deps(deps): bump the backend group with 3 updates

[dependabot]

Bumps the backend group with 3 updates: ddtrace, dunamai and redis.

Updates ddtrace from 4.12.0 to 4.12.2

Release notes

Sourced from ddtrace's releases.

4.12.2

Bug Fixes

• aws_durable_execution_sdk_python: This fix resolves an issue where a replayed durable operation that had failed permanently reported an incorrect aws.durable.replayed value and an aws.durable.operation_attempt one higher than its original execution.

4.12.1

Bug Fixes

• CI Visibility: This fix resolves an issue where the Datadog UI showed No extra information available when viewing details about why a test was skipped by Intelligent Test Runner, due to missing ITR correlation ID on test or suite events.

• Code Security (IAST): fixes an issue where taint tracking could abort the Python process when old-style % string formatting handled tainted
  text containing literal IAST evidence marker delimiters.

• Code Security (IAST): This fix scopes copy_ranges_from_strings and copy_and_shift_ranges_from_strings to the active request slot, matching
  the scoped taint read path. Previously these copy helpers resolved the taint map by scanning all request slots, so a concurrent or still-open
  request could capture the derived taint and the current request would miss the transformed tainted input.

• LLM Observability: Resolves a TypeError raised during streamed tool-call reconstruction when an OpenAI-compatible backend (e.g.
  DashScope/Qwen) emits a tool-call delta with function.arguments or custom.input set to None instead of "".

• Fix crashes in uwsgi worker when exiting from SIGTERM.

• IAST: A crash occurring when using uvloop has been fixed.

• LLM Observability: Resolves an issue where the OpenAI and LiteLLM integrations reported zero cost for OpenRouter requests using a
  bring-your-own-key setup.

Commits

• 69ecf2d fix(aws_durable_execution_sdk_python): [SVLS-9168] handle FAILED checkpoints ...
• f1b2b87 chore: bump version to 4.12.2 (#19413)
• ddb7608 chore(version): set version to 4.12.1 (#19392)
• 7599b6d chore: raise RSS SLO for tracing-profiling-enabled scenario [backport 4.12] (...
• e20e14b fix(llmobs): coerce None tool-call arguments in openai streamed chunk reconst...
• 31503e2 fix(llmobs): surface OpenRouter BYOK upstream cost [backport 4.12] (#19367)
• 845f8cf fix(native): run shutdown in thread in uwsgi [backport 4.12] (#19345)
• 0298937 fix(iast): handle literal evidence markers in modulo propagation [backport 4....
• 361a9fa chore(iast): preserve propagation during source suppression [backport 4.12] (...
• 357169a fix(ci_visibility): add ITR correlation ID [backport 4.12] (#19241)
• See full diff in compare view

Updates dunamai from 1.26.1 to 1.26.2

Release notes

Sourced from dunamai's releases.

v1.26.2 (2026-08-01)

• Fixed: With highest_tag enabled, a pattern/pattern_prefix that only some tags matched could select a non-matching tag and fall back to the default version (e.g. 0.0.0) instead of the highest matching tag. (Contributed by Flourish3)
• Fixed: Integration with Fossil 2.28 failed due to a SQL formatting mode change. (Contributed by rosset)

Changelog

Sourced from dunamai's changelog.

v1.26.2 (2026-08-01)

• Fixed: With highest_tag enabled, a pattern/pattern_prefix that only some tags matched could select a non-matching tag and fall back to the default version (e.g. 0.0.0) instead of the highest matching tag. (Contributed by Flourish3)
• Fixed: Integration with Fossil 2.28 failed due to a SQL formatting mode change. (Contributed by rosset)

Commits

• 99257d0 Release v1.26.2
• 7ae1ee0 #113: Fix Fossil 2.28 integration
• 6ca1803 #112: Simplify implementation
• 923985e Merge pull request #112 from Flourish3/highest-version-fix
• defe3c6 #114: Avoid relying on some VCS setup from CI workflow
• 061fc66 Fix highest_tag selection ignoring pattern when picking the highest tag
• 5c6c259 #110: Lint for unused arguments
• See full diff in compare view

Updates redis from 8.0.1 to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

• Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).
• Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).
• Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).
• Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).
• Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).
• Sentinel — replica sentinel aliases (#4127).

🚀 New Features

• Add replica sentinel aliases (#4127)
• Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)
• feat: add TS.READ command support to the timeseries module (#4170)
• feat: add SDIFFCARD and SUNIONCARD command support (#4171)
• feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)
• feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)
• feat: add async maintenance-notifications support for standalone and cluster clients (#4177)
• feat: add COLLECT reducer support to search aggregations (#4179)
• feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)
• feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)
• feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

• feat: add client-side HIMPORT fieldset support for standalone and cluster clients (#4205)

The feature considered unstable and public API might be changed in the future minor version

🐛 Bug Fixes

• fix: detect closed pooled connection without consuming pending push data (RESP3 + hiredis) (#4156)
• Fix Sentinel pool capacity loss after failover (#4193)

... (truncated)

Commits

• e013126 Testing with 8.10 GA (#4227)
• 059d1e9 Fixed TS.NRANGE commands to correctly apply aggregators (#4225)
• d486a0a Fix FIELDNAME alias dropping first character of un-prefixed fields (#4224)
• fb93104 feat: add client-side HIMPORT fieldset support for standalone and cluster cli...
• 9197609 Fix lat/lon swap in search querystring geo() helper (#4223)
• 14714a0 fix: Fixed double decoding issue with unquote() (#4222)
• 227280a Update lib version to 8.1.0
• 88d16d0 Decode ACL LOG string values on the default RESP3 legacy callback (#4201)
• 599fd75 feat: add FT.ALIASLIST support (#4198)
• 71e275e test: add VectorField RERANK serialization tests for sync and async search (#...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions