Skip to content

Update Python dependencies (non-major)#12807

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/python-non-major
Open

Update Python dependencies (non-major)#12807
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/python-non-major

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 25, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
Genshi ==0.7.10 → ==0.7.11 age confidence
fastapi (changelog) ==0.136.1 → ==0.136.3 age confidence
luqum ==0.11.0 → ==0.14.0 age confidence
lxml (source, changelog) ==6.1.0 → ==6.1.1 age confidence
python-amazon-paapi ==6.2.0 → ==6.3.0 age confidence
python-multipart (changelog) ==0.0.28 → ==0.0.29 age confidence
requests (changelog) ==2.34.0 → ==2.34.2 age confidence
sentry-sdk (changelog) ==2.59.0 → ==2.60.0 age confidence
uvicorn (changelog) ==0.46.0 → ==0.48.0 age confidence

Release Notes

edgewall/genshi (Genshi)

v0.7.11

Compare Source

Version 0.7.11
https://github.com/edgewall/genshi/releases/tag/0.7.11
(May 17 2026, from branches/stable/0.7.x)

  • Replace use of pkg_resources with importlib.resources (or importlib_resources for Python < 3.9)
    (#​97 by Colin Watson)
  • Update CI release workflow to use Ubuntu 22.04. (#​96 by Simon Cross)
fastapi/fastapi (fastapi)

v0.136.3

Compare Source

Refactors
  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #​15589 by @​tiangolo.
jurismarches/luqum (luqum)

v0.14.0

Compare Source

===================

Added

Removed

Fixed

v0.13.0

Compare Source

===================

Added

  • Add support for unbounded ranges

    Support is added for open ranges, i.e. inequality operators in
    front of a term. In tree form, the < is named To, and > is named From.

    Additionally, a TreeTransformer is also added, to convert these
    open ranges to more traditional Range objects.

    To properly support escaping, some adjustments were made to how escaping
    sequences work. After careful evaluation of how Apache Lucene handles
    escape sequences, it appears that random characters can be escaped, even
    if they result in unknown escape sequences: the escaped character is
    always yielded. This makes support for operations such as <\=foo a lot
    less complicated.

    There is no support in the ElasticsearchQueryBuilder.

v0.12.1

Compare Source

===================

Fixed

v0.12.0

Compare Source

===================

Changed

  • Boost can be implicit ; by default, the boost factor is 1

Added

  • Add support for Lucene and Elasticsearch Boolean operations (#​71, thanks to @​linefeedse):

    • Introduce the BooleanOperation
    • add its resolution in ElasticSearch transformer
    • add it as a possible resolver for the unknown operation (no explicit operator in query)

  • Set E element as ElasticsearchQueryBuilder's attributes (#​75, thanks to @​qcoumes):

    This allows to override elements such as EMust, EWord, ...,
    without the need of overriding ElasticsearchQueryBuilder's methods.

  • Explicit support for Python 3.9 and Python 3.10 (#​76)

  • Add a thread safe parse function (#​82)

Fixed

  • Cast TokenValue.str return value to string (#​74, thanks to @​delkopiso)
  • Isolated comma should be parsed as a Word (#​80)
  • Better handling of escaped wildcards

Docs

  • Add boolean operation to doc
  • Fix quick start documentation
  • Updated readthedocs instructions

CI

  • Run tests with github actions

  • Update all libraries for dev:

    • switch from nose to pytest as nose is not python3.10 compatible
    • remove old travis tests
lxml/lxml (lxml)

v6.1.1

Compare Source

==================

Bugs fixed

sergioteula/python-amazon-paapi (python-amazon-paapi)

v6.3.0

Compare Source

Added
  • delivery_flags parameter in search_items for amazon_creatorsapi and amazon_creatorsapi.aio
Kludex/python-multipart (python-multipart)

v0.0.29

Compare Source

  • Handle malformed RFC 2231 continuations in parse_options_header #​270.
psf/requests (requests)

v2.34.2

Compare Source

  • Moved headers input type back to Mapping to avoid invariance issues
    with MutableMapping and inferred dict types. Users calling
    Request.headers.update() may need to narrow typing in their code. (#​7441)

v2.34.1

Compare Source

Bugfixes

  • Widened json input type from dict and list to Mapping
    and Sequence. (#​7436)
  • Changed headers input type to MutableMapping and removed None from
    Request.headers typing to improve handling for users. (#​7431)
  • Response.reason moved from str | None to str to improve handling
    for users. (#​7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations
    weren't being properly detected as Iterables. (#​7433)
getsentry/sentry-python (sentry-sdk)

v2.60.0

Compare Source

Adds a new stream_gen_ai_spans option that controls how gen_ai spans are
sent to Sentry. When set, the SDK extracts all gen_ai spans out of a
transaction and sends them as v2 envelope items.

Enable this option if gen_ai spans are being dropped because the transaction payload exceeds size limits.

import sentry_sdk

sentry_sdk.init(
  dsn='https://examplePublicKey@o0.ingest.sentry.io/0',
  stream_gen_ai_spans=True,
)
New Features ✨
Bug Fixes 🐛
Openai
Other
Internal Changes 🔧
Django
Openai
Other
Kludex/uvicorn (uvicorn)

v0.48.0: Version 0.48.0

Compare Source

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

v0.47.0: Version 0.47.0

Compare Source

What's Changed

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@mekarpeles mekarpeles requested a review from Copilot May 25, 2026 01:38
Copilot AI reviewed May 25, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This Renovate PR updates several pinned Python dependencies in the repository’s requirements files to newer non-major versions, keeping the app/test/runtime stacks current.

Changes:

  • Bumped core runtime dependencies in requirements.txt (Genshi, luqum, python-multipart, requests, sentry-sdk, uvicorn).
  • Bumped requests used by GitHub scripts in scripts/gh_scripts/requirements.txt.
  • Bumped ruff used in CI/tests in requirements_test.txt.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
scripts/gh_scripts/requirements.txt Updates requests for GitHub automation scripts.
requirements.txt Updates main application/runtime dependency pins.
requirements_test.txt Updates test/CI toolchain pin for ruff.

Comment thread requirements_test.txt Outdated
pytest-asyncio==1.3.0
pytest-httpx==0.36.2
ruff==0.15.12
ruff==0.15.13
@renovate renovate Bot force-pushed the renovate/python-non-major branch 3 times, most recently from 7ec1725 to 10c3347 Compare May 30, 2026 21:13
@renovate renovate Bot force-pushed the renovate/python-non-major branch from 10c3347 to 5e037e0 Compare May 31, 2026 13:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant