Skip to content

Bump the python-packages group across 1 directory with 13 updates - #7417

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-packages-29c75625d4
Open

Bump the python-packages group across 1 directory with 13 updates#7417
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-packages-29c75625d4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-packages group with 13 updates in the / directory:

Package From To
anyio 4.14.1 4.14.2
exa-py 2.15.0 2.16.2
tavily-python 0.7.26 0.7.27
markdownify 1.2.2 1.2.3
inline-snapshot 0.34.2 0.35.3
diff-cover 10.3.0 10.4.1
pip 26.1.2 26.2.1
genai-prices 0.1.0 0.1.1
fastmcp 3.4.2 3.4.6
mypy 2.1.0 2.3.0
ruff 0.15.19 0.16.1
logfire 4.37.0 4.40.0
logfire-api 4.37.0 4.40.0

Updates anyio from 4.14.1 to 4.14.2

Release notes

Sourced from anyio's releases.

4.14.2

  • Changed ByteReceiveStream.receive() implementations to raise a ValueError when max_bytes is not a positive integer (#1191)
  • Fixed CapacityLimiter.total_tokens rejecting float("inf") when the limiter was instantiated outside of an event loop. The adapter setter checked for infinity by identity (value is math.inf), so only the exact math.inf singleton was accepted, while every backend setter (using math.isinf()) accepts any positive infinity (#1189; PR by @​greymoth-jp).
  • Fixed to_process.run_sync() deadlocking when the worker function writes enough data to sys.stderr to fill the (undrained) pipe buffer. The worker process now redirects sys.stderr to os.devnull as well, matching the documented behavior
  • Fixed TLSStream.wrap() matching an internationalized (unicode) host name against the peer certificate using IDNA 2003 (via the standard library) instead of IDNA 2008, which could cause the host name to be matched against the wrong certificate (#1208)
  • Fixed anyio.open_process() (and run_process()) ignoring the extra_groups argument, as it mistakenly passed the value of the group argument instead (#1209)
  • Fixed CapacityLimiter.acquire_nowait() and CapacityLimiter.acquire_nowait_on_behalf_of() raising trio.WouldBlock instead of anyio.WouldBlock on the trio backend when there are no tokens available (#1218)
  • Fixed CapacityLimiter on the asyncio backend over-granting tokens (borrowed_tokens exceeding total_tokens and available_tokens going negative) when a non-blocking acquire was made in the window between a token being released and the notified waiter resuming. The freed token is now reserved for the woken waiter right away, so the non-blocking acquire correctly raises WouldBlock (#1170; PR by @​gaoflow)
  • Fixed unnecessary CPU spin when delivering cancellation from CancelScope on asyncio under certain conditions, including improper cancel scope nesting (#1111)
Commits
  • c384f99 Bumped up the version
  • dbba29d Fixed 100% CPU spin on cancel scope misuse (#1217)
  • 6bbc6c3 Fix CapacityLimiter over-granting tokens on asyncio (#1172)
  • 6f82b25 Refactored TestTLSStream.test_receive_invalid_max_bytes() to be less flaky
  • be24b04 Relaxed timeouts to fix test flakiness
  • 8113506 Fix test flakiness caused by slow callback duration logging
  • 1e988b6 Fixed CapacityLimiter raising trio.WouldBlock instead of anyio.WouldBlock (#1...
  • 44713f3 Pin setup-uv to a commit sha across downstream jobs (#1213)
  • f1b7301 Fixed stderr writes in a worker subprocess causing a deadlock (#1207)
  • 212be93 Fix flaky test_tcp_listener_same_port using a hardcoded port (#1206)
  • Additional commits viewable in compare view

Updates exa-py from 2.15.0 to 2.16.2

Updates tavily-python from 0.7.26 to 0.7.27

Commits

Updates markdownify from 1.2.2 to 1.2.3

Release notes

Sourced from markdownify's releases.

1.2.3

What's Changed

New Contributors

Full Changelog: matthewwithanm/python-markdownify@1.2.2...1.2.3

Commits
  • 9341855 Merge branch 'develop'
  • bc98c9e bump to version v1.2.3
  • dd5728e fix: preserve text nested inside <br> by html.parser (#264)
  • 0b359c0 fix: allow None to be used for strip_pre and warp_width params in types...
  • See full diff in compare view

Updates inline-snapshot from 0.34.2 to 0.35.3

Release notes

Sourced from inline-snapshot's releases.

0.35.3

Added

  • Added Builder.create_set() for creating set expressions in customization functions.

Fixed

  • Fixed set snapshot serialization to be deterministic for partially ordered values such as incomparable frozenset members.

  • Fixed a crash when an unknown --inline-snapshot flag is provided, without running report finalization or modifying external snapshot tracking files.

0.35.2

Fixed

  • fix passing PYTHONPATH, PYTHONWARNINGS, and PYTHONDONTWRITEBYTECODE while running the test suite.

0.35.1

Fixed

  • fix passing PYTEST_DISABLE_PLUGIN_AUTOLOAD and PYTEST_PLUGINS while running the test suite.

0.35.0

Changed

  • inline-snapshot now tracks source files that use external() in .inline-snapshot/files_using_external.txt (inside storage-dir) and uses this tracked list to detect and trim unused external snapshots.

  • The tool.inline-snapshot.test-dir configuration option is only used as a compatibility fallback when files_using_external.txt does not exist yet.

  • Documentation examples now use rich terminal snapshots to show pytest output with colors and formatting.

Changelog

Sourced from inline-snapshot's changelog.

0.35.3 — 2026-07-27

Added

  • Added Builder.create_set() for creating set expressions in customization functions.

Fixed

  • Fixed set snapshot serialization to be deterministic for partially ordered values such as incomparable frozenset members.

  • Fixed a crash when an unknown --inline-snapshot flag is provided, without running report finalization or modifying external snapshot tracking files.

0.35.2 — 2026-07-16

Fixed

  • fix passing PYTHONPATH, PYTHONWARNINGS, and PYTHONDONTWRITEBYTECODE while running the test suite.

0.35.1 — 2026-07-16

Fixed

  • fix passing PYTEST_DISABLE_PLUGIN_AUTOLOAD and PYTEST_PLUGINS while running the test suite.

0.35.0 — 2026-07-15

Changed

  • inline-snapshot now tracks source files that use external() in .inline-snapshot/files_using_external.txt (inside storage-dir) and uses this tracked list to detect and trim unused external snapshots.

  • The tool.inline-snapshot.test-dir configuration option is only used as a compatibility fallback when files_using_external.txt does not exist yet.

  • Documentation examples now use rich terminal snapshots to show pytest output with colors and formatting.

Commits
  • 4485eac bump: version 0.35.2 → 0.35.3
  • 25a937a fix: Handle unknown --inline-snapshot flags without session-finish `Asserti...
  • 9ec2ed9 fix: Make set snapshot serialization deterministic for partial-order elements...
  • ffa62b6 bump: version 0.35.1 → 0.35.2
  • ee80c1c fix: Pass PYTHONPATH etc. to test environment (#379)
  • c3c9454 bump: version 0.35.0 → 0.35.1
  • bf42325 fix: Pass pytest plugin control variables to test environment (#378)
  • 0dd6d93 bump: version 0.34.2 → 0.35.0
  • d587238 style: pre-commit autoupdate (#291)
  • cfdc856 docs: update docs (#377)
  • Additional commits viewable in compare view

Updates diff-cover from 10.3.0 to 10.4.1

Release notes

Sourced from diff-cover's releases.

Version 10.4.1

What's Changed

Dependencies

Full Changelog: Bachmann1234/diff_cover@v10.4.0...v10.4.1

Version 10.4.0

What's Changed

Dependency bumps

New Contributors

Full Changelog: Bachmann1234/diff_cover@v10.3.0...v10.4.0

Changelog

Sourced from diff-cover's changelog.

8/08/2026 v10.5.0

8/06/2026 v10.4.2

7/23/2026 v10.4.1

7/21/2026 v10.4.0

  • Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @​mofr

05/30/2026 v10.3.0

  • Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @​duxiaocheng

  • Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

01/08/2026 v10.2.0

12/30/2025 v10.1.0

  • Add support for floating-point total percentage in reports PR 565 thanks @​tilaven

12/09/2025 v10.0.0

  • Remove python 3.9 support
  • Add python 3.14 support
  • Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

09/25/2025 v9.7.1

... (truncated)

Commits

Updates pip from 26.1.2 to 26.2.1

Changelog

Sourced from pip's changelog.

26.2.1 (2026-08-04)

Bug Fixes

  • Reallow keyring installed in a (non-activated) virtual environment to be be used via the import provider method while installing build dependencies. ([#14227](https://github.com/pypa/pip/issues/14227) <https://github.com/pypa/pip/issues/14227>_)

26.2 (2026-07-29)

Deprecations and Removals

  • Newly published packages will no longer be immediately visible to pip if the index uses caching. To install a newly published package, use --refresh-package. ([#13680](https://github.com/pypa/pip/issues/13680) <https://github.com/pypa/pip/issues/13680>_)

  • Drop support for detecting legacy, non-:pep:405, virtualenv (< 20) environments. ([#14062](https://github.com/pypa/pip/issues/14062) <https://github.com/pypa/pip/issues/14062>_)

  • Constraints files, including PIP_CONSTRAINT, no longer affect isolated build environments. Use --build-constraint or the PIP_BUILD_CONSTRAINT environment variable to constrain build dependencies instead.

    The --use-feature=build-constraint flag is now always enabled and has no effect. ([#14094](https://github.com/pypa/pip/issues/14094) <https://github.com/pypa/pip/issues/14094>_)

Features

  • Declare support for Python 3.15 ([#14208](https://github.com/pypa/pip/issues/14208) <https://github.com/pypa/pip/issues/14208>_)

  • Support self-referential extras officially. pip has supported this by accident since version 21.2. ([#11296](https://github.com/pypa/pip/issues/11296) <https://github.com/pypa/pip/issues/11296>_)

  • Add --only-deps flag to instruct pip to select only the dependencies of supplied packages. It cannot be used with --no-deps, -r, --group, or --requirements-from-script. ([#11440](https://github.com/pypa/pip/issues/11440) <https://github.com/pypa/pip/issues/11440>_)

  • Cache simple responses in accordance to their Cache-Control header instead of always revalidating on every request. To refresh cached package index responses and ensure newly published packages are found, use --refresh-package <package>. ([#13680](https://github.com/pypa/pip/issues/13680) <https://github.com/pypa/pip/issues/13680>_)

  • Add --no-require-hashes to disable automatic enablement of --require-hashes when encountering a requirement with hashes. ([#14169](https://github.com/pypa/pip/issues/14169) <https://github.com/pypa/pip/issues/14169>_)

  • Honor --only-final when sourcing requirements with -r pylock.toml. ([#13950](https://github.com/pypa/pip/issues/13950) <https://github.com/pypa/pip/issues/13950>_)

  • Add support for pylock.toml upload-time field, so --uploaded-prior-to works with -r pylock.toml. ([#14168](https://github.com/pypa/pip/issues/14168) <https://github.com/pypa/pip/issues/14168>_)

  • Better error messages in case of conflicts with requirements from -r pylock.toml. ([#13963](https://github.com/pypa/pip/issues/13963) <https://github.com/pypa/pip/issues/13963>_)

  • Add experimental support for isolating build subprocesses by creating standard virtual environments. This will fix most (if not all) subtle isolation issues that can lead to broken builds exclusive to pip. The feature can be enabled via --use-feature=venv-isolation and will be enabled by default in a future release.

    Note that the feature has limited compatibility with --use-feature=inprocess-build-deps.

... (truncated)

Commits
  • 634a6ec Bump for release
  • ae2eb4f Revert build dependency installer isolation for legacy build environment (#14...
  • 6236392 Merge pull request #14213 from pypa/release/26.2
  • da4b2cc Bump for development
  • 4b6ae5c Bump for release
  • 50b6d3c Update AUTHORS.txt
  • dbddfbd Tweak news entries for pip 26.2 (#14212)
  • 6576b75 Merge pull request #14165 from sbidoul/refactor-pylock-hanling-sbi
  • 0090e00 Address a variety of typos detected in code review
  • e12ddd9 Add support for --uploaded-prior-to with -r pylock.toml
  • Additional commits viewable in compare view

Updates genai-prices from 0.1.0 to 0.1.1

Commits
  • 3a6b749 Prep 0.1.1 release (#545)
  • c436fe6 fix(js): normalize downloaded price constraints (#544)
  • 78bce8c Collapse generated diffs, pin the frozen v1 snapshots, document price-history...
  • 1ce2a45 Fix GPT-5.6 Luna and Terra price history (#535)
  • d6fa536 fix: harden JavaScript provider data activation (#522)
  • f596b71 Refresh agent-facing docs for the v2 data contract (#534)
  • 810d9d3 Update OpenAI gpt-5.6 family prices (terra & luna reduced) (#531)
  • 8af4529 Expand usages.json tests (#529)
  • See full diff in compare view

Updates fastmcp from 3.4.2 to 3.4.6

Release notes

Sourced from fastmcp's releases.

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

What's Changed

Fixes 🐞

Docs 📚

Full Changelog: PrefectHQ/fastmcp@v3.4.5...v3.4.6

v3.4.5: Key Change

FastMCP 3.4.5 collects five fixes for the 3.x line. The one that prompted it: a single Ed25519 key in a JWKS — which Rauthy, Ory Hydra, and some Keycloak configurations publish by default — made JWTVerifier reject every token, including ones correctly signed by supported keys in the same set.

What's Changed

Fixes 🐞

Docs 📚

New Contributors

Full Changelog: PrefectHQ/fastmcp@v3.4.4...v3.4.5

v3.4.4: Host in Translation

FastMCP 3.4.4 restores HTTP deployment compatibility after the 3.4.3 Host/Origin guard changed default behavior for existing ASGI, serverless, and reverse-proxy deployments. The guard implementation remains available for deployments that opt in with explicit trusted hosts and origins, while 3.x returns to accepting traffic that worked before the patch. This release also adds Hugging Face OAuth provider support, with docs and examples for public and private apps, PKCE, Dynamic Client Registration, and CIMD.

What's Changed

Enhancements ✨

Fixes 🐞

Docs 📚

New Contributors

... (truncated)

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v3.4.7: Know Your Audience

FastMCP 3.4.7 fixes CIMD private_key_jwt authentication on bare-origin OAuth proxy deployments by validating client assertions against the exact token endpoint advertised in OAuth metadata.

Security 🔒

Docs 📚

Full Changelog: v3.4.6...v3.4.7

v3.4.6: Trust, but Proxy

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

Fixes 🐞

Docs 📚

Full Changelog: v3.4.5...v3.4.6

v4.0.0b1: Fourgone Conclusion

FastMCP 4 makes stateful MCP applications work on the sessionless 2026-07-28 protocol while one deployment continues serving handshake-era clients. Tools can ask follow-up questions across requests, preserve authenticated user state, and move long-running work into background tasks without sticky sessions. Protocol extensions and enterprise identity become first-class surfaces, and most FastMCP 3 servers upgrade unchanged even though MCP Python SDK v2 rewrote the engine underneath them. Server-initiated sampling and roots are removed from the server API; the upgrade guide covers their replacements.

New Features 🎉

  • Migrate to MCP Python SDK v2 by @​jlowin in #4437
  • Teach fastmcp.Client the modern protocol: mode negotiation, MRTR driver, response cache by @​jlowin in #4450
  • Forward-port Hugging Face auth provider by @​jlowin in #4475
  • Add server-side identity assertion (SEP-990 ID-JAG) by @​jlowin in #4483

... (truncated)

Commits

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
  • 24c237d [mypyc] Improve documentation of Final (#21713)
  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
  • cbcb51a Narrow for frozendict membership check (#21709)
  • af2bc0f Sync typeshed (#21707)
  • Additional commits viewable in compare view

Updates ruff from 0.15.19 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits
  • 80790b3 Bump 0.16.1 (#27330)
  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
  • 0d80497 Lint TOML files in the LSP (#26862)
  • d91586b Update prek dependencies (#27293)
  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
  • 7c3e2db [ty] Fix enum class container assignability (#27318)
  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
  • Additional commits viewable in compare view

Updates logfire from 4.37.0 to 4.40.0

Release notes

Sourced from logfire's releases.

v4.40.0

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 12, 2026
@github-actions github-actions Bot added the size: S Small PR (≤100 weighted lines) label Aug 12, 2026
macroscopeapp[bot]
macroscopeapp Bot previously approved these changes Aug 12, 2026
View reviewed changes
@macroscopeapp

macroscopeapp Bot commented Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Approvability

Verdict: Needs human review

...

You can customize Macroscope's approvability policy. Learn more.

@dependabot
Bump the python-packages group across 1 directory with 13 updates
323b566 
Bumps the python-packages group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.14.1` | `4.14.2` |
| exa-py | `2.15.0` | `2.16.2` |
| [tavily-python](https://github.com/tavily-ai/tavily-python) | `0.7.26` | `0.7.27` |
| [markdownify](https://github.com/matthewwithanm/python-markdownify) | `1.2.2` | `1.2.3` |
| [inline-snapshot](https://github.com/15r10nk/inline-snapshot) | `0.34.2` | `0.35.3` |
| [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.3.0` | `10.4.1` |
| [pip](https://github.com/pypa/pip) | `26.1.2` | `26.2.1` |
| [genai-prices](https://github.com/pydantic/genai-prices) | `0.1.0` | `0.1.1` |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.4.2` | `3.4.6` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.19` | `0.16.1` |
| [logfire](https://github.com/pydantic/logfire) | `4.37.0` | `4.40.0` |
| [logfire-api](https://github.com/pydantic/logfire) | `4.37.0` | `4.40.0` |



Updates `anyio` from 4.14.1 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.14.1...4.14.2)

Updates `exa-py` from 2.15.0 to 2.16.2

Updates `tavily-python` from 0.7.26 to 0.7.27
- [Commits](https://github.com/tavily-ai/tavily-python/commits)

Updates `markdownify` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/matthewwithanm/python-markdownify/releases)
- [Commits](matthewwithanm/python-markdownify@1.2.2...1.2.3)

Updates `inline-snapshot` from 0.34.2 to 0.35.3
- [Release notes](https://github.com/15r10nk/inline-snapshot/releases)
- [Changelog](https://github.com/15r10nk/inline-snapshot/blob/main/CHANGELOG.md)
- [Commits](15r10nk/inline-snapshot@0.34.2...0.35.3)

Updates `diff-cover` from 10.3.0 to 10.4.1
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v10.3.0...v10.4.1)

Updates `pip` from 26.1.2 to 26.2.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.1.2...26.2.1)

Updates `genai-prices` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/pydantic/genai-prices/releases)
- [Changelog](https://github.com/pydantic/genai-prices/blob/main/RELEASE.md)
- [Commits](pydantic/genai-prices@v0.1.0...v0.1.1)

Updates `fastmcp` from 3.4.2 to 3.4.6
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.4.2...v3.4.6)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `ruff` from 0.15.19 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.19...0.16.1)

Updates `logfire` from 4.37.0 to 4.40.0
- [Release notes](https://github.com/pydantic/logfire/releases)
- [Changelog](https://github.com/pydantic/logfire/blob/main/CHANGELOG.md)
- [Commits](pydantic/logfire@v4.37.0...v4.40.0)

Updates `logfire-api` from 4.37.0 to 4.40.0
- [Release notes](https://github.com/pydantic/logfire/releases)
- [Changelog](https://github.com/pydantic/logfire/blob/main/CHANGELOG.md)
- [Commits](pydantic/logfire@v4.37.0...v4.40.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-version: 4.14.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: diff-cover
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: exa-py
  dependency-version: 2.16.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: fastmcp
  dependency-version: 3.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: genai-prices
  dependency-version: 0.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: inline-snapshot
  dependency-version: 0.35.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: logfire
  dependency-version: 4.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: logfire-api
  dependency-version: 4.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: markdownify
  dependency-version: 1.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pip
  dependency-version: 26.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: ruff
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: tavily-python
  dependency-version: 0.7.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-packages-29c75625d4 branch from fbcb7c4 to 323b566 Compare August 13, 2026 17:58
@macroscopeapp
macroscopeapp Bot dismissed their stale review August 13, 2026 17:58

Dismissing prior approval to re-evaluate 323b566

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@macroscopeapp macroscopeapp[bot] macroscopeapp[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code size: S Small PR (≤100 weighted lines)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants