build(deps): bump the python-minor-patch group across 1 directory with 33 updates

[dependabot]

Bumps the python-minor-patch group with 33 updates in the / directory:

Package	From	To
requests	2.33.0	2.34.2
sentence-transformers	5.6.1	5.7.0
anthropic	0.120.0	0.122.0
langchain-core	1.5.1	1.5.4
langsmith	0.10.10	0.10.18
fastapi	0.140.0	0.141.1
uvicorn	0.51.0	0.52.3
elevenlabs	2.59.0	2.63.0
deepgram-sdk	7.6.0	7.7.0
boto3	1.43.56	1.43.71
azure-keyvault-secrets	4.11.0	4.11.1
mujoco	3.10.0	3.11.0
bitsandbytes	0.50.0	0.50.1
qdrant-client	1.18.0	1.19.0
faiss-cpu	1.14.3	1.15.0
elasticsearch	9.4.1	9.5.0
langgraph	1.2.9	1.2.11
crewai	1.6.1	1.15.16
litellm	1.93.0	1.96.2
langfuse	4.14.1	4.14.4
gradio	6.20.0	6.24.0
pypdf	6.14.2	6.16.0
redis	8.0.1	8.1.0
peft	0.19.1	0.20.0
google-cloud-aiplatform	1.162.0	1.164.0
google-cloud-storage	3.13.0	3.13.1
hypothesis	6.161.6	6.165.7
pre-commit	4.6.1	4.6.2
ruff	0.16.0	0.16.3
charset-normalizer	3.4.7	3.5.0
ml-dtypes	0.5.4	0.6.0
packaging	26.2	26.3
semgrep	1.171.0	1.173.0

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

• @​k223kim made their first contribution in psf/requests#7433

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
• Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• b7b549b v2.34.1
• e511bc7 Fix mutability issues with headers input types (#7431)
• 5691f59 Update JsonType containers to read-based collections (#7436)
• 2144213 Constrain Response.reason to str (#7437)
• 6404f34 Fix prepare_body stream detection for __getattr__-based file wrappers (#7...
• 0b401c7 v2.34.0
• 86b378d Align Session.get parameters with requests.get (#7429)
• a4f9a59 Port bpo-39057 to Requests (#7427)
• Additional commits viewable in compare view

Updates sentence-transformers from 5.6.1 to 5.7.0

Release notes

Sourced from sentence-transformers's releases.

v5.7.0 - GradCache Overhaul, torch.compile Inference, and a Large Batch of Correctness Fixes

This minor version is a correctness and performance-focused release. It rebuilds all gradient-cached losses on one shared engine, fixing several silently wrong gradients and adding token-based mini-batching for up to 3.9x faster cached-loss training. It also makes model.compile() actually speed up inference, and brings a long list of fixes across embedding quantization, evaluators, hard-negative mining, community detection, and multimodal inputs.

Two changes are marked breaking (🚨): int8/uint8 embedding quantization now clips out-of-range values and floors bucket values, so int8 outputs are no longer bit-identical with earlier versions, and AdaptiveLayerLoss/Matryoshka2dLoss now weight prior-layer losses uniformly by default. There's also a forward-looking deprecation: loading models whose modules import classes from outside sentence_transformers will require trust_remote_code=True from v6.0.

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.7.0
Inference only, use one of:
pip install sentence-transformers==5.7.0
pip install sentence-transformers[onnx-gpu]==5.7.0
pip install sentence-transformers[onnx]==5.7.0
pip install sentence-transformers[openvino]==5.7.0
Multimodal dependencies (optional):
pip install sentence-transformers[image]==5.7.0
pip install sentence-transformers[audio]==5.7.0
pip install sentence-transformers[video]==5.7.0
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==5.7.0

GradCache overhaul: correct gradients and token-based mini-batching (#3862)

The gradient-cached losses (CachedMultipleNegativesRankingLoss, CachedGISTEmbedLoss, CachedSpladeLoss, the Cross Encoder CachedMultipleNegativesRankingLoss, and MegaBatchMarginLoss) train with large batch sizes at constant memory by embedding in mini-batches and replaying them with cached gradients. Each loss carried its own diverged copy of that machinery. They are now all rebuilt on one shared engine, which fixed several bugs that silently corrupted gradients:

• Cross Encoder CachedMultipleNegativesRankingLoss on GPU: the backward pass used different dropout masks than the forward pass, silently biasing gradients for every reranker trained with dropout active on CUDA or MPS. CPU training was unaffected.
• Running two forward passes before a backward pass (e.g. in custom training loops) made CachedGISTEmbedLoss and the Cross Encoder loss backpropagate the wrong batch's gradients, because the cache was stored on the loss module. The cache now travels with each forward pass's backward hook (the .cache and .random_states loss attributes are gone as a result).
• Pooling(include_prompt=False) (e.g. Instructor models) mutated the attention mask in place, so the backward re-embedding of every cached loss ran with a different mask than the forward pass.
• MatryoshkaLoss(GISTEmbedLoss(...)): the guide model overwrote the cached embeddings, so only the largest Matryoshka dimension was actually trained.

Along the way, this also fixed an autocast dtype crash in the backward pass and the trainer retaining autograd graphs between logging steps when tracking loss components.

MegaBatchMarginLoss's default mini-batched version is rebuilt on the engine as well. It crashed outright on recent releases, and underneath that, its historical implementation only applied the last mini-batch's gradients. It now trains on the full batch (results will differ, for the better), works with MatryoshkaLoss, evaluates under torch.no_grad, and raises for a third input column instead of silently ignoring it.

The headline feature is mini_batch_num_tokens, available on CachedMultipleNegativesRankingLoss, CachedMultipleNegativesSymmetricRankingLoss, CachedGISTEmbedLoss, CachedSpladeLoss, and MegaBatchMarginLoss. Instead of a fixed number of sequences per mini-batch, mini-batches are greedily packed by total non-padding token count, giving near-constant work per mini-batch on variable-length data:

from sentence_transformers import SentenceTransformer
from sentence_transformers.sentence_transformer.losses import CachedMultipleNegativesRankingLoss
model = SentenceTransformer("microsoft/mpnet-base")
loss = CachedMultipleNegativesRankingLoss(model, mini_batch_num_tokens=16384)

On the PR's Natural Questions benchmark, cached-loss training with flash attention and a tuned token budget dropped from 715 to 182 seconds (3.9x) versus the previous release, with unchanged quality. The engine also trims trailing padding from each mini-batch, which alone is worth about 26% throughput on the default padded path. The updated training efficiency documentation recommends the smallest token budget that saturates your GPU. mini_batch_size keeps working everywhere as before.

... (truncated)

Commits

• b2a9529 [fix] Name the lone suggested parameter in the mine_hard_negatives missing-ne...
• 00e696c Release v5.7.0
• b69081a [fix] Treat a 1-dimensional query embedding as a single query in semantic_sea...
• c9c4250 Keep queries aligned in semantic_search_seismic when a query matches nothing ...
• 6d331a5 [fix] Support mixed sparse/dense inputs in euclidean and manhattan similari...
• 68c8cda [fix] Reject num_negatives larger than the range_min/range_max window in mine...
• cfb6d43 [trainer] Fix eval DataLoader worker leak with dataloader_persistent_worker...
• f6d3a40 Expand the community window on ties with the threshold (#3900)
• 0b3fcbd Correct the corpus_precision values documented for semantic_search_faiss ...
• 62724e7 Drop FAISS padding placeholders from semantic_search_faiss results (#3887)
• Additional commits viewable in compare view

Updates anthropic from 0.120.0 to 0.122.0

Release notes

Sourced from anthropic's releases.

v0.122.0

0.122.0 (2026-08-13)

Full Changelog: v0.121.0...v0.122.0

Features

• api: add output_behavior to dream creation (create a new memory store or update the input store in place) (852c4bb)

Bug Fixes

• bedrock,aws: run SigV4 signing off the event loop in async clients (#334) (2bae6c8)
• bedrock: expose beta.messages.parse, stream and tool_runner (#366) (6eca7bb)
• client: add models (52e9d94)
• client: keep token exchange bound per client across copy() (#388) (c13e6e3)
• client: read PathLike contents passed inside a file tuple (070f953)
• client: treat empty ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN as unset (#341) (76a2e68)
• streaming: add context to malformed tool input JSON errors in the non-beta accumulator (#339) (a343e17)
• streaming: apply all message_delta fields when accumulating streamed messages (#380) (fc1599b)
• streaming: emit input_json events for server tool use blocks (#336) (ccfc8e1)
• streaming: keep omitted content block fields unset in accumulated messages (#346) (cd40aab)
• streaming: run the request transform once in messages.stream() (#347) (81a92da)
• streaming: silence pydantic serializer warnings on message_stop events (#338) (41f9cdc)
• tools: reject symlink loops in tool paths and skip special skill-archive members (#322) (43e8669)
• vertex: expose beta.messages.parse and tool_runner (#367) (96723a0)

Chores

• ci: run breaking-change detection as a ci.yml job on every push (6dfd16e)
• examples: update messages_stream.py shebang from rye to uv (#1519) (7d72364)
• internal: codegen related update (21a0e3d)
• internal: drop remaining references to black (13df390)
• internal: remove misc things (d6ee99e)
• tests: use pytest monkeypatch and fakes instead of unittest.mock (55d246f)
• tests: use pytest monkeypatch instead of unittest.mock (e0c6488)

Documentation

• api: clarify that user profile name is optional for resold profiles (b8f9f61)
• fix fulfillment typos in session runner (#1795) (009b035)
• fix incorrect docstring in AsyncAnthropicFoundry.models (#1592) (f1f5e9b)

Refactors

• use the not_given singleton instead of the legacy NOT_GIVEN alias (eeb4d74)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.122.0 (2026-08-13)

Full Changelog: v0.121.0...v0.122.0

Features

• api: add output_behavior to dream creation (create a new memory store or update the input store in place) (852c4bb)

Bug Fixes

• bedrock,aws: run SigV4 signing off the event loop in async clients (#334) (2bae6c8)
• bedrock: expose beta.messages.parse, stream and tool_runner (#366) (6eca7bb)
• client: add models (52e9d94)
• client: keep token exchange bound per client across copy() (#388) (c13e6e3)
• client: read PathLike contents passed inside a file tuple (070f953)
• client: treat empty ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN as unset (#341) (76a2e68)
• streaming: add context to malformed tool input JSON errors in the non-beta accumulator (#339) (a343e17)
• streaming: apply all message_delta fields when accumulating streamed messages (#380) (fc1599b)
• streaming: emit input_json events for server tool use blocks (#336) (ccfc8e1)
• streaming: keep omitted content block fields unset in accumulated messages (#346) (cd40aab)
• streaming: run the request transform once in messages.stream() (#347) (81a92da)
• streaming: silence pydantic serializer warnings on message_stop events (#338) (41f9cdc)
• tools: reject symlink loops in tool paths and skip special skill-archive members (#322) (43e8669)
• vertex: expose beta.messages.parse and tool_runner (#367) (96723a0)

Chores

• ci: run breaking-change detection as a ci.yml job on every push (6dfd16e)
• examples: update messages_stream.py shebang from rye to uv (#1519) (7d72364)
• internal: codegen related update (21a0e3d)
• internal: drop remaining references to black (13df390)
• internal: remove misc things (d6ee99e)
• tests: use pytest monkeypatch and fakes instead of unittest.mock (55d246f)
• tests: use pytest monkeypatch instead of unittest.mock (e0c6488)

Documentation

• api: clarify that user profile name is optional for resold profiles (b8f9f61)
• fix fulfillment typos in session runner (#1795) (009b035)
• fix incorrect docstring in AsyncAnthropicFoundry.models (#1592) (f1f5e9b)

Refactors

• use the not_given singleton instead of the legacy NOT_GIVEN alias (eeb4d74)

0.121.0 (2026-08-07)

... (truncated)

Commits

• ad53cac release: 0.122.0
• c71b2f5 chore(tests): use pytest monkeypatch instead of unittest.mock
• 932488d chore(internal): drop remaining references to black
• de9fe77 docs(api): clarify that user profile name is optional for resold profiles
• db4581d refactor: use the not_given singleton instead of the legacy NOT_GIVEN alias
• 36cbc3a chore(tests): use pytest monkeypatch and fakes instead of unittest.mock
• 05cdf07 chore(ci): run breaking-change detection as a ci.yml job on every push
• fd3eaa6 fix(client): keep token exchange bound per client across copy() (#388)
• c18fcbf chore(internal): codegen related update
• 57bc2ce fix(streaming): keep omitted content block fields unset in accumulated messag...
• Additional commits viewable in compare view

Updates langchain-core from 1.5.1 to 1.5.4

Release notes

Sourced from langchain-core's releases.

langchain-core==1.5.4

Changes since langchain-core==1.5.3

release(core): 1.5.4 (#39592) fix(core): compat with pydantic 2.14 (#39328) fix(core): stop StructuredPrompt from mutating caller kwargs (#39174) fix(core): preserve flat tool args schema for RootModel runnables (#39307) fix(core): close internally created event loops in streaming tracers (#39222) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(core): preserve OpenAI file blocks (#39205) fix(core): document reserved argument names for tools (#39207) fix(core): handle injected args for subclasses of BaseTool (#39202) fix(core): respect include_injected=False with filter_args (#39200) fix(core): redact streaming callback options (#39179) fix(core): type text stream projections (#39170) chore(infra): add missing LICENSE files to publishable packages (#39146)

langchain-core==1.5.3

Changes since langchain-core==1.5.2

release(core): 1.5.3 (#39145) fix(core): fall back to LANGSMITH_API_KEY for gateway (#39115)

langchain-core==1.5.2

Changes since langchain-core==1.5.1

release(core): 1.5.2 (#39108) fix(core): handle empty string in gateway env vars (#39107) chore: bump setuptools from 82.0.0 to 83.0.0 in /libs/core (#39032) chore: bump jupyterlab from 4.5.9 to 4.5.10 in /libs/core (#39033) chore: bump setuptools from 80.9.0 to 83.0.0 in /libs/text-splitters (#39029)

Commits

• 5ff19c6 release(core): 1.5.4 (#39592)
• 1925966 feat(langchain): expose trace_policy on AgentMiddleware (#38910)
• ce8e8bd chore(model-profiles): refresh model profile data (#39579)
• a2a9b1b fix(anthropic): report reasoning tokens in usage metadata (#39590)
• 39b4e0f chore(langchain): fix type errors in tests (#39589)
• f78df6d chore(model-profiles): refresh model profile data (#39430)
• 56daacc release(openai): 1.4.3 (#39485)
• 24e8d2b chore(model-profiles): refresh model profile data (#39344)
• 9b4ef2a fix(openai): filter invalid tool calls from content (#39366)
• 9f738f5 fix(core): compat with pydantic 2.14 (#39328)
• Additional commits viewable in compare view

Updates langsmith from 0.10.10 to 0.10.18

Release notes

Sourced from langsmith's releases.

v0.10.18

What's Changed

• feat(python): LANGSMITH_EXCLUDE_INPUTS_ON_PATCH to skip inputs on patch by @​emil-lc in langchain-ai/langsmith-sdk#3350
• chore(deps): bump undici from 7.28.0 to 7.29.0 in /js/internal/environment_tests/test-exports-cf in the npm_and_yarn group across 1 directory by @​dependabot[bot] in langchain-ai/langsmith-sdk#3352
• chore(deps): bump js-yaml from 3.15.0 to 4.3.1 in /js/internal/environment_tests/test-exports-metro in the npm_and_yarn group across 1 directory by @​dependabot[bot] in langchain-ai/langsmith-sdk#3363
• docs(py): remove stale default param from dumps_json docstring by @​emil-lc in langchain-ai/langsmith-sdk#3354
• docs(py): clarify _serialization_methods table comments by @​emil-lc in langchain-ai/langsmith-sdk#3355
• docs(py): document _simple_default datetime/UUID branches by @​emil-lc in langchain-ai/langsmith-sdk#3356
• perf(py): hoist surrogate regex to module scope by @​emil-lc in langchain-ai/langsmith-sdk#3357
• fix(py): don't swallow KeyboardInterrupt/SystemExit in serde by @​emil-lc in langchain-ai/langsmith-sdk#3358
• perf(py): collapse redundant attribute lookups in _serialize_json probe loop by @​emil-lc in langchain-ai/langsmith-sdk#3362
• feat: support tags when creating datasets and experiments by @​williamreinhard-langchain in langchain-ai/langsmith-sdk#3334
• release(js): 0.8.10 by @​langchain-infra in langchain-ai/langsmith-sdk#3370
• release(py): 0.10.18 by @​langchain-infra in langchain-ai/langsmith-sdk#3369

New Contributors

• @​williamreinhard-langchain made their first contribution in langchain-ai/langsmith-sdk#3334

Full Changelog: langchain-ai/langsmith-sdk@v0.10.17...v0.10.18

v0.10.17

What's Changed

• fix: add replicas to RunTrees created from headers/dotted-order by @​emil-lc in langchain-ai/langsmith-sdk#3346
• fix: sanitize git remote credentials [closes JKB-51] by @​jkennedyvz in langchain-ai/langsmith-sdk#3343
• release(py): 0.10.17 by @​emil-lc in langchain-ai/langsmith-sdk#3349

Full Changelog: langchain-ai/langsmith-sdk@v0.10.16...v0.10.17

v0.10.16

What's Changed

• release(js): 0.8.9 by @​KiewanVillatel in langchain-ai/langsmith-sdk#3316
• fix(python): mask metadata after the runtime env merge and via the anonymizer by @​vladislav-nechakhin in langchain-ai/langsmith-sdk#3313
• fix(js): mask metadata after the runtime env merge and via the anonymizer by @​vladislav-nechakhin in langchain-ai/langsmith-sdk#3314
• chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#3325
• chore(deps-dev): bump types-pyyaml from 6.0.12.20260518 to 6.0.12.20260724 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#3324
• chore(deps): bump the actions-major group with 2 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#3321
• chore(deps): bump the actions-minor-and-patch group across 1 directory with 3 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#3320
• chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#3330
• fix(js,py): stamp ls_agent_type on wrap_openai LLM runs by @​ybathula707 in langchain-ai/langsmith-sdk#3317
• chore(deps): bump aiohttp from 3.14.1 to 3.14.3 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#3329
• chore(deps-dev): bump the py-major group in /python with 2 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#3323
• chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /python by @​dependabot[bot] in langchain-ai/langsmith-sdk#3331
• fix(js,py): preserve user-supplied ls_agent_type in openai-agents-sdk integration by @​ybathula707 in langchain-ai/langsmith-sdk#3318
• fix(js): inherit parent's ls_agent_type in Vercel _getLsAgentType helper by @​ybathula707 in langchain-ai/langsmith-sdk#3319
• chore(deps): bump the py-minor-and-patch group across 1 directory with 25 updates by @​dependabot[bot] in langchain-ai/langsmith-sdk#3322
• fix(profiles): resolve the OAuth token endpoint from deployment metadata by @​langchain-infra in langchain-ai/langsmith-sdk#3333
• fix: avoid resetting compression threads by @​emil-lc in langchain-ai/langsmith-sdk#3332
• docs(sandbox): fix invalid sizing example in JS sandbox README by @​ramon-langchain in langchain-ai/langsmith-sdk#3335
• test(claude-agent-sdk): run subagent in foreground so trace nests correctly by @​emil-lc in langchain-ai/langsmith-sdk#3339

... (truncated)

Commits

• 51bff1a release(py): 0.10.18 (#3369)
• 70bdb8c release(js): 0.8.10 (#3370)
• fd3c740 feat: support tags when creating datasets and experiments (#3334)
• b89b85d perf(py): collapse redundant attribute lookups in _serialize_json probe loop ...
• 19851a9 fix(py): don't swallow KeyboardInterrupt/SystemExit in serde (#3358)
• 1d3d017 perf(py): hoist surrogate regex to module scope (#3357)
• bebe8b4 docs(py): document _simple_default datetime/UUID branches (#3356)
• ec68cb4 docs(py): clarify _serialization_methods table comments (#3355)
• ec983d8 docs(py): remove stale default param from dumps_json docstring (#3354)
• 2100a3e chore(deps): bump js-yaml from 3.15.0 to 4.3.1 in /js/internal/environment_te...
• Additional commits viewable in compare view

Updates fastapi from 0.140.0 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

• 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

• 📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @​tiangolo.

0.141.0

Features

• ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

• 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @​SAURABHSALVE.

Docs

• 📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @​AshNicolus.
• 📝 Add API reference page for fastapi.sse. PR #15930 by @​SAURABHSALVE.

0.140.12

Fixes

• 🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @​Zawwarsami16.

0.140.11

Fixes

• 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

• 🐛 Fix handling sequences with nested Annotated types. PR #14874 by @​YuriiMotov.

Internal

• 🐛 Accept any base test failure as regression. PR #16092 by @​tiangolo.
• 🐛 Preserve pytest exit code in regression check. PR #16091 by @​tiangolo.
• ✅ Test PR regressions against base code. PR #16090 by @​tiangolo.

0.140.9

Fixes

• 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits

• 95f8322 🔖 Release version 0.141.1 (#16106)
• f137944 📝 Update release notes
• d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
• 1d211b9 📝 Update release notes
• 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
• c7e7b65 🔖 Release version 0.141.0 (#16103)
• 6bceb84 📝 Update release notes
• 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
• 628663f 🔖 Release version 0.140.13 (#16096)
• 0b54fd0 📝 Update release notes
• Additional commits viewable in compare view

Updates uvicorn from 0.51.0 to 0.52.3

Release notes

Sourced from uvicorn's releases.

Version 0.52.3

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on ...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.