chore(deps): bump the python-dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #968 · baakhoff/epicurus

dependabot · 2026-09-21T06:42:55Z

Bumps the python-dependencies group with 15 updates in the / directory:

Package	From	To
ruff	`0.16.1`	`0.16.8`
mypy	`2.3.0`	`2.3.1`
pre-commit	`4.6.1`	`4.6.2`
pydantic	`2.13.4`	`2.13.5`
pydantic-settings	`2.14.2`	`2.15.0`
prometheus-client	`0.25.0`	`0.26.0`
nats-py	`2.15.0`	`2.16.0`
opentelemetry-api	`1.43.0`	`1.44.0`
opentelemetry-sdk	`1.43.0`	`1.44.0`
opentelemetry-exporter-otlp-proto-http	`1.43.0`	`1.44.0`
opentelemetry-instrumentation-fastapi	`0.64b0`	`0.65b0`
sqlalchemy	`2.0.51`	`2.0.54`
httpx2	`2.9.1`	`2.13.0`
qdrant-client	`1.18.0`	`1.19.1`
yt-dlp	`2026.7.4`	`2026.8.19`

Updates ruff from 0.16.1 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

[pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)

[pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

Add support for __lazy_modules__ (#28459)

Recognize PEP-728 TypedDict class keywords (#28533)

Recognize quoted types in typing.TypeForm (#28507)

Support conditional assignment to __lazy_modules__ (#28491)

[flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)

[pyupgrade] Make the fix for UP040 always unsafe (#28526)

[pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)

[ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)

[ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

[flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

@VedantMadane

@alzeph

@charliermarsh

@fredrikblau

@ntBre

@zsol

@Aniket-a14

@r-b-1

Install ruff 0.16.8

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

Visit functional TypedDict keyword arguments correctly (#28584)

[flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)

[flake8-simplify] Preserve operand order in SIM109 fix (#27824)

[pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)

[pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

Add support for __lazy_modules__ (#28459)

Recognize PEP-728 TypedDict class keywords (#28533)

Recognize quoted types in typing.TypeForm (#28507)

Support conditional assignment to __lazy_modules__ (#28491)

[flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)

[pyupgrade] Make the fix for UP040 always unsafe (#28526)

[pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)

[ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)

[ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

[flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

@VedantMadane

@alzeph

@charliermarsh

@fredrikblau

@ntBre

@zsol

@Aniket-a14

@r-b-1

0.16.7

Released on 2026-09-10.

Preview features

[ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits

62914c4 Bump version to 0.16.8 (#28648)
c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
94efeaa [ty] Compact reachable binding and declaration histories (#28349)
50020fb [ty] Avoid storing constraint nodes twice (#28375)
446bb68 [ty] Compare bound-method receivers before signatures (#28384)
304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
31131db [ty] Support type[A & B] (#27124)
Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)

Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)

Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)

Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

Agriya Khetarpal

Ethan Sarp

Ivan Levkivskyi

Jingchen Ye

Jukka Lehtosalo

Piotr Sawicki

Shantanu

Tom Bannink

Viktor Szépe

ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:
HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

d642c44 Bump version to 2.3.1
a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
6dfa06d Fix crash when unpacking return value from overload (#21830)
a385746 Bump version to 2.3.1+dev
See full diff in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.

Regressed in 4.6.1.

#3737 issue by @mheiges.

#3743 PR by @asottile.

Commits

9767b6c v4.6.2
42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
3056619 fix language: node for hooks with build scripts and npm 11.x
See full diff in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Commits

001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
558379f Bump twine to v7.0.0
2cfd5d3 Do not check for docs build
a735bee Fix more Clippy lints
7eed4a1 Fix Clippy 0.1.95 warnings
b353bbb Prepare release v2.13.5
63d2ccc Count validated model fields once in smart unions
a53ec2e Speed up PyPy CI tests
d65e0f9 Workaround circular import error in Mypy
47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
Additional commits viewable in compare view

Updates pydantic-settings from 2.14.2 to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.

Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.

Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.

PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.

toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.

Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.

GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.

Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.

Fix AliasPath on nested model fields not JSON-decoding env values (#898).

Fix case-insensitive matching for optional nested models (#905).

Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.

Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).

Fix Secret subclasses crashing when loaded from the environment (#920).

Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).

An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).

NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).

GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.

AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).

Recommend an async settings loading pattern (#908).

Clarify behavior when an unprefixed value is present in a dotenv file (#895).

Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

Update documentation link for Pydantic settings by @hramezani in pydantic/pydantic-settings#863

Bump the python-packages group with 4 updates by @dependabot[bot] in pydantic/pydantic-settings#865

docs: clarify environment variable helper descriptions by @vip892766gma in pydantic/pydantic-settings#867

Bump the python-packages group with 4 updates by @dependabot[bot] in pydantic/pydantic-settings#870

Bump the python-packages group with 4 updates by @dependabot[bot] in pydantic/pydantic-settings#875

Skip list_secrets call when case_sensitive=True by @ecerulm in pydantic/pydantic-settings#862

GoogleSecretManagerSettingsSource: read project_id from previous sources by @ecerulm in pydantic/pydantic-settings#878

... (truncated)

Commits

f725ca1 Prepare release 2.15.0 (#930)
28f35c2 Bump the python-packages group with 4 updates (#929)
9056db0 test: move function-local imports to the top of test modules (#927)
f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
798dcea Bump the python-packages group with 4 updates (#924)
a190041 Bump the github-actions group with 4 updates (#925)
5d93332 Bump the python-packages group with 4 updates (#921)
d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
2256a4e Bump the python-packages group with 3 updates (#915)
Additional commits viewable in compare view

Updates prometheus-client from 0.25.0 to 0.26.0

Release notes

Sourced from prometheus-client's releases.

v0.26.0

What's Changed

Expose measured duration on Timer context manager by @vokracko in prometheus/client_python#1166

Use specific exception for duplicate timeseries by @kajinamit in prometheus/client_python#1074

Make clear() a no-op for label-less metrics (fixes #707) by @ompathakbaap in prometheus/client_python#1184

Use object instead of Any for labels() parameters by @gregoiredx in prometheus/client_python#1186

Add TLS version parameters for start_wsgi_server by @vyzigold in prometheus/client_python#1178

Validate Enum arguments before registering the collector by @sean-kim05 in prometheus/client_python#1189

Do not emit a leading zero in floatToGoString exponents >= 10 by @sean-kim05 in prometheus/client_python#1190

fix: make test suite pass on Windows and Python 3.12+ by @MelvinjoseC in prometheus/client_python#1185

Parse the native histogram sum as a float by @sean-kim05 in prometheus/client_python#1192

Remove nameless collectors from the registry on unregister by @sean-kim05 in prometheus/client_python#1191

Fix operator precedence allowing exemplars on any metric type by @sean-kim05 in prometheus/client_python#1188

New Contributors

@vokracko made their first contribution in prometheus/client_python#1166

@ompathakbaap made their first contribution in prometheus/client_python#1183

@gregoiredx made their first contribution in prometheus/client_python#1186

@vyzigold made their first contribution in prometheus/client_python#1178

@sean-kim05 made their first contribution in prometheus/client_python#1189

@MelvinjoseC made their first contribution in prometheus/client_python#1185

Full Changelog: prometheus/client_python@v0.25.0...v0.26.0

Commits

9b6b971 Release v0.26.0
fb072c2 Fix operator precedence allowing exemplars on any metric type (#1188)
6e22fb5 Remove nameless collectors from the registry on unregister (#1191)
5b09479 Parse the native histogram sum as a float (#1192)
769b415 fix: make test suite pass on Windows and Python 3.12+ (#1185)
d0b497f Update common Prometheus files (#1195)
75603d7 Update common Prometheus files (#1194)
fb2351f Do not emit a leading zero in floatToGoString exponents >= 10 (#1190)
a39a697 Validate Enum arguments before registering the collector (#1189)
a96f6f4 Add TLS version parameters for start_wsgi_server (#1178)
Additional commits viewable in compare view

Updates nats-py from 2.15.0 to 2.16.0

Release notes

Sourced from nats-py's releases.

Release v2.16.0

Added

Client-side subject validation for publish, subscribe and request, with a skip_subject_validation connect option to opt out (#1016)

Allow user and password to be callables for credential refresh on reconnect (#891)

StreamSource.consumer and AckPolicy.FLOW_CONTROL for pre-created sourcing consumers (#937)

JetStreamManager.reset_consumer and ConsumerInvalidResetError (#941)

Counter stream wire support (#940)

Atomic batch publish headers and PubAck fields (#938)

Message schedule header constants (#939)

Changed

Validate header keys and sanitize header values before publishing (#1017)

Subscribing to subjects with empty tokens or misplaced wildcards now fails client-side with BadSubjectError instead of a server error (#1016)

Fixed

Default a missing port to 4222 and preserve the scheme and userinfo for every server in a URL list (#913, #1009)

Resolve the WebSocket close task when a connection was never established, so close() no longer hangs (#993)

Commits

3547a63 Release nats v2.16.0 (#1021)
17fbb19 Validate subjects client-side in nats.aio (#1016)
f4bb70c Validate header keys and sanitize values in nats.aio (#1017)
b665da9 Backport sourcing-consumer config for ADR-60 (#937)
c7896c1 Default missing port to 4222 in _setup_server_pool & preserve scheme/userinfo...
c937a31 Add atomic batch publish headers and PubAck fields (#938)
857d68a Add message schedule header constants (#939)
e47323a Add counter stream wire support (#940)
1e56fd2 Add consumer reset wire support (#941)
ee15c92 Resolve WebSocket close task when connect never established (#993)
Additional commits viewable in compare view

Updates opentelemetry-api from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-api's releases.

Version 1.44.0/0.65b0

Added

opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)

opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)

opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)

opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)

opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)

opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)

opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)

opentelemetry-sdk: add support for file exporter with declarative config (#5311)

opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)

opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)

opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)

opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)

opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

opentelemetry-sdk: add record_min_max option to ExponentialBucketHistogramAggregation, matching the option already available on ExplicitBucketHistogramAggregation and required by the specification (#5377)

Changed

opentelemetry-sdk: revert BoundedAttributes RLock back to Lock (#5329)

docs: update logs example to use opentelemetry-instrumentation-logging (#5344)

opentelemetry-sdk: bump declarative configuration schema to v1.1.0 (#5345)

opentelemetry-configuration: declarative configuration moves from opentelemetry.sdk._configuration into the new public opentelemetry-configuration package (opentelemetry.configuration namespace), published experimentally. opentelemetry-sdk[file-configuration] continues to work as an alias that installs opentelemetry-configuration alongside the SDK. (#5356)

opentelemetry-api: remove env carrier environment snapshot caching, you now have to pass explicitly the mapping where to get the environment variables from as the EnvironmentGetter.get first argument. (#5366)

opentelemetry-semantic-conventions: bump to 1.42.0 (#5410)

opentelemetry-semantic-conventions: bump to 1.43.0 (#5413)

Removed

opentelemetry-api, opentelemetry-sdk: Removed deprecated Events API/SDK. Use LogRecord with the event_name field set instead. (#5293)

Fixed

opentelemetry-sdk: Optimize LogRecord memory in BatchLogRecordProcessor by clearing the Context object before buffering. This is a potentially breaking change for custom log exporters that access context from the exported ReadableLogRecord, as the context will now be an empty Context() instead of the original. (#4977)

opentelemetry-sdk: drop non-finite measurements (NaN and Inf) at the instrument level to prevent permanent aggregation poisoning (#5336)

opentelemetry-sdk: raise ValueError when ExplicitBucketHistogramAggregation boundaries are not strictly increasing or finite (#5340)

opentelemetry-sdk: ProcessResourceDetector no longer collects or emits process.command_args and process.command_line by default since the values are not sanitized and may contain sensitive information. Users who depend on these resource attributes must pass include_command_args=True. (#5364)

opentelemetry-exporter-otlp-proto-http: fix the OTLP HTTP metric exporter self-observability metrics over-counting data points when max_export_batch_size splits a batch; each split now reports its own data-point count instead of the whole-batch count. (#5370)

opentelemetry-api: Prevent in-place mutation of Context via inherited dict methods (#5399)

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)

opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)

opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)

opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)

opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)

opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)

opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)

opentelemetry-sdk: add support for file exporter with declarative config (#5311)

opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)

opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)

opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)

opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)

opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits

53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
d9f34e7 Fixup eachdist.py handling of package names (#5417)
d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
ae8feeb Update otelbot token workflows to use client IDs (#5404)
67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
87baad9 Bump semconv to 1.42.0 (#5410)
23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
Additional commits viewable in compare view

Updates opentelemetry-sdk from 1.43.0 to 1.44.0

Release notes

Sourced from opentelemetry-sdk's releases.

Version 1.44.0/0.65b0

Added

opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)

opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)

opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)

opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)

opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)

opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)

opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)

opentelemetry-sdk: add support for file exporter with declarative config (#5311)

opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (...
Description has been truncated

…th 15 updates Bumps the python-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.8` | | [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.1` | `4.6.2` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.15.0` | | [prometheus-client](https://github.com/prometheus/client_python) | `0.25.0` | `0.26.0` | | [nats-py](https://github.com/nats-io/nats.py) | `2.15.0` | `2.16.0` | | [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.43.0` | `1.44.0` | | [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.64b0` | `0.65b0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.54` | | [httpx2](https://github.com/pydantic/httpx2) | `2.9.1` | `2.13.0` | | [qdrant-client](https://github.com/qdrant/qdrant-client) | `1.18.0` | `1.19.1` | | [yt-dlp](https://github.com/yt-dlp/yt-dlp) | `2026.7.4` | `2026.8.19` | Updates `ruff` from 0.16.1 to 0.16.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.1...0.16.8) Updates `mypy` from 2.3.0 to 2.3.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v2.3.0...v2.3.1) Updates `pre-commit` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.6.1...v4.6.2) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.13.5) Updates `pydantic-settings` from 2.14.2 to 2.15.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0) Updates `prometheus-client` from 0.25.0 to 0.26.0 - [Release notes](https://github.com/prometheus/client_python/releases) - [Commits](prometheus/client_python@v0.25.0...v0.26.0) Updates `nats-py` from 2.15.0 to 2.16.0 - [Release notes](https://github.com/nats-io/nats.py/releases) - [Commits](nats-io/nats.py@v2.15.0...v2.16.0) Updates `opentelemetry-api` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-sdk` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-exporter-otlp-proto-http` from 1.43.0 to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.43.0...v1.44.0) Updates `opentelemetry-instrumentation-fastapi` from 0.64b0 to 0.65b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `sqlalchemy` from 2.0.51 to 2.0.54 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `httpx2` from 2.9.1 to 2.13.0 - [Release notes](https://github.com/pydantic/httpx2/releases) - [Changelog](https://github.com/pydantic/httpx2/blob/main/src/httpx2/CHANGELOG.md) - [Commits](pydantic/httpx2@v2.9.1...v2.13.0) Updates `qdrant-client` from 1.18.0 to 1.19.1 - [Release notes](https://github.com/qdrant/qdrant-client/releases) - [Commits](qdrant/qdrant-client@v1.18.0...v1.19.1) Updates `yt-dlp` from 2026.7.4 to 2026.8.19 - [Release notes](https://github.com/yt-dlp/yt-dlp/releases) - [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md) - [Commits](yt-dlp/yt-dlp@2026.07.04...2026.08.19) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mypy dependency-version: 2.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pre-commit dependency-version: 4.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pydantic-settings dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: prometheus-client dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: nats-py dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: opentelemetry-instrumentation-fastapi dependency-version: 0.65b0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: httpx2 dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: qdrant-client dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: yt-dlp dependency-version: 2026.8.19 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added area:tooling Component area: tooling type:chore Tooling / maintenance labels Sep 21, 2026

Navigation Menu

chore(deps): bump the python-dependencies group across 1 directory with 15 updates - #968

chore(deps): bump the python-dependencies group across 1 directory with 15 updates#968
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-957e01af56

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

0.16.8

Release Notes

Bug fixes

Rule changes

CLI

Configuration

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

0.16.8

Bug fixes

Rule changes

CLI

Configuration

Contributors

0.16.7

Preview features

Mypy 2.3.1

Acknowledgements

Mypy 2.2

Support for Closed TypedDicts (PEP 728)

pre-commit v4.6.2

Fixes

4.6.2 - 2026-08-10

Fixes

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.15.0

Highlights

Behavior changes

New features

Bug fixes

Documentation

What's Changed

v0.26.0

What's Changed

New Contributors

Release v2.16.0

Added

Changed

Fixed

Version 1.44.0/0.65b0

Added

Changed

Removed

Fixed

Version 1.44.0/0.65b0 (2026-07-16)

Added

Version 1.44.0/0.65b0

Added

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants