Skip to content

chore(deps): bump the security-updates group across 1 directory with 2 updates#5993

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/security-updates-4c1dfa05c0
Closed

chore(deps): bump the security-updates group across 1 directory with 2 updates#5993
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/security-updates-4c1dfa05c0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Bumps the security-updates group with 2 updates in the / directory: chromadb and authlib.

Updates chromadb from 1.1.1 to 1.5.9

Release notes

Sourced from chromadb's releases.

1.5.9

Version: 1.5.9 Git ref: refs/tags/1.5.9 Build Date: 2026-05-05T05:55 PIP Package: chroma-1.5.9.tar.gz Github Container Registry Image: :1.5.9 DockerHub Image: :1.5.9

What's Changed

... (truncated)

Commits

Updates authlib from 1.6.11 to 1.6.12

Release notes

Sourced from authlib's releases.

v1.6.12

Changelog

Sourced from authlib's changelog.

Version 1.6.12

Released on may 4, 2026

  • Fix redirecting to unvalidated redirect_uri on InvalidScopeError in OpenIDImplicitGrant and OpenIDHybridGrant.
Commits
  • e46e515 chore: bump to 1.6.12
  • 9babc13 fix: redirecting to unvalidated redirect_uri on InvalidScopeError in OIDC grants
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/security-updates-4c1dfa05c0 branch 2 times, most recently from 8b2710e to 450af33 Compare June 2, 2026 17:06
…2 updates

Bumps the security-updates group with 2 updates in the / directory: [chromadb](https://github.com/chroma-core/chroma) and [authlib](https://github.com/authlib/authlib).


Updates `chromadb` from 1.1.1 to 1.5.9
- [Release notes](https://github.com/chroma-core/chroma/releases)
- [Changelog](https://github.com/chroma-core/chroma/blob/main/RELEASE_PROCESS.md)
- [Commits](chroma-core/chroma@1.1.1...1.5.9)

Updates `authlib` from 1.6.11 to 1.6.12
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/1.6.12/docs/changelog.rst)
- [Commits](authlib/authlib@v1.6.11...1.6.12)

---
updated-dependencies:
- dependency-name: authlib
  dependency-version: 1.6.12
  dependency-type: indirect
  dependency-group: security-updates
- dependency-name: chromadb
  dependency-version: 1.5.9
  dependency-type: direct:production
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/security-updates-4c1dfa05c0 branch from 450af33 to 11565ad Compare June 2, 2026 22:40
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jun 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 3, 2026
@dependabot dependabot Bot deleted the dependabot/uv/security-updates-4c1dfa05c0 branch June 3, 2026 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants