Skip to content

deps(deps): bump the dependency-updates group across 1 directory with 4 updates#93

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependency-updates-27aae2a686
Closed

deps(deps): bump the dependency-updates group across 1 directory with 4 updates#93
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependency-updates-27aae2a686

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependency-updates group with 4 updates in the / directory: litellm, google-auth, hypothesis and ruff.

Updates litellm from 1.91.1 to 1.93.0

Release notes

Sourced from litellm's releases.

v1.93.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.93.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits
  • 052b5a2 Merge pull request #33904 from BerriAI/litellm_models_listing_malformed_cost_...
  • db190ba fix(proxy): treat malformed cost-map token limits as absent on /v1/models
  • 3510494 chore(release): backport #33853 and #33864 onto patch-1.93.0rc2 to complete t...
  • 2530e32 chore(release): backport 11 staging PRs onto patch-1.93.0rc2 for the 1.93.0 s...
  • b5cd431 Merge pull request #33499 from BerriAI/litellm_backport_1930rc2
  • fba058b Merge pull request #32956 from BerriAI/litellm_fix_lit3859_wif_bridge
  • 10d5804 Merge pull request #32884 from BerriAI/litellm_internal_staging
  • d37ba79 refactor(ui): convert projects page chart to shadcn/recharts (#32722)
  • 4baeb28 chore: update Next.js build artifacts (2026-07-11 23:35 UTC, node v20.20.2) (...
  • ca877c7 refactor(ui): colocate the usage view, keeping the shared usage components (#...
  • Additional commits viewable in compare view

Updates google-auth from 2.55.2 to 2.56.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.0

2.56.0 (2026-07-13)

Features

Bug Fixes

Commits
  • 7c18c24 chore: release main (#17646)
  • 8feb1b8 tests(bigquery): implement robust wait loop for socket leak tests (#17688)
  • e5f7fef fix: bump mistune from 3.2.1 to 3.3.0 in /packages/bigframes (#17694)
  • bd5d1a4 docs: add project ID to pandas-gbq run sample (#17692)
  • 635da34 fix: bump soupsieve from 2.7 to 2.8.4 in /packages/bigframes (#17695)
  • 4253fab feat(bigframes): support offset-based column access via iloc (#17367)
  • a5a717d feat(storage): add option to disable checksums and improve robustness of full...
  • fc423c8 docs: make landing page quickstart runnable (#17687)
  • cae94f9 feat(bigframes): Support groupby.agg/transform with udf transpiler (#17613)
  • 91f93bc fix(bigframes): Fix sqlglot backend regressions (#17655)
  • Additional commits viewable in compare view

Updates hypothesis from 6.156.4 to 6.157.0

Commits
  • 41e4ac5 Bump hypothesis version to 6.157.0 and update changelog
  • 86c9077 Merge pull request #4801 from Zac-HD/claude/annotated-type-bugs-9hez25
  • e6efa5d Merge remote-tracking branch 'upstream/create-pull-request/patch' into claude...
  • ae39383 Fix TypeAliasType backport resolution on Python 3.10
  • ad258f6 Cover the invalid-Timezone-value error path
  • c51e00b Simplify Timezone base-strategy construction
  • fe2cfe3 Resolve the typing-extensions TypeAliasType backport; shorter changelog
  • 03bbf8f Name the alias in nested-Annotated errors; validate Timezone base type
  • e670494 Support annotated-types Timezone; better nested-Annotated error
  • 0c49268 add type ignore for new mypy
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 17, 2026
… 4 updates

Bumps the dependency-updates group with 4 updates in the / directory: [litellm](https://github.com/BerriAI/litellm), [google-auth](https://github.com/googleapis/google-cloud-python), [hypothesis](https://github.com/HypothesisWorks/hypothesis) and [ruff](https://github.com/astral-sh/ruff).


Updates `litellm` from 1.91.1 to 1.93.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.91.1...v1.93.0)

Updates `google-auth` from 2.55.2 to 2.56.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.2...google-auth-v2.56.0)

Updates `hypothesis` from 6.156.4 to 6.157.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.156.4...v6.157.0)

Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-version: 2.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: hypothesis
  dependency-version: 6.156.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: litellm
  dependency-version: 1.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependency-updates-27aae2a686 branch from 30cb403 to c328531 Compare July 20, 2026 03:20
@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 21, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/dependency-updates-27aae2a686 branch July 21, 2026 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants