chore(deps): weekly safe pypi updates · 5 packages

[mendral-app]

Packages bumped

Package	Old	New	Type
aiohttp	3.13.4	3.13.5	patch
orjson	3.11.6	3.11.9	patch
slack-sdk	3.39.0	3.42.0	minor
structlog	25.4.0	25.5.0	minor
tenacity	9.1.2	9.1.4	patch

Per-package changelog highlights

aiohttp 3.13.4 → 3.13.5

• Fix: skipped duplicate singleton header check in lax mode (default). No API changes.

orjson 3.11.6 → 3.11.9

• 3.11.7: Faster float serialization; CPython 3.15 free-threading support. Float exponent format now uses + sign (e.g. 1.2e+30), still spec-compliant.
• 3.11.8–3.11.9: Build/compatibility fixes.
• Impact: No API changes. Float format cosmetic only — no byte-exact JSON assertions exist in this codebase.

slack-sdk 3.39.0 → 3.42.0

• 3.40.0: Thinking steps support with Plan/Task blocks for chat streaming; datetime fix.
• 3.41.0: apps.user.connection.update API support.
• 3.42.0: New Card/Carousel/Alert block types; Socket Mode stability; OAuth store fixes.
• Impact: Additive features only, no breaking changes.

structlog 25.4.0 → 25.5.0

• New: ConsoleRenderer.get_active(), dynamic renderer attribute setting.
• Fix: MaybeTimeStamper key argument, RecursionError for self-referencing exceptions.
• Deprecated: pad_event renamed to pad_event_to (old name still works).
• Impact: Backward-compatible; no usage of deprecated parameter in this codebase.

tenacity 9.1.2 → 9.1.4

• 9.1.3: Python 3.14 support, async sleep for sync functions, new wait_exception strategy. Drops Python 3.9.
• 9.1.4: Type annotation fix for async sleep.
• Impact: This repo requires Python 3.12; no breaking changes apply.

Files modified

• pyproject.toml
• uv.lock

Skipped this ecosystem

Package	Current	Latest eligible	Reason
boto3	1.40.49	1.43.14	Tightly coupled with botocore + aioboto3; ecosystem update needed
anthropic	0.80.0	0.104.1	24 minor versions; large jump needs dedicated review
openai	1.109.1	2.38.0	Major version bump (1.x → 2.x); breaking changes
cryptography	46.0.7	48.0.0	2 major version jump; needs dedicated review
pydantic	2.12.0	2.13.4	Minor bump but pydantic minors can have behavior changes
redis	5.3.1	8.0.0	Major version bump; too fresh (released 2026-05-28)
polars	1.37.1	1.41.0	4 minor versions; needs changelog review

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session

[github-actions]

🎭 Playwright report · View test results →

⚠️ 2 flaky tests:

• Inline editing insight title via compact card popover (chromium)
• Save an insight, make changes, discard them, and save a copy (chromium)

These issues are not necessarily caused by your changes.
Annoyed by this comment? Help fix flakies and failures and it'll disappear!

[github-actions]

❌ Hobby deploy smoke test: FAILED

Failing fast because: Container health check failed

Unhealthy containers:

• worker: restarted 30x

---

_{Run 26745949186 | Consecutive failures: 1}

[greptile-apps]

_{Reviews (1): Last reviewed commit: "chore(deps): weekly safe pypi updates · ..." | Re-trigger Greptile}

[deployment-status-posthog]

Deploy status

Environment	Status	Deployed At	Workflow
dev	✅ Deployed	2026-06-01 15:00 UTC	Run
prod-us	✅ Deployed	2026-06-01 15:26 UTC	Run
prod-eu	✅ Deployed	2026-06-01 15:32 UTC	Run