Skip to content

build: bump the python-deps group across 3 directories with 11 updates - #917

Merged
github-actions[bot] merged 1 commit into
dependabotchangesfrom
dependabot/pip/infra/vscode_web/dependabotchanges/python-deps-fb777976b1
Sep 2, 2026
Merged

build: bump the python-deps group across 3 directories with 11 updates#917
github-actions[bot] merged 1 commit into
dependabotchangesfrom
dependabot/pip/infra/vscode_web/dependabotchanges/python-deps-fb777976b1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on azure-ai-projects, ansible-core, quart, agent-framework-core, azure-storage-blob, openai, pydantic, pydantic-settings, python-dotenv, isort and mypy to permit the latest version.
Updates azure-ai-projects from 2.4.0 to 2.5.0

Updates ansible-core to 2.21.3

Release notes

Sourced from ansible-core's releases.

v2.21.3

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

Commits

Updates azure-ai-projects from 2.4.0 to 2.5.0

Updates quart to 0.23.1

Changelog

Sourced from quart's changelog.

Version 0.23.1

Released 2026-08-29

Version 0.23.0

Released 2026-08-29

  • Improve the development reloader - it now works in a similar way to Flask's with the app run in a subprocess such that it reloads after syntax errors etc... are fixed rather than crashing as now.
  • Provide backpressure to the ASGI server and clean up the request/websocket ASGI handling.
  • Ensure all teardown functions are called as per Flask.
  • Merge contexts into a single AppContext as per Flask. This could be a breaking change if the other contexts where used directly.
  • Drop support for Python versions less than 3.13.

Version 0.22.0

Released 2026-08-19

  • Use Quart's logger rather than Hypercorn's in app.run
  • Document serving function call ordering
  • Bugfix ensure the path is correct when using root_path
  • Bugfix Correct traceback/error behaviour

Version 0.21.0

Released 2026-07-23

  • Support 3.14 and drop 3.10 and 3.9
  • Fix non-port-needing URI schemes with app run.
  • Fix propagating exceptions.
  • Add --debug/--no-debug flag for quart run.
  • Base Quart's default_config on Flask's
  • Remove invalid uses of AnyStr.
  • Improve file type hints.
  • Flask backport: Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
  • Support partitioned cookies
  • Don't apply max_form_parts to non-multipart forms

Version 0.20.0

Released 2024-12-23

... (truncated)

Commits
  • 6b318bd Bump and release 0.23.1
  • e8eb3b8 Remove print output of body
  • adc30b2 Update uv lock
  • 6456d24 Bump and release 0.23.0
  • e893078 Bugfix Add missing teardown websocket functions to app from blueprint
  • 40ccef9 Follow Flask and merge contexts
  • a6dc470 Ensure all teardown functions are called
  • db05772 Backpressure
  • 47dcc01 Improve the reloader
  • 00e077e Improve the development reloader
  • Additional commits viewable in compare view

Updates agent-framework-core from 1.12.1 to 1.16.0

Release notes

Sourced from agent-framework-core's releases.

python-1.16.0

[1.16.0] - 2026-08-27

Added

  • agent-framework-core: Add configurable timeouts for waiting on the first background-agent task completion (#7908)
  • agent-framework-core: Allow programmatic OpenTelemetry service metadata, resource attributes, and OTLP exporter configuration (#7703)

Changed

  • agent-framework-foundry-hosting: Update Agent Server dependencies and expose parent FoundryToolbox constructor options (#7921)
  • samples: Apply ChatKit attachment lifecycle checks consistently in the end-to-end sample (#7846)

Fixed

  • agent-framework-ag-ui, agent-framework-foundry-hosting: Preserve backend-owned service-session snapshots and validate incremental provider continuation input (#7770)
  • agent-framework-anthropic, agent-framework-mistral: Preserve unmapped provider finish reasons (#7850)
  • agent-framework-azure-ai-search: Preserve the kinds of heterogeneous knowledge sources (#7875)
  • agent-framework-core: Prevent workflow checkpoints from being mutated outside storage implementations (#7847)
  • agent-framework-core: Discard unsafe Content fields during deep copy (#7903)
  • agent-framework-core: Avoid mutating caller input in SerializationMixin.from_dict() (#7901)
  • agent-framework-core: Keep the private agent-loop iteration marker out of provider SDK requests (#7860)
  • agent-framework-gemini: Preserve unmapped finish reasons and attach usage details to the correct response (#7837)
  • agent-framework-openai: Preserve streaming when GenAI instrumentation replaces the raw SDK response (#7705)

python-1.15.0

[1.15.0] - 2026-08-21

Added

  • agent-framework-ag-ui, agent-framework-openai: Add optional A2UI support for agent-generated interfaces and preserve streaming tool-call indices for A2UI consumers (#7423)
  • agent-framework-core: Add MiddlewareFailure as a first-class fatal signal for function middleware (#7562)
  • agent-framework-core, agent-framework-azure-cosmos: Add a process-wide workflow checkpoint type registry, register Cosmos checkpoint state types, and declare the compatibility dependency required by the supported Cosmos SDK floor (#7636)
  • agent-framework-core, agent-framework-foundry-hosting: Add steering, retry, and recovery support for resilient Foundry Hosted Agents, with long-running workflow samples (#7670)
  • samples: Add the production-ready installment of the build-your-own-claw harness sample (#7698)

Changed

  • agent-framework-ag-ui, agent-framework-core: [BREAKING] Consolidate OpenTelemetry GenAI semantic-convention support around stable and experimental modes with explicit message-event controls (#7673)
  • agent-framework-ag-ui: Align run continuity and avoid emitting unchanged predictive state snapshots (#7662, #7766)
  • agent-framework-core: Defer turn-scoped after_run context providers to the agent-loop boundary (#7289)
  • agent-framework-ag-ui, agent-framework-core, agent-framework-declarative: Persist approval state and distinguish absent values from falsey approval data (#7631)
  • agent-framework-devui: Forward function_invocation_kwargs through DevUI agent runs (#7779)
  • agent-framework-core, samples: Clarify skill script arguments and MCP tool argument-filtering behavior (#7695, #7801)
  • tests: Update uv, Ruff, mypy, ty, Flit, and the root build-system dependency range (#7644, #7645, #7780, #7781, #7782, #7783, #7784)
  • docs: Clarify PR review resolution and pin the Agent Lightning installation documentation link (#7746, #7693)

Fixed

  • agent-framework-a2a, agent-framework-core, agent-framework-orchestrations: Preserve and normalize A2A inputs when used through orchestrations (#7761)
  • agent-framework-ag-ui: Preserve tool-message IDs, URL-source attachments, and JSON workflow resume payloads (#7510, #7655, #7684)
  • agent-framework-anthropic, agent-framework-core: Preserve structured instructions when merging chat options (#7730)
  • agent-framework-core: Preserve all fan-in trace contexts and restrict workflow type deserialization (#7557, #7500)
  • agent-framework-core: Avoid remote MCP tool-name shadowing while retaining the documented argument allowlist (#7799)
  • agent-framework-core: Always emit an arguments field for zero-argument tool calls in Foundry evaluations (#7734)
  • agent-framework-core, agent-framework-github-copilot: Forward telemetry configuration to the GitHub Copilot client (#7625)

... (truncated)

Commits
  • 2aa267e .NET: Updating version for dotnet release 1.16.0 (#7441)
  • 6a3d535 .NET: Add regression tests and sample guidance for stable agent IDs in checkp...
  • 73f48d2 .NET: Add FileMemoryProvider sample to 02-agents/AgentWithMemory (#7401)
  • 28389df Python: Move SessionStore to core and persist Foundry Responses sessions (#7306)
  • 143386f Python: fix(core): restrict unpickler module-prefix allowlist to types only (...
  • 47c8e29 Python: Add FileMemoryProvider context provider sample (#7428)
  • 51615d5 Fix DevFlow review comment trigger (#7434)
  • 12b2893 Python: Apply header_provider headers to the MCP initialize handshake and oth...
  • 93e8cb2 Python: make SerializationMixin.from_dict enforce the documented type check (...
  • b64a2e2 Python: add feature-usage User-Agent telemetry (#7420)
  • Additional commits viewable in compare view

Updates azure-storage-blob to 12.30.1

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.30.1

12.30.1 (2026-08-24)

Bugs Fixed

  • Fixed a bug where client-side encryption 2.0 could not detect a rearrangement of otherwise-untampered authenticated regions in blob content. This is now detected and exceptions are thrown. For data recovery purposes, this behavior can be reverted by setting the "AZURE_STORAGE_CSE_V2_ALLOW_MISORDERED_AUTH_REGIONS" environment variable.
  • Fixed a bug in client-side encryption where version downgrades, and other metadata tampering, was only detected at the start of a download.
Commits

Updates openai to 3.6.0

Release notes

Sourced from openai's releases.

v3.6.0

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)
Changelog

Sourced from openai's changelog.

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

3.5.0 (2026-08-27)

Features

  • api: make function call output call IDs optional (#3738) (c74501d)

3.4.0 (2026-08-25)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)
  • api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

  • api: encode Realtime call offers and session configuration (#3736) (555ac48)
  • apply consistent origin checks to WebSocket redirects (#3693) (1b324d0)

... (truncated)

Commits
  • 1cfa80a release: 3.6.0 (#3752)
  • 9917c6e chore(deps-dev): bump pyright from 1.1.399 to 1.1.413 (#3744)
  • 0b52c9e chore(deps-dev): bump mypy from 1.17 to 2.3.1 (#3747)
  • 4f5598c chore(deps-dev): bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719)
  • 95f0b43 chore(deps-dev): bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659)
  • a36010d chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745)
  • 7a5484d chore(deps-dev): bump rich from 14.2.0 to 15.0.0 (#3717)
  • d0a2550 chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#3665)
  • dacbb66 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666)
  • d765db7 build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 (#3672)
  • Additional commits viewable in compare view

Updates pydantic to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

... (truncated)

Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-settings to 2.15.0

Release notes

Sourced from pydantic-settings's releases.

v2.15.0

Highlights

Behavior changes

  • case_sensitive now applies to init kwargs and config-file sources (#900). InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
  • Fields with unresolved forward references now emit a warning (#901). Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
  • Non-JSON env values for strict fields now raise ValidationError (#926) instead of a less specific error.

New features

  • Show environment variable names in CLI help via cli_show_env_vars=True (#860), so generated --help output doubles as configuration documentation.
  • PYDANTIC_SETTINGS_DEBUG for debugging settings resolution (#906, #913). Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
  • toml_table_header for regular TOML files (#882, #886, #887), letting you root settings at a nested table in any TOML file, not just pyproject.toml.
  • Traversable support for JSON/TOML/YAML file sources (#902), so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
  • GCP: project_id can come from an earlier settings source (#878), rather than only from the constructor or GOOGLE_CLOUD_PROJECT.

Bug fixes

  • Fix env vars not loading on Windows with case_sensitive=True (#894). Windows upper-cases os.environ keys, so fields raised Field required instead of picking up their values.
  • Read secret files as UTF-8 instead of the platform locale encoding (#917). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.
  • Fix AliasPath on nested model fields not JSON-decoding env values (#898).
  • Fix case-insensitive matching for optional nested models (#905).
  • Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (#912) — e.g. dbx_token being swallowed by a db: dict field.
  • Fix nested_model_default_partial_update=True corrupting discriminated unions (#876).
  • Fix Secret subclasses crashing when loaded from the environment (#920).
  • Fix enum names not parsing through nested annotations such as Optional[Annotated[MyEnum, ...]] with env_parse_enums=True (#910).
  • An empty yaml_config_section now falls back to defaults instead of raising AttributeError: 'NoneType' object has no attribute 'keys' (#914).
  • NestedSecretsSettingsSource no longer follows symlinks pointing outside secrets_dir (#889).
  • GCP: skip the list_secrets call when case_sensitive=True (#862), lowering the required IAM permissions to just roles/secretmanager.secretAccessor.
  • AWS: types-boto3[secretsmanager] is no longer required at runtime (#880).

Documentation

  • Document JSON parsing of complex env values, plus a comma-separated-values recipe (#919).
  • Recommend an async settings loading pattern (#908).
  • Clarify behavior when an unprefixed value is present in a dotenv file (#895).
  • Clarify environment variable helper descriptions (#867) and fix assorted typos (#904).

What's Changed

... (truncated)

Commits
  • f725ca1 Prepare release 2.15.0 (#930)
  • 28f35c2 Bump the python-packages group with 4 updates (#929)
  • 9056db0 test: move function-local imports to the top of test modules (#927)
  • f077e3a fix: raise ValidationError for non-JSON env values on strict fields (#926)
  • ae25d70 fix: treat Secret subclasses as non-complex fields (#716) (#920)
  • 798dcea Bump the python-packages group with 4 updates (#924)
  • a190041 Bump the github-actions group with 4 updates (#925)
  • 5d93332 Bump the python-packages group with 4 updates (#921)
  • d2fdeda fix: read secret files as UTF-8 instead of the locale encoding (#917)
  • 2256a4e Bump the python-packages group with 3 updates (#915)
  • Additional commits viewable in compare view

Updates python-dotenv to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

... (truncated)

Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates azure-ai-projects from 2.4.0 to 2.5.0

Updates quart to 0.23.1

Changelog

Sourced from quart's changelog.

Version 0.23.1

Released 2026-08-29

Version 0.23.0

Released 2026-08-29

  • Improve the development reloader - it now works in a similar way to Flask's with the app run in a subprocess such that it reloads after syntax errors etc... are fixed rather than crashing as now.
  • Provide backpressure to the ASGI server and clean up the request/websocket ASGI handling.
  • Ensure all teardown functions are called as per Flask.
  • Merge contexts into a single AppContext as per Flask. This could be a breaking change if the other contexts where used directly.
  • Drop support for Python versions less than 3.13.

Version 0.22.0

Released 2026-08-19

  • Use Quart's logger rather than Hypercorn's in app.run
  • Document serving function call ordering
  • Bugfix ensure the path is correct when using root_path
  • Bugfix Correct traceback/error behaviour

Version 0.21.0

Released 2026-07-23

  • Support 3.14 and drop 3.10 and 3.9
  • Fix non-port-needing URI schemes with app run.
  • Fix propagating exceptions.
  • Add --debug/--no-debug flag for quart run.
  • Base Quart's default_config on Flask's
  • Remove invalid uses of AnyStr.
  • Improve file type hints.
  • Flask backport: Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
  • Support partitioned cookies
  • Don't apply max_form_parts to non-multipart forms

Version 0.20.0

Released 2024-12-23

... (truncated)

Commits
  • 6b318bd Bump and release 0.23.1
  • e8eb3b8 Remove print output of body
  • adc30b2 Update uv lock
  • 6456d24 Bump and release 0.23.0
  • e893078 Bugfix Add missing teardown websocket functions to app from blueprint
  • 40ccef9 Follow Flask and merge contexts
  • a6dc470 Ensure all teardown functions are called
  • db05772 Backpressure
  • 47dcc01 Improve the reloader
  • 00e077e Improve the development reloader
  • Additional commits viewable in compare view

Updates agent-framework-core from 1.12.1 to 1.16.0

Release notes

Sourced from agent-framework-core's releases.

python-1.16.0

[1.16.0] - 2026-08-27

Added

  • agent-framework-core: Add configurable timeouts for waiting on the first background-agent task completion (#7908)
  • agent-framework-core: Allow programmatic OpenTelemetry service metadata, resource attributes, and OTLP exporter configuration (Description has been truncated

@dependabot
build: bump the python-deps group across 3 directories with 11 updates
5f878a2 
Updates the requirements on azure-ai-projects, [ansible-core](https://github.com/ansible/ansible), [quart](https://github.com/pallets/quart), [agent-framework-core](https://github.com/microsoft/agent-framework), [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python), [openai](https://github.com/openai/openai-python), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [python-dotenv](https://github.com/theskumar/python-dotenv), [isort](https://github.com/PyCQA/isort) and [mypy](https://github.com/python/mypy) to permit the latest version.

Updates `azure-ai-projects` from 2.4.0 to 2.5.0

Updates `ansible-core` to 2.21.3
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](ansible/ansible@v2.21.2...v2.21.3)

Updates `azure-ai-projects` from 2.4.0 to 2.5.0

Updates `quart` to 0.23.1
- [Release notes](https://github.com/pallets/quart/releases)
- [Changelog](https://github.com/pallets/quart/blob/main/CHANGES.md)
- [Commits](pallets/quart@0.21.0...0.23.1)

Updates `agent-framework-core` from 1.12.1 to 1.16.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.12.1...dotnet-1.16.0)

Updates `azure-storage-blob` to 12.30.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.30.0...azure-storage-blob_12.30.1)

Updates `openai` to 3.6.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.50.0...v3.6.0)

Updates `pydantic` to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `python-dotenv` to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `azure-ai-projects` from 2.4.0 to 2.5.0

Updates `quart` to 0.23.1
- [Release notes](https://github.com/pallets/quart/releases)
- [Changelog](https://github.com/pallets/quart/blob/main/CHANGES.md)
- [Commits](pallets/quart@0.21.0...0.23.1)

Updates `agent-framework-core` from 1.12.1 to 1.16.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.12.1...dotnet-1.16.0)

Updates `azure-storage-blob` to 12.30.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.30.0...azure-storage-blob_12.30.1)

Updates `openai` to 3.6.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.50.0...v3.6.0)

Updates `pydantic` to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-settings` to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.2...v2.15.0)

Updates `python-dotenv` to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `isort` to 9.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@8.0.1...9.0.1)

Updates `mypy` to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: azure-ai-projects
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ansible-core
  dependency-version: 2.21.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: quart
  dependency-version: 0.23.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: agent-framework-core
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-storage-blob
  dependency-version: 12.30.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 3.6.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: quart
  dependency-version: 0.23.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: agent-framework-core
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-storage-blob
  dependency-version: 12.30.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 3.6.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: isort
  dependency-version: 9.0.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@dependabot dependabot Bot added the python Pull requests that update Python code label Sep 1, 2026
@dependabot
dependabot Bot requested a review from nchandhi as a code owner September 1, 2026 22:59
@github-actions
github-actions Bot merged commit 2734d28 into dependabotchanges Sep 2, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/infra/vscode_web/dependabotchanges/python-deps-fb777976b1 branch September 2, 2026 00:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
@aniaroramsft Anish Arora (aniaroramsft) Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@Vinay-Microsoft Vinay Sharma (Vinay-Microsoft) Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
@malrose07 malrose07 Awaiting requested review from malrose07 malrose07 is a code owner
@toherman-msft Todd Herman (toherman-msft) Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants