chore(deps): bump the uv-all group across 1 directory with 6 updates - #497
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the uv-all group with 5 updates in the /tools/python directory: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.5` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.0` | `1.6.2` | | [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures) | `16.6` | `16.6.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.7` | | [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` | Updates `pydantic` from 2.12.5 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.5) Updates `langchain-core` from 1.6.0 to 1.6.2 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.6.0...langchain-core==1.6.2) Updates `crewai` from 1.15.17 to 1.6.1 - [Release notes](https://github.com/crewAIInc/crewAI/releases) - [Commits](crewAIInc/crewAI@1.15.17...1.6.1) Updates `pytest-rerunfailures` from 16.6 to 16.6.1 - [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst) - [Commits](pytest-dev/pytest-rerunfailures@16.6...16.6.1) Updates `ruff` from 0.16.4 to 0.16.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.4...0.16.7) Updates `pyright` from 1.1.411 to 1.1.414 - [Release notes](https://github.com/RobertCraigie/pyright-python/releases) - [Commits](RobertCraigie/pyright-python@v1.1.411...v1.1.414) --- updated-dependencies: - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-all - dependency-name: langchain-core dependency-version: 1.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-all - dependency-name: crewai dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-all - dependency-name: pytest-rerunfailures dependency-version: 16.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-all - dependency-name: ruff dependency-version: 0.16.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-all - dependency-name: pyright dependency-version: 1.1.414 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-all ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
requested review from
Oliver-Zimmerman,
aaronjo-Telnyx,
aisling404 and
gbattistel
as code owners
September 14, 2026 06:49
dependabot
Bot
added
minor
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ca48ff3913
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| @@ -650,23 +613,16 @@ wheels = [ | |||
|
|
|||
| [[package]] | |||
| name = "crewai" | |||
| version = "1.15.17" | |||
| version = "1.6.1" | |||
There was a problem hiding this comment.
For environments consuming the locked crewai or all extra, this changes CrewAI from 1.15.17 to 1.6.1 even though the dependency-update description lists only upgrades. The resolver also removes the newer crewai-core/crewai-cli packages and downgrades json-repair, so these environments lose nine minor releases of fixes and functionality. Keep Pydantic at a version compatible with the current CrewAI release, or constrain CrewAI so this update cannot silently backtrack it.
Useful? React with 👍 / 👎.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv-all group with 5 updates in the /tools/python directory:
2.12.52.13.51.6.01.6.216.616.6.10.16.40.16.71.1.4111.1.414Updates
pydanticfrom 2.12.5 to 2.13.5Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
001dea0Bumppypa/gh-action-pypi-publishaction to v1.14.2558379fBump twine to v7.0.02cfd5d3Do not check for docs builda735beeFix more Clippy lints7eed4a1Fix Clippy 0.1.95 warningsb353bbbPrepare release v2.13.563d2cccCount validated model fields once in smart unionsa53ec2eSpeed up PyPy CI testsd65e0f9Workaround circular import error in Mypy47a6dbfFix missing GC traversal inpydantic-coreforGeneralFieldsSerializerUpdates
langchain-corefrom 1.6.0 to 1.6.2Release notes
Sourced from langchain-core's releases.
Commits
8215039release(core): 1.6.2 (#40209)3f212e7feat(openai): support async tools (#40208)1a3d817feat(openai): supportconfiguration_update(#40201)aac7904chore(model-profiles): refresh model profile data (#40198)0d50cbddocs: add openwiki (#40183)79cab2drelease(anthropic): 1.7.1 (#40181)1e6a4f0chore(model-profiles): refresh model profile data (#40171)8330dfedocs(langchain): runnablelangchain.mcpexamples (#39976)280442bfeat(langchain):langchain.mcpnamespace,MCPAdapter(#39939)f5ee2b6chore(chroma): bump Pygments security constraint (#40162)Updates
crewaifrom 1.15.17 to 1.6.1Commits
bc4e6a3feat: bump versions to 1.6.1 (#3993)37526c6Fixing ChatCompletionsClinet call (#3910)c59173afix: ensure async methods are executable for annotations4d8eec9refactor: enhance model validation and provider inference in LLM class (#3976)2025a26fix: ensure parameters in RagTool.add, add typing, tests (#3979)bed9a38fix: remove invalid param from sse client (#3980)5239dc9fix: erase 'oauth2_extra' setting on 'crewai config reset' command52444adfeat: bump versions to 1.6.0 (#3974)f070595fix: ensure custom rag store persist path is set if passed69c5eacUpdate references from AMP to AOP in documentation (#3972)Updates
pytest-rerunfailuresfrom 16.6 to 16.6.1Changelog
Sourced from pytest-rerunfailures's changelog.
Commits
dad07a7Preparing release 16.6.1968fb6cPrevent negative reruns from skipping initial execution (#360)367df90Keep higher-scoped fixtures alive across re-runs of failed subtests (#357)69ac0a7Authenticate xdist StatusDB connections (#358)20decd3Restore higher-scoped teardown when a teardown error rules out a re-run (#356)84af73dFix subtest rerun reporting with xdist (#352)d784cddTest with pytest-xdist on CI (#354)9f85e06Restore higher-scoped teardown when a flaky condition is falsy (#351)eab650fTest rerun-except for setup errors (#349)0b0843aFix only_rerun marker precedence test (#348)Updates
rufffrom 0.16.4 to 0.16.7Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
b5dba86Bump version to 0.16.7 (#28496)5992d05Install rustfmt before linting releases (#28495)1713a1fensure prepare release changes pass prek (#28488)18cdbb4use scoped token for release workflow (#28484)c3813a5add a workflow for preparing releases (#28486)00948c0Remove the "Who’s Using Ruff?" list (#28455)86a2eba[pyupgrade] Stop recommending removedtyping.no_type_check_decorator(`UP...609e184Stop defining__cached__for Python 3.15 (#28476)859ff2f[ty] Track symlinked directory status in listings (#28482)77f6538Use paid GitHub-hosted runners for Linux (#28478)Updates
pyrightfrom 1.1.411 to 1.1.414Commits
1aa6dfePyright NPM Package update to 1.1.414 (#370)5ecb4dftests: retry network tests (#369)978501bchore: bump timeout for pylance version check474b7bePyright NPM Package update to 1.1.413 (#365)4502e5dci: auto merge version bumps (#368)f9a9a6e[pyright updated to 1.1.412] Update Version (#364)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions