Skip to content

chore(deps): bump the pip group across 1 directory with 16 updates#2018

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-65e8be0d43
Open

chore(deps): bump the pip group across 1 directory with 16 updates#2018
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-65e8be0d43

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on gitpython, click, firecrawl-py, firebase-admin, langchain, langchain-anthropic, langchain-community, langchain-core, langchain-mcp-adapters, langgraph, litellm, pytest, boto3, pillow-heif, pillow and tree-sitter to permit the latest version.
Updates gitpython from 3.1.50 to 3.1.51

Release notes

Sourced from gitpython's releases.

3.1.51 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.50...3.1.51

Commits
  • 7b0764d bump to v3.1.51
  • af027be Merge pull request #2163 from gitpython-developers/fix-unguarded-blame
  • 701ce32 fix: Guard unsafe git command options (GHSA-956x-8gvw-wg5v)
  • 65a7283 Merge pull request #2168 from gitpython-developers/advisory-fix-1
  • 3e59876 Merge pull request #2169 from gitpython-developers/fix-config-assert
  • f033017 chore: avoid duplicate runs of CI in PRs
  • 1551238 fix: allow relative config paths with includes (#2103)
  • 5680608 fix: reject joined unsafe short options
  • 181e8ed Address review feedback about unsafe option abbreviations
  • 40f1424 Add Commit.is_shallow property; document stats() limitation at shallow bounda...
  • Additional commits viewable in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582
Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates firecrawl-py from 4.28.0 to 4.32.0

Commits

Updates firebase-admin from 7.4.0 to 7.5.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Python SDK v7.5.0

New Features

  • feat(fcm): Enable fid and deprecate token for Send API (#951)

Bug Fixes

  • fix(deps): Added universe_domain override to MockGoogleComputeEngineCredential (#954)

Miscellaneous

  • [chore] Release 7.5.0 (#958)
  • chore(deps): update pytest-mock requirement from >=3.6.1 to >=3.15.1 (#959)
  • chore(deps): update pytest-localserver requirement (#961)
  • chore(deps): update pytest requirement from >=8.2.2 to >=8.4.2 (#946)
  • chore(deps): update google-cloud-firestore requirement (#947)
  • chore(deps): update pyjwt requirement from >=2.10.1 to >=2.12.1 (#948)
  • chore: Pinned cryptography version for older PyPy interpreters (#952)
Commits
  • c5e66f8 [chore] Release 7.5.0 (#958)
  • 0656dc2 chore(deps): update pytest-mock requirement from >=3.6.1 to >=3.15.1 (#959)
  • a013e56 chore(deps): update pytest-localserver requirement (#961)
  • 6d3fc8e chore(deps): update pytest requirement from >=8.2.2 to >=8.4.2 (#946)
  • a157407 chore(deps): update google-cloud-firestore requirement (#947)
  • e989b13 chore(deps): update pyjwt requirement from >=2.10.1 to >=2.12.1 (#948)
  • aa001ce fix(deps): Added universe_domain override to MockGoogleComputeEngineCredentia...
  • 44f7246 feat(fcm): Enable fid and deprecate token for Send API (#951)
  • f493fb0 chore: Pinned cryptography version for older PyPy interpreters (#952)
  • See full diff in compare view

Updates langchain to 1.3.13

Release notes

Sourced from langchain's releases.

langchain==1.3.13

Changes since langchain==1.3.12

release(langchain): 1.3.13 (#38787) feat(langchain): add meta extra and support langchain-meta in init_chat_model (#38786) feat(openai): support explicit prompt caching (#38762) chore(deps): refresh lockfiles (#38746)

Commits

Updates langchain-anthropic to 1.4.8

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.4.8

Changes since langchain-anthropic==1.4.7

release(anthropic): 1.4.8 (#38490) fix(anthropic): keep initial text on content_block_start (#38442) chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/anthropic (#38479) fix(core): add messages to bare raise ValueError calls (#38158)

Commits
  • e495651 release(anthropic): 1.4.8 (#38490)
  • bfc65cc fix(anthropic): keep initial text on content_block_start (#38442)
  • 00ad96c chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/huggin...
  • e7c3834 chore: bump langgraph-checkpoint from 4.0.3 to 4.1.1 in /libs/langchain (#38477)
  • 9b245de chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/openai...
  • 0a71a1d chore: bump langgraph-sdk from 0.3.13 to 0.3.15 in /libs/langchain (#38475)
  • 5f99048 chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/model-profiles ...
  • 3e6f1e3 chore: bump langgraph-checkpoint from 4.1.0 to 4.1.1 in /libs/partners/anthro...
  • d3eb229 fix(core): avoid dict shadowing in language models (#38480)
  • 20ba43d release(fireworks): 1.4.3
  • Additional commits viewable in compare view

Updates langchain-community to 0.4.2

Release notes

Sourced from langchain-community's releases.

langchain-community==0.4.2

Sunsetting langchain-community

langchain-community is being sunset. See langchain-ai/langchain-community#674 for details and guidance. Thank you to everyone who has contributed integrations, fixes, reviews, and maintenance over the years.

What's Changed

... (truncated)

Commits
  • 7c10a5f fix: bump deps and fix test (#676)
  • 0d3630d fix: sunset package (#675)
  • 3ade247 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /libs/community (#662)
  • 27c60ba chore(deps): bump langsmith from 0.7.31 to 0.8.4 in /libs/community (#666)
  • 2e8d934 chore(deps): bump jupyter-server from 2.17.0 to 2.18.0 in /libs/community (#654)
  • f0b16c2 chore(deps): bump mistune from 3.2.0 to 3.2.1 in /libs/community (#656)
  • bfbfe3f chore(deps): update scikit-learn requirement from <2,>=1.2.2 to >=1.7.2,<2 in...
  • 4cbef29 chore(deps): update hdbcli requirement from <3,>=2.19.21 to >=2.28.20,<3 in /...
  • 22377e1 chore(deps): update keybert requirement from >=0.8.5 to >=0.9.0 in /libs/comm...
  • c4dbaa2 chore(deps): bump notebook from 7.5.4 to 7.5.6 in /libs/community (#646)
  • Additional commits viewable in compare view

Updates langchain-core to 1.4.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

Commits
  • 1c3a418 release(core): 1.4.9 (#38728)
  • 1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
  • a6f0369 chore(qdrant): bump fastembed to latest (#38726)
  • fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
  • 874bada chore(model-profiles): refresh model profile data (#38712)
  • 6e51a7e chore(model-profiles): refresh model profile data (#38699)
  • 2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
  • b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
  • 83386b5 chore(model-profiles): refresh model profile data (#38689)
  • 701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
  • Additional commits viewable in compare view

Updates langchain-mcp-adapters to 0.3.0

Release notes

Sourced from langchain-mcp-adapters's releases.

langchain-mcp-adapters==0.3.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.2.2...langchain-mcp-adapters==0.3.0

Commits
  • a61c783 release: 0.3.0 (#542)
  • ef4b4d6 feat: surface MCP tool execution errors as failed tool output (#540)
  • 4f614ad fix: use non-deprecated streamable HTTP client (#541)
  • d62349d build(deps): bump the minor-and-patch group with 4 updates (#534)
  • 20eb39e build(deps-dev): bump mypy from 1.20.0 to 2.1.0 in the major group (#535)
  • 62b48ab build(deps): bump starlette from 0.49.1 to 1.0.1 in /examples/servers/streama...
  • ed77d67 build(deps): bump starlette from 0.50.0 to 1.0.1 (#537)
  • 4f9f7ea build(deps): bump the uv group across 1 directory with 2 updates (#517)
  • e82aa8c build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 in the mi...
  • effc918 build(deps): bump python-multipart from 0.0.26 to 0.0.27 (#504)
  • Additional commits viewable in compare view
Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 13, 2026
@dependabot
chore(deps): bump the pip group across 1 directory with 16 updates
fd916a0 
Updates the requirements on [gitpython](https://github.com/gitpython-developers/GitPython), [click](https://github.com/pallets/click), [firecrawl-py](https://github.com/firecrawl/firecrawl), [firebase-admin](https://github.com/firebase/firebase-admin-python), [langchain](https://github.com/langchain-ai/langchain), [langchain-anthropic](https://github.com/langchain-ai/langchain), [langchain-community](https://github.com/langchain-ai/langchain-community), [langchain-core](https://github.com/langchain-ai/langchain), [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters), [langgraph](https://github.com/langchain-ai/langgraph), [litellm](https://github.com/BerriAI/litellm), [pytest](https://github.com/pytest-dev/pytest), [boto3](https://github.com/boto/boto3), [pillow-heif](https://github.com/bigcat88/pillow_heif), [pillow](https://github.com/python-pillow/Pillow) and [tree-sitter](https://github.com/tree-sitter/py-tree-sitter) to permit the latest version.

Updates `gitpython` from 3.1.50 to 3.1.51
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.51)

Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `firecrawl-py` from 4.28.0 to 4.32.0
- [Release notes](https://github.com/firecrawl/firecrawl/releases)
- [Commits](https://github.com/firecrawl/firecrawl/commits)

Updates `firebase-admin` from 7.4.0 to 7.5.0
- [Release notes](https://github.com/firebase/firebase-admin-python/releases)
- [Commits](firebase/firebase-admin-python@v7.4.0...v7.5.0)

Updates `langchain` to 1.3.13
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.25...langchain==1.3.13)

Updates `langchain-anthropic` to 1.4.8
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==0.3.14...langchain-anthropic==1.4.8)

Updates `langchain-community` to 0.4.2
- [Release notes](https://github.com/langchain-ai/langchain-community/releases)
- [Commits](langchain-ai/langchain-community@libs/community/v0.3.25...libs/community/v0.4.2)

Updates `langchain-core` to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.56...langchain-core==1.4.9)

Updates `langchain-mcp-adapters` to 0.3.0
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases)
- [Commits](langchain-ai/langchain-mcp-adapters@langchain-mcp-adapters==0.1.0...langchain-mcp-adapters==0.3.0)

Updates `langgraph` to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.0...1.2.9)

Updates `litellm` to 1.92.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.84.0...v1.92.0)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `boto3` from 1.43.14 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.14...1.43.47)

Updates `pillow-heif` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/bigcat88/pillow_heif/releases)
- [Changelog](https://github.com/bigcat88/pillow_heif/blob/master/CHANGELOG.md)
- [Commits](bigcat88/pillow_heif@v1.3.0...v1.4.0)

Updates `pillow` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.2.0...12.3.0)

Updates `tree-sitter` from 0.25.2 to 0.26.0
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](tree-sitter/py-tree-sitter@v0.25.2...v0.26.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: firebase-admin
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: firecrawl-py
  dependency-version: 4.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: gitpython
  dependency-version: 3.1.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: langchain
  dependency-version: 1.3.13
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-anthropic
  dependency-version: 1.4.8
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.4.2
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 1.4.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-mcp-adapters
  dependency-version: 0.3.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langgraph
  dependency-version: 1.2.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: litellm
  dependency-version: 1.92.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pillow-heif
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: tree-sitter
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-65e8be0d43 branch from 3681c16 to fd916a0 Compare July 14, 2026 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants