Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 9 updates - #563

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/src/minor-and-patch-e86835cd05
Open

build(deps): bump the minor-and-patch group across 1 directory with 9 updates#563
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/src/minor-and-patch-e86835cd05

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates in the /src directory:

Package From To
langchain-core 1.5.3 1.5.5
langchain-openai 1.4.3 1.5.1
spacy 3.8.14 3.8.15
pypdf 6.15.0 6.16.1
nltk 3.10.2 3.10.3
sqlalchemy 2.0.51 2.0.52
langchain-anthropic 1.5.4 1.5.6
boto3 1.43.68 1.43.72
mypy 2.3.0 2.3.1

Updates langchain-core from 1.5.3 to 1.5.5

Release notes

Sourced from langchain-core's releases.

langchain-core==1.5.5

Changes since langchain-core==1.5.4

release(core): 1.5.5 (#39655) fix(core): make abatch_iterate consistent with batch_iterate for None and zero size (#39367) fix(core): respect pydantic aliases when validating tool inputs (#39572) fix(core): issues in merging chunks (#39535) fix(core): handle v1 base model validation in async path (#39576) fix(core): handle tool descriptions for infer_schema=False (#39573) fix(core): clear usage metadata callback on exceptions in context manager (#39616) fix(core): handle falsy LLM and chat model caches (#39283) chore(core): add httpx as an explicit dep (#39612) fix(core): preserve non-str/non-dict items in DictPromptTemplate list values (#39588) fix(core): raise ValueError when explicit tool_outputs length mismatches tool_calls in tool_example_to_messages (#39142) fix(core): guard malformed Anthropic content blocks (#38670)

langchain-core==1.5.4

Changes since langchain-core==1.5.3

release(core): 1.5.4 (#39592) fix(core): compat with pydantic 2.14 (#39328) fix(core): stop StructuredPrompt from mutating caller kwargs (#39174) fix(core): preserve flat tool args schema for RootModel runnables (#39307) fix(core): close internally created event loops in streaming tracers (#39222) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(core): preserve OpenAI file blocks (#39205) fix(core): document reserved argument names for tools (#39207) fix(core): handle injected args for subclasses of BaseTool (#39202) fix(core): respect include_injected=False with filter_args (#39200) fix(core): redact streaming callback options (#39179) fix(core): type text stream projections (#39170) chore(infra): add missing LICENSE files to publishable packages (#39146)

Commits
  • c197a7b chore(model-profiles): refresh model profile data (#39646)
  • 555702e release(core): 1.5.5 (#39655)
  • e32fa9a chore(infra): add fields for social handles in issue templates (#39654)
  • d6cd98a release(openai): 1.5.1 (#39653)
  • 7b954aa fix(openai): preserve streamed encrypted reasoning (#39635)
  • 0082ce0 chore(infra): support langsmith gateway in CI (#39651)
  • f9ee55d fix(core): make abatch_iterate consistent with batch_iterate for None and zer...
  • 162f9d9 chore(model-profiles): refresh model profile data (#39625)
  • a2f02ab chore(langchain): update docs on error handling for json schema (#39632)
  • cde5293 fix(core): respect pydantic aliases when validating tool inputs (#39572)
  • Additional commits viewable in compare view

Updates langchain-openai from 1.4.3 to 1.5.1

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.5.1

Changes since langchain-openai==1.5.0

release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651)

langchain-openai==1.5.0

Changes since langchain-openai==1.4.3

release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617)

Commits

Updates spacy from 3.8.14 to 3.8.15

Release notes

Sourced from spacy's releases.

v3.8.15: Fix click requirement

Typer removed click as a dependency in favour of vendoring it, but spaCy imports from Click, so the requirement needs to be added.

Commits

Updates pypdf from 6.15.0 to 6.16.1

Release notes

Sourced from pypdf's releases.

Version 6.16.1, 2026-08-14

What's new

Security (SEC)

Full Changelog

Version 6.16.0, 2026-08-13

What's new

Security (SEC)

New Features (ENH)

  • AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917) by @​PJBrs
  • AppearanceStream: Consider more encodings for Type1 core fonts (#3905) by @​PJBrs

Performance Improvements (PI)

  • Build /ToUnicode source-code bytes directly in parse_bfrange (#3952) by @​Anai-Guo

Bug Fixes (BUG)

Robustness (ROB)

  • AppearanceStream: Only escape parentheses for 8-bit fonts (#3961) by @​PJBrs
  • Recover the trailer from a cross-reference stream when rebuilding the xref (#3950) by @​Anai-Guo

Maintenance (MAINT)

  • Deduplicate CatalogAttributes and CatalogDictionary (#3940) by @​j-t-1

Code Style (STY)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.16.1, 2026-08-14

Security (SEC)

  • Limit iterations for outline retrieval and XForm text extraction (#3966)

Full Changelog

Version 6.16.0, 2026-08-13

Security (SEC)

  • Detect cycles in TreeObject.insert_child (#3964)

New Features (ENH)

  • AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917)
  • AppearanceStream: Consider more encodings for Type1 core fonts (#3905)

Performance Improvements (PI)

  • Build /ToUnicode source-code bytes directly in parse_bfrange (#3952)

Bug Fixes (BUG)

  • Preserve internal Link annotations when appending/merging (#3953) (#3954)
  • Fix false inline image end markers (#3922)
  • Reject typeless non-page /Kids entries in strict mode (#3955)
  • Apply character spacing (Tc) per glyph in layout-mode extraction (#3951)
  • Keep the Adobe CMYK inversion when an explicit /Decode is present (#3943)

Robustness (ROB)

  • AppearanceStream: Only escape parentheses for 8-bit fonts (#3961)
  • Recover the trailer from a cross-reference stream when rebuilding the xref (#3950)

Maintenance (MAINT)

  • Deduplicate CatalogAttributes and CatalogDictionary (#3940)

Code Style (STY)

  • Type pages as a Sequence rather than a list (#3957)

Full Changelog

Commits
  • 1bce7a7 REL: 6.16.1
  • d91ab70 SEC: Limit iterations for outline retrieval and XForm text extraction (#3966)
  • 2b60c99 REL: 6.16.0
  • c9ba557 SEC: Detect cycles in TreeObject.insert_child (#3964)
  • c8e1c72 BUG: Always define PdfWriter._reader (#3960)
  • 3a0f355 ROB: Detect cyclic pages in _get_page_in_node (#3962)
  • 20512f4 ROB: AppearanceStream: Only escape parentheses for 8-bit fonts (#3961)
  • 34ccd14 MAINT: Deduplicate CatalogAttributes and CatalogDictionary (#3940)
  • 5b8f19e ENH: AppearanceStream: Allow arbitrary rotations and apply rotations for anno...
  • 53bfbc6 PI: Build /ToUnicode source-code bytes directly in parse_bfrange (#3952)
  • Additional commits viewable in compare view

Updates nltk from 3.10.2 to 3.10.3

Release notes

Sourced from nltk's releases.

v3.10.3

Version 3.10.3 2026-08-12

  • docs: wrap Chat-80 HOWTO output
  • Sandbox Stanford JAR execution to nltk_data directories
  • Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
  • Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
  • Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
  • fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
  • fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
  • fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
  • fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
  • Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

New Contributors

Full Changelog: nltk/nltk@v3.10.2...v3.10.3

v3.10.3-rc1

Version 3.10.3 2026-08-12

  • docs: wrap Chat-80 HOWTO output
  • Sandbox Stanford JAR execution to nltk_data directories
  • Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
  • Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
  • Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
  • fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
  • fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
  • fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
  • fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
  • Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.3 2026-08-12

  • docs: wrap Chat-80 HOWTO output
  • Sandbox Stanford JAR execution to nltk_data directories
  • Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
  • Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
  • Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
  • fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
  • fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
  • fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
  • fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
  • Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

Version 3.10.2 2026-08-05

  • Remove inisec.py and document PYTHONSAFEPATH instead
  • Skip draft step in release workflow
  • Fix symlink escape in FramenetCorpusReader (CWE-59)
  • Guard tempfile.gettempdir() when building pathsec allowed roots
  • add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

  • Expand ~ in env-var paths
  • Validate types after WordNet app pickle deserialization
  • Fix uncontrolled search path in HunposTagger
  • Use exact thirds in masi_distance
  • Avoid retaining bllip import exceptions
  • Fix word_tokenize: pad opening single quote before multi-letter words.
  • Implement Tree.pformat_latex_forest.
  • Prevent module hijacking in inline imports.
  • Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

  • Enforce the stricter nltk.pathsec security policy by default
  • Document the new security model and migration guidance
  • Harden resource loading against path traversal and SSRF/DNS-rebinding
  • Harden downloader path handling and block XML entity expansion
  • Close remaining corpus-reader security edge cases
  • Replace unsafe exec() usage in the utility CLI

... (truncated)

Commits
  • 303f6e2 Prepare release 3.10.3 (#3745)
  • cf2aaac Merge pull request #3744 from alvations/ci-guard-open
  • 6cd8320 test: robustness on Python 3.14 / 3.14t CI (UnicodeDecodeError + timing flake)
  • e965330 fix: perceptron save_to_json breaks on Windows (os.open can't fd-open a direc...
  • df1bb4c test: make pathsec security tests platform-independent (fix Linux/Windows CI)
  • 0e5c7be ci: guard against un-sandboxed open() in sandbox-sensitive modules (#3740)
  • 5017826 Merge commit from fork
  • 40d0f06 Triple-check hardening: perceptron TOCTOU squat, pathsec fd-leak, bcp47 entit...
  • 483c5fe Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + s...
  • 722778f Merge commit from fork
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.51 to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

  • [platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

    References: #13477

orm

  • [orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

    References: #13439

  • [orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

    References: #13485

  • [orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

Updates langchain-anthropic from 1.5.4 to 1.5.6

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.5.6

Changes since langchain-anthropic==1.5.5

release(anthropic): 1.5.6 (#39622) fix(anthropic): normalize tool_search_tool_result blocks (#39621) fix(anthropic): correct model profile data for Fable 5, Sonnet 5, Opus 4.1 (#39604)

langchain-anthropic==1.5.5

Changes since langchain-anthropic==1.5.4

release(anthropic): 1.5.5 (#39597) fix(anthropic): report reasoning tokens in usage metadata (#39590) fix(anthropic): fix KeyError on rename in Claude file-tool middleware (#39293) chore(model-profiles): refresh model profile data (#39299) fix(anthropic): clearer error when no credentials are configured (#39285)

Commits
  • c5b2f95 release(anthropic): 1.5.6 (#39622)
  • 3c6c3ba fix(anthropic): normalize tool_search_tool_result blocks (#39621)
  • a648460 fix(core): issues in merging chunks (#39535)
  • 13b2f8d fix(core): handle v1 base model validation in async path (#39576)
  • 7fb045b fix(fireworks): avoid repeated service_tier [closes #39619] (#39620)
  • 624fd03 fix(core): handle tool descriptions for infer_schema=False (#39573)
  • dff3b73 fix(langchain): preserve final repeated schema ordering (#39284)
  • 1a2585e fix(openrouter): preserve cost metadata in usage chunks (#39338)
  • 0a86934 fix(core): clear usage metadata callback on exceptions in context manager (#3...
  • 2d47a5f chore(partners): bump langgraph floor in openai and huggingface lockfiles (#3...
  • Additional commits viewable in compare view

Updates boto3 from 1.43.68 to 1.43.72

Commits
  • a3fc41f Merge branch 'release-1.43.72'
  • 27a2636 Bumping version to 1.43.72
  • 33a1671 Add changelog entries from botocore
  • a0b0f50 Merge branch 'release-1.43.71'
  • f1ea765 Merge branch 'release-1.43.71' into develop
  • 3a07077 Bumping version to 1.43.71
  • 9886147 Add changelog entries from botocore
  • 8c2ae68 Merge branch 'release-1.43.70'
  • 116daa7 Merge branch 'release-1.43.70' into develop
  • 4901fc8 Bumping version to 1.43.70
  • Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

  • Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
  • Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
  • Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
  • Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Agriya Khetarpal
  • Ethan Sarp
  • Ivan Levkivskyi
  • Jingchen Ye
  • Jukka Lehtosalo
  • Piotr Sawicki
  • Shantanu
  • Tom Bannink
  • Viktor Szépe
  • ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 18, 2026
@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 9…
f39b73e 
… updates

Bumps the minor-and-patch group with 9 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.5.3` | `1.5.5` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.5.1` |
| [spacy](https://github.com/explosion/spaCy) | `3.8.14` | `3.8.15` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.15.0` | `6.16.1` |
| [nltk](https://github.com/nltk/nltk) | `3.10.2` | `3.10.3` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.52` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.5.4` | `1.5.6` |
| [boto3](https://github.com/boto/boto3) | `1.43.68` | `1.43.72` |
| [mypy](https://github.com/python/mypy) | `2.3.0` | `2.3.1` |



Updates `langchain-core` from 1.5.3 to 1.5.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.5.3...langchain-core==1.5.5)

Updates `langchain-openai` from 1.4.3 to 1.5.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.4.3...langchain-openai==1.5.1)

Updates `spacy` from 3.8.14 to 3.8.15
- [Release notes](https://github.com/explosion/spaCy/releases)
- [Changelog](https://github.com/explosion/spaCy/blob/master/RELEASE_NOTES.md)
- [Commits](explosion/spaCy@release-v3.8.14...release-v3.8.15)

Updates `pypdf` from 6.15.0 to 6.16.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.15.0...6.16.1)

Updates `nltk` from 3.10.2 to 3.10.3
- [Release notes](https://github.com/nltk/nltk/releases)
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@v3.10.2...v3.10.3)

Updates `sqlalchemy` from 2.0.51 to 2.0.52
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `langchain-anthropic` from 1.5.4 to 1.5.6
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.5.4...langchain-anthropic==1.5.6)

Updates `boto3` from 1.43.68 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.68...1.43.72)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-anthropic
  dependency-version: 1.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-core
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: langchain-openai
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: nltk
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pypdf
  dependency-version: 6.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: spacy
  dependency-version: 3.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sqlalchemy
  dependency-version: 2.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/src/minor-and-patch-e86835cd05 branch from e7d580f to f39b73e Compare August 18, 2026 21:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants