An open index of dependabot pull requests across open source projects.

build(deps): bump the all-dependencies group in /services/hermes with 4 updates

Open
Number: #104
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: October 03, 2026 at 08:43 AM UTC
(11 days ago)
Updated: October 03, 2026 at 08:44 AM UTC
(11 days ago)
Labels:
dependencies python
Description:

Updates the requirements on fastapi, uvicorn, anthropic and langchain-anthropic to permit the latest version.
Updates fastapi to 0.142.1

Release notes

Sourced from fastapi's releases.

0.142.1

Fixes

Commits

Updates uvicorn to 0.54.0

Release notes

Sourced from uvicorn's releases.

Version 0.54.0

πŸ“¨ Send metadata after the response body

uvicorn 0.54.0 adds response trailers and 103 Early Hints to its experimental HTTP/2 implementation through zttp.

uv add uvicorn==0.54.0 "zttp>=0.0.34"
  • Send HTTP/2 response trailers (#3146). The ASGI http.response.trailers extension lets applications send metadata, such as checksums, after the response body. Clients must send TE: trailers to receive them. Multiple trailer messages are combined before completing the response.
  • HTTP/2 remains experimental and opt-in. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.

πŸ’‘ Hint at resources before the final response

  • Send 103 Early Hints over HTTP/2 (#3137). Applications can use the ASGI http.response.early_hint extension to send resource hints before the final response. Each supplied link becomes a separate Link header.

Full changelog: 0.53.0...0.54.0

Changelog

Sourced from uvicorn's changelog.

0.54.0 (September 24, 2026)

HTTP/2 support remains experimental. Install zttp>=0.0.34 and enable it with --http zttp --http2.

Added

  • Add HTTP/2 response trailers through the ASGI http.response.trailers extension. Clients must send TE: trailers to receive them (#3146)
  • Add HTTP/2 103 Early Hints through the ASGI http.response.early_hint extension (#3137)

0.53.0 (September 14, 2026)

This release adds experimental HTTP/2 support through zttp. Enable it with --http zttp --http2. Upgrade-based h2c and WebSockets over HTTP/2 are not supported.

Added

  • Add experimental HTTP/2 support through zttp (#2982, #3101)
  • Add support for zuvloop (#3104)

Fixed

  • Handle comma-separated, case-insensitive Connection: close tokens across HTTP implementations (#3103)
  • Trust IPv6 loopback in the default FORWARDED_ALLOW_IPS value (#3119)
  • Cancel the HTTP keep-alive timer when upgrading to WebSocket (#3107)

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)

... (truncated)

Commits

Updates anthropic to 1.9.0

Release notes

Sourced from anthropic's releases.

v1.9.0

1.9.0 (2026-09-28)

Full Changelog: v1.8.0...v1.9.0

Features

  • api: add between_tools thinking type (a9a577d)
  • api: add claude-sonnet-5-5 (a5a25e9)
  • api: add include_inherited and source to workspace rate limits (0bf4af8)
  • api: add typed event type values to the Managed Agents events list filter (1b82cd9)
  • api: cache diagnostics GA β€” diagnostics on Message / MessageCreateParams (22062b8)
  • tools: optionally run tool calls while the reply streams (26d0812)

Bug Fixes

  • client: send no placeholder filename for unnamed file uploads (9e9709d)
  • helpers: degrade between_tools thinking to disabled on fallback hops (#952) (a3834d4)
  • messages: accept diagnostics in stream() and parse() (#929) (fad840c)

Chores

  • api: list the known model ids first in the Model types (e5a082a)
  • ci: choose the CI runner by repository (39ccf62)
  • client: stop sending beta header from parse and tool runner (#907) (1428100)
  • docs: clarify that stream: true returns the raw event stream (82918fa)
  • docs: make Managed Agents actor descriptions resource-neutral (34ef524)
  • docs: restore the research-preview notice on the Dream type (f03e32e)

Documentation

  • add field docstring spacing rule to CLAUDE.md (e5c35f4)
  • api: prefer each field's own description over its shared type's (d79a2e7)
  • claude.md: add function body spacing rule (3174f8f)
  • list importable type names in api.md (56a42ab)
Changelog

Sourced from anthropic's changelog.

1.9.0 (2026-09-28)

Full Changelog: v1.8.0...v1.9.0

Features

  • api: add between_tools thinking type (a9a577d)
  • api: add claude-sonnet-5-5 (a5a25e9)
  • api: add include_inherited and source to workspace rate limits (0bf4af8)
  • api: add typed event type values to the Managed Agents events list filter (1b82cd9)
  • api: cache diagnostics GA β€” diagnostics on Message / MessageCreateParams (22062b8)
  • tools: optionally run tool calls while the reply streams (26d0812)

Bug Fixes

  • client: send no placeholder filename for unnamed file uploads (9e9709d)
  • helpers: degrade between_tools thinking to disabled on fallback hops (#952) (a3834d4)
  • messages: accept diagnostics in stream() and parse() (#929) (fad840c)

Chores

  • api: list the known model ids first in the Model types (e5a082a)
  • ci: choose the CI runner by repository (39ccf62)
  • client: stop sending beta header from parse and tool runner (#907) (1428100)
  • docs: clarify that stream: true returns the raw event stream (82918fa)
  • docs: make Managed Agents actor descriptions resource-neutral (34ef524)
  • docs: restore the research-preview notice on the Dream type (f03e32e)

Documentation

  • add field docstring spacing rule to CLAUDE.md (e5c35f4)
  • api: prefer each field's own description over its shared type's (d79a2e7)
  • claude.md: add function body spacing rule (3174f8f)
  • list importable type names in api.md (56a42ab)

1.8.0 (2026-09-22)

Full Changelog: v1.7.0...v1.8.0

Features

  • api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (b5cc700)

Bug Fixes

  • api: share one evaluated_permission enum across Managed Agents events (f4f51c8)

... (truncated)

Commits
  • a7285e9 Merge pull request #1958 from anthropics/release-please--branches--main--chan...
  • 3e2ac95 release: 1.9.0
  • 24b1d55 codegen metadata
  • a5a25e9 feat(api): add claude-sonnet-5-5
  • 2264bd8 codegen metadata
  • 9e9709d fix(client): send no placeholder filename for unnamed file uploads
  • 1b82cd9 feat(api): add typed event type values to the Managed Agents events list filter
  • 26d0812 feat(tools): optionally run tool calls while the reply streams
  • ebb8239 codegen metadata
  • a3834d4 fix(helpers): degrade between_tools thinking to disabled on fallback hops (#952)
  • Additional commits viewable in compare view

Updates langchain-anthropic to 1.7.5

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.7.5

Changes since langchain-anthropic==1.7.4

release(anthropic): 1.7.5 (#40912) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) fix(anthropic): serialize invalid tool calls as tool use on replay (#40864)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Technical Details
ID: 16659377
UUID: 5688041455
Node ID: PR_kwDOSfR0vc8AAAABGaXUQQ
Host: GitHub
Repository: executiveusa/Cheggie-trade-V2