Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

build(deps): bump the python-dependencies group with 15 updates

Merged
Number: #3246
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 2
Created: June 12, 2025 at 06:35 PM UTC
(about 1 year ago)
Updated: June 13, 2025 at 02:01 AM UTC
(about 1 year ago)
Merged: June 13, 2025 at 02:01 AM UTC
(about 1 year ago)
by liuruibin
Time to Close: about 7 hours
Labels:
do-not-merge/release-note-label-needed dependencies python
Description:

Updates the requirements on django, langchain-openai, langchain-anthropic, langchain-community, langchain-mcp-adapters, langchain-huggingface, langgraph, boto3, tencentcloud-sdk-python, xinference-client, anthropic, dashscope, celery, pymupdf and pypdf to permit the latest version.
Updates django to 5.2.3

Commits
  • 15883bc [5.2.x] Bumped version for 5.2.3 release.
  • 2640031 [5.2.x] Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.
  • 6f99c88 [5.2.x] Fixed #36449 -- Fixed field types in example model using ForeignObject.
  • aec11db [5.2.x] Refs #36419 -- Fixed BulkUpdateTests.test_json_field_sql_null() crash...
  • cc50797 [5.2.x] Fixed #36446 -- Restored "q" in internal MediaType.params property.
  • 6fc620b [5.2.x] Fixed #36419 -- Ensured for_save was propagated when resolving expres...
  • 8fcc839 [5.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response ...
  • 9d7fc9e [5.2.x] Refs CVE-2025-48432 -- Made SuspiciousOperation logging use log_respo...
  • c042af7 [5.2.x] Refactored logging_tests to reuse assertions for log records.
  • 5901cfe [5.2.x] Updated translations from Transifex.
  • Additional commits viewable in compare view

Updates langchain-openai to 0.3.22

Release notes

Sourced from langchain-openai's releases.

langchain-openai==0.3.22

Changes since langchain-openai==0.3.21

openai: release 0.3.22 (#31542) openai[patch]: accommodate change in image generation API (#31522) openai[patch]: VCR some tests (#31524)

Commits
  • 71b0f78 openai: release 0.3.22 (#31542)
  • 575662d openai[patch]: accommodate change in image generation API (#31522)
  • ece9e31 openai[patch]: VCR some tests (#31524)
  • 5187817 openai[release]: 0.3.21 (#31519)
  • 761f8c3 openai[patch]: pass through with_structured_output kwargs (#31518)
  • 0375848 openai[patch]: update with_structured_outputs docstring (#31517)
  • 9c63903 standard-tests: add cache_control to Anthropic inputs test (#31516)
  • a1f068e openai: release 0.3.20 (#31515)
  • 4cc2f6b openai[patch]: guard against None text completions in BaseOpenAI (#31514)
  • abc8bf9 docs:Adding line breaks to better explain each step, also making sure that bu...
  • Additional commits viewable in compare view

Updates langchain-anthropic to 0.3.15

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==0.3.15

Changes since langchain-anthropic==0.3.14

anthropic[fix]: bump langchain-core dep (#31483) release[anthropic]: 0.3.15 (#31479) infra: remove use of --vcr-record=none (#31452) standard-tests: migrate to pytest-recording (#31425) standard-tests: add benchmarks (#31302) anthropic: store cache ttl details on usage metadata (#31393)

Commits

Updates langchain-community to 0.3.25

Commits

Updates langchain-mcp-adapters to 0.1.7

Updates langchain-huggingface to 0.3.0

Release notes

Sourced from langchain-huggingface's releases.

langchain-huggingface==0.3.0

Changes since langchain-huggingface==0.2.0

huggingface[patch]: bump transformers (#31559) huggingface[patch]: bump core dep (#31558) huggingface: 0.3.0 release (#31503) huggingface[major]: Reduce disk footprint by 95% by making large dependencies optional (#31268) huggingface: Undefined model_id fix (#31358)

Commits

Updates langgraph to 0.4.8

Release notes

Sourced from langgraph's releases.

0.4.8

Changes since 0.4.7

  • Remove unused deprecation decorator/warning (#4917)
  • Require state_schema in StateGraph.__init__ (#4897)
  • Remove add_conditional_edge(..., then=) (#4893)
  • Avoid repeated runtime calls to get_type_hints
  • Remove MessageGraph (#4875)
  • Remove non-state Graph
  • Remove UntrackedValue channel
  • Remove UntrackedValue channel (#4859)
  • Flip default for checkpoint_during
  • Remove Channel node builder
  • Update managed value usage in local_read (#4854)
  • Modify stream mode messages and custom to respect subgraphs=False (#4843)
  • Remove Checkpoint.writes (#4822)
  • Remove Checkpoint.pending_sends (#4820)
  • Pregel: Add NodeBuilder class to replace Channel.subscribe_to (#4819)
  • Remove dict subclasses used for values/updates stream chunks (#4816)
  • Remove old checkpoint test fixtures (#4814)
  • Remove postgres shallow checkpointer (#4813)
  • Remove ChannelsManager, ManagedValues are now static classes and never instantiated (#4812)
  • Remove Context channel / managed value, Remove SharedValue (#4857)
  • Remove SchemaCoercionMapper
  • Update managed value usage in local_read
  • prebuilt: release 0.2.2 (#4851)
  • Format
  • Remove Checkpoint.writes
  • Remove Checkpoint.pending_sends
  • Pregel: Add NodeBuilder class to replace Channel.subscribe_to
  • Lint
  • Remove old checkpoint test fixtures
  • Remove postgres shallow checkpointer
  • Remove ChannelsManager, ManagedValues are now static classes and never instantiated
  • Remove Context channel / managed value, Remove SharedValue
  • Merge branch 'main' into fix-examples-link-readme
  • Update libs/langgraph/README.md
  • Update libs/langgraph/README.md
  • Merge branch 'main' into fix-examples-link-readme
  • Merge branch 'main' into fix-examples-link-readme
  • Merge branch 'main' into fix-examples-link-readme
  • Merge branch 'langchain-ai:main' into fix-examples-link-readme
  • fix link to examples page in readme.md
Commits

Updates boto3 to 1.38.35

Commits
  • 18bd5a2 Merge branch 'release-1.38.35'
  • 4b942d7 Bumping version to 1.38.35
  • 298bee1 Add changelog entries from botocore
  • 612750c Merge branch 'release-1.38.34'
  • 925a926 Merge branch 'release-1.38.34' into develop
  • 5b7c3c7 Bumping version to 1.38.34
  • 0f7d6ff Add changelog entries from botocore
  • 075ffd1 Merge pull request #4554 from boto/dependabot/pip/requests-2.32.4
  • 40db150 Bump requests from 2.32.3 to 2.32.4
  • af071cb Merge branch 'release-1.38.33'
  • Additional commits viewable in compare view

Updates tencentcloud-sdk-python to 3.0.1400

Changelog

Sourced from tencentcloud-sdk-python's changelog.

Release 3.0.1400

负载均衡(clb) 版本：2018-03-17

第 131 次发布

发布时间：2025-06-12 01:19:14

本次发布包含了以下内容：

改善已有的文档。

修改接口：

DNSPod(dnspod) 版本：2021-03-23

第 44 次发布

发布时间：2025-06-12 01:28:53

本次发布包含了以下内容：

改善已有的文档。

新增接口：

修改接口：

新增数据结构：

... (truncated)

Commits

Updates xinference-client to 1.6.1

Release notes

Sourced from xinference-client's releases.

v1.6.1

What's new in 1.6.1 (2025-05-30)

These are the changes in inference-client v1.6.1.

Others

Full Changelog: https://github.com/xorbitsai/inference-client/compare/v1.6.0...v1.6.1

Commits

Updates anthropic to 0.54.0

Release notes

Sourced from anthropic's releases.

v0.54.0

0.54.0 (2025-06-10)

Full Changelog: v0.53.0...v0.54.0

Features

  • client: add support for fine-grained-tool-streaming-2025-05-14 (07ec081)

Bug Fixes

  • httpx: resolve conflict between default transport and proxy settings (#969) (a6efded)
  • tests: update test (99c2433)

Chores

Documentation

  • contributing: fix uv script for bootstrapping (d2bde52)
Changelog

Sourced from anthropic's changelog.

0.54.0 (2025-06-10)

Full Changelog: v0.53.0...v0.54.0

Features

  • client: add support for fine-grained-tool-streaming-2025-05-14 (07ec081)

Bug Fixes

  • httpx: resolve conflict between default transport and proxy settings (#969) (a6efded)
  • tests: update test (99c2433)

Chores

Documentation

  • contributing: fix uv script for bootstrapping (d2bde52)

0.53.0 (2025-06-09)

Full Changelog: v0.52.2...v0.53.0

Features

  • client: add follow_redirects request option (e5238c0)
  • client: add support for new text_editor_20250429 tool (b3b3f5b)

Bug Fixes

  • client: deprecate BetaBase64PDFBlock in favor of BetaRequestDocumentBlock (5ac58e9)
  • internal: fix typing remapping (6c415da)

Chores

  • internal: codegen related update (94812ec)
  • internal: version bump (41ce701)
  • tests: improve testing by extracting fixtures (68c62cc)

0.52.2 (2025-06-02)

Full Changelog: v0.52.1...v0.52.2

... (truncated)

Commits
  • 00e0df2 Merge pull request #970 from anthropics/release-please--branches--main--chang...
  • f768bc5 release: 0.54.0
  • 99c2433 fix(tests): update test
  • 07ec081 feat(client): add support for fine-grained-tool-streaming-2025-05-14
  • a6efded fix(httpx): resolve conflict between default transport and proxy settings (#969)
  • d2bde52 docs(contributing): fix uv script for bootstrapping
  • 45029f4 chore(internal): version bump
  • aedb4cb release: 0.53.0
  • d7d3038 fix(internal): fix typing remapping
  • e684940 fix(client): deprecate BetaBase64PDFBlock in favor of BetaRequestDocumentBlock
  • Additional commits viewable in compare view

Updates dashscope to 1.23.4

Updates celery to 5.5.3

Release notes

Sourced from celery's releases.

v5.5.3

What's Changed

New Contributors

Full Changelog: https://github.com/celery/celery/compare/v5.5.2...v5.5.3

Changelog

Sourced from celery's changelog.

5.5.3

:release-date: 2025-06-01 :release-by: Tomer Nosrati

What's Changed


- make the tests run on python 3.13 for gcs backend ([#9677](https://github.com/celery/celery/issues/9677))
- Added DeepWiki to README ([#9683](https://github.com/celery/celery/issues/9683))
- Limit redis to <=v5.2.1 to match Kombu ([#9693](https://github.com/celery/celery/issues/9693))
- Use EX_OK instead of literal zero ([#9684](https://github.com/celery/celery/issues/9684))
- Make wheel metadata reproducible ([#9687](https://github.com/celery/celery/issues/9687))
- let celery install from kombu dependencies for better align ([#9696](https://github.com/celery/celery/issues/9696))
- Fix stamping documentation to clarify stamped_headers key is optional in visitor methods ([#9697](https://github.com/celery/celery/issues/9697))
- Support apply_async without queue argument on quorum queues ([#9686](https://github.com/celery/celery/issues/9686))
- Updated rabbitmq doc about using quorum queues with task routes ([#9707](https://github.com/celery/celery/issues/9707))
- Add: Dumper Unit Test ([#9711](https://github.com/celery/celery/issues/9711))
- Add unit test for event.group_from ([#9709](https://github.com/celery/celery/issues/9709))
- refactor: add beat_cron_starting_deadline documentation warning ([#9712](https://github.com/celery/celery/issues/9712))
- fix: resolve issue [#9569](https://github.com/celery/celery/issues/9569) by supporting distinct broker transport options for workers ([#9695](https://github.com/celery/celery/issues/9695))
- Fixes issue with retry callback arguments in DelayedDelivery ([#9708](https://github.com/celery/celery/issues/9708))
- get_exchange-unit-test ([#9710](https://github.com/celery/celery/issues/9710))
- ISSUE-9704: Update documentation of result_expires, filesystem backend is supported ([#9716](https://github.com/celery/celery/issues/9716))
- update to blacksmith ubuntu 24.04 ([#9717](https://github.com/celery/celery/issues/9717))
- Added unit tests for celery.utils.iso8601 ([#9725](https://github.com/celery/celery/issues/9725))
- Update introduction.rst docs ([#9728](https://github.com/celery/celery/issues/9728))
- Prepare for release: v5.5.3 ([#9732](https://github.com/celery/celery/issues/9732))

.. _version-5.5.2:


5.5.2


:release-date: 2025-04-25
:release-by: Tomer Nosrati


What's Changed

  • Fix calculating remaining time across DST changes (#9669)
  • Remove setup_logger from COMPAT_MODULES (#9668)
  • Fix mongodb bullet and fix github links in contributions section (#9672)
  • Prepare for release: v5.5.2 (#9675)

.. _version-5.5.1:

5.5.1

... (truncated)

Commits
  • 088c39c Prepare for release: v5.5.3 (#9732)
  • 0c1c52b Update introduction.rst docs (#9728)
  • 778b009 Added unit tests for celery.utils.iso8601 (#9725)
  • b00c144 update to blacksmith ubuntu 24.04
  • 5aae2ca ISSUE-9704: Update documentation of , filesystem backend is supported if cele...
  • 7cf9d89 get_exchange-unit-test (#9710)
  • b06e53f Fixes issue with retry callback argument types in DelayedDelivery (#9708)
  • b6cab29 fix: resolve issue #9569 by supporting distinct broker transport options for ...
  • 5fc068c refactor: add beat_cron_starting_deadline documentation warning (#9712)
  • c7bb67f Add unit test for event.group_from (#9709)
  • Additional commits viewable in compare view

Updates pymupdf to 1.26.1

Release notes

Sourced from pymupdf's releases.

PyMuPDF-1.26.1 released

PyMuPDF-1.26.1 has been released.

Wheels for Windows, Linux and MacOS, and the sdist, are available on pypi.org and can be installed in the usual way, for example:

python -m pip install --upgrade pymupdf

[Linux-aarch64 wheels will be built and uploaded later.]

Changes in version 1.26.1

  • Use MuPDF-1.26.2.

  • Fixed issues:

  • Other:

    • Partial fix for #4503.
    • New method Document.rewrite_images(), useful for reducing file size, changing image formats, or converting color spaces.
    • Page.get_text(): restrict positional args to match docs.
    • Removed bogus definition of class Shape.
    • Removed release date from module, docs and changelog.
      • pymupdf.pymupdf_date and pymupdf.VersionDate are now both None.
      • They will be removed in a future release.
Changelog

Sourced from pymupdf's changelog.

Change Log

Changes in version 1.26.1

  • Use MuPDF-1.26.2.

  • Fixed issues:

    • Fixed 4520 <https://github.com/pymupdf/PyMuPDF/issues/4520>_: show_pdf_page does not like empty pages created by new_page
    • Fixed 4524 <https://github.com/pymupdf/PyMuPDF/issues/4524>_: fitz.get_text ignores 'pages' kwarg
    • Fixed 4412 <https://github.com/pymupdf/PyMuPDF/issues/4412>_: Regression? Spurious error? in insert_pdf in v1.25.4

  • Other:

    • Partial fix for 4503 <https://github.com/pymupdf/PyMuPDF/issues/4503>_: Undetected character styles
    • New method Document.rewrite_images(), useful for reducing file size, changing image formats, or converting color spaces.
    • Page.get_text(): restrict positional args to match docs.
    • Removed bogus definition of class Shape.
    • Removed release date from module, docs and changelog.
      • pymupdf.pymupdf_date and pymupdf.VersionDate are now both None.
      • They will be removed in a future release.

Changes in version 1.26.0 (2025-05-22)

  • Use MuPDF-1.26.1.

  • Fixed issues:

    • Fixed 4324 <https://github.com/pymupdf/PyMuPDF/issues/4324>_: cluster_drawings() fails to cluster horizontal and vertical thin lines
    • Fixed 4363 <https://github.com/pymupdf/PyMuPDF/issues/4363>_: Trouble with searching
    • Fixed 4404 <https://github.com/pymupdf/PyMuPDF/issues/4404>_: IndexError in page.get_links()
    • Fixed 4412 <https://github.com/pymupdf/PyMuPDF/issues/4412>_: Regression? Spurious error? in insert_pdf in v1.25.4
    • Fixed 4423 <https://github.com/pymupdf/PyMuPDF/issues/4423>_: pymupdf.mupdf.FzErrorFormat: code=7: cannot find object in xref error encountered after version 1.25.3
    • Fixed 4435 <https://github.com/pymupdf/PyMuPDF/issues/4435>_: get_pixmap method stuck on one page
    • Fixed 4439 <https://github.com/pymupdf/PyMuPDF/issues/4439>_: New Xml class from data does not work - bug in code
    • Fixed 4445 <https://github.com/pymupdf/PyMuPDF/issues/4445>_: Broken XREF table incorrectly repaired
    • Fixed 4447 <https://github.com/pymupdf/PyMuPDF/issues/4447>_: Stroke color of annotations cannot be correctly set
    • Fixed 4479 <https://github.com/pymupdf/PyMuPDF/issues/4479>_: set_layer_ui_config() toggles all layers rather than just one
    • Fixed 4505 <https://github.com/pymupdf/PyMuPDF/issues/4505>_: Follow Widget flag values up its parent structure

  • Other:

    • Partial fixed for 4457 <https://github.com/pymupdf/PyMuPDF/issues/4457>_: Wrong characters displayed after font subsetting (w/ native method)
    • Support image stamp annotations.
    • Support recoloring pages.
    • Added example of using Django's file storage API to open files with pymupdf.
    • Clarified FreeText annotation color options.

... (truncated)

Commits
  • 4a53405 tests/: update expectations for latest mupdf master.
  • 08d7cd5 scripts/test.py: Added support for building releases.
  • ff83bbf .github/workflows/test.yml: also copy sdist into artifact.
  • 745f919 setup.py: build dummy wheel/sdist if PYMUPDF_SETUP_DUMMY=1.
  • 46b10ff tests/run_compound.py: show more system/platform/python information before ru...
  • 2d9a81b Update versions for next release and removed release date information.
  • c7e0800 tests/test_general.py: test_2238(): update to match change to Page.get_text()...
  • 10798cd changes.txt: misc updates.
  • 751d697 tests/: fix test_3624() with latest mupdf.
  • 65e6abf tests/: added test_4503: Undetected character styles
  • Additional commits viewable in compare view

Updates pypdf to 5.6.0

Release notes

Sourced from pypdf's releases.

Version 5.6.0, 2025-06-01

What's new

New Features (ENH)

Bug Fixes (BUG)

Robustness (ROB)

Code Style (STY)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 5.6.0, 2025-06-01

New Features (ENH)

  • Add basic support for JBIG2 by using jbig2dec (#3163)

Bug Fixes (BUG)

  • Fix crashes by removing unnecessary line (#3293)
  • Add delimiters to NameObject.renumber_table (#3286)

Robustness (ROB)

  • Handle DecodeParms being a NullObject (#3285)

Code Style (STY)

  • Update to mypy 1.16.0 (#3300)

Full Changelog

Version 5.5.0, 2025-05-11

New Features (ENH)

  • Add support for IndirectObject.iter (#3228)
  • Allow filtering by font when removing text (#3216)

Bug Fixes (BUG)

  • Add missing named destinations being ByteStringObjects (#3282)
  • Get font information more reliably when removing text (#3252)
  • T* 2D Translation consistent with PDF 1.7 Spec (#3250)
  • Add font stack to q/Q operations in layout mode (#3225)
  • Avoid completely hiding image loading issues like exceeding image size limits (#3221)
  • Using compress_identical_objects on transformed content duplicates differing content (#3197)
  • Consider BlackIs1 parameter for CCITTFaxDecode filter (#3196)

Robustness (ROB)

  • Deal with insufficient cm matrix during text extraction (#3283)
  • Allow merging when annotations miss D entry (#3281)
  • Fix merging documents if there are no Dests (#3280)
  • Fix crash on malformed action in outline (#3278)
  • Fix compression issues for removed images which might be None (#3246)
  • Attempt to deal with non-rectangular FlateDecode streams (#3245)
  • Handle some None values for broken PDF files (#3230)

Developer Experience (DEV)

  • Multiple style improvements
  • Update ruff to 0.11.0

Maintenance (MAINT)

  • Conform ASCIIHexDecode implementation to specification (#3274)
  • Modify comments of filters that do not use decode_parms (#3260)

Code Style (STY)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
...

Description has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
1
Additions:
+15
Deletions:
-15
Security Advisories
Django Improper Output Neutralization for Logs vulnerability
GHSA-7xr5-9hcq-chf9 CVE-2025-48432 MODERATE
An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22. Internal HTTP response logging does not escape request.path, which allows remote attackers to potential...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1526759
UUID: 2588203991
Node ID: PR_kwDOKTUe1M6aRNvX
Host: GitHub
Repository: 1Panel-dev/MaxKB
Merge State: Unknown