Skip to content

chore(deps)(deps): bump the python-runtime group with 4 updates#207

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-runtime-a9c56b66a3
Open

chore(deps)(deps): bump the python-runtime group with 4 updates#207
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-runtime-a9c56b66a3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-runtime group with 4 updates: platformdirs, litellm, oracledb and fastapi.

Updates platformdirs from 4.10.0 to 4.10.1

Release notes

Sourced from platformdirs's releases.

4.10.1

What's Changed

Full Changelog: tox-dev/platformdirs@4.10.0...4.10.1

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.10.1 (2026-07-18)

  • Stop leaking memory on repeated Windows folder lookups. get_win_folder_via_ctypes defined a fresh ctypes structure on every call, and each one registered a pointer type that was never released; the resolver is now built once and reused. :pr:507

4.10.0 (2026-05-28)

  • Add :func:~platformdirs.user_publicshare_dir, :func:~platformdirs.user_templates_dir, :func:~platformdirs.user_fonts_dir, and :func:~platformdirs.user_preference_dir :pr:491
  • Add :func:~platformdirs.user_projects_dir backed by $XDG_PROJECTS_DIR :pr:490
  • Return only the first path from :func:~platformdirs.site_config_path on macOS when multipath is set :pr:488 - by :user:lphuc2250gma

4.9.6 (2026-04-09)

  • Fix macOS XDG variables leaking across :func:~platformdirs.user_config_dir, :func:~platformdirs.user_data_dir, and :func:~platformdirs.user_state_dir when only some are set :pr:473 - by :user:Goddesen
  • Avoid duplicate site directories in Unix :meth:~platformdirs.PlatformDirs.iter_config_dirs and :meth:~platformdirs.PlatformDirs.iter_data_dirs when use_site_for_root is active :pr:469 - by :user:viccie30

4.9.4 (2026-03-05)

  • Respect XDG_CONFIG_HOME when reading the user-dirs configuration :pr:453 - by :user:bysiber
  • Create the directory in Android :func:~platformdirs.user_log_dir and :func:~platformdirs.user_runtime_dir when ensure_exists is set :pr:452 - by :user:bysiber

4.9.2 (2026-02-16)

  • No user-facing changes

... (truncated)

Commits
  • 2e74013 Release 4.10.1
  • 3076722 📝 docs(changelog): rebuild against release history (#510)
  • 42751ce 🚀 ci(release): towncrier changelog + publish on tag push (#509)
  • d2e5756 fix(windows): stop leaking ctypes pointer types on repeated calls (#507)
  • 4f52c4f build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 in the all group (#506)
  • f68e56f build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in the all group (#504)
  • 806560b build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in the all group (#502)
  • 795aac4 [pre-commit.ci] pre-commit autoupdate (#503)
  • 99977a9 [pre-commit.ci] pre-commit autoupdate (#500)
  • 4bd7bb3 💰 Surface GitHub Sponsors + thanks.dev
  • Additional commits viewable in compare view

Updates litellm from 1.92.0 to 1.93.0

Release notes

Sourced from litellm's releases.

v1.93.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.93.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits
  • 052b5a2 Merge pull request #33904 from BerriAI/litellm_models_listing_malformed_cost_...
  • db190ba fix(proxy): treat malformed cost-map token limits as absent on /v1/models
  • 3510494 chore(release): backport #33853 and #33864 onto patch-1.93.0rc2 to complete t...
  • 2530e32 chore(release): backport 11 staging PRs onto patch-1.93.0rc2 for the 1.93.0 s...
  • b5cd431 Merge pull request #33499 from BerriAI/litellm_backport_1930rc2
  • fba058b Merge pull request #32956 from BerriAI/litellm_fix_lit3859_wif_bridge
  • 10d5804 Merge pull request #32884 from BerriAI/litellm_internal_staging
  • d37ba79 refactor(ui): convert projects page chart to shadcn/recharts (#32722)
  • 4baeb28 chore: update Next.js build artifacts (2026-07-11 23:35 UTC, node v20.20.2) (...
  • ca877c7 refactor(ui): colocate the usage view, keeping the shared usage components (#...
  • Additional commits viewable in compare view

Updates oracledb from 4.0.1 to 4.0.2

Release notes

Sourced from oracledb's releases.

v4.0.2

python-oracledb 4.0.2 is now released. This release addresses a number of issues. See the full release notes for all of the details.

Commits
  • 807750b Preparing to release python-oracledb 4.0.2.
  • 1c6683b Fixed bug causing an exception to be raised when calling
  • 98777f4 Correct test.
  • 274db39 Tweaked release note.
  • c542377 Fixed bug where TIMESTAMP WITH TIME ZONE column data was converted incorrectly
  • b917422 Fixed bug causing precision and scale to be incorrect for timestamps and
  • 65badc7 Fixed bug when fetching NCHAR or NVARCHAR2 columns (#595).
  • afc5445 Fixed segfault when calling Connection.fetch_df_all() and
  • c08edf6 Fixed bug where callers waiting on ConnectionPool.acquire() would wait
  • 9c56a49 Fixed bug where ConnectionPool.wait_timeout returned the value in seconds
  • Additional commits viewable in compare view

Updates fastapi from 0.139.0 to 0.139.2

Release notes

Sourced from fastapi's releases.

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.

0.139.1

Fixes

  • 🐛 Fix frontend fallback support for doted paths like /users/john.doe. PR #16011 by @​tiangolo.

Docs

  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #15995 by @​YuriiMotov.

Translations

Internal

Commits
  • 866b7a3 🔖 Release version 0.139.2 (#16014)
  • 7b3effe 📝 Update release notes
  • 7fe315c 🐛 Refactor router route building to make it thread-safe, mainly relevant for ...
  • c48e67b 🔖 Release version 0.139.1 (#16012)
  • 2acc4fb 📝 Update release notes
  • eb75fd0 🐛 Fix frontend fallback support for doted paths like /users/john.doe (#16011)
  • 9b8410b 📝 Update release notes
  • e24d44c 📝 Fix topic repository list not being displayed and skip_users not being ap...
  • 93b78f8 📝 Update release notes
  • b959b44 📝 Update release notes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps)(deps): bump the python-runtime group with 4 updates
e6e0fe8 
Bumps the python-runtime group with 4 updates: [platformdirs](https://github.com/tox-dev/platformdirs), [litellm](https://github.com/BerriAI/litellm), [oracledb](https://github.com/oracle/python-oracledb) and [fastapi](https://github.com/fastapi/fastapi).


Updates `platformdirs` from 4.10.0 to 4.10.1
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.0...4.10.1)

Updates `litellm` from 1.92.0 to 1.93.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.92.0...v1.93.0)

Updates `oracledb` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/oracle/python-oracledb/releases)
- [Commits](oracle/python-oracledb@v4.0.1...v4.0.2)

Updates `fastapi` from 0.139.0 to 0.139.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.0...0.139.2)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-version: 4.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: litellm
  dependency-version: 1.93.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: oracledb
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: fastapi
  dependency-version: 0.139.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 20, 2026
@vercel

vercel Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
evidentia Ready Ready Preview, Comment Jul 20, 2026 10:20am

Request Review

@codspeed-hq

codspeed-hq Bot commented Jul 20, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 6 untouched benchmarks

Comparing dependabot/uv/python-runtime-a9c56b66a3 (e6e0fe8) with main (73098f7)

Open in CodSpeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants