Skip to content

Bump the uv-minor-and-patch group across 1 directory with 17 updates - #148

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/service/develop/uv-minor-and-patch-a52865d320
Open

Bump the uv-minor-and-patch group across 1 directory with 17 updates#148
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/uv/service/develop/uv-minor-and-patch-a52865d320

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-minor-and-patch group with 17 updates in the /service directory:

Package From To
alembic 1.18.4 1.19.1
fastapi 0.136.3 0.141.1
genson 1.3.0 1.4.0
json-repair 0.60.1 0.63.2
pandas 3.0.3 3.0.5
tiktoken 0.13.0 0.14.0
tqdm 4.68.2 4.70.0
uvicorn 0.49.0 0.52.3
ruff 0.15.17 0.16.3
ty 0.0.49 0.0.73
pytest 9.0.3 9.1.1
charset-normalizer 3.5.0 3.5.1
idna 3.18 3.19
lxml 6.1.1 6.1.2
pydantic-core 2.46.4 2.48.0
httpcore2 2.10.0 2.12.0
httpx2 2.10.0 2.12.0

Updates alembic from 1.18.4 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

  • [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

    References: #1842

1.19.0

Released: August 4, 2026

changed

  • [changed] [installation] Environmental updates:

    -   Trove classifiers now include Python 3.15 which is now part of CI
    integration

      

    • 

      Python 3.14 is also added to trove classifiers which had been previously
omitted
      

      • 

    • 

      Implemented PEP 604 style unions in type annotations

feature

  • [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

    References: #508

bug

... (truncated)

Commits

Updates fastapi from 0.136.3 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates genson from 1.3.0 to 1.4.0

Changelog

Sourced from genson's changelog.

1.4.0

  • add enum support, activated per node by seed schemas (PR #82 — thanks @​tokarenko; closes #46, #81)
  • Performance: strategy deduplication when defining custom SchemaBuilder classes is now O(n) instead of O(n²) (PR #91 — thanks @​Bitshifter-9; fixes #90)
  • include the complete, runnable test suite in the source distribution (PR #94 — thanks @​mgorny)
  • Bugfix: fix "noting to do" typo in the CLI error message and remove dead code (PR #93 — thanks @​est)
  • Docs: document the required-dropping behavior and the builder-merge gotcha (#78, #25); explain why same-type inputs merge rather than producing anyOf; add a NoRequiredObject example for suppressing required (#37, #60)
  • declare python_requires >= 3.10, matching the tested Python versions

1.3.1

  • Bugfix: include the genson.schema subpackage in the package build; installing v1.3.0 from a wheel failed with ModuleNotFoundError (fixes #80, #92)
  • Bugfix: call super().add_object() in the Number strategy so subclass hooks run (PR #79)
  • add Python 3.13 and 3.14 to the test matrix and classifiers; drop EOL Python 3.7–3.9 (the package itself is unchanged and older Pythons may still work, but they are no longer tested)
  • migrate CI from Travis to GitHub Actions; releases are now published via PyPI trusted publishing
  • Tests: CLI integration tests use sys.executable (PR #84) and no longer depend on the test runner having an interactive stdin
Commits
  • f305b73 Release 1.4.0
  • 1e57625 Tweak the merge gotcha description and frame it as a rule tradeoff example.
  • d466b37 Merge branch 'prep-1.4.0': docs integration and 1.4.0rc1 release prep
  • 8a4877c Prepare release 1.4.0 (rc1)
  • 1782226 Fold merge-behavior and no-required docs into existing sections
  • f6e300c Merge pull request #94 from mgorny/fix-sdist
  • d63edf3 Merge branch 'fix/pr-91': O(n) strategy dedup from PR #91
  • acb6921 Merge master (required-dropping docs) into fix/pr-91
  • f3aac34 Keep the empty-tuple padding; take only the dedup fix from PR #91
  • 74a87e8 Merge branch 'docs/required-dropping': document required-dropping behavior (#78)
  • Additional commits viewable in compare view

Updates json-repair from 0.60.1 to 0.63.2

Release notes

Sourced from json-repair's releases.

Release 0.63.2

Fixed

  • Fix #212, the heuristic to detect array boundaries nested inside objects needed some refinement. Now it is a bit smarter.

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.63.1

Fixed

  • Fix #211, Python-style tuple support didn't mix well with the new feature release in 0.63.0

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.63.0

Added

  • Fix #210, some LLMs get a bit too python-y and use None instead of Null. Support this case but only when that's the only malformed exception

Fixed

  • { "key": TrueBlue } would be erroneously repaired as { "key": True }, this is fixed now

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.62.0

Added

... (truncated)

Commits
  • 6733278 Fix #212, the heuristic to detect array boundaries nested inside objects need...
  • 7ab1eba Fix #211, Python-style tuple support didn't mix well with the new feature rel...
  • 1e95cbd Fix #210, support None as Null value, improve detection of boolean values wit...
  • dab9d67 Fix #209 salvage schema-matching JSON fragments
  • 600ede6 Fix #207, respect multiple backslashes in strings when they have no additiona...
  • ae58228 trim AGENTS.md
  • 32a3a69 use the newly introduced fast-path for garbage json delimeter also when skip_...
  • 898f8e6 Fix #206, tidy up parsing of regex inside objects values
  • 89815cf Fix #205 preserve root schema refs in union validation
  • c6b21d4 Add a smaller fix for potential regressions found in #200
  • Additional commits viewable in compare view

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates tiktoken from 0.13.0 to 0.14.0

Changelog

Sourced from tiktoken's changelog.

[v0.14.0]

  • Build wheels for Python 3.15
  • Support looking up more GPT-5 series models
  • Upgrade dependencies
Commits

Updates tqdm from 4.68.2 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

  • contrib.concurrent: major improvements
    • support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)
    • fix total based on shortest iterable length (#1473)
    • use default max_workers (#1543 <- #1530, #1518)
    • support timeout, buffersize (#1576)
    • improve ETA (#1708 <- #1161)
    • update as_completed (#1709 <- #1565)
    • add tqdm.concurrent.intepreter_map (#1777)
  • asyncio: support iterables with only __aiter__ (#1714 <- #1686)
  • support reset(float("inf")) (#1783 <- #1781, #651)
  • framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

tqdm v4.69.0 stable

  • add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
  • misc minor framework updates
    • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

tqdm v4.68.3 stable

  • utils: delay os.get_terminal_size (#1763 <- #1760)
  • autonotebook: support QtConsole, Spyder, JupyterLite (#1763, #1628, #1559 <- #1283, #1098, #512)
  • minor docs updates
    • fix typo (#1762)
    • use git-fame
  • misc minor framework updates
    • fix & update CI build
    • pre-commit: add docs & metadata generation
    • move tox.ini -> pyproject.toml, move tox-gh-actions -> tox-gh
    • add Python 3.14, drop 3.7 support
Commits
  • 96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
  • c27393e misc tidy
  • 061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
  • 9fc160b Update how we check for interpreter_map support in the tests
  • b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
  • 16d5486 Add support for nested progress bars
  • 9f5890f Add initial implementation for interpreter_map
  • 321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
  • 4664b57 minor tidy
  • 426a098 Treat inf total as unknown in reset() too
  • Additional commits viewable in compare view

Updates uvicorn from 0.49.0 to 0.52.3

Release notes

Sourced from uvicorn's releases.

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

Full Changelog: Kludex/uvicorn@0.50.2...0.51.0

Version 0.50.2

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

0.50.2 (July 6, 2026)

Fixed

  • Require websockets>=13.0, which the default websockets-sansio implementation needs (#3021)

... (truncated)

Commits

Updates ruff from 0.15.17 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates ty from 0.0.49 to 0.0.73

Release notes

Sourced from ty's releases.

0.0.73

Release Notes

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.73

Released on 2026-08-18.

LSP server

  • Do not prefer unsafe fixes in the language server (#27822)
  • Fix signature help in trailing whitespace (#27784)

Library support

  • Preserve variadic generics in functools.partial (#27774)

Diagnostics

  • Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
  • Disambiguate same-named types in several diagnostics (#27814)
  • Show error spans for errors originating in script metadata (#26693)

Core type checking

  • Avoid bypassing solver during literal promotion (#27763)
  • Expand nested union aliases when finding a TypedDict or callable (#27740)
  • Implement intersection meta-type projection (#27660)
  • Infer generic protocols from class objects (#27812)
  • Model exception-suppressing context managers (#27219)
  • Preserve TypeAliasType runtime origin (#27813)
  • Preserve class objects in lazy protocol checks (#27815)
  • Preserve declared types in exception handlers (#27817)
  • Preserve explicit globals after conditional rebinding (#27786)
  • Preserve property subclass types and accessors (#27833)
  • Preserve required stub fields in generated constructors (#27765)
  • Preserve static upper bounds of gradual solutions (#27664)
  • Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
  • Separate generic constraint accumulation from legacy projection (#27743)
  • Simplify generic protocol inference (#27819)
  • Specialize inherited members of unspecialized generic classes (#27658)
  • Specialize type variables determined by bound receivers (#27732)
  • Support unpacking tuple type aliases (#27825)
  • Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

  • Cache py.typed contents (#27805)
  • Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

@dependabot
Bump the uv-minor-and-patch group across 1 directory with 17 updates
9ad9141 
Bumps the uv-minor-and-patch group with 17 updates in the /service directory:

| Package | From | To |
| --- | --- | --- |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.18.4` | `1.19.1` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.3` | `0.141.1` |
| [genson](https://github.com/wolverdude/genson) | `1.3.0` | `1.4.0` |
| [json-repair](https://github.com/mangiucugna/json_repair) | `0.60.1` | `0.63.2` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.3` | `3.0.5` |
| [tiktoken](https://github.com/openai/tiktoken) | `0.13.0` | `0.14.0` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.68.2` | `4.70.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.49.0` | `0.52.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.16.3` |
| [ty](https://github.com/astral-sh/ty) | `0.0.49` | `0.0.73` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.0` | `3.5.1` |
| [idna](https://github.com/kjd/idna) | `3.18` | `3.19` |
| [lxml](https://github.com/lxml/lxml) | `6.1.1` | `6.1.2` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.48.0` |
| [httpcore2](https://github.com/pydantic/httpx2) | `2.10.0` | `2.12.0` |
| [httpx2](https://github.com/pydantic/httpx2) | `2.10.0` | `2.12.0` |



Updates `alembic` from 1.18.4 to 1.19.1
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `fastapi` from 0.136.3 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.141.1)

Updates `genson` from 1.3.0 to 1.4.0
- [Changelog](https://github.com/wolverdude/GenSON/blob/master/HISTORY.rst)
- [Commits](wolverdude/GenSON@v1.3.0...v1.4.0)

Updates `json-repair` from 0.60.1 to 0.63.2
- [Release notes](https://github.com/mangiucugna/json_repair/releases)
- [Commits](mangiucugna/json_repair@v0.60.1...v0.63.2)

Updates `pandas` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

Updates `tiktoken` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.13.0...0.14.0)

Updates `tqdm` from 4.68.2 to 4.70.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.68.2...v4.70.0)

Updates `uvicorn` from 0.49.0 to 0.52.3
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.49.0...0.52.3)

Updates `ruff` from 0.15.17 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.17...0.16.3)

Updates `ty` from 0.0.49 to 0.0.73
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.49...0.0.73)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `charset-normalizer` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.0...3.5.1)

Updates `idna` from 3.18 to 3.19
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.18...v3.19)

Updates `lxml` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `pydantic-core` from 2.46.4 to 2.48.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.4...core-v2.48.0)

Updates `httpcore2` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Commits](pydantic/httpx2@v2.10.0...v2.12.0)

Updates `httpx2` from 2.10.0 to 2.12.0
- [Release notes](https://github.com/pydantic/httpx2/releases)
- [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md)
- [Commits](pydantic/httpx2@v2.10.0...v2.12.0)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: genson
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: json-repair
  dependency-version: 0.63.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-and-patch
- dependency-name: tiktoken
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: tqdm
  dependency-version: 4.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.52.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.73
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: uv-minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: charset-normalizer
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-and-patch
- dependency-name: idna
  dependency-version: '3.19'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-minor-and-patch
- dependency-name: pydantic-core
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: httpcore2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
- dependency-name: httpx2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: uv-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants