-python) | `1.5.26` | `1.5.29` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.69.0` | `0.72.0` |
| [azure-ai-ml](https://github.com/Azure/azure-sdk-for-python) | `1.29.0` | `1.30.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.183.0` | `2.186.0` |
| [google-genai](https://github.com/googleapis/python-genai) | `1.39.1` | `1.48.0` |
| [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.41.1` | `2.42.1` |
| [mistralai](https://github.com/mistralai/client-python) | `1.6.0` | `1.9.11` |
| [boto3](https://github.com/boto/boto3) | `1.40.42` | `1.40.65` |
| [prometheus-client](https://github.com/prometheus/client_python) | `0.22.1` | `0.23.1` |
| [llama-api-client](https://github.com/meta-llama/llama-api-python) | `0.3.0` | `0.5.0` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.34.6` | `1.0.1` |
| [openai](https://github.com/openai/openai-python) | `1.109.1` | `2.6.1` |
| [pyarrow](https://github.com/apache/arrow) | `21.0.0` | `22.0.0` |
| [tiktoken](https://github.com/openai/tiktoken) | `0.11.0` | `0.12.0` |



Updates `termcolor` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@3.1.0...3.2.0)

Updates `pip` from 25.2 to 25.3
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.2...25.3)

Updates `scipy` from 1.15.3 to 1.16.3
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.15.3...v1.16.3)

Updates `zstandard` from 0.24.0 to 0.25.0
- [Release notes](https://github.com/indygreg/python-zstandard/releases)
- [Changelog](https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst)
- [Commits](indygreg/python-zstandard@0.24.0...0.25.0)

Updates `pydantic` from 2.11.9 to 2.12.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.9...v2.12.3)

Updates `tomli` from 2.2.1 to 2.3.0
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.2.1...2.3.0)

Updates `fastapi` from 0.118.0 to 0.121.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.118.0...0.121.0)

Updates `together` from 1.5.26 to 1.5.29
- [Release notes](https://github.com/togethercomputer/together-python/releases)
- [Commits](togethercomputer/together-python@v1.5.26...v.1.5.29)

Updates `anthropic` from 0.69.0 to 0.72.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.69.0...v0.72.0)

Updates `azure-ai-ml` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-ai-ml_1.29.0...azure-ai-ml_1.30.0)

Updates `google-api-python-client` from 2.183.0 to 2.186.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.183.0...v2.186.0)

Updates `google-genai` from 1.39.1 to 1.48.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v1.39.1...v1.48.0)

Updates `google-auth` from 2.41.1 to 2.42.1
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.41.1...v2.42.1)

Updates `mistralai` from 1.6.0 to 1.9.11
- [Release notes](https://github.com/mistralai/client-python/releases)
- [Changelog](https://github.com/mistralai/client-python/blob/main/RELEASES.md)
- [Commits](mistralai/client-python@v1.6.0...v1.9.11)

Updates `boto3` from 1.40.42 to 1.40.65
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.42...1.40.65)

Updates `prometheus-client` from 0.22.1 to 0.23.1
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.22.1...v0.23.1)

Updates `llama-api-client` from 0.3.0 to 0.5.0
- [Release notes](https://github.com/meta-llama/llama-api-python/releases)
- [Changelog](https://github.com/meta-llama/llama-api-python/blob/main/CHANGELOG.md)
- [Commits](meta-llama/llama-api-python@v0.3.0...v0.5.0)

Updates `huggingface-hub` from 0.34.6 to 1.0.1
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.34.6...v1.0.1)

Updates `openai` from 1.109.1 to 2.6.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.109.1...v2.6.1)

Updates `pyarrow` from 21.0.0 to 22.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-21.0.0...apache-arrow-22.0.0)

Updates `tiktoken` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.11.0...0.12.0)

---
updated-dependencies:
- dependency-name: termcolor
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pip
  dependency-version: '25.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: scipy
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: zstandard
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pydantic
  dependency-version: 2.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: tomli
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: fastapi
  dependency-version: 0.121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: together
  dependency-version: 1.5.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: anthropic
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: azure-ai-ml
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: google-api-python-client
  dependency-version: 2.186.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: google-genai
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: google-auth
  dependency-version: 2.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: mistralai
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: boto3
  dependency-version: 1.40.65
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: prometheus-client
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: llama-api-client
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: huggingface-hub
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: openai
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: pyarrow
  dependency-version: 22.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: tiktoken
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/prod-deps-788c52e462 branch from 54c5408 to 793d014 Compare November 10, 2025 23:20
@dependabot @github

dependabot Bot commented on behalf of github Nov 17, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 17, 2025
@dependabot dependabot Bot deleted the dependabot/pip/prod-deps-788c52e462 branch November 17, 2025 23:18
@github-actions github-actions Bot locked and limited conversation to collaborators Nov 17, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants