From c94d10f3c97b59bedbb91a5ad6fe5bc867077f7a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 06:19:11 +0000 Subject: [PATCH] chore(deps): bump the backend-minor-and-patch group across 1 directory with 26 updates Bumps the backend-minor-and-patch group with 26 updates in the /apps/backend directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.141.1` | `0.143.2` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.53.0` | `0.54.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.15.0` | `2.16.0` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.14.0` | `2.15.1` | | [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.54` | `2.1.4` | | [xhtml2pdf](https://github.com/xhtml2pdf/xhtml2pdf) | `0.2.20` | `0.2.24` | | [mypy](https://github.com/python/mypy) | `2.3.1` | `2.4.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.17.1` | | [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` | | [dnspython](https://github.com/rthalley/dnspython) | `2.8.0` | `2.9.0` | | [httptools](https://github.com/MagicStack/httptools) | `0.8.0` | `0.9.0` | | [markupsafe](https://github.com/pallets/markupsafe) | `3.0.3` | `3.0.4` | | [pycparser](https://github.com/eliben/pycparser) | `3.0` | `3.11` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.19.0` | `6.20.1` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` | | [starlette](https://github.com/Kludex/starlette) | `1.6.0` | `1.8.0` | | [svglib](https://github.com/deeplook/svglib) | `2.2.0` | `2.3.0` | | [tzdata](https://github.com/python/tzdata) | `2026.4` | `2026.5` | | [websockets](https://github.com/python-websockets/websockets) | `17.1` | `17.2` | | [ast-serialize](https://github.com/mypyc/ast_serialize) | `0.11.2` | `0.13.0` | | [coverage](https://github.com/coveragepy/coveragepy) | `7.16.1` | `7.16.2` | | [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` | | [librt](https://github.com/mypyc/librt) | `0.15.0` | `0.16.0` | | [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` | Updates `fastapi` from 0.141.1 to 0.143.2 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.141.1...0.143.2) Updates `uvicorn` from 0.53.0 to 0.54.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.53.0...0.54.0) Updates `pydantic` from 2.13.5 to 2.14.1 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.5...v2.14.1) Updates `pydantic-settings` from 2.15.0 to 2.16.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.15.0...v2.16.0) Updates `pyjwt` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.1) Updates `cryptography` from 50.0.1 to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/50.0.1...50.0.2) Updates `sqlalchemy` from 2.0.54 to 2.1.4 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `xhtml2pdf` from 0.2.20 to 0.2.24 - [Release notes](https://github.com/xhtml2pdf/xhtml2pdf/releases) - [Commits](https://github.com/xhtml2pdf/xhtml2pdf/compare/v0.2.20...v0.2.24) Updates `mypy` from 2.3.1 to 2.4.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v2.3.1...v2.4.0) Updates `ruff` from 0.16.8 to 0.17.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.8...0.17.1) Updates `charset-normalizer` from 3.5.1 to 3.5.2 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](https://github.com/jawah/charset_normalizer/compare/3.5.1...3.5.2) Updates `dnspython` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/rthalley/dnspython/releases) - [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst) - [Commits](https://github.com/rthalley/dnspython/compare/v2.8.0...v2.9.0) Updates `httptools` from 0.8.0 to 0.9.0 - [Release notes](https://github.com/MagicStack/httptools/releases) - [Commits](https://github.com/MagicStack/httptools/compare/v0.8.0...v0.9.0) Updates `markupsafe` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/markupsafe/compare/3.0.3...3.0.4) Updates `pycparser` from 3.0 to 3.11 - [Release notes](https://github.com/eliben/pycparser/releases) - [Commits](https://github.com/eliben/pycparser/compare/release_v3.00...release_v3.11) Updates `pypdf` from 6.19.0 to 6.20.1 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/py-pdf/pypdf/compare/6.19.0...6.20.1) Updates `python-dotenv` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.3...v1.2.4) Updates `starlette` from 1.6.0 to 1.8.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.6.0...1.8.0) Updates `svglib` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/deeplook/svglib/releases) - [Changelog](https://github.com/deeplook/svglib/blob/main/CHANGELOG.md) - [Commits](https://github.com/deeplook/svglib/compare/v2.2.0...v2.3.0) Updates `tzdata` from 2026.4 to 2026.5 - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](https://github.com/python/tzdata/compare/2026.4...2026.5) Updates `websockets` from 17.1 to 17.2 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](https://github.com/python-websockets/websockets/compare/17.1...17.2) Updates `ast-serialize` from 0.11.2 to 0.13.0 - [Commits](https://github.com/mypyc/ast_serialize/compare/v0.11.2...v0.13.0) Updates `coverage` from 7.16.1 to 7.16.2 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.16.1...7.16.2) Updates `iniconfig` from 2.3.0 to 2.3.1 - [Release notes](https://github.com/pytest-dev/iniconfig/releases) - [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG) - [Commits](https://github.com/pytest-dev/iniconfig/compare/v2.3.0...v2.3.1) Updates `librt` from 0.15.0 to 0.16.0 - [Commits](https://github.com/mypyc/librt/compare/v0.15.0...v0.16.0) Updates `pluggy` from 1.6.0 to 1.7.0 - [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pluggy/compare/1.6.0...1.7.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.143.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: uvicorn dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: pydantic dependency-version: 2.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: pydantic-settings dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: sqlalchemy dependency-version: 2.1.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: xhtml2pdf dependency-version: 0.2.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: mypy dependency-version: 2.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: charset-normalizer dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: dnspython dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: httptools dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: markupsafe dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: pycparser dependency-version: '3.11' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: pypdf dependency-version: 6.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: python-dotenv dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: starlette dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: svglib dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: tzdata dependency-version: '2026.5' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: websockets dependency-version: '17.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: ast-serialize dependency-version: 0.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: coverage dependency-version: 7.16.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: iniconfig dependency-version: 2.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-minor-and-patch - dependency-name: librt dependency-version: 0.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-minor-and-patch - dependency-name: pluggy dependency-version: 1.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-minor-and-patch ... Signed-off-by: dependabot[bot] --- apps/backend/pyproject.toml | 4 ++-- apps/backend/requirements-dev.txt | 14 ++++++------ apps/backend/requirements.txt | 38 +++++++++++++++---------------- 3 files changed, 28 insertions(+), 28 deletions(-) diff --git a/apps/backend/pyproject.toml b/apps/backend/pyproject.toml index 52312c6a..13618f02 100644 --- a/apps/backend/pyproject.toml +++ b/apps/backend/pyproject.toml @@ -38,8 +38,8 @@ test = [ "pytest>=8.3.0", ] dev = [ - "mypy==2.3.1", - "ruff==0.16.8", + "mypy==2.4.0", + "ruff==0.17.1", ] [tool.setuptools.packages.find] diff --git a/apps/backend/requirements-dev.txt b/apps/backend/requirements-dev.txt index 6b09ff09..b4ea6901 100644 --- a/apps/backend/requirements-dev.txt +++ b/apps/backend/requirements-dev.txt @@ -3,14 +3,14 @@ # toolchain so CI and local dev can run pytest. The runtime image installs # only requirements.txt; pytest must never ship in runtime dependencies (issue #185). -r requirements.txt -ast-serialize==0.11.2 -coverage==7.16.1 -iniconfig==2.3.0 -librt==0.15.0 -mypy==2.3.1 +ast-serialize==0.13.0 +coverage==7.16.2 +iniconfig==2.3.1 +librt==0.16.0 +mypy==2.4.0 mypy_extensions==1.1.0 pathspec==1.1.1 -pluggy==1.6.0 +pluggy==1.7.0 pytest==9.1.1 pytest-cov==7.1.0 -ruff==0.16.8 +ruff==0.17.1 diff --git a/apps/backend/requirements.txt b/apps/backend/requirements.txt index 3b032725..1f2ac06f 100644 --- a/apps/backend/requirements.txt +++ b/apps/backend/requirements.txt @@ -15,60 +15,60 @@ argon2-cffi-bindings==26.1.0 asn1crypto==1.5.1 certifi==2026.7.22 cffi==2.1.1 -charset-normalizer==3.5.1 +charset-normalizer==3.5.2 click==8.5.0 colorama==0.4.6 -cryptography==50.0.1 +cryptography==50.0.2 cssselect2==0.10.1 -dnspython==2.8.0 +dnspython==2.9.0 email-validator==2.3.0 -fastapi==0.141.1 +fastapi==0.143.2 greenlet==3.5.6 h11==0.16.0 html5lib==1.1 httpcore==1.0.9 -httptools==0.8.0 +httptools==0.9.0 httpx==0.28.1 idna==3.20 lxml==6.1.3 Mako==1.4.3 -MarkupSafe==3.0.3 +MarkupSafe==3.0.4 oscrypto==1.3.0 packaging==26.3 pillow==12.3.0 psycopg-binary==3.3.6 psycopg==3.3.6 -pycparser==3.0 -pydantic-settings==2.15.0 -pydantic==2.13.5 +pycparser==3.11 +pydantic-settings==2.16.0 +pydantic==2.14.1 pydantic_core==2.46.5 Pygments==2.21.0 pyhanko-certvalidator==0.32.1 pyHanko==0.37.0 -PyJWT==2.14.0 -pypdf==6.19.0 +PyJWT==2.15.1 +pypdf==6.20.1 python-bidi==0.6.11 -python-dotenv==1.2.3 +python-dotenv==1.2.4 python-multipart==0.0.32 PyYAML==6.0.3 redis==8.1.0 reportlab==4.5.1 requests==2.34.2 six==1.17.0 -SQLAlchemy==2.0.54 -starlette==1.6.0 -svglib==2.2.0 +SQLAlchemy==2.1.4 +starlette==1.8.0 +svglib==2.3.0 tinycss2==1.5.1 tree-sitter==0.26.0 tree-sitter-typescript==0.23.2 typing-inspection==0.4.4 typing_extensions==4.16.0 -tzdata==2026.4 +tzdata==2026.5 tzlocal==5.4.4 uritools==6.1.3 urllib3==2.8.0 -uvicorn==0.53.0 +uvicorn==0.54.0 watchfiles==1.3.0 webencodings==0.6.1 -websockets==17.1 -xhtml2pdf==0.2.20 +websockets==17.2 +xhtml2pdf==0.2.24