[dependabot]

Updates the requirements on psycopg, pgvector, sentence-transformers, mcp and pydantic to permit the latest version.
Updates psycopg to 3.3.4

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.5 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

• Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).

Current release

Psycopg 3.3.4 ^^^^^^^^^^^^^

• Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:[#1280](https://github.com/psycopg/psycopg/issues/1280)).
• Fix client-side adaptation of enums whose name require quotes (:ticket:[#1298](https://github.com/psycopg/psycopg/issues/1298)).
• Consistently populate ~Cursor.statusmessage after ~Cursor.executemany() (:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).

Psycopg 3.3.3 ^^^^^^^^^^^^^

• Retain Error.pgconn when raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).
• Return a proper error when server sends ErrorResponse for a Sync after a Parse (:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).

Psycopg 3.3.2 ^^^^^^^^^^^^^

Fix race condition in adapters at startup (:ticket:[#1230](https://github.com/psycopg/psycopg/issues/1230)).

Psycopg 3.3.1 ^^^^^^^^^^^^^

... (truncated)

Commits

• 83f1103 chore: bump psycopg_pool package version to 3.3.1
• 1828770 chore: bump psycopg package version to 3.3.4
• 8be14bb Merge pull request #1301 from oliverhaas/fix/sync-pool-open-race
• aee0bf2 fix(pool): fix race in the construction of the sync ConnectionPool lock
• bc4d303 chore(deps): bump the actions group across 1 directory with 4 updates
• 785379f fix: retain statusmessage after executemany with returning=False
• 8882a73 perf: do less if X in Y: return Y[X] for cache-like patterns
• 2f78539 Merge pull request #1299 from dvarrazzo/fix-camel-enum
• 37ef1dc test: skip test on crdb depending on precise regtype behaviour
• 7f2f1d1 fix: fix client-side representation of enums requiring quotes
• Additional commits viewable in compare view

Updates pgvector to 0.4.2

Changelog

Sourced from pgvector's changelog.

0.4.2 (2025-12-04)

• Added support for Django 6
• Added support for str objects for bit type with SQLAlchemy

0.4.1 (2025-04-26)

• Fixed SparseVector constructor for SciPy sparse matrices

0.4.0 (2025-03-15)

• Added top-level pgvector package
• Added support for pg8000
• Added support for bytes to Bit constructor
• Changed globally option to default to False for Psycopg 2
• Changed arrays option to default to True for Psycopg 2
• Fixed equality for Vector, HalfVector, Bit, and SparseVector classes
• Fixed indices and values methods of SparseVector returning tuple instead of list in some cases
• Dropped support for Python < 3.9

0.3.6 (2024-10-26)

• Added arrays option for Psycopg 2

0.3.5 (2024-10-05)

• Added avg function with type casting to SQLAlchemy
• Added globally option for Psycopg 2

0.3.4 (2024-09-26)

• Added schema option for asyncpg

0.3.3 (2024-09-09)

• Improved support for cursor factories with Psycopg 2

0.3.2 (2024-07-17)

• Fixed error with asyncpg and pgvector < 0.7

0.3.1 (2024-07-10)

• Fixed error parsing zero sparse vectors
• Fixed error with Psycopg 2 and pgvector < 0.7
• Fixed error message when vector type not found with Psycopg 3

0.3.0 (2024-06-25)

• Added support for halfvec, bit, and sparsevec types to Django

... (truncated)

Commits

• 2968f25 Version bump to 0.4.2 [skip ci]
• 674f5ba Updated checkout action [skip ci]
• e2986da Added support for Django 6
• e211ba4 Test with Python 3.14 on CI
• 1a72b75 Updated pgvector on CI
• c820a53 Simplified examples [skip ci]
• caf1a2e Added docs for binary quantization with SQLAlchemy [skip ci]
• dc9a8f9 Added test for binary quantization with re-ranking
• 33dee60 Added support for str objects for bit type with SQLAlchemy - #137
• ee3e71c Updated format for license identifier
• Additional commits viewable in compare view

Updates sentence-transformers to 5.5.1

Release notes

Sourced from sentence-transformers's releases.

v5.5.1 - Small Multimodal patch

This patch release fixes a small quirk with multimodal inference when using single-key multimodal inputs like model.encode({"image": ...}).

Install this version with

# Training + Inference
pip install sentence-transformers[train]==5.5.1
Inference only, use one of:
pip install sentence-transformers==5.5.1
pip install sentence-transformers[onnx-gpu]==5.5.1
pip install sentence-transformers[onnx]==5.5.1
pip install sentence-transformers[openvino]==5.5.1
Multimodal dependencies (optional):
pip install sentence-transformers[image]==5.5.1
pip install sentence-transformers[audio]==5.5.1
pip install sentence-transformers[video]==5.5.1
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==5.5.1

Bug fixed

Previously, inference like model.encode({"image": ...}) or model.encode([{"image": ...}, ...]) would be inferred as the ("image",) modality, which differed from the inferred modality of "image" for just model.encode(my_image) or model.encode([my_image, my_image_2, ...]).

This results in confusing errors if the model doesn't have a modality_config mapping for ("image",) in addition to "image", so now a single-key multimodal dict is collapsed to the bare modality (just "image" in this example).

This affected this code:

from sentence_transformers import SentenceTransformer
model = SentenceTransformer('BAAI/BGE-VL-base', trust_remote_code=True)
embedding = model.encode({"image": "https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/blog/ettin-reranker/mteb_ndcg10_all-MiniLM-L6-v2.png"})
print(embedding.shape)

Which previously failed as the model only implements a path for "text", "image", and ("image", "text").

All Changes

• [fix] Collapse single-key multimodal dicts to bare modality by @​tomaarsen in #3779

Full Changelog: huggingface/sentence-transformers@v5.5.0...v5.5.1

Commits

• ce3ec6d Release v5.5.1
• 610a7c5 [fix] Collapse single-key multimodal dicts to bare modality (#3779)
• f9f3269 Merge branch 'main' into v5.5-release
• 02dc21d Update index tip for v5.5.0 (#3774)
• 833828b Release v5.5.0
• 98ac358 [docs] Load models in float32 in the training examples & docs (#3773)
• d8ee041 [docs] Use modality-neutral terms (input, document) in loss docs & docstrin...
• 4c6850e [examples] Avoid LoggingHandler, silence httpx in examples (#3771)
• 1418823 docs: fix grammar in parallel-sentence-mining README (#3769)
• 22a383d [docs] Use direct class imports in examples & docs (drop `losses.MSELoss(.....
• Additional commits viewable in compare view

Updates mcp to 1.27.2

Release notes

Sourced from mcp's releases.

v1.27.2

What's Changed

• [v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages artifact by @​maxisbey in modelcontextprotocol/python-sdk#2635
• [v1.x] Add subject and claims to AccessToken by @​maxisbey in modelcontextprotocol/python-sdk#2690
• [v1.x] Bind transport sessions to the authenticated principal by @​maxisbey in modelcontextprotocol/python-sdk#2719
• [v1.x] Scope experimental tasks to the session that created them by @​maxisbey in modelcontextprotocol/python-sdk#2720

Full Changelog: modelcontextprotocol/python-sdk@v1.27.1...v1.27.2

Commits

• 6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
• ce267b6 [v1.x] Bind transport sessions to the authenticated principal (#2719)
• 1abcca2 [v1.x] Add subject and claims to AccessToken (#2690)
• 9773a3f [v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages artifact (...
• 77431eb [v1.x] refactor: import SSEError from httpx_sse public API (#2561)
• 2034cae [v1.x] build: restrict httpx to <1.0.0 (#2559)
• 73d458b [v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthCli...
• 8d4c2f5 [v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2...
• 6524782 [v1.x] fix: handle ClosedResourceError when transport closes mid-request (#2334)
• 2e9897e [v1.x] fix: handle non-UTF-8 bytes in stdio server stdin (#2303)
• Additional commits viewable in compare view

Updates pydantic to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #13129

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

• Handle AttributeError subclasses with from_attributes by @​Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

• Fix ValidationInfo.data missing with model_validate_json() by @​davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits

• cf67d4b Fix linting
• f0d8a21 Prepare release v2.13.4
• 5e3fe1d Check for pydantic tag pattern in CI
• 7f9edcc Document tagging conventions
• b46a0c9 Adapt pydantic-core linker flags on macOS
• 50629c8 Update to PyPy 7.3.22
• 8522ebb Preserve RootModel core metadata
• a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
• 909259a Remove Logfire example in documentation
• 2c4174c Bump libc from 0.2.155 to 0.2.185
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.