Skip to content

build(deps): bump the patch group across 1 directory with 10 updates - #6859

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/patch-0019cd1790
Open

build(deps): bump the patch group across 1 directory with 10 updates#6859
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/patch-0019cd1790

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch group with 10 updates in the / directory:

Package From To
boto3 1.43.82 1.43.93
claude-agent-sdk 0.2.110 0.2.152
libmozdata 0.2.18 0.2.19
matplotlib 3.11.1 3.11.2
tqdm 4.70.0 4.70.1
weave 0.53.7 0.53.9
xgboost 3.4.0 3.4.1
pydantic 2.13.4 2.13.5
alembic 1.19.1 1.19.2
cachetools 7.1.7 7.1.8

Updates boto3 from 1.43.82 to 1.43.93

Commits
  • 655751c Merge branch 'release-1.43.93'
  • e522bfd Bumping version to 1.43.93
  • 9c7d4c3 Add changelog entries from botocore
  • 4477cdc Merge branch 'release-1.43.92'
  • a465bee Merge branch 'release-1.43.92' into develop
  • 5d8a8ab Bumping version to 1.43.92
  • 959442c Add changelog entries from botocore
  • 5073bde Merge branch 'release-1.43.91'
  • 19fa272 Merge branch 'release-1.43.91' into develop
  • 036a8a0 Bumping version to 1.43.91
  • Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.110 to 0.2.152

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.152

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.259

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.152/

pip install claude-agent-sdk==0.2.152

v0.2.151

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.258

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.151/

pip install claude-agent-sdk==0.2.151

v0.2.150

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.257

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.150/

pip install claude-agent-sdk==0.2.150

v0.2.149

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.252

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.152

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.259

0.2.151

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.258

0.2.150

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.257

0.2.149

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.252

0.2.148

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.251

0.2.147

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.250

0.2.146

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.248

0.2.145

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.247

0.2.144

... (truncated)

Commits
  • a8b1e28 docs: update changelog for v0.2.152
  • 0b41fb4 chore: release v0.2.152
  • ed1718f chore: bump bundled CLI version to 2.1.259
  • 16606a3 docs: update changelog for v0.2.151
  • dbe3998 chore: release v0.2.151
  • 637906e chore: bump bundled CLI version to 2.1.258
  • 1539d2a docs: update changelog for v0.2.150
  • 23ca647 chore: release v0.2.150
  • 036a35a chore: bump bundled CLI version to 2.1.257
  • 9597fc9 docs: update changelog for v0.2.149
  • Additional commits viewable in compare view

Updates libmozdata from 0.2.18 to 0.2.19

Release notes

Sourced from libmozdata's releases.

v0.2.19

  • Bug 2068637 - Add support for first-public-parent (#304)

Released with mozilla/task-boot

Commits

Updates matplotlib from 3.11.1 to 3.11.2

Release notes

Sourced from matplotlib's releases.

REL: v3.11.2

This is the second bugfix release of the 3.11.x series.

This release contains several bug-fixes and adjustments:

  • Speed up RGBA-stage image resampling
  • Fix hexbin clipping in PDF output
  • Fix \text with internal braces
  • Fix some crashes and make some checks more robust to unlikely cases
  • Fix frame skew when saving GIF animations with PillowWriter
  • Fix HiDPI handling in Qt toolbar and WebAgg embeddings
  • Fix ResizeEvent handling for TextBox
  • Fix bug with PGF hatch linewidth and color
  • Fix a bug with drawing an empty Collection
  • Fix incorrect glyphs in Cairo backends
  • Improve build system to prevent conflicts between wheels and system libraries
Commits
  • d3ca917 REL: v3.11.2
  • b76fea9 DOC: Set current version to 3.11.2
  • 39c7f06 DOC: Prepare GitHub stats for 3.11.2
  • 5dd13e3 Merge branch 'v3.11.1-doc' into release-3.11.2
  • aa484be Merge branch 'v3.11.0-doc' into v3.11.1-doc
  • 0e10f83 Merge pull request #32330 from meeseeksmachine/auto-backport-of-pr-32324-on-v...
  • ebe947b Backport PR #32324: Don't force any diagnostics to be errors in bundled Harfbuzz
  • 8f4b7c5 Merge pull request #32322 from meeseeksmachine/auto-backport-of-pr-32321-on-v...
  • 93278ad Backport PR #32321: DOC: correct note about PyOS_InputHook
  • b0aee78 Merge pull request #32319 from meeseeksmachine/auto-backport-of-pr-32305-on-v...
  • Additional commits viewable in compare view

Updates tqdm from 4.70.0 to 4.70.1

Release notes

Sourced from tqdm's releases.

tqdm v4.70.1 stable

  • contrib.concurrent: fix no-len iterables (#1830 <- #1828)
  • tests: major overhaul (#1819)
  • update AI policy in PR template
  • misc lint & tidy
  • CI: bump workflow actions & pre-commit hooks
Commits

Updates weave from 0.53.7 to 0.53.9

Commits
  • 4409caf Release version: 0.53.9-dev0 → 0.53.9
  • a2244e5 chore(weave): bump TSSDK version to 0.16.8
  • ca82a8a chore(weave_ts): add changelog entries for 0.16.7 and 0.16.8 (#7859)
  • 77ed974 chore(weave): honor org LLM enable policy for insights (#7850)
  • 8243a82 fix(weave): route the generated client through our own httpx client (#7853)
  • 9ed4579 feat(weave): teach the generated client the calls_complete write path (#7852)
  • 79dcec6 fix(weave): fix the parallel-upload probe and the init failure message (#7851)
  • 3064c61 chore(weave): update model costs (#7858)
  • e9298fa chore(weave): update model providers (#7857)
  • c003a2f fix(weave): classify Stainless HTTP errors by status code (#7846)
  • Additional commits viewable in compare view

Updates xgboost from 3.4.0 to 3.4.1

Release notes

Sourced from xgboost's releases.

3.4.1 Patch Release

What's Changed

  • [jvm] Fix batch predict for SparseVector features (#12347)
  • Fix model slicing with category container. (#12462)

Full Changelog: dmlc/xgboost@v3.4.0...v3.4.1

Additional artifacts

You can verify the downloaded packages by running the following command on your Unix shell:

echo "<hash> <artifact>" | shasum -a 256 --check
34a5cb99a67bb98b44f204767eeeae642b65a86b2ecfca60082e4d74fd4d169a  xgboost-src-3.4.1.tar.gz
2514d394f989d6e990e67898d7f5e530c7c1867222c497ea454ffc18a31cb096  xgboost_r_gpu_linux.tar.gz

Experimental binary packages for R with CUDA enabled

Source tarball

Commits

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates alembic from 1.19.1 to 1.19.2

Release notes

Sourced from alembic's releases.

1.19.2

Released: September 4, 2026

changed

  • [changed] [autogenerate] The autogenerate plugin for CHECK constraint detection by name, added in 1.19.0. for #508, is no longer enabled by default. It has been renamed from alembic.autogenerate.checkconstraint_byname to alembic.ext.checkconstraint_byname and no longer matches on the "alembic.autogenerate.*" wildcard, which remains the default plugin specification. The previous name will still function as well if placed in the plugins list explicitly, both to enable the plugin and within a "~" exclusion, so that an env.py written against 1.19.0 or 1.19.1 requires no change.

    The plugin is now recommended only for schemas that ensure the naming of all constraints using a client side naming convention, otherwise there's a persistent risk of false positives. See autogenerate_check_constraints for background on things to be aware of when using this plugin.

    As part of this change "type bound" CHECK constraints, which include constraints generated for the Boolean and Enum datatypes when the create_constraint parameter is set to True, are no longer ignored in the metadata side, so that normal name-based matching can occur for these constraints.

    References: #1859

usecase

  • [usecase] [autogenerate] [batch] The target of a ~sqlalchemy.schema.ForeignKey is now located using the ForeignKey.target_tokens and ForeignKey.target_table_key accessors added in SQLAlchemy 2.1, rather than by splitting the dotted string form of that target on ".". As a dot inside a schema, table or column name cannot be told apart from the separator between those names, a foreign key whose target name contained a dot was previously mis-parsed by autogenerate rendering as well as by batch migrations. The dotted string continues to be split when running against SQLAlchemy 2.0, where these accessors are not present. Thanks to Gyanu Mayank for the initial pull request.

    References: #1860

Commits

Updates cachetools from 7.1.7 to 7.1.8

Changelog

Sourced from cachetools's changelog.

v7.1.8 (2026-08-31)

  • Reject negative maxsize in Cache.__init__.
Commits
  • 4500e3d Release v7.1.8.
  • 6e49bef Update copilot instructions and review.
  • defc58b Prepare v7.1.8.
  • a39180b Remove somewhat superfluous and slightly incorrect documentation note regardi...
  • dd181c5 Reject negative maxsize in Cache.init
  • b43b953 Use monthly batches for dependabot updates.
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the patch group across 1 directory with 10 updates
915b3ef 
Bumps the patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.82` | `1.43.93` |
| [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) | `0.2.110` | `0.2.152` |
| [libmozdata](https://github.com/mozilla/libmozdata) | `0.2.18` | `0.2.19` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.11.1` | `3.11.2` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.70.0` | `4.70.1` |
| [weave](https://github.com/wandb/weave) | `0.53.7` | `0.53.9` |
| [xgboost](https://github.com/dmlc/xgboost) | `3.4.0` | `3.4.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.19.1` | `1.19.2` |
| [cachetools](https://github.com/tkem/cachetools) | `7.1.7` | `7.1.8` |



Updates `boto3` from 1.43.82 to 1.43.93
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.82...1.43.93)

Updates `claude-agent-sdk` from 0.2.110 to 0.2.152
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.110...v0.2.152)

Updates `libmozdata` from 0.2.18 to 0.2.19
- [Release notes](https://github.com/mozilla/libmozdata/releases)
- [Commits](mozilla/libmozdata@v0.2.18...v0.2.19)

Updates `matplotlib` from 3.11.1 to 3.11.2
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.11.1...v3.11.2)

Updates `tqdm` from 4.70.0 to 4.70.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.70.0...v4.70.1)

Updates `weave` from 0.53.7 to 0.53.9
- [Release notes](https://github.com/wandb/weave/releases)
- [Changelog](https://github.com/wandb/weave/blob/master/dev_docs/RELEASE.md)
- [Commits](wandb/weave@v0.53.7...v0.53.9)

Updates `xgboost` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/dmlc/xgboost/releases)
- [Changelog](https://github.com/dmlc/xgboost/blob/master/NEWS.md)
- [Commits](dmlc/xgboost@v3.4.0...v3.4.1)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `alembic` from 1.19.1 to 1.19.2
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `cachetools` from 7.1.7 to 7.1.8
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.7...v7.1.8)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: libmozdata
  dependency-version: 0.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: matplotlib
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: tqdm
  dependency-version: 4.70.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: weave
  dependency-version: 0.53.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: xgboost
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: alembic
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: cachetools
  dependency-version: 7.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 15, 2026 23:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants