build(deps): bump the backend-runtime group across 1 directory with 49 updates
Type: Pull Request
State: Closed
Association: Unknown
Comments: 8
(2 days ago)
(2 days ago)
(2 days ago)
dependencies python
Updates the requirements on fastapi, python-multipart, email-validator, tenacity, pydantic, emails, jinja2, alembic, psycopg, bcrypt, pydantic-settings, sentry-sdk, pyjwt, celery, redis, uvicorn, pluggy, psutil, restrictedpython, requests, sse-starlette, pymilvus, openai, aiofiles, pandas, beautifulsoup4, pyyaml, google-cloud-storage, oss2, cos-python-sdk-v5, prometheus-client, sqlmodel, sqlalchemy, tiktoken, pytz, jsonschema, rich, fsspec, s3fs, opentelemetry-api, opentelemetry-sdk, opentelemetry-exporter-otlp-proto-http, opentelemetry-instrumentation-fastapi, opentelemetry-instrumentation-httpx, opentelemetry-instrumentation-sqlalchemy, opentelemetry-instrumentation-celery, opentelemetry-instrumentation-redis, mcp and litellm to permit the latest version.
Updates fastapi to 0.141.1
Release notes
Sourced from fastapi's releases.
0.141.1
Fixes
- 🐛 Fix support for background tasks and headers from dependencies in
app.frontend(). PR #16105 by@tiangolo.Docs
- 📝 Document
FASTAPI_ENVin FastAPI CLI guide. PR #16104 by@tiangolo.
Commits
95f8322🔖 Release version 0.141.1 (#16106)f137944📝 Update release notesd623544🐛 Fix support for background tasks and headers from dependencies in `app.fron...1d211b9📝 Update release notes8a1f876📝 DocumentFASTAPI_ENVin FastAPI CLI guide (#16104)c7e7b65🔖 Release version 0.141.0 (#16103)6bceb84📝 Update release notes5429fed✨ Addapp.frontend(check_dir="auto"), to make local development more conven...628663f🔖 Release version 0.140.13 (#16096)0b54fd0📝 Update release notes- Additional commits viewable in compare view
Updates python-multipart to 0.0.32
Release notes
Sourced from python-multipart's releases.
Version 0.0.32
What's Changed
- Replace per-byte partial-boundary scan with rfind lookbehind by
@Kludexin Kludex/python-multipart#300Full Changelog: https://github.com/Kludex/python-multipart/compare/0.0.31...0.0.32
Changelog
Sourced from python-multipart's changelog.
0.0.32 (2026-06-04)
- Speed up partial-boundary scanning for CR/LF-dense part data #300.
0.0.31 (2026-06-04)
- Speed up multipart header parsing and callback dispatch #295.
- Bound header field name size before validating #296.
- Validate
Content-Lengthis non-negative inparse_form#297.0.0.30 (2026-05-31)
- Parse
application/x-www-form-urlencodedbodies per the WHATWG URL standard, treating only&as a field separator #290.- Ignore RFC 2231/5987 extended parameters (
name*,filename*) inparse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.0.0.29 (2026-05-17)
- Handle malformed RFC 2231 continuations in
parse_options_header#270.0.0.28 (2026-05-10)
- Speed up partial-boundary tail scan via
bytes.find#281.- Cap multipart boundary length at 256 bytes #282.
0.0.27 (2026-04-27)
0.0.26 (2026-04-10)
- Skip preamble before the first multipart boundary more efficiently #262.
- Silently discard epilogue data after the closing multipart boundary #259.
0.0.25 (2026-04-10)
- Add MIME content type info to
File#143.- Handle CTE values case-insensitively #258.
- Remove custom
FormParserclasses #257.- Add
UPLOAD_DELETE_TMPtoFormParserconfig #254.- Emit
field_endfor trailing bare field names on finalize #230.- Handle multipart headers case-insensitively #252.
- Apply Apache-2.0 properly #247.
0.0.24 (2026-04-05)
- Validate
chunk_sizeinparse_form()#244.0.0.23 (2026-04-05)
... (truncated)
Commits
238ead6Version 0.0.32 (#302)8672979Replace per-byte partial-boundary scan with rfind lookbehind (#300)8190779Bump the python-packages group with 7 updates (#301)0d3c086Use uv package ecosystem for Dependabot (#299)4cffc68Version 0.0.31 (#298)c814948Reject negativeContent-Lengthinparse_form(#297)6b837d4Bound header field name size before validating (#296)e0c4f9dBump the github-actions group with 3 updates (#294)b8a01bbBump the python-packages group with 3 updates (#293)6732164Speed up multipart header parsing and callback dispatch (#295)- Additional commits viewable in compare view
Updates email-validator to 2.3.0
Release notes
Sourced from email-validator's releases.
v2.3.0
- The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
- The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new
strict=Trueparameter, and the overall 254 character email address length limit is still in place.- New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
- When using
allow_display_name=True, display names are now returned with Unicode NFC normalization.- TypeError is now raised if something other than str (or bytes) is passed as the email address.
Changelog
Sourced from email-validator's changelog.
2.3.0 (August 26, 2025)
- The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
- The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new
strict=Trueparameter, and the overall 254 character email address length limit is still in place.- New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
- When using
allow_display_name=True, display names are now returned with Unicode NFC normalization.- TypeError is now raised if something other than str (or bytes) is passed as the email address.
2.2.0 (June 20, 2024)
- Email addresses with internationalized local parts could, with rare Unicode characters, be returned as valid but actually be invalid in their normalized form (returned in the
normalizedfield). In particular, it is possible to get a normalized address with a ";" character, which is not valid and could change the interpretation of the address. Local parts now re-validated after Unicode NFC normalization to ensure that invalid characters cannot be injected into the normalized address and that characters with length-increasing NFC normalizations cannot cause a local part to exceed the maximum length after normalization. Thanks to khanh@calif.io from https://calif.io for reporting the issue.- The length check for email addresses with internationalized local parts is now also applied to the original address string prior to Unicode NFC normalization, which may be longer and could exceed the maximum email address length, to protect callers who do not use the returned normalized address.
- Improved error message for IDNA domains that are too long or have invalid characters after Unicode normalization.
- A new option to parse
My Name <address@domain>strings, i.e. a display name plus an email address in angle brackets, is now available. It is off by default.- Improvements to Python typing.
- Some additional tests added.
2.1.2 (June 16, 2024)
- The domain name length limit is corrected from 255 to 253 IDNA ASCII characters. I misread the RFCs.
- When a domain name has no MX record but does have an A or AAAA record, if none of the IP addresses in the response are globally reachable (i.e. not Private-Use, Loopback, etc.), the response is treated as if there was no A/AAAA response and the email address will fail the deliverability check.
- When a domain name has no MX record but does have an A or AAAA record, the mx field in the object returned by validate_email incorrectly held the IP addresses rather than the domain itself.
- Fixes in tests.
2.1.1 (February 26, 2024)
- Fixed typo 'marking' instead of 'marketing' in case-insensitive mailbox name list.
- When DNS-based deliverability checks fail, in some cases exceptions are now thrown with
raise ... fromfor better nested exception tracking.- Fixed tests to work when no local resolver can be configured.
- This project is now licensed under the Unlicense (instead of CC0).
- Minor improvements to tests.
- Minor improvements to code style.
2.1.0 (October 22, 2023)
- Python 3.8+ is now required (support for Python 3.7 was dropped).
- The old
ValidatedEmailobject, which in the previous version was superseded bynormalized, will now raise a deprecation warning if used. See https://stackoverflow.com/q/879173 for strategies to suppress the DeprecationWarning.- A
__version__module attribute is added.- The email address argument to validate_email is now marked as positional-only to better reflect the documented usage using the new Python 3.8 feature.
2.0.0 (April 15, 2023)
This is a major update to the library, but since email address specs haven't changed there should be no significant changes to which email addresses are considered valid or invalid with default options. There are new options for accepting unusual email addresses that were previously always rejected, some changes to how DNS errors are handled, many changes in error message text, and major internal improvements including the addition of type annotations. Python 3.7+ is now required. Details follow:
... (truncated)
Commits
030a63aVersion 2.3.0e943a0fRaise TypeError when an invalid argument is passed for email, closes #155f90d256Remove local part length check unless new strict flag is given, fixes #15898800baAdd explicit checks for internationalized domain name characters invalid unde...936aeadFix final syntax checks on normalized internationalized domains checking the ...8043de4NFC-normalize display names per UTS #39bc08faaAdd one-off error messages for full-width-at and small-commercial-at which ar...a1c90abSplit exceptions_types.py into exceptions.py and types.pydbcf07cChange package name from using underscore to dash to match PyPi normalized pa...7c22208Support ALLOW_DISPLAY_NAME and ALLOW_EMPTY_LOCAL in the CLI (#145)- Additional commits viewable in compare view
Updates tenacity to 9.1.4
Release notes
Sourced from tenacity's releases.
9.1.4
What's Changed
- Fix
retry()annotations with asyncsleep=function by@Zac-HDin jd/tenacity#555Full Changelog: https://github.com/jd/tenacity/compare/9.1.3...9.1.4
Commits
d4e868dFixretry()annotations with asyncsleep=function (#555)24415ebsupport async sleep for sync fn (#551)3bf33b4chore: drop Python 3.9 support (EOL) (#552)7027da3chore(deps): bump the github-actions group with 2 updates (#550)21ae7d0docs: fix syntax error in wait_chain docstring example (#548)ef12c9echore(deps): bump actions/checkout in the github-actions group (#547)c35a4b3chore(deps): bump the github-actions group with 2 updates (#545)e792bbaci: fix mypy (#546)0f55245ci: remove reno requirements (#542)815c34ffeat(wait): addwait_exceptionstrategy (#541)- Additional commits viewable in compare view
Updates pydantic to 2.13.4
Release notes
Sourced from pydantic's releases.
v2.13.4 2026-05-06
v2.13.4 (2026-05-06)
What's Changed
Packaging
- Bump libc from 0.2.155 to 0.2.185 by
@Viicosin #13109- Adapt
pydantic-corelinker flags on macOS by@washingtonegand@Viicosin #13147Fixes
Full Changelog: https://github.com/pydantic/pydantic/compare/v2.13.3...v2.13.4
Changelog
Sourced from pydantic's changelog.
v2.13.4 (2026-05-06)
What's Changed
Packaging
- Bump libc from 0.2.155 to 0.2.185 by
@Viicosin #13109- Adapt
pydantic-corelinker flags on macOS by@washingtonegand@Viicosin #13147Fixes
v2.13.3 (2026-04-20)
What's Changed
Fixes
v2.13.2 (2026-04-17)
What's Changed
Fixes
v2.13.1 (2026-04-15)
What's Changed
Fixes
- Fix
ValidationInfo.datamissing withmodel_validate_json()by@davidhewittin #13079v2.13.0 (2026-04-13)
The highlights of the v2.13 release are available in the blog post.
... (truncated)
Commits
cf67d4bFix lintingf0d8a21Prepare release v2.13.45e3fe1dCheck for pydantic tag pattern in CI7f9edccDocument tagging conventionsb46a0c9Adaptpydantic-corelinker flags on macOS50629c8Update to PyPy 7.3.228522ebbPreserveRootModelcore metadataa37f3afAdaptMISSINGsentinel test to work with unreleasedtyping_extensionsver...909259aRemove Logfire example in documentation2c4174cBump libc from 0.2.155 to 0.2.185- Additional commits viewable in compare view
Updates emails to 1.1.2
Release notes
Sourced from emails's releases.
v1.1.2
Full Changelog: https://github.com/lavr/python-emails/compare/v1.1.1...v1.1.2
Changelog
Sourced from emails's changelog.
Changelog
1.0.2
Added
- Documentation build check in CI (#208)
- ReadTheDocs configuration (
.readthedocs.yaml)Fixed
- Jinja2 is now an optional dependency — install with
pip install emails[jinja2](#207, #161)Message.as_bytes()now serializes messages with CRLF line endings for RFC 5321-compliant SMTP delivery (#213)1.0
Breaking changes
- Require Python 3.10+ (dropped 3.9) (#188)
- HTML transformation dependencies (
cssutils,lxml,chardet,requests,premailer) are now optional — install withpip install emails[html](#190)- Removed Python 2 compatibility helpers
to_bytes,to_native,to_unicodefromemails.utils(#197)- Replaced vendored
emails.packages.dkimwith upstreamdkimpypackage — useimport dkimdirectly (#196)Added
reply_toparameter for Message (#115)- Content-based MIME type detection via
puremagicwhen file extension is missing (#163)- Data URI support in transformer —
data:URIs are preserved as-is (#62)- Type hints for public API (#191)
- mypy in CI (#194)
- Python 3.13 and 3.14 support (#184)
- Django CI jobs with Django 4.2, 5.2, 6.0 (#201)
- CC/BCC importing in MsgLoader (#182)
- RFC 6532 support — non-ASCII characters in email addresses (#138)
- In-memory SMTP backend (#136)
- SMTP integration tests using Mailpit (#186)
Fixed
- Double stream read in
BaseFile.mimefor file-like attachments (#199)as_bytesDKIM signing bug (#194)- SMTP connection is now properly closed on any initialization failure (#180)
- SMTP connection is now properly closed on failed login (#173)
- Incorrect
isinstancecheck inparse_name_and_email_list(#176)- Message encoding to bytes in SMTP backend (#152)
- Unique filename generation for attachments
- Regex escape sequence warning (#148)
- Replaced deprecated
cgimodule withemail.message- Coverage reports now correctly exclude
emails/testsuite/
... (truncated)
Commits
67ef38bRelease v1.1.23a5a55ctests: generate DKIM RSA keys on the fly via cryptographye18d04bREADME badge fix93784e7ci/cd: rtd publish debug3634f44badge fix42942e8Release v1.1.1bd72398set pypi licencea940210README update5549b5brtd build fix2fc1e4brtd build fix- Additional commits viewable in compare view
Updates jinja2 to 3.1.6
Release notes
Sourced from jinja2's releases.
3.1.6
This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.
PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6
- The
|attrfilter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7
Changelog
Sourced from jinja2's changelog.
Version 3.1.6
Released 2025-03-05
- The
|attrfilter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7Version 3.1.5
Released 2024-12-21
- The sandboxed environment handles indirect calls to
str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h- Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:
1792, :ghsa:gmj6-6f8f-6699- Sandbox does not allow
clearandpopon known mutable sequence types. :issue:2032- Calling sync
renderfor an async template usesasyncio.run. :pr:1952- Avoid unclosed
auto_aiterwarnings. :pr:1960- Return an
aclose-ableAsyncGeneratorfromTemplate.generate_async. :pr:1960- Avoid leaving
root_render_func()unclosed inTemplate.generate_async. :pr:1960- Avoid leaving async generators unclosed in blocks, includes and extends. :pr:
1960- The runtime uses the correct
concatfunction for the current environment when calling block references. :issue:1701- Make
|uniqueasync-aware, allowing it to be used after another async-aware filter. :issue:1781|intfilter handlesOverflowErrorfrom scientific notation. :issue:1921- Make compiling deterministic for tuple unpacking in a
{% set ... %}call. :issue:2021- Fix dunder protocol (
copy/pickle/etc) interaction withUndefinedobjects. :issue:2025- Fix
copy/picklesupport for the internalmissingobject. :issue:2027Environment.overlay(enable_async)is applied correctly. :pr:2061- The error message from
FileSystemLoaderincludes the paths that were searched. :issue:1661PackageLoadershows a clearer error message when the package does not contain the templates directory. :issue:1705- Improve annotations for methods returning copies. :pr:
1880urlizedoes not addmailto:to values like@a@b. :pr:1870
... (truncated)
Commits
1520688release version 3.1.690457bbMerge commit from fork065334dattr filter uses env.getattr033c200start version 3.1.6bc68d4euse global contributing guide (#2070)247de5euse global contributing guideab8218cuse project advisory link instead of globalb4ffc8frelease version 3.1.5 (#2066)877f6e5release version 3.1.58d58859remove test pypi- Additional commits viewable in compare view
Updates alembic to 1.18.5
Release notes
Sourced from alembic's releases.
1.18.5
Released: June 25, 2026
usecase
[usecase] [commands] Added
--splicesupport to themerge()command. Previously, the merge command would suggest using--splicewhen attempting to merge non-head revisions, but the flag was not actually accepted by the command. Thespliceparameter is now available in both the command-line interface and thecommand.merge()function, matching the existing support incommand.revision(). Pull request courtesy Kadir Can Ozden.References: #1712
[usecase] [environment] Added
ScriptDirectory.get_heads.consider_depends_onparameter toScriptDirectory.get_heads(). When set toTrue, head revisions that are also a dependency of another revision viadepends_onare excluded from the result, matching the effective heads that would be present in thealembic_versiontable after running all upgrades.References: #1806
bug
[bug] [autogenerate] Fixed rendering of dialect keyword arguments containing
~sqlalchemy.schema.Columnobjects within sequences, such aspostgresql_include. These were previously rendered usingrepr(), producing invalid Python in the generated migration scripts. Column objects within list or tuple values are now correctly rendered as their string column names. Pull request courtesy Ajay Singh.References: #1258
[bug] [mysql] Implemented type comparison for
ENUMdatatypes on MySQL, which checks that the individual enum values are equivalent. If additional entries are on either side, this generates a diff. Changes of order do not generate a diff. Pull request courtesy Furkan Köykıran.[bug] [operations] Fixed bug where the
inline_referencesparameter ofOperations.add_column()did not include foreign key referential actions such asON DELETE,ON UPDATE,DEFERRABLE,INITIALLY, andMATCHwhen rendering the inlineREFERENCESclause.
... (truncated)
Commits
- See full diff in compare view
Updates psycopg to 3.3.4
Changelog
Sourced from psycopg's changelog.
.. currentmodule:: psycopg
.. index:: single: Release notes single: News
psycopgrelease notesFuture releases
Psycopg 3.3.5 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^
- Discard prepared statements upon :sql:
ALTER *orDISCARD *(:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).- Fix
!ProgrammingErrorwhen dumping non-!Nonevalues with no!NoneTypedumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).- Fix
!wait_selectorwait function to not raise!KeyError(:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).- Fix
!DataErrormessages leaking the literal{...}placeholder instead of the offending value when loading a pre-year-1 :sql:timestampor a malformed binary :sql:jsonbvalue (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).Current release
Psycopg 3.3.4 ^^^^^^^^^^^^^
- Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:
[#1280](https://github.com/psycopg/psycopg/issues/1280)).- Fix client-side adaptation of enums whose name require quotes (:ticket:
[#1298](https://github.com/psycopg/psycopg/issues/1298)).- Consistently populate
~Cursor.statusmessageafter~Cursor.executemany()(:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).Psycopg 3.3.3 ^^^^^^^^^^^^^
- Retain
Error.pgconnwhen raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).- Return a proper error when server sends
ErrorResponsefor aSyncafter aParse(:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).Psycopg 3.3.2
... (truncated)
Commits
83f1103chore: bump psycopg_pool package version to 3.3.11828770chore: bump psycopg package version to 3.3.48be14bbMerge pull request #1301 from oliverhaas/fix/sync-pool-open-raceaee0bf2fix(pool): fix race in the construction of the sync ConnectionPool lockbc4d303chore(deps): bump the actions group across 1 directory with 4 updates785379ffix: retain statusmessage after executemany with returning=False8882a73perf: do less if X in Y: return Y[X] for cache-like patterns2f78539Merge pull request #1299 from dvarrazzo/fix-camel-enum37ef1dctest: skip test on crdb depending on precise regtype behaviour7f2f1d1fix: fix client-side representation of enums requiring quotes- Additional commits viewable in compare view
Updates bcrypt from 4.0.1 to 5.0.0
Changelog
Sourced from bcrypt's changelog.
5.0.0
- Bumped MSRV to 1.74.
- Added support for Python 3.14 and free-threaded Python 3.14.
- Added support for Windows on ARM.
- Passing
hashpwa password longer than 72 bytes now raises aValueError. Previously the password was silently truncated, following the behavior of the original OpenBSDbcryptimplementation.4.3.0
- Dropped support for Python 3.7.
- We now support free-threaded Python 3.13.
- We now support PyPy 3.11.
- We now publish wheels for free-threaded Python 3.13, for PyPy 3.11 on
manylinux, and for ARMv7l onmanylinux.4.2.1
- Bump Rust dependency versions - this should resolve crashes on Python 3.13 free-threaded builds.
- We no longer build
manylinuxwheels for PyPy 3.9.4.2.0
- Bump Rust dependency versions
- Removed the
BCRYPT_ALLOW_RUST_163environment variable.4.1.3
- Bump Rust dependency versions
4.1.2
- Publish both
py37andpy39wheels. This should resolve some errors relating to initializing a module multiple times per process.4.1.1
- Fixed the type signature on the
kdfmethod.- Fixed packaging bug on Windows.
- Fixed incompatibility with passlib package detection assumptions.
... (truncated)
Commits
5060bce5.0.0 release (#1078)e43f568Bump actions/cache from 4.2.4 to 4.3.0 (#1077)fc9f680Bump libc from 0.2.175 to 0.2.176 in /src/_bcrypt (#1075)633f46fAdd support for Python 3.14 (#1073)a2fefbbRemove pypy310 builds (#1074)f60707eBump wasi from 0.14.5+wasi-0.2.4 to 0.14.7+wasi-0.2.4 in /src/_bcrypt (#1071)c790eedBump unicode-ident from 1.0.18 to 1.0.19 in /src/_bcrypt (#1070)122cbdcBump target-lexicon from 0.13.2 to 0.13.3 in /src/_bcrypt (#1069)2bd208dBump wasi from 0.14.4+wasi-0.2.4 to 0.14.5+wasi-0.2.4 in /src/_bcrypt (#1068)e1aa9e8remove poinless cargo cache paths from CI (#1067)- Additional commits viewable in compare view
Updates pydantic-settings to 2.14.2
Release notes
Sourced from pydantic-settings's releases.
v2.14.2
What's Changed
This is a security patch release.
- Prevent
NestedSecretsSettingsSourcefrom following symlinks outsidesecrets_dirby@hramezaniin pydantic/pydantic-settings#889- Prepare release 2.14.2 by
@hramezaniin pydantic/pydantic-settings#890Security
Fixes GHSA-4xgf-cpjx-pc3j:
NestedSecretsSettingsSourcewithsecrets_nested_subdir=Truecould follow a symbolic link insidesecrets_dirpointing outside it, reading out-of-tree files into settings values and bypassing thesecrets_dir_max_sizecap. Affected versions:>= 2.12.0, < 2.14.2.Full Changelog: https://github.com/pydantic/pydantic-settings/compare/v2.14.1...v2.14.2
Commits
d703bd7Prepare release 2.14.2 (#890)e95c30bPrepare release 2.14.1 (#859)0c87345Fix field namedclsconflicting with classmethod parameter (#858)7bd0072Bump the python-packages group with 2 updates (#856)b03e573Bump the github-actions group with 3 updates (#853)eaa3b43Bump the python-packages group with 5 updates (#854)9f95615Bump the python-packages group with 4 updates (#850)8916beePrepare release 2.14.0 (#848)39e551cFix CLI descriptions lost underpython -OOby falling back to `json_schema_...9ed7f48Bump the python-packages group with 4 updates (#847)- Additional commits viewable in compare view
Updates sentry-sdk to 2.66.1
Release notes
Sourced from sentry-sdk's releases.
2.66.1
Bug Fixes 🐛
Tracing
- Handle exceptions raised within traces_sampler and other callbacks by
@ericapisaniin #6853Internal Changes 🔧
- Fix flaky decorator test by
@sl0thentr0pyin #6830
Changelog
Sourced from sentry-sdk's changelog.
2.66.1
Bug Fixes 🐛
Tracing
- Handle exceptions raised within traces_sampler and other callbacks by
@ericapisaniin #6853Internal Changes 🔧
- Fix flaky decorator test by
@sl0thentr0pyin #68302.66.0
New Features ✨
- (tracing) Promote trace_lifecycle and ignore_spans to top-level options by
@ericapisaniin #6821Bug Fixes 🐛
Tracing
- Skip child span creation in streaming path when no current span (HTTP clients) by
@sentrivanain #6811- Skip child span creation in streaming path when no current span (task queues) by
@sentrivanain #6814- Skip child span creation in streaming path when no current span (misc) by
@sentrivanain #6815- Skip child span creation in streaming path when no current span (databases) by
@sentrivanain #6808- Skip child span creation in streaming path when no current span (web frameworks) by
@sentrivanain #6810- Skip child span creation in streaming path when no current span (django) by
@sentrivanain #6809Internal Changes 🔧
- (logging) Fix flaky test_logging_captured_warnings by
@ericapisaniin #6824- Remove flaky no cyclic garbage test by
@alexander-alderman-webbin #6817- Remove Claude permission settings by
@cleptricin #6806- Move
nullcontexttosentry_sdk.utilsby@sentrivanain #68052.65.0
New Features ✨
Huey
- Set
messaging.destination.nameon consumer spans by@alexander-alderman-webbin #6779- Set
messaging.destination.nameon producer spans by@alexander-alderman-webbin #6778Other
- (arq) Se...
Description has been truncated
Package Dependencies
Security Advisories
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
Technical Details
| ID: | 16145813 |
| UUID: | 5069104040 |
| Node ID: | PR_kwDONkQOOc76-ZuU |
| Host: | GitHub |
| Repository: | soit-ai/soit |