build(deps): bump the python-deps group across 1 directory with 9 updates by dependabot[bot] · Pull Request #115 · liquidz00/Patcher

dependabot · 2026-09-10T07:19:26Z

Bumps the python-deps group with 9 updates in the / directory:

Package	From	To
anyio	`4.14.2`	`4.15.1`
pydantic	`2.13.4`	`2.13.5`
rapidfuzz	`3.14.5`	`3.14.6`
build	`1.5.1`	`1.6.0`
ruff	`0.16.3`	`0.16.6`
sphinxcontrib-mermaid	`2.1.0`	`2.1.1`
alembic	`1.19.1`	`1.19.2`
fastmcp	`3.4.7`	`4.0.3`
lxml	`6.1.2`	`6.1.3`

Updates anyio from 4.14.2 to 4.15.1

Release notes

Sourced from anyio's releases.

4.15.1

Implemented a compatibility fix for supporting direct access of anyio.* submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)

4.15.0

Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

follow_symlinks on exists() (Python 3.12+)

follow_symlinks on is_dir() (Python 3.13+)

follow_symlinks on is_file() (Python 3.13+)

follow_symlinks on owner() (Python 3.13+)

follow_symlinks on group() (Python 3.13+)

newline on read_text() (Python 3.13+)

(#1286, #1293; PR by @jaideeppyne)

Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @Graeme22)

Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @EmmanuelNiyonshuti)

Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @Vizonex)

Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @nightcityblade)

Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @davidbrochart)

Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @gschaffner)

Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @EmmanuelNiyonshuti)

Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @c-tonneslan)

Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @Graeme22)

Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @gschaffner)

Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @tapetersen)

Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @Sanjays2402)

Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @alloutflo)

Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @matthewfeickert)

Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @hansu650)

Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @zelinewang)

... (truncated)

Commits

ffcd154 Bumped up the version
0ecf5ed Added a workaround for third party code accessing unimported submodules (#1309)
9283662 Bumped up the version
d137692 Improved the instructions for AI agents
033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
b825c3b Fixed pyproject.toml changes not triggering the test suite
9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
b05fe6d Fixed wrong type in move_on_after (#1297)
44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Commits

001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
558379f Bump twine to v7.0.0
2cfd5d3 Do not check for docs build
a735bee Fix more Clippy lints
7eed4a1 Fix Clippy 0.1.95 warnings
b353bbb Prepare release v2.13.5
63d2ccc Count validated model fields once in smart unions
a53ec2e Speed up PyPy CI tests
d65e0f9 Workaround circular import error in Mypy
47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
Additional commits viewable in compare view

Updates rapidfuzz from 3.14.5 to 3.14.6

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.6

Fixed

fix some divergences in the pure Python fallback

fix compatibility with new Cython versions

fixed potential out of bound access inside Editops.remove_subsequence

fixed handling python fallback implementation of Editops.remove_subsequence

Removed

dropped support for Python 3.10

dropped wheels for experimental Python 3.13 free threaded

Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.6] - 2026-08-30 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix some divergences in the pure Python fallback * fix compatibility with new Cython versions * fixed potential out of bound access inside Editops.remove_subsequence * fixed handling python fallback implementation of Editops.remove_subsequence

Removed

dropped support for Python 3.10
dropped wheels for experimental Python 3.13 free threaded

[3.14.5] - 2026-04-07 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix release ci attempting to upload a pyodide wheel
[3.14.4] - 2026-04-06
^^^^^^^^^^^^^^^^^^^^^
Added

add risc64 wheels
add support for taskflow 4.0.0

Changed

* upgrade to ``Cython==3.2.4``.
Fixed
* fix type hints for extractOne when no score_cutoff is provided
[3.14.3] - 2025-11-01

^^^^^^^^^^^^^^^^^^^^^

Fixed



add missing pypy and freethreaded linux wheels

Removed

drop s390x and ppc64le wheels since they are virtually unused and require extremely long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

d1b4a18 fix cython call
f7be71b fix typo
3199c87 fix version tag
7b57e51 update date
15e68d7 update rapidfuzz-cpp
b637f9f don't hand out references to internal elements
868a451 fix Editops.remove_subsequence
83b8b84 fix compatibility with new Cython versions
24f2ac5 Bump pypa/cibuildwheel from 4.1.1 to 4.2.0 in the github-actions group
03a5137 Bump pypa/gh-action-pypi-publish in the github-actions group
Additional commits viewable in compare view

Updates build from 1.5.1 to 1.6.0

Release notes

Sourced from build's releases.

1.6.0

What's Changed

Replace prettier with mdformat and yamlfmt by @gaborbernat in pypa/build#1133

Let yamlfmt format the workflows by @gaborbernat in pypa/build#1134

🐛 fix(release): semver auto bump, changelog reflow, and roll back 1.5.1 by @gaborbernat in pypa/build#1132

fix: hash verification in --dependency-constraints-txt could be silently skipped by @manfred-kaiser in pypa/build#1140

🐛 fix(ci): bump build-and-inspect-python-package to v3.0.1 by @gaborbernat in pypa/build#1147

🐛 fix(ci): pin coverage core to ctrace so test contexts record by @gaborbernat in pypa/build#1148

chore: run mypy on more parts of the code by @henryiii in pypa/build#1151

chore: turn up strictness on mypy by @henryiii in pypa/build#1153

chore: faster mypy, fix merge error by @henryiii in pypa/build#1156

🐛 fix(ci): rerun integration tests on transient network errors by @gaborbernat in pypa/build#1150

chore: clean up unused casts in tests by @henryiii in pypa/build#1154

refactor(typing): apply review feedback from #1093 by @henryiii in pypa/build#1155

chore: Generator is more accurate than Iterator by @henryiii in pypa/build#1152

tests: mark test_main_sdist_input_end_to_end with pytest.mark.network by @frenzymadness in pypa/build#1144

Revert "⚠️ feat(util): deprecate project_wheel_metadata" by @henryiii in pypa/build#1158

tests: download integration sources once per run by @henryiii in pypa/build#1157

Use stdlib importlib.metadata for typing by @layday in pypa/build#1162

Drop redundant exc_info parameter from backend exception wrapper by @layday in pypa/build#1161

Drop a few PyPy-specific test skips by @layday in pypa/build#1164

🔧 chore: batch dependency updates weekly on Tuesday by @gaborbernat in pypa/build#1165

👷 ci: use app token for releases by @gaborbernat in pypa/build#1169

New Contributors

@manfred-kaiser made their first contribution in pypa/build#1140

@frenzymadness made their first contribution in pypa/build#1144

Full Changelog: pypa/build@1.5.1...1.6.0

Changelog

Sourced from build's changelog.

#################### 1.6.0 (2026-08-27) ####################

Features

Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)

The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)

The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)

Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)

Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds

by :user:gaborbernat (:issue:655)

Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)

On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

Bugfixes

Drain verbose subprocess output inline instead of using a ThreadPoolExecutor, which silently swallowed logging errors - by :user:henryiii (:issue:1098)

Reject a file passed as --env-dir with a clear error instead of a raw FileExistsError - by :user:henryiii (:issue:1100)

Emit CLI warnings to stderr instead of stdout, so they no longer corrupt --metadata JSON output on stdout - by :user:ymyzk (:issue:1111)

Fix the Windows symlink support probe always returning False due to a stale object interpolated into the destination path - by :user:henryiii (:issue:1118)

Fix metadata_path's build-backend fallback returning a nonexistent dist-info path for wheels with a build tag - by :user:henryiii (:issue:1119)

Write pip/uv requirements and constraints files with \n instead of os.linesep, avoiding doubled \r\r\n line endings on Windows - by :user:henryiii (:issue:1120)

Batch of small robustness fixes: correct macOS release parsing for the minimum pip version, avoid sharing the mutable default build-system table between builders, keep the original error when isolated-environment setup fails early, and raise BuildException for an invalid wheel - by :user:henryiii (:issue:1121)

Decide color support independently for stdout and stderr instead of only checking stdout.isatty(), so redirecting one stream no longer disables or leaks ANSI colors on the other - by :user:henryiii (:issue:1123)

Pass --dependency-constraints-txt files through to the installer unmodified instead of re-parsing them into a deduplicated set of lines, fixing a case where a hashed requirement (e.g. from pip-compile --generate-hashes) could have its --hash continuation line separated from its requirement line and silently dropped, depending on the interpreter's hash seed - by :user:manfred-kaiser (:issue:1140)

... (truncated)

Commits

7ac9efe chore: prepare for 1.6.0
e57e2bf 👷 ci: use app token for releases (#1169)
66438ab pre-commit: bump repositories (#1167)
4ed9658 build(deps): bump the github-actions group with 3 updates (#1166)
c76707f 🔧 chore: batch dependency updates weekly on Tuesday (#1165)
b317437 Drop a few PyPy-specific test skips (#1164)
561f331 pre-commit: bump repositories (#1163)
9456281 refactor: drop redundant exc_info parameter from backend exception wrapper ...
3e7a445 Use stdlib importlib.metadata for typing (#1162)
9a2e1e9 tests: download integration sources once per run (#1157)
Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

Move pytest-fixture-autouse to the restriction category (#28219)

[flake8-pytest-style] Add an autofix for PT020 (#27993)

[flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)

[isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

Validate unary expressions when parsing (#28233)

[flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)

[flake8-bugbear] Fix panic on match subjects (B031) (#27781)

[flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)

[flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)

[ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

[flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

Add another example and glob reference for lint.per-file-ignores (#28106)

Add duplicate work guidance (#28229)

[flake8-async] Document thread offloading (ASYNC240) (#28008)

[pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

@flying-sheep

@pikammmmm

@fly1d

@waterWang

@Pierre-Sassoulas

@ntBre

@jelle-openai

@ericbuehl

@tjkuson

@AbhinavMir

@Whning0513

@chirizxc

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

Move pytest-fixture-autouse to the restriction category (#28219)

[flake8-pytest-style] Add an autofix for PT020 (#27993)

[flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)

[isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

Validate unary expressions when parsing (#28233)

[flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)

[flake8-bugbear] Fix panic on match subjects (B031) (#27781)

[flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)

[flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)

[ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

[flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

Add another example and glob reference for lint.per-file-ignores (#28106)

Add duplicate work guidance (#28229)

[flake8-async] Document thread offloading (ASYNC240) (#28008)

[pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

@flying-sheep

@pikammmmm

@fly1d

@waterWang

@Pierre-Sassoulas

@ntBre

@jelle-openai

@ericbuehl

@tjkuson

@AbhinavMir

@Whning0513

@chirizxc

... (truncated)

Commits

22f65a2 Bump 0.16.6 (#28280)
7cc9f1e [ty] Document CallableTypeKind variants (#28277)
056ce07 Add UV_LOCKED to all workflows (#28261)
6d6e35d [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
80b4891 [ty] Temporarily disable tuple types in property tests (#28275)
3f7a54d [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
35656cf [ty] Preserve deprecations on decorated callables (#28256)
d2626c8 [ty] Reject missing attributes on type[] aliases (#28267)
ee6a6d1 [ty] Support ParamSpecs in ConstraintSet (#28028)
7f6a170 [ty] Move bound APIs to constraint owners (#28094)
Additional commits viewable in compare view

Updates sphinxcontrib-mermaid from 2.1.0 to 2.1.1

Changelog

Sourced from sphinxcontrib-mermaid's changelog.

2.1.1 (July 19, 2026)

Preserve source metadata on generated Mermaid caption nodes so Sphinx extracts them into gettext catalogs and applies normal caption translations

Pass the existing mermaid image class through the HTML visitor so PNG output can be targeted consistently with CSS

Commits

6e51230 Merge pull request #262 from mgaitan/tkp/211
7c61bb6 Merge pull request #264 from mgaitan/dependabot/github_actions/github-actions...
77bd593 Merge branch 'master' into dependabot/github_actions/github-actions-a934d7c76e
d1b8ca8 Merge pull request #265 from mgaitan/tkp/ruff
4ad2812 Fixes for ruff 16
056261d Bump pypa/gh-action-pypi-publish in the github-actions group
015f47a Merge pull request #263 from mgaitan/dependabot/github_actions/github-actions...
a8f8b59 Bump the github-actions group with 3 updates
e81147d Bump to 2.1.1 and update changelog
e267890 Merge pull request #261 from timkpaine/tkp/translate-mermaid-captions
Additional commits viewable in compare view

Updates alembic from 1.19.1 to 1.19.2

Release notes

Sourced from alembic's releases.

1.19.2

Released: September 4, 2026

changed

[changed] [autogenerate] The autogenerate plugin for CHECK constraint detection by name, added in 1.19.0. for #508, is no longer enabled by default. It has been renamed from alembic.autogenerate.checkconstraint_byname to alembic.ext.checkconstraint_byname and no longer matches on the "alembic.autogenerate.*" wildcard, which remains the default plugin specification. The previous name will still function as well if placed in the plugins list explicitly, both to enable the plugin and within a "~" exclusion, so that an env.py written against 1.19.0 or 1.19.1 requires no change.

The plugin is now recommended only for schemas that ensure the naming of all constraints using a client side naming convention, otherwise there's a persistent risk of false positives. See autogenerate_check_constraints for background on things to be aware of when using this plugin.

As part of this change "type bound" CHECK constraints, which include constraints generated for the Boolean and Enum datatypes when the create_constraint parameter is set to True, are no longer ignored in the metadata side, so that normal name-based matching can occur for these constraints.

References: #1859

usecase

[usecase] [autogenerate] [batch] The target of a ~sqlalchemy.schema.ForeignKey is now located using the ForeignKey.target_tokens and ForeignKey.target_table_key accessors added in SQLAlchemy 2.1, rather than by splitting the dotted string form of that target on ".". As a dot inside a schema, table or column name cannot be told apart from the separator between those names, a foreign key whose target name contained a dot was previously mis-parsed by autogenerate rendering as well as by batch migrations. The dotted string continues to be split when running against SQLAlchemy 2.0, where these accessors are not present. Thanks to Gyanu Mayank for the initial pull request.

References: #1860

Commits

See full diff in compare view

Updates fastmcp from 3.4.7 to 4.0.3

Release notes

Sourced from fastmcp's releases.

v4.0.3: Once Is Enough

Multi-server clients with legacy-only backends now avoid unnecessary startup retries, and tools returning unconstrained sequences no longer send images twice. This patch also fixes task timing values rejected by strict clients and cleans up unfinished Monty callbacks when execution ends.

What's Changed

Enhancements ✨

ci: deploy docs through Mintlify's admin API and wait for a verdict by @zzstoatzz in PrefectHQ/fastmcp#4996

perf: avoid duplicate startup for mixed-era backends by @ningmao-hlyz in PrefectHQ/fastmcp#4971

docs: clarify release title history lookup by @zzstoatzz in PrefectHQ/fastmcp#5006

Fixes 🐞

fix: don't infer an output schema for unconstrained sequences by @fsecada01 in PrefectHQ/fastmcp#4999

Clean up unfinished Monty callbacks by @zzstoatzz in PrefectHQ/fastmcp#5005

Fix task timing field serialization by @LarryHu0217 in PrefectHQ/fastmcp#5003

Docs 📚

docs: point What's New at the changelog for later releases by @zzstoatzz in PrefectHQ/fastmcp#4992

docs: attribute the back-channel removal to SEP-2322/2575, not SEP-2577 by @zzstoatzz in PrefectHQ/fastmcp#4988

docs: add v4.0.3 changelog entries by @zzstoatzz in PrefectHQ/fastmcp#5007

New Contributors

@fsecada01 made their first contribution in PrefectHQ/fastmcp#4999

@ningmao-hlyz made their first contribution in PrefectHQ/fastmcp#4971

Full Changelog: PrefectHQ/fastmcp@v4.0.2...v4.0.3

v4.0.2: Root Access

ClientGroup is now importable from the package root, from fastmcp import ClientGroup, with the same lazy export and install hint as Client, so integrations no longer couple to FastMCP's internal module layout.

What's Changed

Enhancements ✨

Expose ClientGroup from package root by @jlowin in PrefectHQ/fastmcp#4987

skills: add release skill with changelog entry helper by @zzstoatzz in PrefectHQ/fastmcp#4982

Fixes 🐞

docs: escape <1 in changelog so MDX parses by @zzstoatzz in PrefectHQ/fastmcp#4978

Docs 📚

docs: note the 4.0.1 floor for ClientGroup reentrancy by @zzstoatzz in PrefectHQ/fastmcp#4980

docs: link the GA announcement and blog from What's New by @zzstoatzz in PrefectHQ/fastmcp#4984

Other Changes 🦾

docs: add v4.0.2 changelog entries by @zzstoatzz in PrefectHQ/fastmcp#4990

Full Changelog: PrefectHQ/fastmcp@v4.0.1...v4.0.2

v4.0.1: Come Back Any Time

ClientGroup now reference-counts its context the way Client does, so entering a connected group from a nested block or a concurrent task reuses the existing connections instead of raising. Adapters written against Client's reentrancy can hold a ClientGroup the same way.

... (truncated)

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true tag: NEW

v4.0.3: Once Is Enough

Multi-server clients with legacy-only backends now avoid unnecessary startup retries, and tools returning unconstrained sequences no longer send images twice. This patch also fixes task timing values rejected by strict clients and cleans up unfinished Monty callbacks when execution ends.

Enhancements ✨

ci: deploy docs through Mintlify's admin API and wait for a verdict by @zzstoatzz in #4996

perf: avoid duplicate startup for mixed-era backends by @ningmao-hlyz in #4971

docs: clarify release title history lookup by @zzstoatzz in #5006

Fixes 🐞

fix: don't infer an output schema for unconstrained sequences by @fsecada01 in #4999

Clean up unfinished Monty callbacks by @zzstoatzz in #5005

Fix task timing field serialization by @LarryHu0217 in #5003

Docs 📚

docs: point What's New at the changelog for later releases by @zzstoatzz in #4992

docs: attribute the back-channel removal to SEP-2322/2575, not SEP-2577 by @zzstoatzz in #4988

New Contributors

@fsecada01 made their first contribution in #4999

@ningmao-hlyz made their first contribution in #4971

Full Changelog: v4.0.2...v4.0.3

v4.0.2: Root Access

ClientGroup is now importable from the package root, from fastmcp import ClientGroup, with the same lazy export and install hint as Client, so integrations no longer couple to FastMCP's internal module layout.

Enhancements ✨

Expose ClientGroup from package root by @jlowin in #4987

skills: add release skill with changelog entry helper by @zzstoatzz in #4982

Fixes 🐞

docs: escape <1 in changelog so MDX parses by @zzstoatzz in #4978

Docs 📚

docs: note the 4.0.1 floor for ClientGroup reentrancy by @zzstoatzz in #4980

docs: link the GA announcement and blog from What's New by @zzstoatzz in #4984

Full Changelog: v4.0.1...v4.0.2

... (truncated)

Commits

7129236 Add v4.0.3 changelog entries (#5007)
f79bc82 chore: Update SDK documentation (#4945)
6e0859f fix task timing field serialization (#5003)
855cb7a Clarify release title history lookup (#5006)
6236ac1 Clean up unfinished Monty callbacks (#5005)
6c2fbe7 docs: attribute the back-channel removal to SEP-2322/2575, not SEP-2577 (#4988)
e68bacc perf: avoid duplicate startup for mixed-era backends (#4971)
032b9f6 fix: don't infer an output schema for unconstrained sequences (#4999)
75d50ff ci: deploy docs through Mintlify's admin API and wait for a verdict (#4996)
a338cfb docs: point What's New at the changelog for later releases (#4992)
Additional commits viewable in compare view

Updates lxml from 6.1.2 to 6.1.3

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.

Commits

3c1a4c7 Prepare release of 6.1.3.
c1191fc Update changelog.
03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
9716fb1 Build: Include older PyPy versions.
0f3327d Build: Exclude Win-Aarch64 from wheel build.
6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
ce9fe0d Build: Fix Py3.8 windows build.
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
`@dependabo...

Description has been truncated

…ates Bumps the python-deps group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.14.2` | `4.15.1` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) | `3.14.5` | `3.14.6` | | [build](https://github.com/pypa/build) | `1.5.1` | `1.6.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.3` | `0.16.6` | | [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) | `2.1.0` | `2.1.1` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.19.1` | `1.19.2` | | [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.4.7` | `4.0.3` | | [lxml](https://github.com/lxml/lxml) | `6.1.2` | `6.1.3` | Updates `anyio` from 4.14.2 to 4.15.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.14.2...4.15.1) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.13.5) Updates `rapidfuzz` from 3.14.5 to 3.14.6 - [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases) - [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst) - [Commits](rapidfuzz/RapidFuzz@v3.14.5...v3.14.6) Updates `build` from 1.5.1 to 1.6.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.5.1...1.6.0) Updates `ruff` from 0.16.3 to 0.16.6 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.3...0.16.6) Updates `sphinxcontrib-mermaid` from 2.1.0 to 2.1.1 - [Changelog](https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md) - [Commits](mgaitan/sphinxcontrib-mermaid@2.1.0...2.1.1) Updates `alembic` from 1.19.1 to 1.19.2 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `fastmcp` from 3.4.7 to 4.0.3 - [Release notes](https://github.com/PrefectHQ/fastmcp/releases) - [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx) - [Commits](PrefectHQ/fastmcp@v3.4.7...v4.0.3) Updates `lxml` from 6.1.2 to 6.1.3 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-6.1.2...lxml-6.1.3) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: rapidfuzz dependency-version: 3.14.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: build dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: ruff dependency-version: 0.16.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: sphinxcontrib-mermaid dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: alembic dependency-version: 1.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: fastmcp dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-deps - dependency-name: lxml dependency-version: 6.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-24T07:18:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 10, 2026

dependabot Bot requested review from ball42 and liquidz00 as code owners September 10, 2026 07:19

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 10, 2026

dependabot Bot closed this Sep 24, 2026

dependabot Bot deleted the dependabot/uv/python-deps-e9c20529b3 branch September 24, 2026 07:18

Navigation Menu

build(deps): bump the python-deps group across 1 directory with 9 updates - #115

build(deps): bump the python-deps group across 1 directory with 9 updates#115
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-deps-e9c20529b3

dependabot Bot commented on behalf of github Sep 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.15.1

4.15.0

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.5 (2026-08-28)

What's Changed

Fixes

Release 3.14.6

Fixed

Removed

Changelog

1.6.0

What's Changed

New Contributors

0.16.6

Release Notes

Preview features

Bug fixes

Rule changes

Documentation

Other changes

Contributors

0.16.6

Preview features

Bug fixes

Rule changes

Documentation

Other changes

Contributors

2.1.1 (July 19, 2026)

1.19.2

changed

usecase

v4.0.3: Once Is Enough

What's Changed

Enhancements ✨

Fixes 🐞

Docs 📚

New Contributors

v4.0.2: Root Access

What's Changed

Enhancements ✨

Fixes 🐞

Docs 📚

Other Changes 🦾

v4.0.1: Come Back Any Time

title: "Changelog" icon: "list-check" rss: true tag: NEW

Enhancements ✨

Fixes 🐞

Docs 📚

New Contributors

Enhancements ✨

Fixes 🐞

Docs 📚

6.1.3 (2026-09-02)

Bugs fixed

Uh oh!

dependabot Bot commented on behalf of github Sep 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 10, 2026 •

edited

Loading