Skip to content

build(deps): bump the version-all group across 1 directory with 19 updates #322

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the version-all group across 1 directory with 19 updates #322

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 15, 2026

Bumps the version-all group with 15 updates in the / directory:

Package From To
huggingface-hub 0.34.4 1.3.2
pandas 2.3.2 2.3.3
pillow 11.3.0 12.1.0
modal 1.1.4 1.3.0.post1
python-dotenv 1.1.1 1.2.1
gitpython 3.1.45 3.1.46
fastmcp 2.12.4 2.14.3
litellm 1.80.10 1.80.16
lmnr 0.7.25 0.7.29
multi-swe-bench 1.1.1 1.1.2
pre-commit 4.3.0 4.5.1
psutil 7.0.0 7.2.1
pyright 1.1.405 1.1.408
ruff 0.13.0 0.14.11
pytest 8.4.2 9.0.2

Updates huggingface-hub from 0.34.4 to 1.3.2

Release notes

Sourced from huggingface-hub's releases.

[v1.3.2] Zai provider support for text-to-image and fix custom endpoint not forwarded

Full Changelog: huggingface/huggingface_hub@v1.3.1...v1.3.2

[v1.3.1] Add dimensions & encoding_format parameters to feature extraction (embeddings) task

  • Add dimensions & encoding_format parameter to InferenceClient for output embedding size #3671 by @​mishig25

Full Changelog: huggingface/huggingface_hub@v1.3.0...v1.3.1

[v1.3.0] New CLI Commands for Hub Discovery, Jobs Monitoring and more!

🖥️ CLI: hf models, hf datasets, hf spaces Commands

The CLI has been reorganized with dedicated commands for Hub discovery, while hf repo stays focused on managing your own repositories.

New commands:

# Models
hf models ls --author=Qwen --limit=10
hf models info Qwen/Qwen-Image-2512
Datasets
hf datasets ls --filter "format:parquet" --sort=downloads
hf datasets info HuggingFaceFW/fineweb
Spaces
hf spaces ls --search "3d"
hf spaces info enzostvs/deepsite

This organization mirrors the Python API (list_models, model_info, etc.), keeps the hf <resource> <action> pattern, and is extensible for future commands like hf papers or hf collections.

🔧 Transformers CLI Installer

You can now install the transformers CLI alongside the huggingface_hub CLI using the standalone installer scripts.

# Install hf CLI only (default)
curl -LsSf https://hf.co/cli/install.sh | bash -s
Install both hf and transformers CLIs
curl -LsSf https://hf.co/cli/install.sh | bash -s -- --with-transformers

... (truncated)

Commits

Updates pandas from 2.3.2 to 2.3.3

Release notes

Sourced from pandas's releases.

Pandas 2.3.3

We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • 9c8bc3e RLS: 2.3.3
  • 6aa788a [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)
  • b64f0df [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...
  • 058eb2b [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...
  • 2ca088d [backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...
  • 92bf98f [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...
  • e57c7d6 Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)
  • e0fe9a0 Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...
  • 23a1085 BUG: improve future warning for boolean operations with missaligned indexes (...
  • 6113696 Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...
  • Additional commits viewable in compare view

Updates pillow from 11.3.0 to 12.1.0

Release notes

Sourced from pillow's releases.

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Documentation

Dependencies

Testing

Type hints

... (truncated)

Commits

Updates openhands-sdk from 1.7.2 to 1.8.1

Updates openhands-tools from 1.7.2 to 1.8.1

Updates openhands-agent-server from 1.7.2 to 1.8.1

Updates openhands-workspace from 1.7.2 to 1.8.1

Updates modal from 1.1.4 to 1.3.0.post1

Changelog

Sourced from modal's changelog.

Changelog

This changelog documents user-facing updates (features, enhancements, fixes, and deprecations) to the modal client library.

Latest

1.3.1.dev20 (2026-01-14)

  • Added --timestamps flag to modal run, modal serve and modal deploy to show timestamps for log output. 
    modal run --timestamps my_app.py::my_function

1.3.1.dev16 (2026-01-12)

  • Added a --timestamps option to the modal container logs CLI.

1.3.1.dev14 (2026-01-12)

  • Adds experimental support for Python 3.14t. You can test Python 3.14t with the following image definition:
image = modal.Image.from_registry("debian:bookworm-slim", add_python="3.14t")

1.3.1.dev12 (2026-01-09)

  • Added a new modal token info CLI command to retrieve information about the credentials that are currently in use

1.3.1.dev8 (2026-01-06)

  • Correctly specify the minimum version for grpclib with Python 3.14.

1.3.1.dev2 (2025-12-23)

  • Improves client resource management when running Sandbox.exec.

1.3.0 (2025-12-19)

Modal now supports Python 3.14. Python 3.14t (the free-threading build) is not supported, because we are waiting for dependencies to be updated with free-threaded support. Additionally, Modal no longer supports Python 3.9, which has reached end-of-life.

We are adding experimental support for detecting cases where Modal's blocking APIs are used in async contexts (which can be a source of bugs or performance issues). You can opt into runtime warnings by setting MODAL_ASYNC_WARNINGS=1 as an environment variable or async_warnings = true as a config field. We will enable these warnings by default in the future; please report any apparent false positives or other issues while support is experimental.

... (truncated)

Commits
  • 2369894 [auto-commit] [skip ci] Bump the build number
  • 7fa0698 Fix docstring and do a post release (#3847)
  • 3e6033f [auto-commit] [skip ci] Bump the build number
  • 4f8e4db Release v1.3.0 (#3846)
  • 5b6b939 [auto-commit] [skip ci] Bump the build number
  • 08817a1 [flash] add checks for clustered flash functions autoscaling (#3790)
  • 1b36a04 [auto-commit] [skip ci] Bump the build number
  • b5aac74 Wrapup async warnings (#3844)
  • 4b810d0 [auto-commit] [skip ci] Bump the build number
  • 36ea995 Support Python 3.14 (#3785)
  • Additional commits viewable in compare view

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

New Contributors

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Commits
  • eaf2a91 Do not remove .coverage file
  • 8716196 Bump version: 1.2.0 → 1.2.1
  • b87807f Update changelog
  • 3af77d3 Support reading .env from FIFOs (Unix) (#586)
  • 467ee22 Fix test failures after moving config to pyproject.toml
  • 76999e7 Move more config pyproject.toml
  • 222ce2c Update to use trusted publisher on pypi
  • 8ed4f79 Update docs requirements
  • 5bf8822 Bump version: 1.1.1 → 1.2.0
  • 1fe11cc upadate changelog
  • Additional commits viewable in compare view

Updates gitpython from 3.1.45 to 3.1.46

Release notes

Sourced from gitpython's releases.

3.1.46

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.45...3.1.46

Commits
  • 9e24eb6 Prepare next release
  • b8bb60e Merge pull request #2094 from George-Ogden/join-pathlike
  • c8b58c0 Update test/test_tree.py
  • 88e2614 Allow joining path to tree
  • 9fa28ae Add failing tests for joining paths
  • 6d66a02 Merge pull request #2093 from gitpython-developers/dependabot/submodules/git/...
  • f738029 Bump git/ext/gitdb from 65321a2 to 4c63ee6
  • eecc28d Merge pull request #2086 from George-Ogden/true-pathlike
  • 0cb55fb Revert "Add tests with non-ascii characters"
  • 1710626 Add tests with non-ascii characters
  • Additional commits viewable in compare view

Updates fastmcp from 2.12.4 to 2.14.3

Release notes

Sourced from fastmcp's releases.

v2.14.3: Time After Timeout

This patch release fixes an HTTP transport timeout bug where connections were defaulting to 5 seconds instead of respecting MCP's 30-second default, causing premature timeouts for slower operations. Also includes OAuth token storage fixes, Redis key isolation for ACL compliance, and improved ContextVar propagation for ASGI-mounted servers. Plus, the CLI will now nudge you when updates are available (you're welcome, future you).

What's Changed

Enhancements 🔧

Fixes 🐞

Full Changelog: jlowin/fastmcp@v2.14.2...v2.14.3

v2.14.2: Port Authority

FastMCP 2.14.2 brings a wave of community contributions safely into the 2.x line. A variety of important fixes backported from 3.0 work improve OpenAPI 3.1 compatibility, MCP spec compliance for output schemas and elicitation, and correct a subtle base_url fallback issue. The CLI now gently reminds you that FastMCP 3.0 is on the horizon.

What's Changed

Enhancements 🔧

Fixes 🐞

Docs 📚

Full Changelog: jlowin/fastmcp@v2.14.1...v2.14.2

v2.14.1: 'Tis a Gift to Be Sample

FastMCP 2.14.1 adds support for sampling with tools (SEP-1577). This exciting new feature lets servers pass tools to ctx.sample(), enabling agentic workflows where the server borrows the client's LLM and controls tool execution automatically. Pass any callable as a tool and FastMCP handles the loop: calling the LLM, executing tools, and feeding results back until a final response is produced. For fine-grained control, ctx.sample_step() makes a single LLM call and returns a SampleStep, letting you inspect tool calls, add custom logic, or build your own execution loop. Structured output via result_type returns validated Pydantic models instead of raw text. This release also adds AnthropicSamplingHandler alongside the existing OpenAI handler (newly promoted out of the experimental module), so clients and servers can provide sampling capability across major providers with ease.

... (truncated)

Changelog

Sourced from fastmcp's changelog.

title: "Changelog" icon: "list-check" rss: true

v2.14.3: Time After Timeout

Sometimes five seconds just isn't enough. This release fixes an HTTP transport bug that was cutting connections short, along with OAuth and Redis fixes, better ASGI support, and CLI update notifications so you never miss a beat.

What's Changed

Enhancements 🔧

Fixes 🐞

Full Changelog: v2.14.2...v2.14.3

v2.14.2: Port Authority

FastMCP 2.14.2 brings a wave of community contributions safely into the 2.x line. A variety of important fixes backported from 3.0 work improve OpenAPI 3.1 compatibility, MCP spec compliance for output schemas and elicitation, and correct a subtle base_url fallback issue. The CLI now gently reminds you that FastMCP 3.0 is on the horizon.

What's Changed

Enhancements 🔧

Fixes 🐞

Docs 📚

... (truncated)

Commits
  • e600570 Fix HTTP transport timeout defaulting to 5 seconds (#2848)
  • 9e86dbc Merge pull request #2843 from jlowin/debug-task-lifecycle
  • 964b23b Merge branch 'release/2.x' into debug-task-lifecycle
  • c127dd9 Remove debug logging, keep minimal ContextVar fix
  • 7b24bd5 Make all task handlers consistent with debug logging
  • 687889c Simplify ContextVar management - trust Context to set them at request time
  • df5765c Use pip instead of uv pip in upgrade instructions (#2841)
  • 7628c43 Add CLI update notifications (#2839)
  • 5cea6ba Bump pydocket to >=0.16.6 for py-key-value Redis username workaround
  • 6824d56 Bump pydocket to >=0.16.5 for Redis ACL fix
  • Additional commits viewable in compare view

Updates litellm from 1.80.10 to 1.80.16

Release notes

Sourced from litellm's releases.

v1.80.11-stable.1

What's Changed

Full Changelog: BerriAI/litellm@v1.80.11-nightly...v1.80.11-stable.1

v1.80.16-nightly

What's Changed

@dependabot
build(deps): bump the version-all group across 1 directory with 19 up…
e16a086 
…dates

Bumps the version-all group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.34.4` | `1.3.2` |
| [pandas](https://github.com/pandas-dev/pandas) | `2.3.2` | `2.3.3` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.1.0` |
| [modal](https://github.com/modal-labs/modal-client) | `1.1.4` | `1.3.0.post1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.45` | `3.1.46` |
| [fastmcp](https://github.com/jlowin/fastmcp) | `2.12.4` | `2.14.3` |
| [litellm](https://github.com/BerriAI/litellm) | `1.80.10` | `1.80.16` |
| [lmnr](https://github.com/lmnr-ai/lmnr) | `0.7.25` | `0.7.29` |
| [multi-swe-bench](https://github.com/multi-swe-bench/multi-swe-bench) | `1.1.1` | `1.1.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.1` |
| [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.2.1` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.405` | `1.1.408` |
| [ruff](https://github.com/astral-sh/ruff) | `0.13.0` | `0.14.11` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` |



Updates `huggingface-hub` from 0.34.4 to 1.3.2
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.34.4...v1.3.2)

Updates `pandas` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.2...v2.3.3)

Updates `pillow` from 11.3.0 to 12.1.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.1.0)

Updates `openhands-sdk` from 1.7.2 to 1.8.1

Updates `openhands-tools` from 1.7.2 to 1.8.1

Updates `openhands-agent-server` from 1.7.2 to 1.8.1

Updates `openhands-workspace` from 1.7.2 to 1.8.1

Updates `modal` from 1.1.4 to 1.3.0.post1
- [Changelog](https://github.com/modal-labs/modal-client/blob/main/CHANGELOG.md)
- [Commits](modal-labs/modal-client@v1.1.4...v1.3.0.post1)

Updates `python-dotenv` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1)

Updates `gitpython` from 3.1.45 to 3.1.46
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.45...3.1.46)

Updates `fastmcp` from 2.12.4 to 2.14.3
- [Release notes](https://github.com/jlowin/fastmcp/releases)
- [Changelog](https://github.com/jlowin/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](jlowin/fastmcp@v2.12.4...v2.14.3)

Updates `litellm` from 1.80.10 to 1.80.16
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

Updates `lmnr` from 0.7.25 to 0.7.29
- [Release notes](https://github.com/lmnr-ai/lmnr/releases)
- [Commits](https://github.com/lmnr-ai/lmnr/commits)

Updates `multi-swe-bench` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/multi-swe-bench/multi-swe-bench/releases)
- [Commits](https://github.com/multi-swe-bench/multi-swe-bench/commits)

Updates `pre-commit` from 4.3.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.1)

Updates `psutil` from 7.0.0 to 7.2.1
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.0.0...release-7.2.1)

Updates `pyright` from 1.1.405 to 1.1.408
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.405...v1.1.408)

Updates `ruff` from 0.13.0 to 0.14.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.0...0.14.11)

Updates `pytest` from 8.4.2 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.2)

---
updated-dependencies:
- dependency-name: huggingface-hub
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: pillow
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: openhands-sdk
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: openhands-tools
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: openhands-agent-server
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: openhands-workspace
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: modal
  dependency-version: 1.3.0.post1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: python-dotenv
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: gitpython
  dependency-version: 3.1.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: fastmcp
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: litellm
  dependency-version: 1.80.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: lmnr
  dependency-version: 0.7.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: multi-swe-bench
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: psutil
  dependency-version: 7.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: pyright
  dependency-version: 1.1.408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-all
- dependency-name: ruff
  dependency-version: 0.14.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: version-all
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: version-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant