Skip to content

MAINT: Bump pip deps#1442

Merged
spencrr merged 1 commit intomicrosoft:mainfrom
spencrr:spencrr/bump-deps-pip
Mar 9, 2026
Merged

MAINT: Bump pip deps#1442
spencrr merged 1 commit intomicrosoft:mainfrom
spencrr:spencrr/bump-deps-pip

Conversation

@spencrr
Copy link
Copy Markdown
Collaborator

@spencrr spencrr commented Mar 5, 2026

Description

Bump the following pip dependencies to their latest versions:

Package Old Version New Version Dep Type
gradio >=5.32.0 >=6.8.0 direct
pypdf >=6.7.1 >=6.7.5 direct
authlib 1.6.6 1.6.9 transitive (via fastmcp)
gradio-client 2.0.2 2.2.0 transitive (via gradio)
diskcache 5.6.3 5.6.3 transitive (already latest)

Changes:

  • pyproject.toml: Bumped lower bounds for gradio (5.32.0 → 6.8.0) and pypdf (6.7.1 → 6.7.5) in both [gradio] extra and [all] extra groups.
  • uv.lock: Regenerated with --upgrade-package for all four targets to pick up latest compatible versions.

Changelog

Tests and Documentation

No test or doc changes needed — this is a dependency version bump only. CI will validate compatibility.

@romanlutz
Copy link
Copy Markdown
Contributor

Gradio based functionality is deprecated and will be removed. I'd prefer not to bump since it will be gone soon and this could cause issues or at least require manual validation.

@spencrr spencrr force-pushed the spencrr/bump-deps-pip branch 2 times, most recently from 705ddd4 to 3cb0ae1 Compare March 7, 2026 00:59
@spencrr spencrr force-pushed the spencrr/bump-deps-pip branch from 3cb0ae1 to 0ab3063 Compare March 7, 2026 01:00
@spencrr spencrr changed the title [WIP] MAINT: Bump pip deps MAINT: Bump pip deps Mar 7, 2026
@spencrr spencrr marked this pull request as ready for review March 7, 2026 01:05
@spencrr spencrr merged commit 8f8e4ca into microsoft:main Mar 9, 2026
38 checks passed
riyosha pushed a commit to riyosha/PyRIT that referenced this pull request Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants