Skip to content

chore(deps): bump the uv-dependencies group with 16 updates#21733

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-dependencies-9cdb34c154
Closed

chore(deps): bump the uv-dependencies group with 16 updates#21733
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-dependencies-9cdb34c154

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps the uv-dependencies group with 16 updates:

Package From To
apprise 1.9.9 1.10.0
cryptography 46.0.7 47.0.0
cyclopts 4.10.2 4.11.0
coolname 4.2.0 5.0.0
fastapi 0.136.0 0.136.1
fsspec 2026.3.0 2026.4.0
packaging 26.1 26.2
uvicorn 0.45.0 0.46.0
uv 0.11.7 0.11.8
prefect-azure 0.4.8 0.4.9
prefect-redis 0.2.10 0.2.11
pyright 1.1.408 1.1.409
setuptools 82.0.1 80.10.2
virtualenv 21.2.4 21.3.0
ruff 0.15.11 0.15.12
pytest-codspeed 4.4.0 4.5.0

Updates apprise from 1.9.9 to 1.10.0

Release notes

Sourced from apprise's releases.

v1.10.0

What's Changed

The big wow factor of this release would be the huge effort put into Matrix E2EE built into Apprise without adding overhead to the plugin itself. Huge props to those that helped out. Other than that, a few more services have been added (137 supported now 🚀 ).

The official documentation website (https://appriseit.com) got a nice cleanup; the Service listings are now searchable; some nice tweaks to the URL Builder as well.

📣 New Notification Services:

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

Installation

Apprise is available on PyPI through pip:

... (truncated)

Commits

Updates cryptography from 46.0.7 to 47.0.0

Changelog

Sourced from cryptography's changelog.

47.0.0 - 2026-04-24


* Support for Python 3.8 is deprecated and will be removed in the next
  ``cryptography`` release.
* **BACKWARDS INCOMPATIBLE:** Support for binary elliptic curves
  (``SECT*`` classes) has been removed. These curves are rarely used and
  have additional security considerations that make them undesirable.
* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL 1.1.x has been removed.
  OpenSSL 3.0.0 or later is now required. LibreSSL, BoringSSL, and AWS-LC
  continue to be supported.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 4.1.
* **BACKWARDS INCOMPATIBLE:** Loading keys with unsupported algorithms or
  keys with unsupported explicit curve encodings now raises
  :class:`~cryptography.exceptions.UnsupportedAlgorithm` instead of
  ``ValueError``. This change affects
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_public_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_public_key`,
  and :meth:`~cryptography.x509.Certificate.public_key` when called on
  certificates with unsupported public key algorithms.
* **BACKWARDS INCOMPATIBLE:** When parsing elliptic curve private keys, we now
  reject keys that incorrectly encode a private key of the wrong length because
  such keys are impossible to process in a constant-time manner. We do not
  believe keys with this problem are in wide use, however we may revert this
  change based on the feedback we receive.
* Deprecated passing 64-bit (8-byte) and 128-bit (16-byte) keys to
  :class:`~cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES`. In a
  future release, only 192-bit (24-byte) keys will be accepted. Users should
  expand shorter keys themselves (e.g., for single DES: ``key + key + key``,
  for two-key: ``key + key[:8]``).
* Updated the minimum supported Rust version (MSRV) to 1.83.0, from 1.74.0.
* Support for ``x86_64`` macOS (including publishing wheels) is deprecated
  and will be removed in the next release. We will switch to publishing an
  ``arm64`` only wheel for macOS.
* Support for 32-bit Windows (including publishing wheels) is deprecated
  and will be removed in the next release. Users should move to a 64-bit
  Python installation.
* ``public_bytes`` and ``private_bytes`` methods on keys now raise
  ``TypeError`` (instead of ``ValueError``) if an invalid encoding is provided
  for the given ``format``.
* Moved :class:`~cryptography.hazmat.decrepit.ciphers.modes.CFB`,
  :class:`~cryptography.hazmat.decrepit.ciphers.modes.OFB`, and
  :class:`~cryptography.hazmat.decrepit.ciphers.modes.CFB8` into
  :doc:`/hazmat/decrepit/index` and deprecated them in the ``modes`` module.
  They will be removed from the ``modes`` module in 49.0.0.
* Moved :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Camellia`
  into  :doc:`/hazmat/decrepit/index` and deprecated it in the ``cipher`` module.
  It will be removed from the ``cipher`` module in 49.0.0.
</tr></table> 

... (truncated)

Commits

Updates cyclopts from 4.10.2 to 4.11.0

Release notes

Sourced from cyclopts's releases.

v4.11.0

Features

Bug Fixes

Misc Internal

New Contributors

Full Changelog: BrianPugh/cyclopts@v4.10.2...v4.11.0

Commits
  • 840dc08 Merge pull request #787 from wrongbad/main
  • a66b53a prefer is_annotated usage
  • 38c5525 Merge pull request #789 from BrianPugh/bugfix/785
  • 68f5f3a Merge pull request #791 from BrianPugh/feat/usage-name-doc-override
  • 44ecfba update missing mkdocs configuration for usage_name
  • b0938e1 Handle empty usage_name
  • 45505ec generic dataclass-like dictionary handling
  • 561f7c0 don't run codespell on test_help.py
  • d75d8bd Fix handling name collision in pydantic validation error handling.
  • 102a528 rearrange to prevent circular imports
  • Additional commits viewable in compare view

Updates coolname from 4.2.0 to 5.0.0

Changelog

Sourced from coolname's changelog.

5.0.0 (2026-04-22)

This major release has new features and significant internal changes, but it is compatible with 4.x in any normal usage as described in documentation, and you can upgrade from 4.x with minimal unit test coverage.

There are implementation changes that theoretically can break user code in undocumented scenarios. Even if it breaks, most likely, it will take a minute to fix.

What's new in the default generator:

  • Complete typing support, tested with mypy strict = True.

  • Added a few more words, and fixed one spelling mistake.

.. collapse:: Boring technical details

* :py:class:`RandomGenerator` and global methods like :py:func:`generate_slug` now live in the top-level
  ``coolname`` namespace.
  It won't affect your code if you've been importing directly from ``coolname`` as per documentation.

Basically, instead of this:

.. code-block:: python

&gt;&gt;&gt; from coolname import generate_slug, RandomGenerator
&gt;&gt;&gt; generate_slug
&lt;bound method RandomGenerator.generate_slug of &lt;coolname.impl.RandomGenerator object at 0x7a7cb248d6a0&gt;&gt;
&gt;&gt;&gt; RandomGenerator
&lt;class 'coolname.impl.RandomGenerator'&gt;

You will see this (notice no impl):

.. code-block:: python

&gt;&gt;&gt; generate_slug
&lt;bound method RandomGenerator.generate_slug of &lt;coolname.RandomGenerator object at 0x75038bacde80&gt;&gt;
&gt;&gt;&gt; RandomGenerator
&lt;class 'coolname.RandomGenerator'&gt;

In custom generators:

  • Default parameter value changed: ensure_unique=True. Custom generators can forget about it and still generate sequences without repeating words. Consider also using ensure_unique_prefix (disabled by default).

  • :doc:New parameters <parameters-table> for advanced words/phrases lists: strip_whitespace, allow_whitespace, separator.

  • What is considered a valid word? It's now controlled by word_regex parameter, \w+ by default.

... (truncated)

Commits
  • 7d45078 Merge branch 'master' into dev
  • 13541d9 docs: autodoc fix - build package first
  • 8015c5e Merge branch 'dev'
  • 659fad7 Merge branch 'master' into dev
  • 3a1d21b docs: HISTORY
  • a351596 feat: number
  • 9e04bab work in progress
  • 4f0b8f9 improved: PhraseSplitter clearer error messages + tests
  • e9cceba refactor: use pathlib.Path in coolname.loader; updated tests
  • e6484ed Bump pytest from 7.4.4 to 9.0.3 in /requirements
  • Additional commits viewable in compare view

Updates fastapi from 0.136.0 to 0.136.1

Release notes

Sourced from fastapi's releases.

0.136.1

Upgrades

Internal

Commits

Updates fsspec from 2026.3.0 to 2026.4.0

Commits

Updates packaging from 26.1 to 26.2

Release notes

Sourced from packaging's releases.

26.2

What's Changed

Fixes:

Documentation:

Internal:

New Contributors

Full Changelog: pypa/packaging@26.1...26.2

Changelog

Sourced from packaging's changelog.

26.2 - 2026-04-24


Fixes:
  • Fix incorrect sysconfig var name for pyemscripten in (:pull:1160)
  • Make Version, Specifier, SpecifierSet, Tag, Marker, and Requirement pickle-safe
    and backward-compatible with pickles created in 25.0-26.1 (including references to the removed
    packaging._structures module) (:pull:1163, :pull:1168, :pull:1170, :pull:1171)
  • Re-export ExceptionGroup in metadata for now in (:pull:1164)

Documentation:

  • Add errors section and fix missing details in (:pull:1159)
  • Document our property-based test suite in (:pull:1167)
  • Fix a DirectUrl typo in (:pull:1167)
  • Add example of is_unsatisfiable in (:pull:1166)

Internal:

  • Enable the auditor persona on zizmor in (:pull:1158)
  • Test new pickle guarantees in (:pull:1174)
  • Use new native ReadTheDocs uv integration in (:pull:1175)
Commits

Updates uvicorn from 0.45.0 to 0.46.0

Release notes

Sourced from uvicorn's releases.

Version 0.46.0

What's Changed

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Changelog

Sourced from uvicorn's changelog.

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)
Commits
  • b224045 Version 0.46.0 (#2918)
  • 7375b5b Use bytearray for incoming WebSocket message buffer in websockets-sansio (#...
  • d438fb1 Support ws_ping_interval and ws_ping_timeout in wsproto implementation ...
  • 3e6b964 Support ws_max_size in wsproto implementation (#2915)
  • See full diff in compare view

Updates uv from 0.11.7 to 0.11.8

Release notes

Sourced from uv's releases.

0.11.8

Release Notes

Released on 2026-04-27.

Enhancements

  • Add --python-downloads-json-url to python pin (#19092)
  • Fetch uv from Astral mirror during self-update (#18682)
  • Support pip uninstall -y (#19082)
  • Allow exclude-newer to be missing from the lockfile when exclude-newer-span is present (#19024)
  • Only show the version number in uv self version --short (#19019)
  • Silence warnings on empty SSL_CERT_DIR directory (#19018)
  • Use a sentinel timestamp for relative exclude-newer and exclude-newer-package values in lockfiles (#19022, #19101)

Configuration

  • Add UV_PYTHON_NO_REGISTRY (#19035)
  • Add an environment variable for UV_NO_PROJECT (#19052)
  • Expose UV_PYTHON_SEARCH_PATH for Python discovery PATH overrides (#19034)

Bug fixes

  • Add rust-toolchain.toml to uv-build sdist (#19131)
  • Ensure uv invocations of git do not inherit repository location environment variables (#19088)
  • Redact pre-signed upload URLs in verbose output (#19146)
  • Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
  • Support uv lock on a pyproject.toml that only contains dependency-groups (#19087)
  • Disable transparent Python upgrades in projects when a patch version is requested via .python-version (#19102)
  • Fix Python variant tagging in the Windows registry (#19012)
  • Ban external symlinks in .tar.zst wheels (#19144)

Distributions

  • Remove deprecated license classifiers from uv-build and add Python 3.14 classifier (#19130)

Documentation

  • Bump astral-sh/setup-uv version in docs (#19030)
  • Update PyTorch documentation for PyTorch 2.11 (#19095)

Install uv 0.11.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.11.8/uv-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from uv's changelog.

0.11.8

Released on 2026-04-27.

Enhancements

  • Add --python-downloads-json-url to python pin (#19092)
  • Fetch uv from Astral mirror during self-update (#18682)
  • Support pip uninstall -y (#19082)
  • Allow exclude-newer to be missing from the lockfile when exclude-newer-span is present (#19024)
  • Only show the version number in uv self version --short (#19019)
  • Silence warnings on empty SSL_CERT_DIR directory (#19018)
  • Use a sentinel timestamp for relative exclude-newer and exclude-newer-package values in lockfiles (#19022, #19101)

Configuration

  • Add UV_PYTHON_NO_REGISTRY (#19035)
  • Add an environment variable for UV_NO_PROJECT (#19052)
  • Expose UV_PYTHON_SEARCH_PATH for Python discovery PATH overrides (#19034)

Bug fixes

  • Add rust-toolchain.toml to uv-build sdist (#19131)
  • Ensure uv invocations of git do not inherit repository location environment variables (#19088)
  • Redact pre-signed upload URLs in verbose output (#19146)
  • Handle transitive URL dependencies in PEP 517 build requirements (#19076, #19086)
  • Support uv lock on a pyproject.toml that only contains dependency-groups (#19087)
  • Disable transparent Python upgrades in projects when a patch version is requested via .python-version (#19102)
  • Fix Python variant tagging in the Windows registry (#19012)
  • Ban external symlinks in .tar.zst wheels (#19144)

Distributions

  • Remove deprecated license classifiers from uv-build and add Python 3.14 classifier (#19130)

Documentation

  • Bump astral-sh/setup-uv version in docs (#19030)
  • Update PyTorch documentation for PyTorch 2.11 (#19095)
Commits

Updates prefect-azure from 0.4.8 to 0.4.9

Release notes

Sourced from prefect-azure's releases.

3.6.28 - I'm fixing a hole where sys.modules entries get in

🎵 And stops my mind from wandering 🎵

Enhancements ➕➕

Bug Fixes 🐞

Development & Tidiness 🧹

Documentation 📓

Full Changelog: 3.6.27...3.6.28

Commits
  • ee53164 Bump p...

    Description has been truncated

Bumps the uv-dependencies group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [apprise](https://github.com/caronc/apprise) | `1.9.9` | `1.10.0` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.7` | `47.0.0` |
| [cyclopts](https://github.com/BrianPugh/cyclopts) | `4.10.2` | `4.11.0` |
| [coolname](https://github.com/alexanderlukanin13/coolname) | `4.2.0` | `5.0.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.0` | `0.136.1` |
| [fsspec](https://github.com/fsspec/filesystem_spec) | `2026.3.0` | `2026.4.0` |
| [packaging](https://github.com/pypa/packaging) | `26.1` | `26.2` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.45.0` | `0.46.0` |
| [uv](https://github.com/astral-sh/uv) | `0.11.7` | `0.11.8` |
| [prefect-azure](https://github.com/PrefectHQ/prefect) | `0.4.8` | `0.4.9` |
| [prefect-redis](https://github.com/PrefectHQ/prefect) | `0.2.10` | `0.2.11` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.408` | `1.1.409` |
| [setuptools](https://github.com/pypa/setuptools) | `82.0.1` | `80.10.2` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.2.4` | `21.3.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.11` | `0.15.12` |
| [pytest-codspeed](https://github.com/CodSpeedHQ/pytest-codspeed) | `4.4.0` | `4.5.0` |


Updates `apprise` from 1.9.9 to 1.10.0
- [Release notes](https://github.com/caronc/apprise/releases)
- [Commits](caronc/apprise@v1.9.9...v1.10.0)

Updates `cryptography` from 46.0.7 to 47.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.7...47.0.0)

Updates `cyclopts` from 4.10.2 to 4.11.0
- [Release notes](https://github.com/BrianPugh/cyclopts/releases)
- [Commits](BrianPugh/cyclopts@v4.10.2...v4.11.0)

Updates `coolname` from 4.2.0 to 5.0.0
- [Changelog](https://github.com/alexanderlukanin13/coolname/blob/master/HISTORY.rst)
- [Commits](alexanderlukanin13/coolname@4.2.0...5.0.0)

Updates `fastapi` from 0.136.0 to 0.136.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.0...0.136.1)

Updates `fsspec` from 2026.3.0 to 2026.4.0
- [Commits](fsspec/filesystem_spec@2026.3.0...2026.4.0)

Updates `packaging` from 26.1 to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.1...26.2)

Updates `uvicorn` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.45.0...0.46.0)

Updates `uv` from 0.11.7 to 0.11.8
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.11.7...0.11.8)

Updates `prefect-azure` from 0.4.8 to 0.4.9
- [Release notes](https://github.com/PrefectHQ/prefect/releases)
- [Commits](prefect-azure-0.4.8...prefect-azure-0.4.9)

Updates `prefect-redis` from 0.2.10 to 0.2.11
- [Release notes](https://github.com/PrefectHQ/prefect/releases)
- [Commits](prefect-redis-0.2.10...prefect-redis-0.2.11)

Updates `pyright` from 1.1.408 to 1.1.409
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.408...v1.1.409)

Updates `setuptools` from 82.0.1 to 80.10.2
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v80.10.2)

Updates `virtualenv` from 21.2.4 to 21.3.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.2.4...21.3.0)

Updates `ruff` from 0.15.11 to 0.15.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.11...0.15.12)

Updates `pytest-codspeed` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/CodSpeedHQ/pytest-codspeed/releases)
- [Changelog](https://github.com/CodSpeedHQ/pytest-codspeed/blob/master/CHANGELOG.md)
- [Commits](CodSpeedHQ/pytest-codspeed@v4.4.0...v4.5.0)

---
updated-dependencies:
- dependency-name: apprise
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: cryptography
  dependency-version: 47.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-dependencies
- dependency-name: cyclopts
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: coolname
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: uv-dependencies
- dependency-name: fastapi
  dependency-version: 0.136.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: fsspec
  dependency-version: 2026.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: uvicorn
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: uv
  dependency-version: 0.11.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: prefect-azure
  dependency-version: 0.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: prefect-redis
  dependency-version: 0.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: pyright
  dependency-version: 1.1.409
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: setuptools
  dependency-version: 80.10.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: uv-dependencies
- dependency-name: virtualenv
  dependency-version: 21.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-dependencies
- dependency-name: pytest-codspeed
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the development Tech debt, refactors, CI, tests, and other related work. label Apr 30, 2026
@codspeed-hq
Copy link
Copy Markdown

codspeed-hq Bot commented Apr 30, 2026

Merging this PR will not alter performance

✅ 2 untouched benchmarks


Comparing dependabot/uv/uv-dependencies-9cdb34c154 (031c62b) with main (10cedba)

Open in CodSpeed

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 1, 2026
@dependabot dependabot Bot deleted the dependabot/uv/uv-dependencies-9cdb34c154 branch May 1, 2026 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

development Tech debt, refactors, CI, tests, and other related work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants