MAINT: Bump the minor-and-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #2326 · microsoft/PyRIT

dependabot · 2026-08-04T20:43:56Z

Note

Modified by a maintainer. Dependabot originally proposed 11 updates, including
litellm 1.91.4 -> 1.95.0. That one update has been dropped; the cap stays at
<1.92.0. The other 10 updates are unchanged.

Why litellm is held back: 1.92.0 replaced the universal py3-none-any wheel with a
Rust (PyO3) extension. As of 1.95.0, the only published wheels are
manylinux_2_28 (x86_64 / aarch64) and win_amd64. There are no macOS wheels, no
musllinux wheels, none for glibc < 2.28, and none for Windows ARM64, so those
platforms fall back to building the Rust extension from the sdist and fail without a
Rust toolchain. CI does not catch this because GitHub's macOS runners ship Rust
preinstalled. Environment markers cannot express libc flavor or glibc version, so the
affected platforms cannot be pinned back selectively. 1.91.x remains the last release
that installs everywhere. Revisit once litellm ships macOS and musllinux wheels.

One code change rides along: the ty 0.0.62 -> 0.0.65 bump in this group changed
where the invalid-assignment diagnostic is anchored (value expression rather than
assignment target), which broke the existing suppression in
pyrit/memory/memory_models.py and failed pre-commit. The assignment was collapsed
onto one line so the suppression matches again.

Bumps the minor-and-patch group with 10 updates in the / directory:

Package	From	To
datasets	`5.0.0`	`5.0.1`
fastapi	`0.139.2`	`0.141.1`
openai	`2.46.0`	`2.52.0`
tinytag	`2.2.1`	`2.3.0`
tqdm	`4.69.0`	`4.70.0`
playwright	`1.61.0`	`1.62.0`
azure-cognitiveservices-speech	`1.51.0`	`1.51.1`
ty	`0.0.62`	`0.0.65`
diff-cover	`10.4.0`	`10.4.1`
ruff	`0.15.22`	`0.16.1`

Updates datasets from 5.0.0 to 5.0.1

Release notes

Sourced from datasets's releases.

5.0.1

Bug fixes

Fix version string in init.py by @qgallouedec in huggingface/datasets#8244

fix conda build by @lhoestq in huggingface/datasets#8250

Fix JSON loader schema inference for files starting with a UTF-8 BOM (#8241) by @archievi in huggingface/datasets#8243

Support hermes traces by @lhoestq in huggingface/datasets#8255

Fix batch(by_column=...) crashing after shard/shuffle/split by @pkooij in huggingface/datasets#8259

fix traces streaming by @lhoestq in huggingface/datasets#8277

support droid agent traces by @cfahlgren1 in huggingface/datasets#8263

Fix CI: commit operation equality (hfh 1.20.0) and pytest parametrize collection error by @Wauplin in huggingface/datasets#8283

Fix lance auth by @lhoestq in huggingface/datasets#8301

Fix symlink-following arbitrary file write in archive extraction by @AAtomical in huggingface/datasets#8303

Bug Fix: Resuming Twice Resets the Dataloader by @francesco-bertolotti in huggingface/datasets#8295

Bump fsspec and simpler wds compr by @lhoestq in huggingface/datasets#8337

fix: validate Arrow IPC record batches by @XciD in huggingface/datasets#8350

Make the dataset fingerprint independent of Arrow chunking by @SuryanshSS1011 in huggingface/datasets#8339

Fix casting a nullable LargeList to a different inner type by @vineethsaivs in huggingface/datasets#8346

docs: replace AutoFeatureExtractor with AutoImageProcessor in image preprocessing docs by @gautamkishore in huggingface/datasets#8326

Fix column drop in Arrow path of axis=1 concatenation by @ebarkhordar in huggingface/datasets#8342

Raise on length mismatch in batched IterableDataset.map by @sohumt123 in huggingface/datasets#8332

Fix require_storage_embed recursing into require_storage_cast by @vineethsaivs in huggingface/datasets#8349

Fix path traversal via metadata file_name in folder-based builders by @Kaif10 in huggingface/datasets#8325

Support batched=True in Dataset.to_dict by @vineethsaivs in huggingface/datasets#8333

Fix hdf5 external files by @lhoestq in huggingface/datasets#8355

remove bad require_storage test by @lhoestq in huggingface/datasets#8357

ensure fiels are in repo by @lhoestq in huggingface/datasets#8356

Keep flat numeric columns with nulls numeric in numpy format by @ebarkhordar in huggingface/datasets#8352

Fix bucket dataset card handling and push metadata accounting by @pjh4993 in huggingface/datasets#8354

Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 by @ebarkhordar in huggingface/datasets#8358

Keep integers on the python read path for fixed-shape ArrayXD columns with nulls by @ebarkhordar in huggingface/datasets#8363

Rebatch arrow source before formatting in IterableDataset.filter to fix resume data loss by @ebarkhordar in huggingface/datasets#8360

Decode Json() columns in Dataset.to_pandas() by @ebarkhordar in huggingface/datasets#8344

fix buckets on windows by @lhoestq in huggingface/datasets#8369

Fix DatasetDict.push_to_hub leaving removed splits in the dataset card by @pjh4993 in huggingface/datasets#8367

Preserve nullable integer columns in to_json/to_csv/to_sql by @ebarkhordar in huggingface/datasets#8366

Docs

docs: fix duplicate "to" in IterableDataset push-to-hub example by @DaoyuanLi2816 in huggingface/datasets#8252

Clarify dataset creation vs loading workflows in create_dataset tutorial by @zanvari in huggingface/datasets#8235

New Contributors

@DaoyuanLi2816 made their first contribution in huggingface/datasets#8252

@zanvari made their first contribution in huggingface/datasets#8235

@archievi made their first contribution in huggingface/datasets#8243

@pkooij made their first contribution in huggingface/datasets#8259

@AAtomical made their first contribution in huggingface/datasets#8303

@francesco-bertolotti made their first contribution in huggingface/datasets#8295

@XciD made their first contribution in huggingface/datasets#8350

@SuryanshSS1011 made their first contribution in huggingface/datasets#8339

@vineethsaivs made their first contribution in huggingface/datasets#8346

... (truncated)

Commits

921c2a7 release: 5.0.1 (#8370)
c6fc5cd Preserve nullable integer columns in to_json/to_csv/to_sql (#8366)
6747b87 Fix DatasetDict.push_to_hub leaving removed splits in the dataset card (#8367)
b305031 fix buckets on windows (#8369)
030a3e5 Decode Json() columns in Dataset.to_pandas() (#8344)
0f207a0 Rebatch arrow source before formatting in IterableDataset.filter to fix resum...
adad35d Keep integers on the python read path for fixed-shape ArrayXD columns with nu...
8966746 Fix CSV loader dropping on_bad_lines/encoding_errors on pandas 2.0-2.2 (#8358)
b8e861a Fix bucket dataset card handling and push metadata accounting (#8354)
521a590 Keep flat numeric columns with nulls numeric in numpy format (#8352)
Additional commits viewable in compare view

Updates fastapi from 0.139.2 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo.

Docs

📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

0.141.0

Features

✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @tiangolo.

0.140.13

Fixes

🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @SAURABHSALVE.

Docs

📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @AshNicolus.

📝 Add API reference page for fastapi.sse. PR #15930 by @SAURABHSALVE.

0.140.12

Fixes

🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @Zawwarsami16.

0.140.11

Fixes

🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @YuriiMotov.

0.140.10

Fixes

🐛 Fix handling sequences with nested Annotated types. PR #14874 by @YuriiMotov.

Internal

🐛 Accept any base test failure as regression. PR #16092 by @tiangolo.

🐛 Preserve pytest exit code in regression check. PR #16091 by @tiangolo.

✅ Test PR regressions against base code. PR #16090 by @tiangolo.

0.140.9

Fixes

🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @MBGrao.

... (truncated)

Commits

95f8322 🔖 Release version 0.141.1 (#16106)
f137944 📝 Update release notes
d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
1d211b9 📝 Update release notes
8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
c7e7b65 🔖 Release version 0.141.0 (#16103)
6bceb84 📝 Update release notes
5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
628663f 🔖 Release version 0.140.13 (#16096)
0b54fd0 📝 Update release notes
Additional commits viewable in compare view

Updates openai from 2.46.0 to 2.52.0

Release notes

Sourced from openai's releases.

v2.52.0

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

api: content provenance checks (1d6c118)

Bug Fixes

client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

add API-key mTLS HTTP client recipes (#3552) (7a3d5e4)

v2.51.0

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

api: fast tier (8808ed2)

Bug Fixes

api: add fast tier to helper methods (6064126)

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

... (truncated)

Changelog

Sourced from openai's changelog.

2.52.0 (2026-07-31)

Full Changelog: v2.51.0...v2.52.0

Features

api: content provenance checks (1d6c118)

Bug Fixes

client: honor Retry-After delays up to two minutes (#3555) (7fa7946)

Documentation

add API-key mTLS HTTP client recipes (#3552) (7a3d5e4)

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

api: fast tier (8808ed2)

Bug Fixes

api: add fast tier to helper methods (6064126)

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

api: transcription model updates (fd57393)

Bug Fixes

audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

... (truncated)

Commits

ca693fb release: 2.52.0
2ad8c98 feat(api): content provenance checks
7a3d5e4 docs: add API-key mTLS HTTP client recipes (#3552)
7fa7946 fix(client): honor Retry-After delays up to two minutes (#3555)
3844843 release: 2.51.0 (#3553)
4f40426 release: 2.50.0
92594f1 fix(audio): restore transcription keyword overload
59ed1dc feat(api): transcription model updates
6ba31bc release: 2.49.0 (#3539)
90483ad test: support a hermetic local API reference (#3542)
Additional commits viewable in compare view

Updates tinytag from 2.2.1 to 2.3.0

Release notes

Sourced from tinytag's releases.

2.3.0

Add 'mime_type' attribute for audio MIME type/codec

Add 'is_lossless' attribute to indicate lossless audio

Add 'size' attribute to images for size in bytes

Add option to disable magic byte detection

Make XMP metadata available under 'other.xmp' field

Make bit depth available for lossy files providing it

Add .asf, .ogv and .wmv to list of supported file extensions

Mark deprecated 'extra' dictionary as obsolete

Fix incorrect key when adding common images to 'other' dictionary

Fix disc/track numbers not being returned as lists in 'as_dict()'

Only set audio properties with a positive value

Always read tags and audio properties in a single pass

ID3: Parse multi-value text frames correctly

ID3: Parse COMM and USLT frames correctly

ID3: Fix some errors in parsed size calculations

ID3: Exclude a few frames with custom structures

MPEG: Read VBRI and Xing Info headers for duration/bitrate

MPEG: Fix parsing of layer I and MPEG-2 layer III audio properties

MPEG: Fix slightly incorrect duration estimation

MPEG/MP4: Raise ParseError if header is invalid

MP4: Add 'image/bmp' and 'image/gif' MIME types

MP4: Fix infinite loop if size of certain sub-atoms is zero

MP4: Fix incorrect parsing of descriptor size

MP4: Don't read image data when image reading is disabled

OGG: Parse multi-stream files correctly

Speex: Don't read vendor string as comment

FLAC: Provide actual audio bitrate instead of overall bitrate

FLAC: Parse VORBIS_COMMENT and PICTURE blocks with invalid size

FLAC: Ignore subsequent STREAMINFO blocks

WAV: Include unknown fields in 'other' dictionary

WAV: Calculate bitrate/duration correctly

AIFF/WAV: Read whole ID3 chunk before parsing

ASF: Support parsing additional metadata objects

ASF: Stop parsing if object size is smaller than header

ASF: Make magic header detection more strict

Various performance improvements

Various code refactors

Commits

912d27f Rename header detection option to magic byte detection (#351)
8a93392 Release 2.3.0 (#350)
3bde1f9 README.md: Update outdated MIME type
3dd954d Update changelog
9ecb523 Rename WMA parser to ASF (#349)
74684cc Fix recent tests
7b115fe WMA: Support parsing additional metadata objects (#348)
97c1f86 README.md: Use correct format tag for WMA v2
1faf619 WAV/WMA: Show format tag (codec) in hex format
0ddc9a4 Update changelog
Additional commits viewable in compare view

Updates tqdm from 4.69.0 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

contrib.concurrent: major improvements

support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)

fix total based on shortest iterable length (#1473)

use default max_workers (#1543 <- #1530, #1518)

support timeout, buffersize (#1576)

improve ETA (#1708 <- #1161)

update as_completed (#1709 <- #1565)

add tqdm.concurrent.intepreter_map (#1777)

asyncio: support iterables with only __aiter__ (#1714 <- #1686)

support reset(float("inf")) (#1783 <- #1781, #651)

framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

contrib.logging: preserve filters (#1775 <- #1581)

rich: misc fixes (#1773)

support generators (without len) (#1391)

fix potential AttributeError on exit (#1674)

fix total=float('inf') (#1781 <- #651)

fix potential AttributeError on exit (#1778 <- #1668, #1537, #261)

fix minor docs typos (#1780, #1746)

Commits

96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
c27393e misc tidy
061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
9fc160b Update how we check for interpreter_map support in the tests
b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
16d5486 Add support for nested progress bars
9f5890f Add initial implementation for interpreter_map
321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
4664b57 minor tidy
426a098 Treat inf total as unknown in reset() too
Additional commits viewable in compare view

Updates playwright from 1.61.0 to 1.62.0

Release notes

Sourced from playwright's releases.

v1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format. Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:
page.screenshot(path="homepage.webp", quality=50)
New APIs

New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scrolling into view.

New locator.wait_for_function() waits until a function called with the matching element returns a truthy value.

New apiResponse.timing() returns resource timing information for an API response.

Announcements

📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.

⚠️ Debian 11 is not supported anymore.

Browser Versions

Chromium 151.0.7922.34

Mozilla Firefox 153.0

WebKit 26.5

This version was also tested against the following stable channels:

Google Chrome 151

Microsoft Edge 151

Commits

3b7c24c chore: roll Playwright to 1.62.0 (#3161)
1db079f build(deps): bump typing-extensions from 4.15.0 to 4.16.0 (#3162)
8335307 build(deps): bump greenlet from 3.5.3 to 3.5.4 (#3163)
5c71b2b build(deps): bump mypy from 2.1.0 to 2.3.0 (#3150)
d0c8d03 build(deps-dev): bump setuptools-scm from 9.2.2 to 10.2.1 (#3151)
ca0319c build(deps): bump build from 1.4.4 to 1.5.0 (#3152)
53802fe build(deps): bump requests from 2.33.0 to 2.34.2 (#3153)
9bc998f build(deps): bump actions/setup-python from 6 to 7 in the actions group (#3154)
9a10128 perf: speed up Python stack capture (#3147)
c3eff76 fix: show not_ prefix in call log when negative assertions fail (#3033)
Additional commits viewable in compare view

Updates azure-cognitiveservices-speech from 1.51.0 to 1.51.1

Updates ty from 0.0.62 to 0.0.65

Release notes

Sourced from ty's releases.

0.0.65

Release Notes

Released on 2026-07-29.

LSP server

Support comprehension walruses in IDE features (#26476)

Library support

Pydantic: Allow mutation of private attributes on frozen models (#27257)

Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

Correct ParamSpec forwarded-argument diagnostic locations (#27263)

Recover forwarded callable object and constructor sources (#27264)

Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

Fix gradual class assignability with generic receivers (#27223)

Lazily materialize protocol attributes (#27267)

Narrow tagged unions through all type kinds (#27226)

Prefer static constrained TypeVar solutions (#27057)

Preserve frozen-dataclass setter delegation (#27217)

Preserve inference when filtering constructor overloads (#27254)

Reject frozen-dataclass field deletion through subclasses (#27001)

Stabilize recursive type-constraint ordering (#27176)

Support materialized class type expressions (#27258)

Performance

Avoid quadratic inference for large literal unions (#27178)

Cache protocol receiver binding (#27301)

Contributors

@thejchap

@benedikt-bartscher

@carljm

@charliermarsh

Install ty 0.0.65

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.65/ty-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.65

Released on 2026-07-29.

LSP server

Support comprehension walruses in IDE features (#26476)

Library support

Pydantic: Allow mutation of private attributes on frozen models (#27257)

Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

Correct ParamSpec forwarded-argument diagnostic locations (#27263)

Recover forwarded callable object and constructor sources (#27264)

Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

Fix gradual class assignability with generic receivers (#27223)

Lazily materialize protocol attributes (#27267)

Narrow tagged unions through all type kinds (#27226)

Prefer static constrained TypeVar solutions (#27057)

Preserve frozen-dataclass setter delegation (#27217)

Preserve inference when filtering constructor overloads (#27254)

Reject frozen-dataclass field deletion through subclasses (#27001)

Stabilize recursive type-constraint ordering (#27176)

Support materialized class type expressions (#27258)

Performance

Avoid quadratic inference for large literal unions (#27178)

Cache protocol receiver binding (#27301)

Contributors

@thejchap

@benedikt-bartscher

@carljm

@charliermarsh

0.0.64

Released on 2026-07-27.

Bug fixes

Fix identity narrowing for NewTypes (#26439)

... (truncated)

Commits

87de836 Bump version to 0.0.65 (#4113)
d784bad README: Add link to Stable milestone (#4112)
b4c1978 Update actions/setup-python action to v7 (#4110)
8d216a3 Update actions/checkout action to v7.0.1 (#4107)
06f44e9 Update dependency prek to v0.4.10 (#4108)
b3665fd Update prek dependencies (#4109)
5e64a13 Bump version to 0.0.64 (#4097)
46f4915 Bump version to 0.0.63 (#4071)
See full diff in compare view

Updates diff-cover from 10.4.0 to 10.4.1

Release notes

Sourced from diff-cover's releases.

Version 10.4.1

What's Changed

Handle low confidence chardet detection for undeclared encodings by @Bachmann1234 in Bachmann1234/diff_cover#611

Dependencies

Bump setuptools from 80.9.0 to 83.0.0 by @dependabot[bot] in Bachmann1234/diff_cover#609

Full Changelog: Bachmann1234/diff_cover@v10.4.0...v10.4.1

Changelog

Sourced from diff-cover's changelog.

7/23/2026 v10.4.1

Handle low confidence chardet detection for undeclared encodings. Fixes a failing test for chardet 7 and upgrades the tested suite to chardet7 (PR 611)[https://redirect.github.com/Handle low confidence chardet detection for undeclared encodings Bachmann1234/diff_cover#611] (bachmann1234)

7/21/2026 v10.4.0

Add --branch-coverage flag to diff-cover to treat partially covered branches in Cobertura XML reports as uncovered PR 608 Thanks @mofr

05/30/2026 v10.3.0

Add --show-covered flag to highlight covered diff lines in HTML report PR 600 Thanks @duxiaocheng

Update readme with cli flags PR 601 Thanks me

05/23/2026 v10.2.1

Fix --help hiding most CLI options in diff-cover/diff-quality PR 599 Thanks @duxiaocheng

01/08/2026 v10.2.0

Fixes issue where diff quality could not be run from subfolders PR 574 Issue 573 Thanks @eacherkan-via

12/30/2025 v10.1.0

Add support for floating-point total percentage in reports PR 565 thanks @tilaven

12/09/2025 v10.0.0

Remove python 3.9 support

Add python 3.14 support

Normalize exlude/include in pyproject.toml to support string or list

11/10/2025 v9.7.2

Fix file path issue on windows. Thanks @amos-chen PR 553

09/25/2025 v9.7.1

Revert the change to attempt to support ruff >=0.12.9 (@YeeaahMan caught the error)

09/23/2025 v9.7.0

Adds the work @kingbuzzman did to support windows!

Fixes a bug where deleted files were not benig handled properly (thanks @CliveCorbishleyTAL )

Adds a mypy driver for diff_quality (thanks @YeeaaahMan)

Fixes ruff >=0.12.9 support (thanks again @YeeaaahMan)

Some internal items

... (truncated)

Commits

8111a37 Version 10.4.1
291ee94 Handle low confidence chardet detection for undeclared encodings (#611)
147b410 Bump setuptools from 80.9.0 to 83.0.0 (#609)
See full diff in compare view

Updates ruff from 0.15.22 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by de...
Description has been truncated

Bumps the minor-and-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [datasets](https://github.com/huggingface/datasets) | `5.0.0` | `5.0.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.2` | `0.141.1` | | [openai](https://github.com/openai/openai-python) | `2.46.0` | `2.52.0` | | [tinytag](https://github.com/tinytag/tinytag) | `2.2.1` | `2.3.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.69.0` | `4.70.0` | | [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` | | azure-cognitiveservices-speech | `1.51.0` | `1.51.1` | | [litellm](https://github.com/BerriAI/litellm) | `1.91.4` | `1.94.1` | | [ty](https://github.com/astral-sh/ty) | `0.0.62` | `0.0.65` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.0` | `10.4.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.1` | Updates `datasets` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.0...5.0.1) Updates `fastapi` from 0.139.2 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.2...0.141.1) Updates `openai` from 2.46.0 to 2.52.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.46.0...v2.52.0) Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `tqdm` from 4.69.0 to 4.70.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.69.0...v4.70.0) Updates `playwright` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.61.0...v1.62.0) Updates `azure-cognitiveservices-speech` from 1.51.0 to 1.51.1 Updates `litellm` from 1.91.4 to 1.94.1 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.91.4...v1.94.1) Updates `ty` from 0.0.62 to 0.0.65 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.62...0.0.65) Updates `diff-cover` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v10.4.0...v10.4.1) Updates `ruff` from 0.15.22 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.1) --- updated-dependencies: - dependency-name: azure-cognitiveservices-speech dependency-version: 1.51.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: datasets dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: diff-cover dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: litellm dependency-version: 1.94.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openai dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ty dependency-version: 0.0.65 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the minor-and-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [datasets](https://github.com/huggingface/datasets) | `5.0.0` | `5.0.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.2` | `0.141.1` | | [openai](https://github.com/openai/openai-python) | `2.46.0` | `2.52.0` | | [tinytag](https://github.com/tinytag/tinytag) | `2.2.1` | `2.3.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.69.0` | `4.70.0` | | [playwright](https://github.com/microsoft/playwright-python) | `1.61.0` | `1.62.0` | | azure-cognitiveservices-speech | `1.51.0` | `1.51.1` | | [litellm](https://github.com/BerriAI/litellm) | `1.91.4` | `1.95.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.62` | `0.0.65` | | [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.4.0` | `10.4.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.22` | `0.16.1` | Updates `datasets` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/huggingface/datasets/releases) - [Commits](huggingface/datasets@5.0.0...5.0.1) Updates `fastapi` from 0.139.2 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.139.2...0.141.1) Updates `openai` from 2.46.0 to 2.52.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.46.0...v2.52.0) Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `tqdm` from 4.69.0 to 4.70.0 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.69.0...v4.70.0) Updates `playwright` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.61.0...v1.62.0) Updates `azure-cognitiveservices-speech` from 1.51.0 to 1.51.1 Updates `litellm` from 1.91.4 to 1.95.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.91.4...v1.95.0) Updates `ty` from 0.0.62 to 0.0.65 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.62...0.0.65) Updates `diff-cover` from 10.4.0 to 10.4.1 - [Release notes](https://github.com/Bachmann1234/diff-cover/releases) - [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG) - [Commits](Bachmann1234/diff_cover@v10.4.0...v10.4.1) Updates `ruff` from 0.15.22 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.1) --- updated-dependencies: - dependency-name: azure-cognitiveservices-speech dependency-version: 1.51.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: datasets dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: diff-cover dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: litellm dependency-version: 1.94.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: openai dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: playwright dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ty dependency-version: 0.0.65 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Dependabot raised the litellm cap to <1.95.0, but 1.92.0+ still ships no macOS, musllinux, glibc<2.28, or Windows ARM64 wheels, so those platforms fall back to building the Rust (PyO3) extension from sdist. Environment markers cannot express libc flavor or glibc version, so affected platforms cannot be pinned back selectively. Revert to <1.92.0 and correct the stale comment, which claimed the gap was "Linux-only wheels (no win/mac/py3.14)" when win_amd64 and cp314 are in fact covered. ty 0.0.65 anchors invalid-assignment at the value expression rather than the assignment target, so the existing suppression no longer matched. Collapse the assignment to a single line so the comment cannot drift with the diagnostic anchor. The other 10 dependency updates in this group are retained. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a14e9aad-db5a-46bc-9da4-4018369a8eab

…nd-patch-8631245714

Dependabot force-pushed a rebase that raises the litellm cap to <1.96.0. litellm 1.95.0 still publishes only manylinux_2_28 and win_amd64 wheels, so macOS, musl/Alpine, glibc<2.28 and Windows ARM64 would build the Rust extension from sdist. Keep the <1.92.0 cap; all other package versions in the two locks were already identical. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a14e9aad-db5a-46bc-9da4-4018369a8eab

Resolves the conflict in memory_models.py introduced by microsoft#2326. That PR repaired the `# type: ignore[ty:invalid-assignment]` suppression after ty 0.0.65 moved the diagnostic anchor. Requiring a non-null objective_target_identifier eliminates the diagnostic at the source, so the suppression is dropped rather than restored. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 4b1d9c5c-6770-40ae-90c5-4ce43f55b896

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 4, 2026

dependabot Bot force-pushed the dependabot/uv/minor-and-patch-8631245714 branch 2 times, most recently from 2c145e0 to 8fbc72c Compare August 5, 2026 04:30

dependabot Bot force-pushed the dependabot/uv/minor-and-patch-8631245714 branch from 8fbc72c to 896deb8 Compare August 5, 2026 12:58

Copilot AI added 3 commits August 5, 2026 19:56

Merge remote-tracking branch 'origin/main' into dependabot/uv/minor-a…

4b6c4e8

…nd-patch-8631245714

Roman Lutz (romanlutz) approved these changes Aug 6, 2026

View reviewed changes

Roman Lutz (romanlutz) changed the title ~~MAINT: Bump the minor-and-patch group across 1 directory with 11 updates~~ MAINT: Bump the minor-and-patch group across 1 directory with 10 updates Aug 6, 2026

Roman Lutz (romanlutz) added this pull request to the merge queue Aug 6, 2026

Merged via the queue into main with commit 1058258 Aug 6, 2026
56 checks passed

Roman Lutz (romanlutz) deleted the dependabot/uv/minor-and-patch-8631245714 branch August 6, 2026 14:05

Roman Lutz (romanlutz) mentioned this pull request Aug 6, 2026

FIX: require objective_target_identifier on ScenarioResultEntry #2341

Open

Navigation Menu

Uh oh!

MAINT: Bump the minor-and-patch group across 1 directory with 10 updates - #2326

MAINT: Bump the minor-and-patch group across 1 directory with 10 updates#2326
Roman Lutz (romanlutz) merged 5 commits into
mainfrom
dependabot/uv/minor-and-patch-8631245714

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited by romanlutz

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026 • edited by romanlutz Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.0.1

Bug fixes

Docs

New Contributors

0.141.1

Fixes

Docs

0.141.0

Features

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

0.140.10

Fixes

Internal

0.140.9

Fixes

v2.52.0

2.52.0 (2026-07-31)

Features

Bug Fixes

Documentation

v2.51.0

2.51.0 (2026-07-30)

Features

Bug Fixes

v2.50.0

2.50.0 (2026-07-28)

Features

Bug Fixes

v2.49.0

2.49.0 (2026-07-27)

2.52.0 (2026-07-31)

Features

Bug Fixes

Documentation

2.51.0 (2026-07-30)

Features

Bug Fixes

2.50.0 (2026-07-28)

Features

Bug Fixes

2.49.0 (2026-07-27)

Features

2.3.0

tqdm v4.70.0 stable

tqdm v4.69.1 stable

v1.62.0

🖼️ WebP screenshots

New APIs

Announcements

Browser Versions

0.0.65

Release Notes

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

Install ty 0.0.65

Install prebuilt binaries via shell script

0.0.65

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

0.0.64

Bug fixes

Version 10.4.1

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited by romanlutz

Loading