Skip to content

deps(deps): bump the dependency-updates group across 1 directory with 5 updates#70

Merged
nikolay-e merged 1 commit into
mainfrom
dependabot/uv/dependency-updates-c9a3db2d6a
Jul 1, 2026
Merged

deps(deps): bump the dependency-updates group across 1 directory with 5 updates#70
nikolay-e merged 1 commit into
mainfrom
dependabot/uv/dependency-updates-c9a3db2d6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependency-updates group with 5 updates in the / directory:

Package From To
litellm 1.89.3 1.89.4
google-auth 2.55.0 2.55.1
ruff 0.15.18 0.15.20
pyright 1.1.410 1.1.411
import-linter 2.11 2.12

Updates litellm from 1.89.3 to 1.89.4

Release notes

Sourced from litellm's releases.

v1.89.4

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.4

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.89.4/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.4

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

Full Changelog: BerriAI/litellm@v1.89.3...v1.89.4

Commits
  • 7f77969 Merge pull request #31259 from BerriAI/litellm_backport_1_89_x_bp-189x-0624
  • 15f6872 chore: refresh uv.lock for litellm-enterprise 0.1.42.post2
  • abd7192 chore(release): bump litellm-enterprise 0.1.42 -> 0.1.42.post2 for stable/1.89.x
  • b02bb79 chore(deps): bump remaining osv-flagged deps to clear CVEs on stable/1.89.x
  • f911b0c fix(deps): bump osv-flagged dependencies to clear known CVEs (#31122)
  • 5339c2d fix(vertex/files): stream OpenAI->Vertex batch JSONL uploads (#31036)
  • 096eee0 fix(docker): bump wolfi-base digest to patch openssl CVE-2026-34182 (#31133)
  • 79cc47d fix(passthrough,streaming): recover cost on interrupted and agentic Anthropic...
  • a62034d fix(proxy): record partial spend on the failure row for interrupted streams (...
  • 1b45b02 fix(passthrough): recover output tokens for interrupted anthropic streams (#3...
  • Additional commits viewable in compare view

Updates google-auth from 2.55.0 to 2.55.1

Release notes

Sourced from google-auth's releases.

google-auth: v2.55.1

2.55.1 (2026-06-25)

Bug Fixes

  • auth: lower regional access boundary logs from warning to debug. (#17571) (1ef4183), closes #17515
Commits
  • 900d51f chore: release main (#17543)
  • 1ef4183 fix(auth): lower regional access boundary logs from warning to debug. (#17571)
  • bd782cf feat: regenerate google-cloud-bigtable (#17575)
  • 57ebaa3 feat: regenerate google-cloud-firestore (#17577)
  • 140d86f feat: regenerate google-cloud-compute (#17576)
  • 39b252f feat: regenerate google-cloud-spanner (#17578)
  • 421eebd feat: support interactive execution of deferred DataFrames in TableWidget (#1...
  • 3619b29 feat: support gemini-3.x models in loader and update default model to gemini-...
  • 17bef41 test(bigquery-magics): make table_id parsing check version-agnostic (#17562)
  • e688531 bigtable: add ValueBitmaskFilter for data client (#17567)
  • Additional commits viewable in compare view

Updates ruff from 0.15.18 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

  • Allow human-readable names in rule selectors (#25887)
  • Emit a warning instead of an error for unknown rule selectors (#26113)
  • Match noqa shebang handling in ruff:ignore comments (#26286)
  • [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

  • Add versioning sections to custom crate READMEs (#26317)
  • Update ruff_python_parser README for crates.io (#26315)
  • [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

Install ruff 0.15.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"

Download ruff 0.15.20

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum
ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

  • Allow human-readable names in rule selectors (#25887)
  • Emit a warning instead of an error for unknown rule selectors (#26113)
  • Match noqa shebang handling in ruff:ignore comments (#26286)
  • [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

  • Add versioning sections to custom crate READMEs (#26317)
  • Update ruff_python_parser README for crates.io (#26315)
  • [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

0.15.19

Released on 2026-06-23.

Preview features

  • Support human-readable names when hovering suppression comments and in code actions (#26114)

Bug fixes

  • Fall back to default settings when editor-only settings are invalid (#26244)
  • Fix panic when inserting text at a notebook cell boundary (#26111)

Rule changes

  • [pylint] Update fix suggestions for __floor__, __trunc__, __length_hint__, and __matmul__ variants (PLC2801) (#26239)

Performance

  • Avoid allocating when parsing single string literals (#26200)
  • Avoid reallocating singleton call arguments (#26223)
  • Lazily create source files for lint diagnostics (#26226)
  • Optimize formatter text width and indentation (#26236)
  • Reserve capacity for builtin bindings (#26229)
  • Skip repeated-key checks for singleton dictionaries (#26228)
  • Use ArrayVec for qualified name segments (#26224)

... (truncated)

Commits
  • f82a36b Bump 0.15.20 (#26376)
  • af32943 Improve the summarise-ecosystem-results skill (#26378)
  • 485ebab Remove RUF076 name from schema (#26371)
  • ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
  • 572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
  • f703f21 Allow human-readable names in rule selectors (#25887)
  • 0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
  • dbe6e98 [ty] Infer definite equality comparison results (#26337)
  • e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
  • 6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
  • Additional commits viewable in compare view

Updates pyright from 1.1.410 to 1.1.411

Commits

Updates import-linter from 2.11 to 2.12

Changelog

Sourced from import-linter's changelog.

2.12 (2026-06-23)

  • Improve error message when root package is a single-file module.
  • Alert users with all unmatched ignored imports in the same run.
  • Allow overlapping modules in forbidden contracts.
Commits
  • ad48a96 Release v2.12
  • f136ff0 Run uv lock --upgrade (#363)
  • 5c174fc Skip self-pairs in forbidden contracts so wildcards can include the source (#...
  • c6ed24d Bump urllib3 from 2.6.3 to 2.7.0 (#356)
  • 2a05f41 Fix KeyError when --contract is used with toml config lacking ids (#354)
  • 039c9d1 Better reporting of non existent ignored imports (#352)
  • 1bd5142 Raise clear error when root_package is a single-file module (#350)
  • e48dced Bump requests from 2.32.5 to 2.33.0
  • 3941cdd Bump pytest from 8.4.2 to 9.0.3
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 5 updates

Bumps the dependency-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [litellm](https://github.com/BerriAI/litellm) | `1.89.3` | `1.89.4` |
| [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.0` | `2.55.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.18` | `0.15.20` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.410` | `1.1.411` |
| [import-linter](https://github.com/seddonym/import-linter) | `2.11` | `2.12` |



Updates `litellm` from 1.89.3 to 1.89.4
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.89.3...v1.89.4)

Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.0...google-auth-v2.55.1)

Updates `ruff` from 0.15.18 to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.18...0.15.20)

Updates `pyright` from 1.1.410 to 1.1.411
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.410...v1.1.411)

Updates `import-linter` from 2.11 to 2.12
- [Changelog](https://github.com/seddonym/import-linter/blob/main/docs/release_notes.md)
- [Commits](seddonym/import-linter@v2.11...v2.12)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.89.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: google-auth
  dependency-version: 2.55.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: import-linter
  dependency-version: '2.12'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 26, 2026
@sonarqubecloud

Copy link
Copy Markdown

@nikolay-e
nikolay-e merged commit aad1be2 into main Jul 1, 2026
17 checks passed
@nikolay-e
nikolay-e deleted the dependabot/uv/dependency-updates-c9a3db2d6a branch July 1, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant