Skip to content

fix(deps): update all non-major dependencies - #24

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major
Open

fix(deps): update all non-major dependencies#24
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major

Conversation

@renovate

@renovate renovate Bot commented Jun 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
actions/checkout (changelog) action digest df4cb1c → d23441a
actions/setup-python (changelog) action digest a309ff8 → ece7cb0
astral-sh/setup-uv action minor v8.1.0 → v8.3.2 age confidence
cachetools (changelog) project.dependencies minor >=7.1.4 → >=7.2.4 7.2.7 (+2) age confidence
fastapi (changelog) project.dependencies minor >=0.136.3 → >=0.159.1 0.162.0 (+3) age confidence
greenlet (changelog) dependency-groups patch >=3.5.1 → >=3.5.6 age confidence
ipython dependency-groups minor >=9.14.0 → >=9.17.1 age confidence
pgvector project.dependencies minor >=0.4.2 → >=0.5.1 age confidence
pre-commit dependency-groups minor >=4.6.0 → >=4.7.0 age confidence
psycopg (changelog) project.dependencies patch >=3.3.4 → >=3.3.6 age confidence
psycopg-pool (changelog) project.dependencies patch >=3.3.1 → >=3.3.3 age confidence
pyright dependency-groups patch >=1.1.409 → >=1.1.414 age confidence
pytest (changelog) dependency-groups minor >=9.0.3 → >=9.1.1 9.2.0 age confidence
python-gitlab (changelog) dependency-groups minor >=8.4.0 → >=8.6.0 age confidence
ruff (source, changelog) dependency-groups minor >=0.15.15 → >=0.17.1 0.17.3 (+1) age confidence
structlog (changelog) project.dependencies patch >=25.5.0 → >=26.1.0 age confidence
tox (changelog) dependency-groups minor >=4.55.0 → >=4.67.1 4.67.4 (+2) age confidence
tqdm (changelog) project.dependencies minor >=4.67.3 → >=4.70.1 age confidence
types-cachetools (changelog) dependency-groups patch >=7.0.0.20260518 → >=7.0.0.20260713 age confidence
types-tqdm (changelog) dependency-groups minor >=4.67.3.20260518 → >=4.70.0.20260906 age confidence
uv_build (source, changelog) build-system.requires minor >=0.11.17,<0.11.18 → >=0.13.5,<0.13.6 0.13.6 age confidence
uvicorn (changelog) project.dependencies minor >=0.48.0 → >=0.54.0 age confidence
xxhash project.dependencies minor >=3.7.0 → >=3.8.2 age confidence

Release Notes

astral-sh/setup-uv

v8.3.2: 🌈 update known checksums for 0.11.28

Compare Source

Changes

Just a maintenance release

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.3.1: 🌈 update known checksums for 0.11.27

Compare Source

Changes

Just a maintenance release

🧰 Maintenance

📚 Documentation

v8.3.0: 🌈 Support uv.lock as a version-file source

Compare Source

Changes

Thanks to @​somaz94 you can now use the pinned version of uv itself in uv.lock. It gets picked up automatically.
If you have pinned another version of uv in your uv.lock you can use the inputs version or version-source to override this.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

tkem/cachetools (cachetools)

v7.2.4

Compare Source

===================

  • Restore autospec calls to @cachedmethod decorated methods.

  • Improve branch coverage of unit tests.

  • Minor type stub improvements.

v7.2.3

Compare Source

===================

  • Fix @cached decorator stacking behavior.

  • Minor type stub improvements.

v7.2.2

Compare Source

===================

  • Fix @cachedmethod for subclasses that override a decorated
    method and call the base class implementation via super().

  • Restore class access to instance methods decorated with
    @cachedmethod.

  • Improve TTLCache robustness when calculating expiration time
    fails.

  • Various unit test improvements.

v7.2.1

Compare Source

===================

  • Improve error handling for RRCache.popitem() when the cache is
    empty.

  • Minor style and documentation improvements.

  • Update CI environment.

v7.2.0

Compare Source

===================

  • Deprecate use of cache=None to suppress caching with the
    @cached decorator.

  • Add support for Python 3.15.

  • Minor test improvements.

  • Minor documentation updates.

v7.1.8

Compare Source

===================

  • Reject negative maxsize in Cache.__init__.

v7.1.7

Compare Source

===================

  • Improve Cache.__setitem__ behavior when replacing an existing
    cache item with a larger value.

  • Update CI environment.

v7.1.6

Compare Source

===================

  • Minor style improvements to keep ruff happy.

v7.1.5

Compare Source

===================

  • Fix TLRUCache silently keeping stale values on expired
    overwrites.

  • Reject negative cache item getsizeof values.

  • Update build environment.

fastapi/fastapi (fastapi)

v0.159.1

Compare Source

Features

v0.159.0

Compare Source

Features

v0.158.2

Compare Source

Features

v0.158.1

Compare Source

Fixes

v0.158.0

Compare Source

Features

v0.157.0

Compare Source

Features
  • ✨ Add support for combining query, header, and cookie parameter models. PR #​16573 by @​tiangolo.
Docs
Internal

v0.156.8

Compare Source

Fixes

v0.156.7

Compare Source

Fixes

v0.156.6

Compare Source

Fixes
  • 🐛 Respect model alias settings for query, header, and cookie parameters. PR #​16562 by @​tiangolo.

v0.156.5

Compare Source

Fixes

v0.156.4

Compare Source

Fixes

v0.156.3

Compare Source

Fixes

v0.156.2

Compare Source

Fixes

v0.156.1

Compare Source

Fixes

v0.156.0

Compare Source

Fixes

v0.155.0

Compare Source

The deprecated **extra keyword arguments have been removed from Path, Query, Header, Cookie, Body, Form, and File. Unknown keyword arguments now raise TypeError. For additional JSON Schema properties, replace, for example, Query(custom="value") with Query(json_schema_extra={"custom": "value"}).

Breaking Changes

v0.154.0

Compare Source

Features

v0.153.0

Compare Source

Unions of form models now apply the same browser form handling as individual models. Empty scalar fields use defaults or produce missing-field errors, empty list items are preserved, omitted boolean fields become False, and unselected files are treated as missing. JSON request bodies are unchanged.

Fixes

v0.152.0

Compare Source

Validation errors for header parameter models now report the HTTP header name, such as int-val, instead of the Python field name, int_val. Explicit aliases, Header(convert_underscores=False), and Pydantic models with loc_by_alias=False keep their existing behavior.

Fixes

v0.151.0

Compare Source

JSON request bodies now distinguish an explicit null from an omitted value. For individual Body parameters, null is validated as None: nullable types accept it, and non-nullable types reject it even when a default is defined. Defaults and default factories apply only when the value is omitted. This applies both to parameters inside JSON objects and to parameters representing the entire body. Clients that used null to request a default should omit the value instead.

When a JSON object is expected because of Body(embed=True) or multiple body parameters, sending null as the entire body now returns a validation error.

Breaking Changes

v0.150.0

Compare Source

When no file is selected, browsers submit a file part with an empty filename and empty content. FastAPI now treats this as missing: required file fields return a validation error, and fields with defaults or default factories use them. Unselected inputs are ignored in lists of files. Named zero-byte files are still accepted.

Breaking Changes

v0.149.0

Compare Source

Browsers submit empty text inputs as empty strings (""). FastAPI now treats empty scalar form values as missing in form models, matching individual Form parameters. Required fields return a validation error. Fields with defaults or default factories use them and remain unset in model_dump(exclude_unset=True).

Empty strings inside lists are preserved. Omitted boolean form fields still become False. JSON requests and direct Pydantic validation are unchanged.

Breaking Changes

v0.148.0

Compare Source

Defaults for omitted Query, Header, Cookie, and Form parameters and model fields are no longer treated as user input. Defaults are not validated unless validate_default=True is enabled. If you rely on validators running for omitted values, enable default validation with Field(validate_default=True) for model fields or, for example, Query(validate_default=True) for individual parameters. Body(validate_default=True) is now honored too.

For parameter models, applying a default no longer marks a field as explicitly set, so model_dump(exclude_unset=True) excludes it. Default factories run once, and validation errors no longer include injected defaults in input.

Omitted boolean form fields still become False and count as explicitly set.

Breaking Changes

v0.147.0

Compare Source

Omitted bool and bool | None form fields are now interpreted as False, matching unchecked HTML checkboxes. This applies to individual Form parameters and form models, including required fields and fields with defaults of True or None. The inferred value is considered explicitly set, including in model_dump(exclude_unset=True).

JSON requests and direct Pydantic validation are unchanged. See Boolean Form Fields.

Breaking Changes
Internal

v0.146.0

Compare Source

The root_path parameter in FastAPI() is deprecated. Configure the server with fastapi run --root-path /api/v1 instead.

Breaking Changes

v0.145.0

Compare Source

Breaking Changes
Docs

v0.144.0

Compare Source

Features

v0.143.5

Compare Source

Fixes
  • 🐛 Fix handling of empty value for byte file list parameter. PR #​9383 by @​Viicos.

v0.143.4

Compare Source

Upgrades

v0.143.3

Compare Source

Fixes
Docs

v0.143.2

Compare Source

Fixes
Translations
Internal

v0.143.1

Compare Source

Fixes

v0.143.0

Compare Source

Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL_* environment variables, set FASTAPI_OTEL_AUTO_CONFIGURE=true or use FastAPI(telemetry={"auto_configure": True}) to retain the previous behavior.

Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.

Breaking Changes

v0.142.4

Compare Source

Fixes

v0.142.3

Compare Source

Fixes
Docs
Translations
Internal

v0.142.2

Compare Source

Fixes

v0.142.1

Compare Source

Fixes

v0.142.0

Compare Source

Features
Refactors
Docs
Translations
Internal
  • ✅ Fix fro

[!IMPORTANT]
✂ PR body was truncated to here.

@renovate
renovate Bot requested a review from a team as a code owner June 13, 2026 02:06
@renovate

renovate Bot commented Jun 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml
Artifact update for cachetools resolved to version 7.2.7, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 7.2.4
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for fastapi resolved to version 0.162.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.159.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for pytest resolved to version 9.2.0, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 9.1.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for ruff resolved to version 0.17.3, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 0.17.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/
File name: pyproject.toml
Artifact update for tox resolved to version 4.67.4, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.67.1
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

@renovate
renovate Bot force-pushed the renovate/all-non-major branch 13 times, most recently from 25a6cef to 8edca2c Compare June 19, 2026 17:34
@renovate
renovate Bot force-pushed the renovate/all-non-major branch 13 times, most recently from 00e7285 to ae6a4af Compare June 25, 2026 18:44
@renovate
renovate Bot force-pushed the renovate/all-non-major branch 10 times, most recently from a9257e8 to eaae89b Compare July 10, 2026 05:55
@renovate
renovate Bot force-pushed the renovate/all-non-major branch 16 times, most recently from 2273ee0 to 3fe2ebe Compare July 17, 2026 15:58
@renovate
renovate Bot force-pushed the renovate/all-non-major branch 2 times, most recently from c43f4be to 2d68f0f Compare July 20, 2026 09:39
@coderabbitai

coderabbitai Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Central YAML; Path: .coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Enterprise
  • Run ID: c3902dcc-cc21-42b7-87d0-63fd76699ab4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@renovate
fix(deps): update all non-major dependencies
355790b 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants