Skip to content

build(medcat-service): bump the pip-deps group in /medcat-service with 15 updates#497

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/medcat-service/pip-deps-ab4ef2765f
Closed

build(medcat-service): bump the pip-deps group in /medcat-service with 15 updates#497
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/medcat-service/pip-deps-ab4ef2765f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Updates the requirements on simplejson, setuptools-rust, transformers, requests, fastapi, pydantic, pydantic-settings, gradio, opentelemetry-distro, opentelemetry-instrumentation, opentelemetry-resource-detector-containerid, opentelemetry-instrumentation-fastapi, opentelemetry-instrumentation-requests, opentelemetry-instrumentation-threading and opentelemetry-instrumentation-httpx to permit the latest version.
Updates simplejson from 3.19.3 to 3.20.2

Release notes

Sourced from simplejson's releases.

v3.20.2

What's Changed

New Contributors

Full Changelog: simplejson/simplejson@v3.20.1...v3.20.2

v3.20.1

Version 3.20.1 released 2025-02-14

Full Changelog: simplejson/simplejson@v3.19.3...v3.20.1

v3.20.0

Version 3.20.0 released 2025-02-14

Full Changelog: simplejson/simplejson@v3.19.3...v3.20.0

Changelog

Sourced from simplejson's changelog.

Version 4.1.1 released 2026-04-24

  • The build_wheels_py27 CI job now also builds Python 2.7 wheels for Windows AMD64 and Windows x86, joining the existing Py2.7 manylinux1 / manylinux2010 x86_64 wheels. This unblocks offline / --no-index installs on Py2.7-on-Windows (the original reporter's case), which previously had no matching binary wheel on PyPI, fell through to the sdist, and failed on the PEP 517 isolated-build step complaining that setuptools>=42 was not in the wheelhouse. simplejson/simplejson#377

Version 4.1.0 released 2026-04-22

  • The C extension now accelerates encoding when indent= is set. Previously the encoder fell back to the pure-Python implementation whenever a non-None indent was passed; now the C encoder emits the newline-plus-indent prefix, the level-aware item separator, and the closing indent directly. A representative nested-dict workload benchmarks about 4-5x faster end-to-end, and the indent=0 and empty-container edge cases continue to match the Python output byte-for-byte.

  • The C extension now emits PEP 678 exc.add_note() annotations on serialization failures, matching the pure-Python encoder. A chained error on {'a': [1, object(), 3]} produces the same three notes (when serializing object object, when serializing list item 1, when serializing dict item 'a') whether the speedups are loaded or not, so the add_note assertions in test_errors.py no longer need indent=2 to force the Python path.

Version 4.0.1 released 2026-04-18

  • Skip uploading Pyodide/wasm wheels to PyPI, which rejects them with "unsupported platform tag 'pyodide_2024_0_wasm32'". The wheels are still built in CI and preserved as workflow artifacts. simplejson/simplejson#375

Version 4.0.0 released 2026-04-18

  • simplejson 4 requires Python 2.7 or Python 3.8+. Older Python versions (2.5, 2.6, 3.0-3.7) are no longer supported. pip will not install simplejson 4 on unsupported versions.

  • The C extension now uses heap types and per-module state instead of static types and global state. This is required for free-threading support and sub-interpreter isolation. The Python-level API is unchanged.

  • Full support for Python 3.13+ free-threading (PEP 703). The C

... (truncated)

Commits
  • 10e5aaf Merge pull request #340 from simplejson/changes-v3.20.2
  • 39ba9df Update changelog and version for v3.20.2
  • 5f9f96f Merge pull request #339 from timfel/patch-1
  • feb07a3 Test pure Python code, also on PyPy and GraalPy
  • ae69b83 Disable speedups on GraalPy same as on PyPy
  • fd905ba Merge pull request #337 from simplejson/float-range
  • 92c0230 Add a test for the min and max floats
  • 390e633 Merge pull request #330 from simplejson/fix-workflow
  • f623662 Fix PyPI upload workflow
  • d08eeaf Merge pull request #329 from simplejson/key-cache
  • Additional commits viewable in compare view

Updates setuptools-rust from 1.11.0 to 1.12.1

Release notes

Sourced from setuptools-rust's releases.

v1.12.1

What's Changed

New Contributors

Full Changelog: PyO3/setuptools-rust@v1.12.0...v1.12.1

v1.12.0

Added

v1.11.1

Fixed

  • Fix finding cargo artifacts when filenames are empty. #521
Changelog

Sourced from setuptools-rust's changelog.

1.12.1 (2026-03-26)

  • Migrate to trusted publishing. #581
  • Strip target suffix for cargo-zigbuild compatibility. #534

1.12.0 (2025-08-29)

  • Set PYO3_BUILD_EXTENSION_MODULE environment variable when building PyO3 extensions. #540

1.11.1 (2025-04-04)

Fixed

  • Fix finding cargo artifacts when filenames are empty. #521
Commits
  • 5be541f release: 1.12.1 (#582)
  • 37bb7ad ci: configure trusted publishing (#581)
  • 549ba45 fix ruff (#579)
  • 729996c build(deps): bump the deps group across 4 directories with 1 update (#578)
  • 1ca7d95 build(deps): bump sphinx-autodoc-typehints (#577)
  • e22ceac Strip target suffix for cargo-zigbuild compatibility (#534)
  • 55866aa Isolate universal2 artifact-combination logic (#572)
  • 8a76c7d build(deps): bump pyo3 from 0.28.0 to 0.28.2 in /examples/html-py-ever (#573)
  • 608006f build(deps): bump the deps group across 1 directory with 2 updates (#570)
  • b81af1f ci: fix ruff failure (#569)
  • Additional commits viewable in compare view

Updates transformers to 5.8.1

Release notes

Sourced from transformers's releases.

Patch release v5.8.1

This release is mainly to fix the Deepseek V4 integration!!!

Commits

Updates requests from 2.33.0 to 2.34.1

Release notes

Sourced from requests's releases.

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

New Contributors

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

2.33.1 (2026-03-30)

Bugfixes

  • Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. (#7305)

... (truncated)

Commits

Updates fastapi from 0.128.0 to 0.136.1

Release notes

Sourced from fastapi's releases.

0.136.1

Upgrades

Internal

0.136.0

Upgrades

0.135.4

Refactors

Internal

0.135.3

... (truncated)

Commits

Updates pydantic to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.10.1 to 2.14.1

Release notes

Sourced from pydantic-settings's releases.

v2.14.1

What's Changed

Full Changelog: pydantic/pydantic-settings@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • e95c30b Prepare release 2.14.1 (#859)
  • 0c87345 Fix field named cls conflicting with classmethod parameter (#858)
  • 7bd0072 Bump the python-packages group with 2 updates (#856)
  • b03e573 Bump the github-actions group with 3 updates (#853)
  • eaa3b43 Bump the python-packages group with 5 updates (#854)
  • 9f95615 Bump the python-packages group with 4 updates (#850)
  • 8916bee Prepare release 2.14.0 (#848)
  • 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
  • 9ed7f48 Bump the python-packages group with 4 updates (#847)
  • 617c690 Fix cli_ignore_unknown_args=True not working on subcommands (#844)
  • Additional commits viewable in compare view

Updates gradio from 6.7.0 to 6.14.0

Release notes

Sourced from gradio's releases.

gradio@6.14.0

Features

Fixes

gradio@6.13.0

Features

Fixes

  • #13250 2e9eb51 - Restore select-all checkbox in boolean column headers of gr.Dataframe. Thanks @​pngwn!
  • #13259 b5e6491 - Dataframe: allow native context menu and text selection on static cells. Thanks @​pngwn!
  • #13305 1d5994d - Dataframe: fix extreme rendering slowdown with datatype="date" (and any future dtype with asymmetric string casts) by firing EditableCell's shim-blur only on edit teardown instead of every render. Also makes the hidden sizing-row computation faster by avoiding Date rendering for every entry. Thanks @​pngwn!
  • #13291 77fca72 - Dataset: fix gallery view using wrong component metadata index and fix broken pagination after Svelte 5 migration. Thanks @​ParamChordiya!
  • #13303 79c5776 - Rework Dataframe wrapping, truncation, and column width sizing. Thanks @​pngwn!
  • #13280 bb9c130 - Fix snippet generator crash on datetime values in Dataframe inputs. Thanks @...

    Description has been truncated

@dependabot
build(medcat-service): bump the pip-deps group
fc70608 
Updates the requirements on [simplejson](https://github.com/simplejson/simplejson), [setuptools-rust](https://github.com/PyO3/setuptools-rust), [transformers](https://github.com/huggingface/transformers), [requests](https://github.com/psf/requests), [fastapi](https://github.com/fastapi/fastapi), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [gradio](https://github.com/gradio-app/gradio), [opentelemetry-distro](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-resource-detector-containerid](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-requests](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-threading](https://github.com/open-telemetry/opentelemetry-python-contrib) and [opentelemetry-instrumentation-httpx](https://github.com/open-telemetry/opentelemetry-python-contrib) to permit the latest version.

Updates `simplejson` from 3.19.3 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/main/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.19.3...v3.20.2)

Updates `setuptools-rust` from 1.11.0 to 1.12.1
- [Release notes](https://github.com/PyO3/setuptools-rust/releases)
- [Changelog](https://github.com/PyO3/setuptools-rust/blob/main/CHANGELOG.md)
- [Commits](PyO3/setuptools-rust@v1.11.0...v1.12.1)

Updates `transformers` to 5.8.1
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v4.34.0...v5.8.1)

Updates `requests` from 2.33.0 to 2.34.1
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.1)

Updates `fastapi` from 0.128.0 to 0.136.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.128.0...0.136.1)

Updates `pydantic` to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.4/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.10...v2.13.4)

Updates `pydantic-settings` from 2.10.1 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@2.10.1...v2.14.1)

Updates `gradio` from 6.7.0 to 6.14.0
- [Release notes](https://github.com/gradio-app/gradio/releases)
- [Changelog](https://github.com/gradio-app/gradio/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gradio-app/gradio/compare/gradio@6.7.0...gradio@6.14.0)

Updates `opentelemetry-distro` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-resource-detector-containerid` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-fastapi` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-requests` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-threading` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-httpx` from 0.60b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

---
updated-dependencies:
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: setuptools-rust
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: transformers
  dependency-version: 5.8.1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: requests
  dependency-version: 2.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: fastapi
  dependency-version: 0.136.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: gradio
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: opentelemetry-distro
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-resource-detector-containerid
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-instrumentation-requests
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-instrumentation-threading
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
- dependency-name: opentelemetry-instrumentation-httpx
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 14, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 14, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/pip/medcat-service/pip-deps-ab4ef2765f branch May 14, 2026 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alhendrickson