Skip to content

build(deps): Bump the python group in /server with 5 updates - #35

Merged
ehfd merged 1 commit into
mainfrom
dependabot/pip/server/python-ad862f20b0
Oct 8, 2026
Merged

ehfd merged 1 commit into
mainfrom
dependabot/pip/server/python-ad862f20b0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the python group in /server with 5 updates:

Package From To
fastapi 0.141.1 0.142.2
uvloop 0.22.1 0.23.0
pyjwt 2.15.0 2.15.1
cryptography 50.0.1 50.0.2
websockets 17.1 17.2

Updates fastapi from 0.141.1 to 0.142.2

Release notes

Sourced from fastapi's releases.

0.142.2

Fixes

  • 🐛 Allow startup when automatic OpenTelemetry configuration fails. PR #16418 by @​tiangolo.

0.142.1

Fixes

0.142.0

Features

Refactors

Docs

Translations

Internal

... (truncated)

Commits

Updates uvloop from 0.22.1 to 0.23.0

Release notes

Sourced from uvloop's releases.

v0.23.0

Changes

Fixes

... (truncated)

Commits
  • c5f7deb uvloop 0.23.0
  • f7c0547 Add Python 3.15 to CI and fix test issues (#758)
  • e8efea4 Upgrade libuv to v1.52.1 (#753)
  • 3cbb095 feat: support eager_start kwarg (#748)
  • 0582f94 Add thread name prefix to the default thread pool executor (#636)
  • 963a5f3 Support any number of flags in UVLOOP_OPT_CFLAGS (#630)
  • 173e88c Get rid of wheel as a build dependency (#696)
  • b74c2f1 Update the example to work with 3.14 (#710)
  • dc680eb Detach socket on create_connection cancellation to prevent fd double-close (#...
  • 6cd24cb fix: explicit yield after run_in_executor as it was implicitly needed (#743)
  • Additional commits viewable in compare view

Updates pyjwt from 2.15.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Fixed


- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).
Commits

Updates cryptography from 50.0.1 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.

.. _v50-0-1:

Commits

Updates websockets from 17.1 to 17.2

Release notes

Sourced from websockets's releases.

17.2

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • a1664f4 Release version 17.2.
  • d2060d8 Test against latest PyPy.
  • 2af0aff Bump pypa/cibuildwheel from 4.2.0 to 4.2.1
  • 603dd98 Document how to wait for clients to disconnect.
  • f78b0b3 mypy is getting smarter.
  • 32504a8 Prevent suprious log when proxy rejects connection.
  • 7db6ba3 Decode credentials in WebSocket and proxy URIs.
  • a591d62 Tighten heuristics for representing control frames.
  • 5b63a4c Fix flaky tests.
  • b8cfbfb Add deterrence against AI slop.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group in /server with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.141.1` | `0.142.2` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.22.1` | `0.23.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.15.0` | `2.15.1` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [websockets](https://github.com/python-websockets/websockets) | `17.1` | `17.2` |


Updates `fastapi` from 0.141.1 to 0.142.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.141.1...0.142.2)

Updates `uvloop` from 0.22.1 to 0.23.0
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.22.1...v0.23.0)

Updates `pyjwt` from 2.15.0 to 2.15.1
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.15.0...2.15.1)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `websockets` from 17.1 to 17.2
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@17.1...17.2)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.142.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uvloop
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pyjwt
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: websockets
  dependency-version: '17.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 7, 2026
@ehfd
ehfd merged commit d054d87 into main Oct 8, 2026
6 checks passed
@ehfd
ehfd deleted the dependabot/pip/server/python-ad862f20b0 branch October 8, 2026 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant