chore(deps): bump the patch-minor-updates group across 1 directory with 18 updates by dependabot[bot] · Pull Request #6810 · crewAIInc/crewAI

dependabot · 2026-08-04T18:09:17Z

Bumps the patch-minor-updates group with 18 updates in the / directory:

Package	From	To
ruff	`0.15.1`	`0.16.1`
mypy	`1.19.1`	`1.20.2`
pre-commit	`4.5.1`	`4.6.1`
bandit	`1.9.2`	`1.9.4`
pytest	`9.0.3`	`9.1.1`
pytest-asyncio	`1.3.0`	`1.4.0`
pytest-subprocess	`1.5.3`	`1.6.0`
vcrpy	`8.2.1`	`8.3.0`
pytest-randomly	`4.0.1`	`4.1.0`
types-requests	`2.31.0.20240406`	`2.33.0.20260712`
types-regex	`2026.1.15.20260116`	`2026.7.19.20260720`
boto3-stubs[bedrock-runtime]	`1.42.40`	`1.43.65`
types-pymysql	`1.1.0.20250916`	`1.2.0.20260724`
commitizen	`4.16.3`	`4.17.0`
pydantic	`2.12.5`	`2.13.4`
openai	`2.41.0`	`2.53.0`
pymupdf	`1.26.7`	`1.28.0`
tinytag	`2.2.1`	`2.3.0`

Updates ruff from 0.15.1 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

Add an option to opt out of human-readable names (#27160)

[flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)

[pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)

[ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)

[flake8-bugbear] Mark range as immutable (B008) (#27247)

[flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)

[flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)

[pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)

[refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

[flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)

[refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

Fix indexing of excluded nested Ruff workspaces (#27303)

Lint TOML files in the LSP (#26862)

Documentation

Cover pycon Markdown formatting (#27153)

[flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)

[flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)

[pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

Reduce syntax error noise by swallowing dedents like indents (#27170)

Vendor latest annotate-snippets (#27033)

Contributors

@bxff

@anishgirianish

@Avasam

@epage

@LHMQ878

@MichaReiser

... (truncated)

Commits

80790b3 Bump 0.16.1 (#27330)
63830f3 [ty] Borrow from constraint set storage less often (#27328)
f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
0d80497 Lint TOML files in the LSP (#26862)
d91586b Update prek dependencies (#27293)
7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
b20daf7 [ty] refactor: add helper function to send partial results (#27249)
4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
7c3e2db [ty] Fix enum class container assignability (#27318)
d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.2

Changelog

Sourced from mypy's changelog.

Mypy 1.20.2

Use WAL with SQLite cache and fix close (Shantanu, PR 21154)

Adjust SQLite journal mode (Ivan Levkivskyi, PR 21217)

Correctly aggregate narrowing information on parent expressions (Shantanu, PR 21206)

Fix regression related to generic callables (Shantanu, PR 21208)

Fix regression by avoiding widening types in some contexts (Shantanu, PR 21242)

Fix slicing in non-strict optional mode (Shantanu, PR 21282)

mypyc: Fix match statement semantics for "or" pattern (Shantanu, PR 21156)

mypyc: Fix issue with module dunder attributes (Piotr Sawicki, PR 21275)

Initial support for Python 3.15.0a8 (Marc Mueller, PR 21255)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

A5rocks

Aaron Wieczorek

Adam Turner

Ali Hamdan

asce

BobTheBuidler

Brent Westbrook

Brian Schubert

bzoracler

Chris Burroughs

Christoph Tyralla

Colin Watson

Donghoon Nam

E. M. Bray

Emma Smith

Ethan Sarp

George Ogden

getzze

grayjk

Gregor Riepl

Ivan Levkivskyi

James Hilliard

James Le Cuirot

Jeremy Nimmer

Joren Hammudoglu

Kai (Kazuya Ito)

kaushal trivedi

Kevin Kannammalil

Lukas Geiger

Łukasz Langa

Marc Mueller

Michael R. Crusoe

michaelm-openai

Neil Schemenauer

Piotr Sawicki

... (truncated)

Commits

145a062 Bump version to 1.20.2
81cd492 Fix slicing with nonstrict optional (#21282)
908d344 [mypyc] Set dunder attrs when adding module to sys.modules (#21275)
ba28610 Initial support for Python 3.15.0a8 (#21255)
7b0e09f Fix match statement semantics for "or" pattern (#21156)
92b74f2 Avoid widening types in conditional_types (#21242)
0dcbfaa Fix is_overlapping_types for generic callables (#21208)
210f518 Correctly aggregate narrowing information on parent expressions (#21206)
c34530e Only set journal mode in coordinator (#21217)
79a3ec6 Use WAL with SQLite cache, fix close (#21154)
Additional commits viewable in compare view

Updates pre-commit from 4.5.1 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

pre-commit v4.6.0

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Install language: node hooks via git.

Fixes npm 12.x compatibility

#3719 PR by @asottile.

#3517 issue by @ojob.

Set JULIA_DEPOT_PATH for language: julia.

#3711 PR by @damonbayer.

pre-commit-ci/runner-image#335 issue by @damonbayer.

Produce error on mistyped --repo for pre-commit autoupdate.

#3701 PR by @mxr.

#3695 issue by @mxr.

Improve performance of commit existence check in pre-push.

#3726 PR by @asottile.

#3604 issue by @ptarjan.

Avoid duplicating conflicted filenames during pre-commit run --all-files.

#3727 PR by @asottile.

#3706 issue by @RomanValov.

4.6.0 - 2026-04-21

Features

pre-commit hook-impl: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.

#3662 PR by @asottile.

Fixes

pre-commit hook-impl: --hook-type is required.

#3661 PR by @asottile.

Commits

242ce8a v4.6.1
766e550 Merge pull request #3727 from pre-commit/dedupe
1558d06 Merge pull request #3726 from pre-commit/exists-faster
8a1c47a avoid duplicate files in --all-files during conflict
2e01c99 faster check of rev existing locally as a commit
3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
1d811d9 Return an error for invalid --repo
374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
1e7994f set JULIA_DEPOT_PATH
b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
Additional commits viewable in compare view

Updates bandit from 1.9.2 to 1.9.4

Release notes

Sourced from bandit's releases.

1.9.4

What's Changed

chore: fixed some typos in comments by @jakob1379 in PyCQA/bandit#1351

Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in PyCQA/bandit#1353

Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in PyCQA/bandit#1357

Fix B613 crash when reading from stdin by @worksbyfriday in PyCQA/bandit#1361

Include filename in nosec 'no failed test' warning by @worksbyfriday in PyCQA/bandit#1363

Fix B615 false positive when revision is set via variable by @worksbyfriday in PyCQA/bandit#1358

Lower version guard in check_ast_node to Python 3.12 by @rcgray in PyCQA/bandit#1355

Fix B106 reporting wrong line number on multiline function calls by @worksbyfriday in PyCQA/bandit#1360

New Contributors

@jakob1379 made their first contribution in PyCQA/bandit#1351

@worksbyfriday made their first contribution in PyCQA/bandit#1361

@rcgray made their first contribution in PyCQA/bandit#1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

1.9.3

What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in PyCQA/bandit#1334

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1335

Fix B608 to detect VALUES( without space by @kfess in PyCQA/bandit#1337

Add check for hardcoded passwords in dicts. by @alanverresen in PyCQA/bandit#1338

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in PyCQA/bandit#1341

Update tox tests for Python 3.10 by @willschlitzer in PyCQA/bandit#1346

Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in PyCQA/bandit#1347

Limit B614 to torch.load deserializers by @dibussoc in PyCQA/bandit#1348

New Contributors

@kfess made their first contribution in PyCQA/bandit#1337

@alanverresen made their first contribution in PyCQA/bandit#1338

@willschlitzer made their first contribution in PyCQA/bandit#1346

@dibussoc made their first contribution in PyCQA/bandit#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

Commits

92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
8f2f928 Fix B615 false positive when revision is set via variable (#1358)
e27493f Include filename in nosec 'no failed test' warning (#1363)
b69b336 Fix B613 crash when reading from stdin (#1361)
e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
c0def6c chore: fixed some typos in comments (#1351)
765f00d Limit B614 to torch.load deserializers (#1348)
06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest-asyncio from 1.3.0 to 1.4.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.

Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)

Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

Updated minimum supported pytest version to v8.4.0. (#1397)

Fixed

Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)

Notes for Downstream Packagers

Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged on pytest 8.4+.

Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)

Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

... (truncated)

Commits

6e14cd2 chore: Prepare release of v1.4.0.
4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
fc43340 Build(deps): Bump idna from 3.14 to 3.15
762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
82a393c ci: Remove unnecessary debug output.
Additional commits viewable in compare view

Updates pytest-subprocess from 1.5.3 to 1.6.0

Release notes

Sourced from pytest-subprocess's releases.

1.5.4

Features

[#103](https://github.com/aklajnert/pytest-subprocess/issues/103): Improve matching commands that contain quoted arguments.

Bug fixes

[#192](https://github.com/aklajnert/pytest-subprocess/issues/192): Fix ResourceWarning for unclosed file handles in test_universal_newlines and test_text by explicitly closing process.stdout after reading, preventing intermittent failures on Python 3.12+.

[#196](https://github.com/aklajnert/pytest-subprocess/issues/196): Handle stderr=STDOUT when stdout is a file handle.

[#194](https://github.com/aklajnert/pytest-subprocess/issues/194): Patch imported subprocess.Popen aliases.

[#186](https://github.com/aklajnert/pytest-subprocess/issues/186): Support file handles in stdout and stderr.

Other changes

[#197](https://github.com/aklajnert/pytest-subprocess/issues/197): Officially support Python 3.14 and 3.15.

Changelog

Sourced from pytest-subprocess's changelog.

1.6.0 (2026-05-10)

Features
* `[#206](https://github.com/aklajnert/pytest-subprocess/issues/206) <https://github.com/aklajnert/pytest-subprocess/pull/206>`_: Add fp.regex() for regex-based command argument matching.
Bug fixes
[#207](https://github.com/aklajnert/pytest-subprocess/issues/207) <https://github.com/aklajnert/pytest-subprocess/pull/207>_: Fix poll() not reflecting returncode when a callback is registered.

[#205](https://github.com/aklajnert/pytest-subprocess/issues/205) <https://github.com/aklajnert/pytest-subprocess/pull/205>_: Fix stdin not respecting text mode when text=True or encoding is set.

1.5.4 (2026-03-21)

Features
* `[#103](https://github.com/aklajnert/pytest-subprocess/issues/103) <https://github.com/aklajnert/pytest-subprocess/pull/103>`_: Improve matching commands that contain quoted arguments.
Bug fixes
[#192](https://github.com/aklajnert/pytest-subprocess/issues/192) <https://github.com/aklajnert/pytest-subprocess/pull/192>_: Fix ResourceWarning for unclosed file handles in test_universal_newlines and test_text by explicitly closing process.stdout after reading, preventing intermittent failures on Python 3.12+.

[#196](https://github.com/aklajnert/pytest-subprocess/issues/196) <https://github.com/aklajnert/pytest-subprocess/pull/196>_: Handle stderr=STDOUT when stdout is a file handle.

[#194](https://github.com/aklajnert/pytest-subprocess/issues/194) <https://github.com/aklajnert/pytest-subprocess/pull/194>_: Patch imported subprocess.Popen aliases.

[#186](https://github.com/aklajnert/pytest-subprocess/issues/186) <https://github.com/aklajnert/pytest-subprocess/pull/186>_: Support file handles in stdout and stderr.

Other changes
* `[#197](https://github.com/aklajnert/pytest-subprocess/issues/197) <https://github.com/aklajnert/pytest-subprocess/pull/197>`_: Officially support Python 3.14 and 3.15.

Commits

ab2ff2e Replace Sphinx-only roles with plain RST in README
1c35676 Bump version.
ac99f46 Fix poll() not reflecting returncode when a callback is registered. (#207)
308db95 Add fp.regex() for regex-based command argument matching. (#206)
827e306 Fix stdin not respecting text mode when text=True or encoding is set. (#205)
3ae1444 Update publish workflow to trigger on all tags
14c571b Fix tests executed via uv (#202)
56ed9c5 Add a publish workflow for GH actions.
b783eea Bump version.
53877f8 Refactor subprocess tests to properly close stdout and improve output asserti...
Additional commits viewable in compare view

Updates vcrpy from 8.2.1 to 8.3.0

Release notes

Sourced from vcrpy's releases.

v8.3.0

What's Changed

Add support for niquests (#980) — thanks @ionelmc

Recording now fails fast if a request or response contains a Python object the safe YAML loader (introduced in 8.2.1) couldn't read back, instead of writing a cassette that breaks on replay. The error shows exactly how to register the object if you need it (#1007, #1009) — thanks @Polandia94

New vcr.serializers.yamlserializer.with_custom_tags(...) builds a YAML serializer supporting custom Python object tags on both record and replay, registered per VCR instance via register_serializer (#1007, #1009) — thanks @Polandia94

Clearer error when a cassette contains an unsupported YAML tag, and the stale git.io migration link is gone (#1007, #1008) — thanks @gaoflow

Fix stale keep-alive connection reuse across cassettes; unpin werkzeug (#1001)

Full Changelog: kevin1024/vcrpy@v8.2.1...v8.3.0

Changelog

Sourced from vcrpy's changelog.

Changelog

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

8.3.0

Add support for niquests (#980) - thanks @ionelmc

Refuse to record a cassette containing a Python object the safe YAML loader could not read back, so recording fails fast instead of producing a cassette that breaks on replay (#1007, #1009) - thanks @Polandia94

Add vcr.serializers.yamlserializer.with_custom_tags to build a YAML serializer supporting custom Python object tags on both record and replay, registered per VCR instance via register_serializer (#1007, #1009) - thanks @Polandia94

Clearer error when a cassette contains an unsupported YAML tag, and remove the stale git.io migration link (#1007, #1008) - thanks @gaoflow

Fix stale keep-alive connection reuse across cassettes; unpin werkzeug (#1001)

8.2.1

SECURITY: Load cassettes with a safe YAML loader, preventing arbitrary code execution when a cassette from an untrusted source is loaded (GHSA-rpj2-4hq8-938g) - thanks @RamiAltai and @EQSTLab

Validate record_mode and raise a clear error on an invalid value (#208)

Recommend pytest-recording over the unmaintained pytest-vcr in the docs (#986)

8.2.0

Add support for httpx 2.x (#993) - thanks @dsfaccini

Patch httpx transports instead of httpcore (#972) - thanks @seowalex

Fix aiohttp 3.14 compatibility: AsyncStreamReaderMixin removed and ClientResponse now requires stream_writer (#995) - thanks @dsfaccini

Account for modified requests when storing played cassettes, so drop_unused_requests honours before_record_request filtering (#962) - thanks @jamesbraza

Make the request URL available on VCRHTTPResponse (#976) - thanks @dAnjou

Improve error message when a matching request has already been consumed (#985) - thanks @Polandia94

Fix body check in convert_body_to_unicode to use an explicit type check (#982) - thanks @Polandia94

Add env proxy cassette regression test (#994) - thanks @tine1117

Remove milestone references from docs (#984) - thanks @Polandia94

CI: bump sphinx-rtd-theme from 3.0.2 to 3.1.0 (#973)

8.1.1

Fix sync requests in async contexts for HTTPX (#965) - thanks @seowalex

CI: bump peter-evans/create-pull-request from 7 to 8 (#969)

8.1.0

Enable brotli decompression if available (via brotli, brotlipy or brotlicffi) (#620) - thanks @immerrr

Fix aiohttp allowing both data and json arguments when one is None (#624) - thanks @leorochael

Fix usage of io-like interface with VCR.py (#906) - thanks @tito and @kevdevg

Migrate to declarative Python package config (#767) - thanks @deronnax

Various linting fixes - thanks @jairhenrique

CI: bump actions/checkout from 5 to 6 (#955)

8.0.0

BREAKING: Drop support for Python 3.9 (major version bump) - thanks @jairhenrique

BREAKING: Drop support for urllib3 < 2 - fixes CVE warnings from urllib3 1.x (#926, #880) - thanks @jairhenrique

New feature: drop_unused_requests option to remove unused interactions from cassettes (#763) - thanks @danielnsilva

Rewrite httpx support to patch httpcore instead of httpx (#943) - thanks @seowalex

Fixes httpx.ResponseNotRead exceptions (#832, <...
Description has been truncated

…th 18 updates Bumps the patch-minor-updates group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ruff](https://github.com/astral-sh/ruff) | `0.15.1` | `0.16.1` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.2` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.1` | | [bandit](https://github.com/PyCQA/bandit) | `1.9.2` | `1.9.4` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` | | [pytest-subprocess](https://github.com/aklajnert/pytest-subprocess) | `1.5.3` | `1.6.0` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `8.2.1` | `8.3.0` | | [pytest-randomly](https://github.com/pytest-dev/pytest-randomly) | `4.0.1` | `4.1.0` | | [types-requests](https://github.com/python/typeshed) | `2.31.0.20240406` | `2.33.0.20260712` | | [types-regex](https://github.com/python/typeshed) | `2026.1.15.20260116` | `2026.7.19.20260720` | | [boto3-stubs[bedrock-runtime]](https://github.com/youtype/mypy_boto3_builder) | `1.42.40` | `1.43.65` | | [types-pymysql](https://github.com/python/typeshed) | `1.1.0.20250916` | `1.2.0.20260724` | | [commitizen](https://github.com/commitizen-tools/commitizen) | `4.16.3` | `4.17.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` | | [openai](https://github.com/openai/openai-python) | `2.41.0` | `2.53.0` | | [pymupdf](https://github.com/pymupdf/pymupdf) | `1.26.7` | `1.28.0` | | [tinytag](https://github.com/tinytag/tinytag) | `2.2.1` | `2.3.0` | Updates `ruff` from 0.15.1 to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.1...0.16.1) Updates `mypy` from 1.19.1 to 1.20.2 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v1.20.2) Updates `pre-commit` from 4.5.1 to 4.6.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.1...v4.6.1) Updates `bandit` from 1.9.2 to 1.9.4 - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](PyCQA/bandit@1.9.2...1.9.4) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0) Updates `pytest-subprocess` from 1.5.3 to 1.6.0 - [Release notes](https://github.com/aklajnert/pytest-subprocess/releases) - [Changelog](https://github.com/aklajnert/pytest-subprocess/blob/master/HISTORY.rst) - [Commits](aklajnert/pytest-subprocess@1.5.3...1.6.0) Updates `vcrpy` from 8.2.1 to 8.3.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v8.2.1...v8.3.0) Updates `pytest-randomly` from 4.0.1 to 4.1.0 - [Changelog](https://github.com/pytest-dev/pytest-randomly/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-randomly@4.0.1...4.1.0) Updates `types-requests` from 2.31.0.20240406 to 2.33.0.20260712 - [Commits](https://github.com/python/typeshed/commits) Updates `types-regex` from 2026.1.15.20260116 to 2026.7.19.20260720 - [Commits](https://github.com/python/typeshed/commits) Updates `boto3-stubs[bedrock-runtime]` from 1.42.40 to 1.43.65 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `types-pymysql` from 1.1.0.20250916 to 1.2.0.20260724 - [Commits](https://github.com/python/typeshed/commits) Updates `commitizen` from 4.16.3 to 4.17.0 - [Release notes](https://github.com/commitizen-tools/commitizen/releases) - [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md) - [Commits](commitizen-tools/commitizen@v4.16.3...v4.17.0) Updates `pydantic` from 2.12.5 to 2.13.4 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.4) Updates `openai` from 2.41.0 to 2.53.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.41.0...v2.53.0) Updates `pymupdf` from 1.26.7 to 1.28.0 - [Release notes](https://github.com/pymupdf/pymupdf/releases) - [Changelog](https://github.com/pymupdf/PyMuPDF/blob/main/changes.txt) - [Commits](pymupdf/PyMuPDF@1.26.7...1.28.0) Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) --- updated-dependencies: - dependency-name: bandit dependency-version: 1.9.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-minor-updates - dependency-name: boto3-stubs[bedrock-runtime] dependency-version: 1.43.62 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: commitizen dependency-version: 4.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: mypy dependency-version: 1.20.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: openai dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pre-commit dependency-version: 4.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pydantic dependency-version: 2.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pymupdf dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pytest-randomly dependency-version: 4.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: pytest-subprocess dependency-version: 1.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: types-pymysql dependency-version: 1.2.0.20260724 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: types-regex dependency-version: 2026.7.19.20260720 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: types-requests dependency-version: 2.33.0.20260712 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates - dependency-name: vcrpy dependency-version: 8.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 4, 2026

github-actions Bot added the size/S label Aug 4, 2026

dependabot Bot changed the title ~~chore(deps): bump the patch-minor-updates group with 18 updates~~ chore(deps): bump the patch-minor-updates group across 1 directory with 18 updates Aug 5, 2026

dependabot Bot force-pushed the dependabot/uv/patch-minor-updates-2f497dd02f branch 5 times, most recently from 353055d to f28f4af Compare August 8, 2026 01:05

dependabot Bot force-pushed the dependabot/uv/patch-minor-updates-2f497dd02f branch from f28f4af to c11ea47 Compare August 9, 2026 21:02

Merge branch 'main' into dependabot/uv/patch-minor-updates-2f497dd02f

5a96faf

Navigation Menu

Uh oh!

chore(deps): bump the patch-minor-updates group across 1 directory with 18 updates - #6810

chore(deps): bump the patch-minor-updates group across 1 directory with 18 updates#6810
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/uv/patch-minor-updates-2f497dd02f

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.16.1

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.16.1

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

Mypy 1.20.2

Acknowledgements

pre-commit v4.6.1

Fixes

pre-commit v4.6.0

Features

Fixes

4.6.1 - 2026-07-21

Fixes

4.6.0 - 2026-04-21

Features

Fixes

1.9.4

What's Changed

New Contributors

1.9.3

What's Changed

New Contributors

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

Added

Changed

Fixed

Notes for Downstream Packagers

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

Added

Changed

1.5.4

Features

Bug fixes

Other changes

1.6.0 (2026-05-10)

1.5.4 (2026-03-21)

v8.3.0

What's Changed

Changelog

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading