Skip to content

MAINT: Bump the minor-and-patch group with 8 updates - #2369

Merged
Roman Lutz (romanlutz) merged 3 commits into
mainfrom
dependabot/uv/minor-and-patch-3aea919912
Aug 13, 2026
Merged

MAINT: Bump the minor-and-patch group with 8 updates#2369
Roman Lutz (romanlutz) merged 3 commits into
mainfrom
dependabot/uv/minor-and-patch-3aea919912

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Summary

Updates the minor-and-patch dependency group while preserving PyRIT's supported-platform compatibility constraints.

Package From To
alembic 1.18.5 1.19.1
openai 2.52.0 2.53.0
starlette 1.3.1 1.6.0
spaCy 3.8.13 3.8.13 (exclude 3.8.15)
LiteLLM 1.91.4 1.91.5
ty 0.0.65 0.0.69
diff-cover 10.4.1 10.5.0
ruff 0.16.1 0.16.2

Compatibility notes

  • spaCy 3.8.14 and 3.8.15 have no CPython 3.14 wheels on PyPI. Keep 3.8.13 and exclude both affected releases. This is tracked upstream in explosion/spaCy#13949.
  • Keep LiteLLM capped below 1.92.0. Later releases dropped the universal wheel and still do not cover every supported platform, including Windows ARM64 and Linux with glibc older than 2.28. The lock therefore updates only to compatible release 1.91.5.

Bumps the minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.18.5` | `1.19.1` |
| [openai](https://github.com/openai/openai-python) | `2.52.0` | `2.53.0` |
| [starlette](https://github.com/Kludex/starlette) | `1.3.1` | `1.6.0` |
| [spacy](https://github.com/explosion/spaCy) | `3.8.13` | `3.8.15` |
| [litellm](https://github.com/BerriAI/litellm) | `1.91.4` | `1.96.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.65` | `0.0.69` |
| [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.1` | `10.5.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.2` |


Updates `alembic` from 1.18.5 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `openai` from 2.52.0 to 2.53.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.52.0...v2.53.0)

Updates `starlette` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.3.1...1.6.0)

Updates `spacy` from 3.8.13 to 3.8.15
- [Release notes](https://github.com/explosion/spaCy/releases)
- [Changelog](https://github.com/explosion/spaCy/blob/master/RELEASE_NOTES.md)
- [Commits](explosion/spaCy@release-v3.8.13...release-v3.8.15)

Updates `litellm` from 1.91.4 to 1.96.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.91.4...v1.96.0)

Updates `ty` from 0.0.65 to 0.0.69
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.65...0.0.69)

Updates `diff-cover` from 10.4.1 to 10.5.0
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v10.4.1...v10.5.0)

Updates `ruff` from 0.16.1 to 0.16.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.1...0.16.2)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: spacy
  dependency-version: 3.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: litellm
  dependency-version: 1.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.69
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: diff-cover
  dependency-version: 10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 12, 2026
Copilot AI added 2 commits August 12, 2026 11:06
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Keep LiteLLM below 1.92.0 so supported platforms continue to use the universal wheel instead of requiring platform-specific Rust builds.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 01c2b753-8b57-4b44-9a71-d2d726b7fa94
@romanlutz
Roman Lutz (romanlutz) added this pull request to the merge queue Aug 13, 2026
Merged via the queue into main with commit 72cac36 Aug 13, 2026
49 checks passed
@romanlutz
Roman Lutz (romanlutz) deleted the dependabot/uv/minor-and-patch-3aea919912 branch August 13, 2026 04:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants