deps(pip): bump the python-dependencies group across 1 directory with 15 updates - #1104
Closed
dependabot[bot] wants to merge 5 commits into
Closed
deps(pip): bump the python-dependencies group across 1 directory with 15 updates#1104dependabot[bot] wants to merge 5 commits into
dependabot[bot] wants to merge 5 commits into
Conversation
… 15 updates Updates the requirements on [pre-commit](https://github.com/pre-commit/pre-commit), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [tqdm](https://github.com/tqdm/tqdm), [pyarrow](https://github.com/apache/arrow), [azure-cosmos](https://github.com/Azure/azure-sdk-for-python), [openai](https://github.com/openai/openai-python), [eventlet](https://github.com/eventlet/eventlet), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib), [agent-framework-foundry-hosting](https://github.com/microsoft/agent-framework), [fastapi](https://github.com/fastapi/fastapi), [docutils](https://github.com/rtfd/recommonmark) and [m2r2](https://github.com/crossnox/m2r2) to permit the latest version. Updates `pre-commit` to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1) Updates `ruff` to 0.15.22 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.15.22) Updates `mypy` to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.2.0...v2.3.0) Updates `tqdm` to 4.69.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.68.4...v4.69.0) Updates `pyarrow` to 25.0.0 - [Release notes](https://github.com/apache/arrow/releases) - [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.0) Updates `azure-cosmos` from 4.16.1 to 4.16.2 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.16.1...azure-cosmos_4.16.2) Updates `openai` from 2.45.0 to 2.46.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.45.0...v2.46.0) Updates `eventlet` from 0.41.0 to 0.41.1 - [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS) - [Commits](eventlet/eventlet@0.41.0...0.41.1) Updates `opentelemetry-api` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-sdk` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-instrumentation` from 0.64b0 to 0.65b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `agent-framework-foundry-hosting` to 1.0.0b260721 - [Release notes](https://github.com/microsoft/agent-framework/releases) - [Commits](https://github.com/microsoft/agent-framework/commits) Updates `fastapi` to 0.139.2 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.0...0.139.2) Updates `docutils` to 0.23 - [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md) - [Commits](https://github.com/rtfd/recommonmark/commits) Updates `m2r2` from 0.3.3.post2 to 0.3.4 - [Changelog](https://github.com/CrossNox/m2r2/blob/development/CHANGES.md) - [Commits](CrossNox/m2r2@v0.3.3.post2...v0.3.4) --- updated-dependencies: - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.15.22 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development dependency-group: python-dependencies - dependency-name: tqdm dependency-version: 4.69.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: pyarrow dependency-version: 25.0.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: azure-cosmos dependency-version: 4.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: openai dependency-version: 2.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: eventlet dependency-version: 0.41.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-instrumentation dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: agent-framework-foundry-hosting dependency-version: 1.0.0b260721 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: fastapi dependency-version: 0.139.2 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: docutils dependency-version: '0.23' dependency-type: direct:production dependency-group: python-dependencies - dependency-name: m2r2 dependency-version: 0.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Security Policy Alert: Harden Runner Policy ViolationThis workflow run has been blocked by StepSecurity's Harden Runner policy. This workflow run was blocked because one or more jobs are missing the Harden-Runner action, or it is not properly configured, which can introduce agent-bypass risk. Jobs not protected by Harden Runner:
Update the affected jobs so Harden Runner is initialized before any other action or command runs. For more information, see StepSecurity's Harden Runner documentation. |
Contributor
Security Policy Alert: Harden Runner Policy ViolationThis workflow run has been blocked by StepSecurity's Harden Runner policy. This workflow run was blocked because one or more jobs are missing the Harden-Runner action, or it is not properly configured, which can introduce agent-bypass risk. Jobs not protected by Harden Runner:
Update the affected jobs so Harden Runner is initialized before any other action or command runs. For more information, see StepSecurity's Harden Runner documentation. |
github-actions
Bot
added
the
documentation
Contributor
|
ℹ️ This Dependabot update was not auto-merged (production dependency or non-trivial change). Manual review requested. |
![bryan-roe-bot[bot]](https://avatars.githubusercontent.com/in/1073263?s=60&v=4){kind=small}
|
|
||
| # Use specific provider | ||
| maker = WebsiteMaker(provider_name='azure') # or 'openai', 'local' | ||
| maker = WebsiteMaker(provider_name="azure") # or 'openai', 'local' |
Contributor
There was a problem hiding this comment.
Semgrep identified an issue in your code:
Possibly found usage of AI: OpenAI
To resolve this comment:
🔧 No guidance has been designated for this issue. Fix according to your organization's approved methods.
💬 Ignore this finding
Reply with Semgrep commands to ignore this finding.
/fp <comment>for false positive/ar <comment>for acceptable risk/other <comment>for all other reasons
Alternatively, triage in Semgrep AppSec Platform to ignore the finding created by detect-generic-ai-oai.
You can view more details about this finding in the Semgrep AppSec Platform.
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Contributor
🔐 CodeQL — Open Alerts on this PR
Copilot Autofix suggestions (if enabled) appear as inline review comments on the affected lines. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on pre-commit, ruff, mypy, tqdm, pyarrow, azure-cosmos, openai, eventlet, opentelemetry-api, opentelemetry-sdk, opentelemetry-instrumentation, agent-framework-foundry-hosting, fastapi, docutils and m2r2 to permit the latest version.
Updates
pre-committo 4.6.1Release notes
Sourced from pre-commit's releases.
Changelog
Sourced from pre-commit's changelog.
... (truncated)
Commits
242ce8av4.6.1766e550Merge pull request #3727 from pre-commit/dedupe1558d06Merge pull request #3726 from pre-commit/exists-faster8a1c47aavoid duplicate files in --all-files during conflict2e01c99faster check of rev existing locally as a commit3613bf2Merge pull request #3701 from pre-commit/autoupdate-repos1d811d9Return an error for invalid --repo374d354Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH1e7994fset JULIA_DEPOT_PATHb2b9119Merge pull request #3719 from pre-commit/npm-unknown-optionsUpdates
ruffto 0.15.22Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
0177a7eBump 0.15.22 (#26884)fe8ba85[pycodestyle] DocumentE731fix safety (#26847)f3cf7c8[ruff] Addrule-codes-in-selectors(RUF201) (#26772)d244fd7Document argfile support (#26803)f239758[flake8-pyi] Fix false positive in__all__(PYI053) (#26872)54acbcd[ty] SupportTypeVarTupleandUnpack(#25240)87fc38c[ty] Parallelize subtype hierarchy search (#26875)e454f91[ty] Share interned query keys across Salsa queries (#26794)6f361a7[ty] only collect expected types for files open in the editor (#25546)6d6b2b3[ty] Avoid allocations during Salsa interned lookups (#26877)Updates
mypyto 2.3.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
8aabf84Drop +dev from version4d8ad2aUpdate changelog for 2.3 release (#21728)2c21546[mypyc] Update documentation of race conditions under free threading (#21726)a9f62a3[mypyc] Make attribute access memory safe on free-threaded builds (#21705)0faa413UsePYODIDEenvironment variable for Emscripten cross-compilation detection...3d75cdb[mypyc] Borrow final attributes more aggressively (#21702)24c237d[mypyc] Improve documentation of Final (#21713)b5be217[mypyc] Update free threading Python compatibility docs (#21711)cbcb51aNarrow for frozendict membership check (#21709)af2bc0fSync typeshed (#21707)Updates
tqdmto 4.69.0Release notes
Sourced from tqdm's releases.
Commits
6ab24dcbump version, workflow actions, pre-commit hooks99615b9asyncio: add gather(return_exceptions=False) (#1776)Updates
pyarrowto 25.0.0Release notes
Sourced from pyarrow's releases.
Commits
59bea6eMINOR: [Release] Update versions for 25.0.0381fab6MINOR: [Release] Update .deb/.rpm changelogs for 25.0.07f72d5bMINOR: [Release] Update CHANGELOG.md for 25.0.0fe2f85cGH-50336: [Release][Archery] Fix archery GitHub integration for release scrip...c658548GH-50293: [CI] Run check-labels for all triggers to avoid cancelling further ...f83c8caGH-50330: [C++][R][Parquet] Add missing typename in RleBitPackedDecoderGetRun...35e0f63GH-50318: [R][CI] Install missing libpng-dev for test-r-linux-as-cran (#50328)61ca7a9GH-50295: [C++][R] #include <ranges> in vector_select_k.cc breaks macOS CRAN ...1b6edb8GH-50291: [Python][Packaging] Stop using nightly build dependencies for build...e183ea9MINOR: [Docs] Add Timestamp With Offset to canonical extension types status (...Updates
azure-cosmosfrom 4.16.1 to 4.16.2Release notes
Sourced from azure-cosmos's releases.
Commits
eb67b14Revert "Add CFSClean enforcement (#48061)" (#48080)c839b8bCosmos: update changelog for release (#48005)f0ac2f5[ServiceBus] Document aiohttp>=3.14.0 recommendation for AmqpOverWebsocket (#...c91747dFix OneSettings validation logic to match schema (#48059)3eeccbbAdd CFSClean enforcement (#48061)8f8855b[Service Bus] Drain receive link and release messages on receiver close (#42917)777741bSync eng/common directory with azure-sdk-tools for PR 16342 (#48074)ebe3b5eupdate autorelease resolve step as authenticated step (#48073)e5f122a[monitor opentelemetry exporter] Handle ServiceResponseError as retryable to ...2cad71aBump TypeSpec Python emitter to 0.63.3 (#48068)Updates
openaifrom 2.45.0 to 2.46.0Release notes
Sourced from openai's releases.
Changelog
Sourced from openai's changelog.
Commits
0e6adb1release: 2.46.0 (#3501)Updates
eventletfrom 0.41.0 to 0.41.1Changelog
Sourced from eventlet's changelog.
Commits
475e2fdUpdate changelog for version 0.41.1 (#1095)22e2ad3Fix 4 DNS tests that fail without /etc/resolv.conf (#1093)a101b94Temporarily avoid using newer greenlet (#1099)9ae53a3wsgi: Handle ENOTCONN (#1092)176808fBump actions dependent on nodejs 20 (#1091)Updates
opentelemetry-apifrom 1.43.0 to 1.44.0Changelog
Sourced from opentelemetry-api's changelog.
... (truncated)
Commits
53a5a40Prepare release 1.44.0/0.65b0 (#5422)d9f34e7Fixup eachdist.py handling of package names (#5417)d10f472opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)ae8feebUpdate otelbot token workflows to use client IDs (#5404)67a2abdFix Context in-place mutability bypass via inherited dict methods (#5399)87baad9Bump semconv to 1.42.0 (#5410)23dc0b2opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)bec55fdopentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...55d0b7aopentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...6115db2opentelemetry-sdk: add log record limits environment variables (#5300)Updates
opentelemetry-sdkfrom 1.43.0 to 1.44.0Changelog
Sourced from opentelemetry-sdk's changelog.
... (truncated)
Commits
53a5a40Prepare release 1.44.0/0.65b0 (#5422)d9f34e7Fixup eachdist.py handling of package names (#5417)d10f472opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)ae8feebUpdate otelbot token workflows to use client IDs (#5404)67a2abdFix Context in-place mutability bypass via inherited dict methods (#5399)87baad9Bump semconv to 1.42.0 (#5410)23dc0b2opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)bec55fdopentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...55d0b7aopentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...6115db2opentelemetry-sdk: add log record limits environment variables (#5300)Updates
opentelemetry-instrumentationfrom 0.64b0 to 0.65b0Release notes
Sourced from opentelemetry-instrumentation's releases.
... (truncated)
Changelog
Sourced from opentelemetry-instrumentation's changelog.
... (truncated)
Commits
Updates
agent-framework-foundry-hostingto 1.0.0b260721Commits
Updates
fastapito 0.139.2Release notes
Sourced from fastapi's releases.