Repository navigation
ci(deps): update non-major dependencies - #362
Merged
Merged
Conversation
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #362 +/- ##
=======================================
Coverage 94.21% 94.21%
=======================================
Files 304 304
Lines 38766 38766
Branches 6567 6567
=======================================
Hits 36524 36524
Misses 1429 1429
Partials 813 813 🚀 New features to boost your workflow:
|
napetrov
approved these changes
Nov 2, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v7.0.0→v7.1.0v4.39.0→v4.39.16.170.1→6.170.106.170.14(+3)1.106.0→1.106.41.106.6(+1)v1.14.2→v1.14.3==0.13.4→==0.13.50.13.6Release Notes
actions/setup-python
v7.1.0Compare Source
What's Changed
Enhancements
mirrorandmirror-tokeninputs for custom Python distribution sources by @luhenry in #1302Dependency Upgrade
New Contributors
Full Changelog: actions/setup-python@v7.0.0...v7.1.0
github/codeql-action
v4.39.1Compare Source
HypothesisWorks/hypothesis (hypothesis)
v6.170.10: Hypothesis version 6.170.10Compare Source
This patch fixes an internal error from "lists()" with "unique=True",
when the elements are a filtered "sampled_from()" with too few allowed
values to reach "min_size". It also ensures that "domains()" always
generates at least one subdomain, even with a small "max_length".
We also fixed some internal bookkeeping that could go wrong when an
exception was raised and caught during generation, for example by
"recursive()", which could make shrinking less effective.
The canonical version of these notes (with links) is on readthedocs.
v6.170.9: Hypothesis version 6.170.9Compare Source
This release fixes a "DeprecationWarning" when importing
"hypothesis.extra.dateutil" with dateutil 3.0 or higher (issue #4934).
The canonical version of these notes (with links) is on readthedocs.
v6.170.8: Hypothesis version 6.170.8Compare Source
This patch fixes a regression in version 6.170.1, where unique
collections of non-empty collections, such as
"st.sets(st.frozensets(st.integers(), min_size=1), min_size=1)", could
fail the "HealthCheck.large_base_example" health check (issue #4918).
The canonical version of these notes (with links) is on readthedocs.
v6.170.7: Hypothesis version 6.170.7Compare Source
This improves type coverage of stateful testing.
The canonical version of these notes (with links) is on readthedocs.
v6.170.6: Hypothesis version 6.170.6Compare Source
This patch adds PyPy 3.12 wheels to releases (issue #4921).
Thanks to @moreati for this contribution!
The canonical version of these notes (with links) is on readthedocs.
v6.170.5: Hypothesis version 6.170.5Compare Source
This patch fixes a bug for users of our "PrimitiveProvider" interface,
where "draw_integer" could incorrectly reuse weights from an earlier
draw (issue #4908).
The canonical version of these notes (with links) is on readthedocs.
v6.170.4: Hypothesis version 6.170.4Compare Source
This fills in the missing type annotations for public-facing
attributes of "settings", such as "settings.max_examples" and
"settings.database".
The canonical version of these notes (with links) is on readthedocs.
v6.170.3: Hypothesis version 6.170.3Compare Source
This patch fixes an internal error when the shrinker tried certain
invalid values, for example when shrinking "one_of()" between text
strategies with different alphabets (issue #4905).
The canonical version of these notes (with links) is on readthedocs.
v6.170.2: Hypothesis version 6.170.2Compare Source
Add support for Python 3.16, which is still in alpha.
The canonical version of these notes (with links) is on readthedocs.
BerriAI/litellm (litellm)
v1.106.4Compare Source
Verify this release
Same command for
litellm-database,litellm-non_rootand thedocker.io/litellm/*imagesWhat's new in 1.106.4
3 PRs. 2 fixed. No action needed to upgrade
Changes
ImportErrorwhen it cannot reach the remote model cost map, broken since v1.104.0 (#46711) Also in 1.104.7, 1.105.5Backport #48294 · Full changelog
v1.106.3Compare Source
Verify this release
Same command for
litellm-database,litellm-non_rootand thedocker.io/litellm/*imagesWhat's new in 1.106.3
4 PRs. 1 changed, 1 removed. 1 needs action
Action required
cosign.pubfrom commite82a3c6, the previous key no longer matches (#48103) Also in 1.103.8, 1.104.6, 1.105.4Changes
e82a3c6(#48103) Also in 1.103.8, 1.104.6, 1.105.4Backport #48078 · Backport #48142 · Full changelog
v1.106.2Compare Source
Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit
0112e53.Verify using the pinned commit hash (recommended):
A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
Verify using the release tag (convenience):
Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
Expected output:
What's Changed
Full Changelog: BerriAI/litellm@v1.106.1...v1.106.2
v1.106.1Compare Source
Verify this release
Same command for
litellm-database,litellm-non_rootand thedocker.io/litellm/*imagesWhat's new in 1.106.1
9 PRs. 6 fixed. 1 needs action
Action required
db_scripts/strip_vector_store_internal_metadata.pyto fix stores created before this release (#47021)Changes
thinking.block_bindingbeing dropped on multi-turn requests (#41362, #46342) Also in 1.105.2choices[1]with gpt-5.4+ models, broken since v1.97.0 (#46099) Also in 1.105.2countTokensrequests (#47389, #47446, #47454) Also in 1.104.4, 1.105.2Tool not foundwhen calling a bare tool name on/{server}/mcp, broken since v1.103.0 (#46225)Backport #47517 · Full changelog
pypa/gh-action-pypi-publish
v1.14.3Compare Source
Keeping the community safe is a collaborative effort! 💛💙
🛠️ Security Tightening
@webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #420.
🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3
🧔♂️ Release Manager: @webknjaz 🇺🇦
💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.
astral-sh/uv (uv)
v0.13.5Compare Source
Released on 2026-10-21.
Following uv 0.13.4, which removed the affected eMudhra/emSign root from uv's own certificate store, this release updates the latest managed CPython builds for 3.11 and newer to python-build-standalone 20261021, including the CPython 3.15.1, 3.14.9, and 3.13.17 security patch releases. These builds include pip 26.2.2 both preinstalled in the managed interpreter and bundled with
ensurepip, which installs pip by default when you runpython -m venv. Both copies use certifi 2026.10.19, which removes the same affected root. After upgrading uv, runuv python upgradeto install the updated builds. Virtual environments pinned to an older Python patch version do not switch to the updated interpreter automatically. Upgrade pip separately in existing virtual environments.Please note upstream CPython 3.9 and 3.10 still bundle pip releases whose certificate bundles trust the affected eMudhra/emSign root. We recommend migrating off of those versions and will no longer be releasing Docker images with uv installed for EOL Python versions.
Enhancements
Python
Preview features
wheel-variants(#22535, #22536, #22687, #22688)Performance
Bug fixes
Security
rustls-webpki0.103.16 (#22777)Configuration
📅 Schedule: (in timezone UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.