Skip to content

deps(deps): bump the dependency-updates group across 1 directory with 5 updates#98

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependency-updates-a0ed1a5ac1
Open

deps(deps): bump the dependency-updates group across 1 directory with 5 updates#98
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependency-updates-a0ed1a5ac1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependency-updates group with 5 updates in the / directory:

Package From To
litellm 1.91.1 1.93.0
google-auth 2.55.2 2.56.0
hypothesis 6.156.4 6.157.2
ruff 0.15.21 0.15.22
aiohttp 3.14.1 3.14.2

Updates litellm from 1.91.1 to 1.93.0

Release notes

Sourced from litellm's releases.

v1.93.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.93.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits
  • 052b5a2 Merge pull request #33904 from BerriAI/litellm_models_listing_malformed_cost_...
  • db190ba fix(proxy): treat malformed cost-map token limits as absent on /v1/models
  • 3510494 chore(release): backport #33853 and #33864 onto patch-1.93.0rc2 to complete t...
  • 2530e32 chore(release): backport 11 staging PRs onto patch-1.93.0rc2 for the 1.93.0 s...
  • b5cd431 Merge pull request #33499 from BerriAI/litellm_backport_1930rc2
  • fba058b Merge pull request #32956 from BerriAI/litellm_fix_lit3859_wif_bridge
  • 10d5804 Merge pull request #32884 from BerriAI/litellm_internal_staging
  • d37ba79 refactor(ui): convert projects page chart to shadcn/recharts (#32722)
  • 4baeb28 chore: update Next.js build artifacts (2026-07-11 23:35 UTC, node v20.20.2) (...
  • ca877c7 refactor(ui): colocate the usage view, keeping the shared usage components (#...
  • Additional commits viewable in compare view

Updates google-auth from 2.55.2 to 2.56.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.0

2.56.0 (2026-07-13)

Features

Bug Fixes

Commits
  • 7c18c24 chore: release main (#17646)
  • 8feb1b8 tests(bigquery): implement robust wait loop for socket leak tests (#17688)
  • e5f7fef fix: bump mistune from 3.2.1 to 3.3.0 in /packages/bigframes (#17694)
  • bd5d1a4 docs: add project ID to pandas-gbq run sample (#17692)
  • 635da34 fix: bump soupsieve from 2.7 to 2.8.4 in /packages/bigframes (#17695)
  • 4253fab feat(bigframes): support offset-based column access via iloc (#17367)
  • a5a717d feat(storage): add option to disable checksums and improve robustness of full...
  • fc423c8 docs: make landing page quickstart runnable (#17687)
  • cae94f9 feat(bigframes): Support groupby.agg/transform with udf transpiler (#17613)
  • 91f93bc fix(bigframes): Fix sqlglot backend regressions (#17655)
  • Additional commits viewable in compare view

Updates hypothesis from 6.156.4 to 6.157.2

Commits
  • 4ce090f Bump hypothesis version to 6.157.2 and update changelog
  • 068b2cf Merge pull request #4796 from HypothesisWorks/migrate-floats-to-rust
  • 434689a skip tests that hit half bugs, address review
  • 0884e3f Merge remote-tracking branch 'upstream/master' into plait/review-hypothesis-4796
  • 00e62be Bump hypothesis version to 6.157.1 and update changelog
  • 20ec468 Merge pull request #4804 from HypothesisWorks/claude/span-keyed-explain-comments
  • 78329b9 Test stdtr at df=1 against the closed form, not scipy
  • bee3768 Track explain-phase comments by span instead of node slices
  • 41e4ac5 Bump hypothesis version to 6.157.0 and update changelog
  • 86c9077 Merge pull request #4801 from Zac-HD/claude/annotated-type-bugs-9hez25
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates aiohttp from 3.14.1 to 3.14.2

Changelog

Sourced from aiohttp's changelog.

3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

  • Rejected multipart body parts whose Content-Length header is not a plain sequence of digits (e.g. +5, -1, 1_0), matching the strictness of the main request parser per :rfc:9110#section-8.6 -- by :user:dxbjavid.

    Related issues and pull requests on GitHub: :issue:12794.

  • Fixed GunicornWebWorker endlessly reloading when app fails during startup -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: :issue:12879.

  • Fixed some inconsistent case sensitivity on request methods -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: :issue:12931.

... (truncated)

Commits
  • c1b9212 Release v3.14.2 (#13201)
  • 380d4b5 [PR #13054/ed8b040c backport][3.14] escape backslashes in digest auth quoted-...
  • e1e1bee Make llhttp method array size dynamic (#13174) (#13196)
  • aa4cf29 [PR #13170/2b906869 backport][3.14] Fix StreamResponse.last_modified rounding...
  • 71b57b4 [PR #13172/a57747ed backport][3.14] Fix C parser folding fragment into query_...
  • 64a03fb [PR #13169/1adc0cd7 backport][3.14] Upgrade http:// to https:// in README.rst...
  • ea2b4ae [3.14] keep websocket compression state across interleaved control frames (#1...
  • c620e62 Fix Python parser not rejecting LF early (#13136) (#13148)
  • 2781b95 [PR #13042/b48737e7 backport][3.14] catch unknown charset when decoding conte...
  • 73c8347 [PR #13128/bb3cb60f backport][3.14] Dependabot cooldown and versioning-strate...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 5 updates

Bumps the dependency-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [litellm](https://github.com/BerriAI/litellm) | `1.91.1` | `1.93.0` |
| [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.2` | `2.56.0` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.156.4` | `6.157.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.15.22` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.1` | `3.14.2` |



Updates `litellm` from 1.91.1 to 1.93.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.91.1...v1.93.0)

Updates `google-auth` from 2.55.2 to 2.56.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.2...google-auth-v2.56.0)

Updates `hypothesis` from 6.156.4 to 6.157.2
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.156.4...v6.157.2)

Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `aiohttp` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.2)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.93.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: google-auth
  dependency-version: 2.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: hypothesis
  dependency-version: 6.157.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: aiohttp
  dependency-version: 3.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants