chore(deps): bump the all-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #428 · openfoodfacts/openfoodfacts-python

dependabot · 2026-02-11T15:21:38Z

Bumps the all-dependencies group with 7 updates in the / directory:

Package	From	To
pillow	`11.3.0`	`12.1.1`
tritonclient	`2.59.0`	`2.65.0`
opencv-python-headless	`4.12.0.88`	`4.13.0.92`
mypy	`1.17.1`	`1.19.1`
requests	`2.32.4`	`2.32.5`
pydantic	`2.10.3`	`2.12.5`
tqdm	`4.67.1`	`4.67.3`

Updates pillow from 11.3.0 to 12.1.1

Release notes

Sourced from pillow's releases.

12.1.1

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html

Dependencies

Patch libavif for svt-av1 4.0 compatibility #9413 [@hugovk]

Other changes

Fix OOB Write with invalid tile extents #9427 [@radarhere]

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Deprecate getdata(), in favour of new get_flattened_data() #9292 [@radarhere]

Documentation

Specify APNG duration type when opening #9368 [@radarhere]

Added release notes for #9350 #9366 [@radarhere]

Update ImageMorph documentation #9349 [@radarhere]

Docs: update major bump cadence #9334 [@hugovk]

Add release notes for #9070 #9320 [@radarhere]

Updated Ubuntu version #9306 [@radarhere]

Update macOS tested Pillow versions #9265 [@radarhere]

Dependencies

Update harfbuzz to 12.3.0 #9355 [@radarhere]

Update xz to 5.8.2 #9343 [@radarhere]

Updated libjpeg-turbo to 3.1.3 #9333 [@radarhere]

Updated zlib-ng to 2.3.2 #9324 [@radarhere]

Updated libpng to 1.6.53 #9325 [@radarhere]

Update actions/checkout action to v6 #9323 [@renovate[bot]]

Update dependency mypy to v1.19.0 #9322 [@renovate[bot]]

Updated libpng to 1.6.51 #9305 [@radarhere]

Updated brotli to 1.2.0 #9284 [@radarhere]

Update libimagequant to 4.4.1 #9301 [@radarhere]

Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 #9312 [@radarhere]

Updated harfbuzz to 12.2.0 #9289 [@radarhere]

Update github-actions #9277 [@renovate[bot]]

Testing

Replace pre-commit with prek #9360 [@hugovk]

Test PyQt6 on Python 3.14 on Windows #9353 [@radarhere]

Test 32-bit Windows on Windows Server 2022 #9345 [@radarhere]

Correct variable type #9335 [@radarhere]

... (truncated)

Commits

5158d98 12.1.1 version bump
9000313 Fix OOB Write with invalid tile extents (#9427)
cd01118 Patch libavif for svt-av1 4.0 compatibility
46f45f6 12.1.0 version bump
c9ac097 Simplify band splitting (#9291)
3baedf2 Deprecate getdata(), in favour of new get_flattened_data() (#9292)
b51a036 Specify APNG duration type when opening (#9368)
8d08e31 Add release notes for #9348 (#9369)
432707e Added release notes for #9348
2d58910 Specify APNG duration type when opening
Additional commits viewable in compare view

Updates tritonclient from 2.59.0 to 2.65.0

Commits

See full diff in compare view

Updates opencv-python-headless from 4.12.0.88 to 4.13.0.92

Release notes

Sourced from opencv-python-headless's releases.

4.13.0.92

Follow up release for 4.13.0 with X server dependency fix. See #28438 for details.

4.13.0.90

Complete OpenCV 4.13.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

Python specific:

Manylinux 2_28 support, Numpy 2.4 support, Python 3.14 support

Tuned Python bindings for logging #27812

Marked Feature2D.detectAndCompute mask as optional in Python type stubs #27544

Marked distCoeffs/R/D as optional in calib3d functions #27564

Added DLPACK support #27581, #27861

Fixed memory leaks in pybindings #27738

Add PathLike type hints for args annotated with CV_WRAP_FILE_PATH #27767

Fixed memory leak in pyopencv_to for path-like objects #28047

Tunned Python bindings: use export_name as resolved typename for AliasTypeNode #27997

python: fix pytest-cov false warnings by using compile() with full file path in exec_file_wrapper #28093

Fixed python scalar typing issues #27620

Fixed bug in ifdef state machine in header parser for bindings #27393

Wrap GridType field in cv::findCirclesGrid parameters structure #27689

Commits

See full diff in compare view

Updates mypy from 1.17.1 to 1.19.1

Changelog

Sourced from mypy's changelog.

Mypy 1.19.1

Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)

Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)

Allow types.NoneType in match cases (A5rocks, PR 20383)

Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)

Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)

Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)

Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)

Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

A5rocks

BobTheBuidler

bzoracler

Chainfire

Christoph Tyralla

David Foster

Frank Dana

Guo Ci

iap

Ivan Levkivskyi

James Hilton-Balfe

jhance

Joren Hammudoglu

Jukka Lehtosalo

KarelKenens

Kevin Kannammalil

Marc Mueller

Michael Carlstrom

Michael J. Sullivan

Piotr Sawicki

Randolf Scholz

Shantanu

Sigve Sebastian Farstad

sobolevn

Stanislav Terliakov

Stephen Morton

Theodore Ando

Thiago J. Barbalho

wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.18

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance

... (truncated)

Commits

412c19a Bump version to 1.19.1
20aea0a Update changelog for 1.19.1 (#20414)
2b23b50 Serialize raw errors in cache metas (#20372)
f60f90f Fail on PyPy in main instead of setup.py (#20389)
58d485b Fail with an explicit error on PyPy (#20384)
a4b31a2 Allow types.NoneType in match cases (#20383)
8a6eff4 [mypyc] fix generator regression with empty tuple (#20371)
70eceea Fix noncommutative joins with bounded TypeVars (#20345)
3890fc4 Fix crash involving Unpack-ed TypeVarTuple (#20323)
c93d917 Fix crash on star import of redefinition (#20333)
Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view

Updates pydantic from 2.10.3 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

v2.12.3 (2025-10-17)

GitHub release

... (truncated)

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
Additional commits viewable in compare view

Updates tqdm from 4.67.1 to 4.67.3

Release notes

Sourced from tqdm's releases.

tqdm v4.67.3 stable

fix py3.7 dependencies (#1706 <- #1705)

tqdm v4.67.2 stable

support pandas>=3 (#1703 <- #1701, #1650, #1700)

fix format_interval for negative numbers (#1703)

misc linting

framework updates (#1704)

bump CI workflow & pre-commit dependencies

add pyupgrade

add py3.13 support

fix py3.7 tests

update setuptools-scm usage

support auto-dedented docstrings when building docs in py3.13

tests: relax flaky benchmarks

Commits

75bdb6c fix py3.7 compat
09a863b bump version, merge pull request #1704 from tqdm/devel
33d24cd update pyproject syntax
70b9124 add py3.13 support
a74d8f8 drop _dist_ver
14d72e2 Merge pull request #1703 from wingding12/fix-pandas-3.0-and-negative-interval
a69dac8 fix dedented docstrings
a986d22 tests: fix pandas deprecation warnings
bb7aa4d tests: fix pandas deprecated applymap
0647db1 misc tidy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…7 updates Bumps the all-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.1.1` | | [tritonclient](https://github.com/triton-inference-server/client) | `2.59.0` | `2.65.0` | | [opencv-python-headless](https://github.com/opencv/opencv-python) | `4.12.0.88` | `4.13.0.92` | | [mypy](https://github.com/python/mypy) | `1.17.1` | `1.19.1` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | | [pydantic](https://github.com/pydantic/pydantic) | `2.10.3` | `2.12.5` | | [tqdm](https://github.com/tqdm/tqdm) | `4.67.1` | `4.67.3` | Updates `pillow` from 11.3.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.3.0...12.1.1) Updates `tritonclient` from 2.59.0 to 2.65.0 - [Commits](https://github.com/triton-inference-server/client/commits) Updates `opencv-python-headless` from 4.12.0.88 to 4.13.0.92 - [Release notes](https://github.com/opencv/opencv-python/releases) - [Commits](https://github.com/opencv/opencv-python/commits) Updates `mypy` from 1.17.1 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.17.1...v1.19.1) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) Updates `pydantic` from 2.10.3 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.10.3...v2.12.5) Updates `tqdm` from 4.67.1 to 4.67.3 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.67.1...v4.67.3) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: tritonclient dependency-version: 2.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: opencv-python-headless dependency-version: 4.13.0.92 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: tqdm dependency-version: 4.67.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-02-11T15:39:40Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot · 2026-02-11T16:07:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 11, 2026

dependabot Bot requested a review from a team as a code owner February 11, 2026 15:21

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 11, 2026

github-project-automation Bot added this to 🐍 Python SDK - Keep on par with the API and 🧃🛠️ Open Food Facts SDK tracking Feb 11, 2026

github-project-automation Bot moved this to In progress in 🐍 Python SDK - Keep on par with the API Feb 11, 2026

github-project-automation Bot moved this to Todo in 🧃🛠️ Open Food Facts SDK tracking Feb 11, 2026

github-actions Bot added the 💥 Merge Conflicts label Feb 11, 2026

dependabot Bot force-pushed the dependabot/pip/all-dependencies-7b389a20ef branch from 85a816f to f7550e0 Compare February 11, 2026 15:39

dependabot Bot closed this Feb 11, 2026

dependabot Bot deleted the dependabot/pip/all-dependencies-7b389a20ef branch February 11, 2026 16:07

github-project-automation Bot moved this from In progress to Done in 🐍 Python SDK - Keep on par with the API Feb 11, 2026

github-project-automation Bot moved this from Todo to Done in 🧃🛠️ Open Food Facts SDK tracking Feb 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-dependencies group across 1 directory with 7 updates#428

chore(deps): bump the all-dependencies group across 1 directory with 7 updates#428
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/all-dependencies-7b389a20ef

dependabot Bot commented on behalf of github Feb 11, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Feb 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

12.1.1

Dependencies

Other changes

12.1.0

Deprecations

Documentation

Dependencies

Testing

4.13.0.92

4.13.0.90

Mypy 1.19.1

Acknowledgements

Mypy 1.18

v2.32.5

2.32.5 (2025-08-18)

2.32.5 (2025-08-18)

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

v2.12.3 (2025-10-17)

tqdm v4.67.3 stable

tqdm v4.67.2 stable

Uh oh!

sonarqubecloud Bot commented Feb 11, 2026

Quality Gate passed

Uh oh!

dependabot Bot commented on behalf of github Feb 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Feb 11, 2026 •

edited

Loading