chore(deps-dev): bump the python-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the python-dependencies group with 7 updates in the / directory:

Package	From	To
mashumaro	3.20	3.21
google-genai	1.73.1	2.4.0
mcp	1.27.0	1.27.1
coverage	7.13.5	7.14.0
mypy	1.20.2	2.1.0
pip	26.1	26.1.1
ruff	0.15.12	0.15.13

Updates mashumaro from 3.20 to 3.21

Release notes

Sourced from mashumaro's releases.

v3.21

Changes

• Added support for recursive dataclasses in JSON Schema (#308)
• Fixed building JSON Schema for dataclasses with slots (#307)
• Fixed issue with deferred evaluation of annotations for serialization strategies and serializable types that include PEP 695 generic type parameters (#310)
• Fixed errors for PEP 695 type aliases with generic arguments or cyclic references (#311, #312)
• Code coverage report tool coveralls.io was replaced by codecov.io (#309)
• Fixed propagation of lazy_compilation config value in generic dataclasses with inheritance (#319)
• Added ability for serialization strategies to match subclasses (#298, #317)
• Dropped support for Python 3.9 (#314)

Commits

• 69143a2 Bump version
• 5b74f3f Merge pull request #325 from Fatal1ty/py39-eol
• 01ae942 Remove KW_ONLY fallback import
• bb37ef4 Update black
• a895a78 Deprecate py39
• 447beee Merge branch 'kdkavanagh-kdkavanagh/298'
• 1a5b4c2 Improve test coverage
• e167f92 Improve typing in _get_strategy_for_type
• 35a894e Merge remote-tracking branch 'kdkavanagh/kdkavanagh/298' into kdkavanagh-kdka...
• 23c56ad Bad import
• Additional commits viewable in compare view

Updates google-genai from 1.73.1 to 2.4.0

Release notes

Sourced from google-genai's releases.

v2.4.0

2.4.0 (2026-05-17)

Features

• Support Agent and Environment APIs. (ef20d6b)

Bug Fixes

• Output_text for turns that don't end with text. (2afdeff)
• Pass max_line_length to readline() to prevent LineTooLong on large SSE lines with MTLS. (0e8f7bb)

v2.3.0

2.3.0 (2026-05-15)

Features

• Add content union to UserInputStep (a5059a8)
• Interaction.{output_text,output_image,output_audio,output_video} (975d16a)
• Migrate Agent Engines, Evaluation, Prompt Management, and Skill features to agentplatform (abb1099)

Documentation

• Refresh generated docs for 2.2 (2ce0298)

v2.2.0

2.2.0 (2026-05-12)

Features

• Added missing FunctionCallResultDelta type and arguments field to the ArgumentDelta type (b0131f8)

v2.1.0

2.1.0 (2026-05-12)

Features

• Add gemini-3.1-flash-lite to model options (2d5e0fa)
• Add parameters to video response_format. (4e9d68d)
• Introduce Server Side tools deltas (97d6fe5)
• Support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (955bca6)
• Add support for Vertex-lyria models lyria-3-pro-preview & lyria-3-clip-preview (1bc0536)

Bug Fixes

... (truncated)

Changelog

Sourced from google-genai's changelog.

2.4.0 (2026-05-17)

Features

• Support Agent and Environment APIs. (ef20d6b)

Bug Fixes

• Output_text for turns that don't end with text. (2afdeff)
• Pass max_line_length to readline() to prevent LineTooLong on large SSE lines with MTLS. (0e8f7bb)

2.3.0 (2026-05-15)

Features

• Add content union to UserInputStep (a5059a8)
• Interaction.{output_text,output_image,output_audio,output_video} (975d16a)
• Migrate Agent Engines, Evaluation, Prompt Management, and Skill features to agentplatform (abb1099)

Documentation

• Refresh generated docs for 2.2 (2ce0298)

2.2.0 (2026-05-12)

Features

• Added missing FunctionCallResultDelta type and arguments field to the ArgumentDelta type (b0131f8)

2.1.0 (2026-05-12)

Features

• Add gemini-3.1-flash-lite to model options (2d5e0fa)
• Add parameters to video response_format. (4e9d68d)
• Introduce Server Side tools deltas (97d6fe5)
• Support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (955bca6)
• Add support for vertex-lyria models lyria-3-pro-preview & lyria-3-clip-preview (1bc0536)

Bug Fixes

• Steps is not optional (9ea9633)

2.0.1 (2026-05-09)

... (truncated)

Commits

• 610059b chore(main): release 2.4.0 (#2446)
• ef20d6b feat: support Agent and Environment APIs.
• 6ed3020 chore: Improve APIConnectionTimeoutError message.
• 2afdeff fix: output_text for turns that don't end with text.
• 84822a1 Copybara import of the project:
• 0e8f7bb fix: pass max_line_length to readline() to prevent LineTooLong on large SSE l...
• f907d4b chore(main): release 2.3.0 (#2421)
• 975d16a feat: interaction.{output_text,output_image,output_audio,output_video}
• 6a5db58 chore: Still experimental
• 2ce0298 docs: refresh generated docs for 2.2
• Additional commits viewable in compare view

Updates mcp from 1.27.0 to 1.27.1

Release notes

Sourced from mcp's releases.

v1.27.1

What's Changed

• [v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2.13 compat) by @​maxisbey in modelcontextprotocol/python-sdk#2435
• [v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthClientMetadata by @​felixweinberger in modelcontextprotocol/python-sdk#2405
• [v1.x] build: restrict httpx to <1.0.0 by @​maxisbey in modelcontextprotocol/python-sdk#2559
• [v1.x] refactor: import SSEError from httpx_sse public API by @​maxisbey in modelcontextprotocol/python-sdk#2561

Full Changelog: modelcontextprotocol/python-sdk@v1.27.0...v1.27.1

Commits

• 77431eb [v1.x] refactor: import SSEError from httpx_sse public API (#2561)
• 2034cae [v1.x] build: restrict httpx to <1.0.0 (#2559)
• 73d458b [v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthCli...
• 8d4c2f5 [v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2...
• See full diff in compare view

Updates coverage from 7.13.5 to 7.14.0

Changelog

Sourced from coverage's changelog.

Version 7.14.0 — 2026-05-10

• Feature: now when running one of the reporting commands, if there are parallel data files that need combining, they will be implicitly combined before creating the report. There is no option to avoid the combination; let us know if you have a use case that requires it. Thanks, Tim Hatch <pull 2162_>. Closes issue 1781.

• Fix: the output from combine was too verbose, listing each file considered. Now it shows a single line with the counts of files combined, files skipped, and files with errors. The -q flag suppresses this line. The old detailed lines are available with the new --debug=combine option.

• Fix: running a Python file through a symlink now sets the sys.path correctly, matching regular Python behavior. Fixes issue 2157_.

• Fix: Collector.flush_data could fail with "RuntimeError: Set changed size during iteration" when a tracer in another thread added a line to the per-file set that add_lines (or add_arcs) was iterating. The values passed to CoverageData are now snapshotted via dict.copy() and set.copy(), which are atomic under the GIL. Thanks, Alex Vandiver <pull 2165_>_.

• Fix: the soft keyword lazy is now bolded in HTML reports.

• We are no longer testing eventlet support. Eventlet started issuing stern deprecation warnings that break our tests. Our support code is still there.

.. _issue 1781: coveragepy/coveragepy#1781 .. _issue 2157: coveragepy/coveragepy#2157 .. _pull 2162: coveragepy/coveragepy#2162 .. _pull 2165: coveragepy/coveragepy#2165

.. _changes_7-13-5:

Commits

• 646351b docs: sample HTML for 7.14.0
• 39cd015 docs: prep for 7.14.0
• 649e8aa docs: thanks Alex Vandiver for #2165
• 8cd392e fix: snapshot data in Collector.flush_data to avoid threading race (#2165)
• c48e0ed fix: less output for combining
• c2a3a28 docs: explain the change from #2162
• 1cd47aa fix: implicit combine-during-report now removes the combined data files
• 2d99fd7 feat: automatically combine coverage in report, thanks Tim Hatch (#2162)
• 9fbdcdf fix: lazy soft keywords are bolded
• 5de7d02 build: oops, misplaced quote
• Additional commits viewable in compare view

Updates mypy from 1.20.2 to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

• Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)
• Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)
• Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

• Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)
• Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

Changes to Messages

... (truncated)

Commits

• c1c336d Remove +dev from version
• 74df14b Add changelog for mypy 2.1 (#21464)
• 022d9bc Revert "TypeForm: Enable by default (#21262)"
• 8826288 [mypyc] Document librt.random (#21463)
• 3f4067b Bump librt version to 0.11.0 (#21458)
• 2b1eb58 [mypyc] Enable incremental self-compilation (#21369)
• 8152f4a Respect file config comments for stale modules (#21444)
• 116d60b Fix nondeterminism from nonassociativity of overload joins (#21455)
• 6c4af8e Fix function call message change for small number of args (#21432)
• 4b8fdca [mypyc] Add librt.random module (#21433)
• Additional commits viewable in compare view

Updates pip from 26.1 to 26.1.1

Changelog

Sourced from pip's changelog.

26.1.1 (2026-05-04)

Bug Fixes

• Fix issue where uninstallation left behind empty directories. Revert the removal of the adjacent __pycache__ directory when a .py file is removed. ([#13973](https://github.com/pypa/pip/issues/13973) <https://github.com/pypa/pip/issues/13973>_)

Commits

• 4432a37 Bump for release
• 4943e17 Merge pull request #13973 from pypa/revert-13725-vfazio-remove-all-optimizati...
• e9e7b90 Add news
• 0ff6964 Revert "Remove pycache when package is removed"
• cc6b082 Merge pull request #13951 from sbidoul/release/26.1
• b2671f1 Bump for development
• See full diff in compare view

Updates ruff from 0.15.12 to 0.15.13

Release notes

Sourced from ruff's releases.

0.15.13

Release Notes

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.13

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

• @​MichaReiser

... (truncated)

Commits

• 2afb467 Bump 0.15.13 (#25157)
• 3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
• 79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
• 2522549 Remove shellcheck from prek (#25154)
• 7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
• bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
• 828cdb7 [ty] Isolate file-watching test environment (#25151)
• 89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
• 86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
• ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!