build(deps): bump the api group across 1 directory with 5 updates #262

dependabot · 2025-01-20T02:24:37Z

Bumps the api group with 5 updates in the /api directory:

Package	From	To
pymongo	`4.1.1`	`4.10.1`
httpx	`0.27.2`	`0.28.1`
pydantic	`2.10.4`	`2.10.5`
pydantic-extra-types	`2.10.1`	`2.10.2`
opentelemetry-instrumentation-fastapi	`0.48b0`	`0.50b0`

Updates pymongo from 4.1.1 to 4.10.1

Release notes

Sourced from pymongo's releases.

PyMongo 4.10.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-10-1-released/299573

PyMongo 4.10.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-10-0-released/299474

PyMongo 4.9.2

Fixed a bug where pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.

Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.

Fixed a bug where pymongo.results.UpdateResult.did_upsert would raise a TypeError.

PyMongo 4.9.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-9-released/297833

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.

The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).

Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.

Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.

Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.

Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.

Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

PyMongo 4.7.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-3-released/283508

PyMongo 4.7.2

Community Notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-2-released/279584

PyMongo 4.7.1

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

PyMongo 4.7.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-0-released/277656

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.10.1 (2024/10/01)

Version 4.10.1 is a bug fix release.

Fixed a bug where :meth:~pymongo.results.UpdateResult.did_upsert would raise a TypeError.

Fixed Binary BSON subtype (9) support on big-endian operating systems (such as zSeries).

Issues Resolved ...............

See the PyMongo 4.10.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.10.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40788

Changes in Version 4.10.0 (2024/09/30)

Added provisional (BETA) support for a new Binary BSON subtype (9) used for efficient storage and retrieval of vectors: densely packed arrays of numbers, all of the same type. This includes new methods :meth:~bson.binary.Binary.from_vector and :meth:~bson.binary.Binary.as_vector.

Added C extension use to client metadata, for example: {"driver": {"name": "PyMongo|c", "version": "4.10.0"}, ...}

Fixed a bug where :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.

Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.

Issues Resolved ...............

See the PyMongo 4.10 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.10 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40553

Changes in Version 4.9.2 (2024/10/02)

Fixed a bug where :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.

Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.

Fixed a bug where :meth:~pymongo.results.UpdateResult.did_upsert would raise a TypeError.

Issues Resolved ...............

See the PyMongo 4.9.2 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.9.2 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40732

... (truncated)

Commits

77cd7ab BUMP 4.10.1
1c28430 PYTHON-4808 Add changelog for 4.10.1 (#1890)
7848feb PYTHON-4786 - Fix UpdateResult.did_upsert TypeError (#1878)
0279407 PYTHON-4806 Fix expected metadata in mockupdb tests (#1888)
7fbeca9 [PYTHON-4803] Big endian fix for binary bson vectors (#1885)
bfba548 PYTHON-4789 Migrate test_retryable_reads.py to async (#1877)
8791aa0 PYTHON-4790 Migrate test_retryable_writes.py to async (#1876)
c0f7810 BUMP 4.11.0.dev0
4713afa BUMP 4.10.0
ae6cfd6 [DRIVERS-2926] [PYTHON-4577] BSON Binary Vector Subtype Support (#1813)
Additional commits viewable in compare view

Updates httpx from 0.27.2 to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

Fix SSL case where verify=False together with client side certificates.

Version 0.28.0

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

The verify argument as a string argument is now deprecated and will raise warnings.

The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

The deprecated proxies argument has now been removed.

The deprecated app argument has now been removed.

JSON request bodies use a compact representation. (#3363)

Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)

Ensure certifi and httpcore are only imported if required. (#3377)

Treat socks5h as a valid proxy scheme. (#3178)

Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)

Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

Fix SSL case where verify=False together with client side certificates.

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

The verify argument as a string argument is now deprecated and will raise warnings.

The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

The deprecated proxies argument has now been removed.

The deprecated app argument has now been removed.

JSON request bodies use a compact representation. (#3363)

Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)

Ensure certifi and httpcore are only imported if required. (#3377)

Treat socks5h as a valid proxy scheme. (#3178)

Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)

Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)

Commits

26d48e0 Version 0.28.1 (#3445)
89599a9 Fix verify=False, cert=... case. (#3442)
8ecb86f Add test for request params behavior changes (#3364) (#3440)
0cb7e5a Bump the python-packages group with 11 updates (#3434)
15e21e9 Updating deprecated docstring Client() class (#3426)
80960fa Version 0.28.0. (#3419)
a33c878 Fix extensions type annotation. (#3380)
ce7e14d Error on verify as str. (#3418)
47f4a96 Handle empty zstd responses (#3412)
189fc4b Update CHANGELOG.md, fix typo(s) (#3406)
Additional commits viewable in compare view

Updates pydantic from 2.10.4 to 2.10.5

Release notes

Sourced from pydantic's releases.

v2.10.5 2024-12-18

v2.10.5 (2025-01-08)

What's Changed

Remove custom MRO implementation of Pydantic models by @Viicos in #11184

Fix URL serialization for unions by @sydney-runkle in #11233

Changelog

Sourced from pydantic's changelog.

v2.10.5 (2025-01-08)

GitHub release

What's Changed

Remove custom MRO implementation of Pydantic models by @Viicos in #11184

Fix URL serialization for unions by @sydney-runkle in #11233

Commits

5d34efd Prepare release v2.10.5 (#11237)
6e585f9 Fix url serialization for unions (#11233)
5a22e02 Remove custom MRO implementation of Pydantic models (#11195)
See full diff in compare view

Updates pydantic-extra-types from 2.10.1 to 2.10.2

Release notes

Sourced from pydantic-extra-types's releases.

v2.10.2

What's Changed

Add back Python 3.8 support by @Viicos in pydantic/pydantic-extra-types#249

⬆ Bump astral-sh/setup-uv from 4 to 5 by @dependabot in pydantic/pydantic-extra-types#282

Preserve months when using the Pendulum Duration type by @gareththackeray in pydantic/pydantic-extra-types#283

✨ Add type checking support and improve type hints across the codebase by @yezz123 in pydantic/pydantic-extra-types#285

📝 Add additional installation information to README by @oakhan3 in pydantic/pydantic-extra-types#233

🔖 Release version 2.10.2 by @yezz123 in pydantic/pydantic-extra-types#286

New Contributors

@Viicos made their first contribution in pydantic/pydantic-extra-types#249

@gareththackeray made their first contribution in pydantic/pydantic-extra-types#283

@oakhan3 made their first contribution in pydantic/pydantic-extra-types#233

Full Changelog: pydantic/pydantic-extra-types@v2.10.1...v2.10.2

Changelog

Sourced from pydantic-extra-types's changelog.

2.10.2

Add back Python 3.8 support by @Viicos in pydantic/pydantic-extra-types#249

⬆ Bump astral-sh/setup-uv from 4 to 5 by @dependabot in pydantic/pydantic-extra-types#282

Preserve months when using the Pendulum Duration type by @gareththackeray in pydantic/pydantic-extra-types#283

✨ Add type checking support and improve type hints across the codebase by @yezz123 in pydantic/pydantic-extra-types#285

📝 Add additional installation information to README by @oakhan3 in pydantic/pydantic-extra-types#233

Commits

b7ddcfa 🔖 Release version 2.10.2 (#286)
536cab8 📝 Add additional installation information to README (#233)
5ded2a1 ✨ Add type checking support (#285)
01866e6 🐛 Preserve months when using the Pendulum Duration type (#283)
3cf70f5 ⬆ Bump astral-sh/setup-uv from 4 to 5 (#282)
6a08c3a Add back Python 3.8 support (#249)
See full diff in compare view

Updates opentelemetry-instrumentation-fastapi from 0.48b0 to 0.50b0

Changelog

Sourced from opentelemetry-instrumentation-fastapi's changelog.

Version 1.29.0/0.50b0 (2024-12-11)

Added

opentelemetry-instrumentation-starlette Add type hints to the instrumentation (#3045)

opentelemetry-distro default to OTLP log exporter. (#3042)

opentelemetry-instrumentation-sqlalchemy Update unit tests to run with SQLALchemy 2 (#2976)

Add opentelemetry-instrumentation-openai-v2 to opentelemetry-bootstrap (#2996)

opentelemetry-instrumentation-sqlalchemy Add sqlcomment to db.statement attribute (#2937)

opentelemetry-instrumentation-dbapi Add sqlcomment to db.statement attribute (#2935)

opentelemetry-instrumentation-dbapi instrument_connection accepts optional connect_module (#3027)

opentelemetry-instrumentation-mysqlclient Add sqlcommenter support (#2941)

opentelemetry-instrumentation-pymysql Add sqlcommenter support (#2942)

opentelemetry-instrumentation-click: new instrumentation to trace click commands (#2994)

Fixed

opentelemetry-instrumentation-starlette: Retrieve meter_provider key instead of _meter_provider on _instrument (#3048)

opentelemetry-instrumentation-httpx: instrument_client is a static method again (#3003)

opentelemetry-instrumentation-system_metrics: fix callbacks reading wrong config (#3025)

opentelemetry-instrumentation-httpx: Check if mount transport is none before wrap it (#3022)

Replace all instrumentor unit test assertEqualSpanInstrumentationInfo calls with assertEqualSpanInstrumentationScope calls (#3037)

opentelemetry-instrumentation-sqlalchemy Fixes engines from sqlalchemy.engine_from_config not being fully instrumented (#2816)

opentelemetry-instrumentation-sqlalchemy: Fix a remaining memory leak in EngineTracer (#3053)

opentelemetry-instrumentation-sqlite3: Update documentation on explicit cursor support of tracing (#3088)

Breaking changes

opentelemetry-instrumentation-sqlalchemy teach instruments version (#2971)

Drop opentelemetry-instrumentation-test package from default instrumentation list (#2969)

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the api group with 5 updates in the /api directory: | Package | From | To | | --- | --- | --- | | [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.1.1` | `4.10.1` | | [httpx](https://github.com/encode/httpx) | `0.27.2` | `0.28.1` | | [pydantic](https://github.com/pydantic/pydantic) | `2.10.4` | `2.10.5` | | [pydantic-extra-types](https://github.com/pydantic/pydantic-extra-types) | `2.10.1` | `2.10.2` | | [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.48b0` | `0.50b0` | Updates `pymongo` from 4.1.1 to 4.10.1 - [Release notes](https://github.com/mongodb/mongo-python-driver/releases) - [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst) - [Commits](mongodb/mongo-python-driver@4.1.1...4.10.1) Updates `httpx` from 0.27.2 to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](encode/httpx@0.27.2...0.28.1) Updates `pydantic` from 2.10.4 to 2.10.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.10.4...v2.10.5) Updates `pydantic-extra-types` from 2.10.1 to 2.10.2 - [Release notes](https://github.com/pydantic/pydantic-extra-types/releases) - [Changelog](https://github.com/pydantic/pydantic-extra-types/blob/main/HISTORY.md) - [Commits](pydantic/pydantic-extra-types@v2.10.1...v2.10.2) Updates `opentelemetry-instrumentation-fastapi` from 0.48b0 to 0.50b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) --- updated-dependencies: - dependency-name: pymongo dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api - dependency-name: httpx dependency-type: direct:production update-type: version-update:semver-minor dependency-group: api - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api - dependency-name: pydantic-extra-types dependency-type: direct:production update-type: version-update:semver-patch dependency-group: api - dependency-name: opentelemetry-instrumentation-fastapi dependency-type: direct:production dependency-group: api ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 20, 2025

dependabot bot force-pushed the dependabot/pip/api/api-32fd6747db branch from 0a05967 to 39849eb Compare January 20, 2025 07:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the api group across 1 directory with 5 updates #262

build(deps): bump the api group across 1 directory with 5 updates #262

dependabot bot commented on behalf of github Jan 20, 2025 •

edited

Loading

build(deps): bump the api group across 1 directory with 5 updates #262

Are you sure you want to change the base?

build(deps): bump the api group across 1 directory with 5 updates #262

Conversation

dependabot bot commented on behalf of github Jan 20, 2025 • edited Loading

PyMongo 4.10.1

PyMongo 4.10.0

PyMongo 4.9.2

PyMongo 4.9.1

PyMongo 4.8.0

Changes in Version 4.8.0

Unavoidable breaking changes

Issues Resolved

PyMongo 4.7.3

PyMongo 4.7.2

PyMongo 4.7.1

PyMongo 4.7.0

Changes in Version 4.10.1 (2024/10/01)

Changes in Version 4.10.0 (2024/09/30)

Changes in Version 4.9.2 (2024/10/02)

Version 0.28.1

0.28.1 (6th December, 2024)

Version 0.28.0

0.28.0 (28th November, 2024)

0.28.1 (6th December, 2024)

0.28.0 (28th November, 2024)

v2.10.5 2024-12-18

v2.10.5 (2025-01-08)

What's Changed

v2.10.5 (2025-01-08)

What's Changed

v2.10.2

What's Changed

New Contributors

2.10.2

Version 1.29.0/0.50b0 (2024-12-11)

Added

Fixed

Breaking changes

dependabot bot commented on behalf of github Jan 20, 2025 •

edited

Loading