Skip to content

build(deps): Bump the python-deps group with 17 updates#136

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-deps-36d538ba28
Open

build(deps): Bump the python-deps group with 17 updates#136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-deps-36d538ba28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pymupdf, pytesseract, pillow, openai, python-dotenv, pyyaml, rich, pikepdf, fastapi, starlette, uvicorn, python-multipart, pytest, pytest-cov, mypy, ruff and httpx to permit the latest version.
Updates pymupdf to 1.28.0

Changelog

Sourced from pymupdf's changelog.

Change Log

Changes in version 1.28.0 (2026-06-29)

Fixed issues:

  • Fixed 4114 <https://github.com/pymupdf/PyMuPDF/issues/4114>_: ComboBox choice_values full of empty strings despite PDF having valid choices.
  • Fixed 4950 <https://github.com/pymupdf/PyMuPDF/issues/4950>_: remove_rotation() raises ValueError on widgets with empty/infinite rects
  • Fixed 5001 <https://github.com/pymupdf/PyMuPDF/issues/5001>_: Formulae incorrectly rendered as black boxes
  • Fixed 5033 <https://github.com/pymupdf/PyMuPDF/issues/5033>_: Annot.set_rotation(0) followed by Annot.update() throws AttributeError

Other:

  • Use MuPDF-1.28.0.
  • pymupdf.Document.init(): new arg archive to support documents with archives.
  • pymupdf.Document.convert_to_pdf(): also generate links.
  • Fixed MacOS x64 platform tag - used to be macosx_10_9_x86_64, but we actually require MacOS 10.15, so platform tag is now macosx_10_15_x86_64.
  • Support Windows builds with free thread python.
  • pymupdf.Document.save() now saves non-PDF documents in PDF format.
  • New method pymupdf.Document.apply_css().

Changes in version 1.27.2.3 (2026-04-24)

  • Fixed issues:

    • Fixed 4928 <https://github.com/pymupdf/PyMuPDF/issues/4928>_: pymupdf.Document.scrub raises AttributeError for a document with annotations
    • Fixed 4942 <https://github.com/pymupdf/PyMuPDF/issues/4942>_: bug: IndexError for Page.get_links after Page.clip_to_rect
    • Fixed 4954 <https://github.com/pymupdf/PyMuPDF/issues/4954>_: get_drawings() returns incorrect lineJoin and width
    • Fixed 4958 <https://github.com/pymupdf/PyMuPDF/issues/4958>_: bug: inserting rotated pages to another document messes up link coordinates

  • Other:

    • Fixed incorrect generation of lineJoin j in PDF content, introduced in 1.27.2.2.
    • Allow build to (incorrectly) claim to be thread-safe, for #4760. See setup.py for details.
    • Use pypi.org's pipcl package instead of our own pipcl.py file.

Changes in version 1.27.2.2 (2026-03-20)

  • Fixed issues:

    • Fixed 4902 <https://github.com/pymupdf/PyMuPDF/issues/4902>_: Incorrect linewidth in elements returned by Page.get_texttrace()
    • Fixed 4932 <https://github.com/pymupdf/PyMuPDF/issues/4932>_: "Page" has no attribute "find_tables" in PyMuPDF 1.27

  • Other:

... (truncated)

Commits
  • e9cdfc9 changes.txt: fix mupdf version number.
  • 629a358 docs/document.rst: add new in 1.28.0 to init's archive.
  • 7264f27 README.md: updated example conversion from md to pdf.
  • 119a0bc docs/document.rst: document that save() now also works for non-pdf documents.
  • 5ebfc4c setup.py: use mupdf-1.28.0.
  • 14d8fac changes.txt: removed bogus #4423 entry, added #5033.
  • d961616 tests/test_annots.py: added test_5033() for setRect() vs set_rect() bug.
  • d91bd63 changes.txt: added note about save() and non-pdf documents.
  • fd409de .github/workflows/: updated to use mupdf branch 1.28.x.
  • 04aa7dd Remove old setRect Name
  • Additional commits viewable in compare view

Updates pytesseract to 0.3.13

Release notes

Sourced from pytesseract's releases.

v0.3.13

  • Add support for Python 3.12
Commits
  • bb128f3 Bump version to 0.3.13
  • aa974c3 Merge pull request #520 from plokmijnuhby/master
  • 81ecdca [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 08c8875 Merge pull request #1 from plokmijnuhby/patch-1
  • 4caec52 Update ci.yaml
  • 48dfdf7 Update setup.cfg
  • a71700d Remove find_loader
  • 13f712d Merge pull request #518 from madmaze/pre-commit-ci-update-config
  • f1cd5d2 [pre-commit.ci] pre-commit autoupdate
  • 5acc404 Merge pull request #517 from madmaze/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates pillow to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Documentation

Dependencies

Testing

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits
  • bb1d8e8 12.3.0 version bump
  • e63fc48 Add release notes for SBOM and performance improvements (#9747)
  • 13b701b Add release notes for #9679
  • 5564ca7 List methods
  • a0920fd Speed up ImageChops operations (#9738)
  • 07e9a6c Speed up Image.filter() (#9736)
  • a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
  • 53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
  • af03747 Speed up Image.resample() (#9739)
  • 5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
  • Additional commits viewable in compare view

Updates openai to 2.44.0

Release notes

Sourced from openai's releases.

v2.44.0

2.44.0 (2026-06-24)

Full Changelog: v2.43.0...v2.44.0

Bug Fixes

  • auth: prioritize first auth header (797e336)
Changelog

Sourced from openai's changelog.

2.44.0 (2026-06-24)

Full Changelog: v2.43.0...v2.44.0

Bug Fixes

  • auth: prioritize first auth header (797e336)

2.43.0 (2026-06-17)

Full Changelog: v2.42.0...v2.43.0

Features

  • api: update OpenAPI spec or Stainless config (2254235)

2.42.0 (2026-06-16)

Full Changelog: v2.41.1...v2.42.0

Features

  • api: admin spend_alerts (6134198)
  • api: manual updates (f337bf4)
  • api: update OpenAPI spec or Stainless config (7015158)

Build System

2.41.1 (2026-06-05)

Full Changelog: v2.41.0...v2.41.1

Build System

  • Remove scheduled release workflow trigger (#3366) (2a91011)

2.41.0 (2026-06-03)

Full Changelog: v2.40.0...v2.41.0

Features

  • api: responses.moderation and chat_completions.moderation (87e46c2)

2.40.0 (2026-06-01)

... (truncated)

Commits

Updates python-dotenv to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

... (truncated)

Commits

Updates pyyaml to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

6.0.1 (2023-07-18)

6.0 (2021-10-13)

5.4.1 (2021-01-20)

  • yaml/pyyaml#480 -- Fix stub compat with older pyyaml versions that may unwittingly load it

5.4 (2021-01-19)

5.3.1 (2020-03-18)

  • yaml/pyyaml#386 -- Prevents arbitrary code execution during python/object/new constructor

5.3 (2020-01-06)

... (truncated)

Commits

Updates rich to 15.0.0

Release notes

Sourced from rich's releases.

The So Long 3.8 Release

A few fixes. The major version bump is to honor the passing of 3.8 support which reached its EOL in October 7, 2024

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

Changelog

Sourced from rich's changelog.

[15.0.0] - 2026-04-12

Changed

  • Breaking change: Dropped support for Python3.8

Fixed

[14.3.4] - 2026-04-11

Changed

[14.3.3] - 2026-02-19

Fixed

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

... (truncated)

Commits

Updates pikepdf to 10.9.1

Release notes

Sourced from pikepdf's releases.

v10.9.1

Fixed

  • Fixed a crash (SIGABRT via std::terminate) that could occur when a file-backed {class}pikepdf.Pdf was deallocated while a Python exception was already propagating -- for example when pikepdf.open(filename) appears as a transient element of a list/tuple literal whose later element raises. Opening from a filename closes the file in the input source destructor, which calls back into Python; with an exception already in flight that call raised an error that escaped the destructor. The in-flight exception is now preserved and propagates normally. (#732) Added a guard for a likely non-reproducible related case with DecimalPrecision.
Commits
  • 1cf65a1 Bump version: v10.9.1
  • b4fe173 harden: guard DecimalPrecision destructor against exception escape
  • 3634333 fix: prevent SIGABRT when Pdf is freed during exception unwind (#732)
  • 367702e Bump version: v10.9.0
  • 594a61f Update uv.lock (pyjwt security advisory)
  • 355c611 docs: document reordering pages without breaking links (#192)
  • d916070 docs: clarify AcroFormField.is_checked divergence from qpdf, add test
  • 5a7fe1c refactor: adopt newer qpdf convenience APIs in C++ layer
  • d4c846b Merge branch 'feature/named-dest-migration'
  • 722465b fix: bump QPDF_MIN_VERSION to 12.3.2 to fix sdist build
  • Additional commits viewable in compare view

Updates fastapi to 0.139.0

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Updates starlette to 1.3.1

Release notes

Sourced from starlette's releases.

Version 1.3.1

What's Changed

Full Changelog: Kludex/starlette@1.3.0...1.3.1

Changelog

Sourced from starlette's changelog.

1.3.1 (June 12, 2026)

Fixed

  • Enforce max_fields and max_part_size in FormParser #3329.
  • Enforce FormParser limits in parser callbacks #3331.

1.3.0 (June 11, 2026)

Added

  • Add httpx2 to the full extra #3323.
  • Annotate the URLPath protocol parameter with Literal #3285.

Fixed

  • Build request.url from structured components #3326.
  • Clamp oversized suffix ranges in FileResponse #3307.
  • Catch OSError alongside MultiPartException when closing temp files #3191.
  • Avoid collapsing exception groups raised from user code #2830.
  • Use removeprefix to strip the weak ETag indicator in is_not_modified #3193.
  • Fix IndexError in URL.replace() on a URL with no authority #3317.
  • Adjust testclient typing and warnings #3322.

1.2.1 (May 31, 2026)

Fixed

  • Use httpx2 for type checking in the testclient module #3304.
  • Add assert error for requires() when the request parameter is not a Request type #3298.
    • <...

    Description has been truncated

@dependabot
build(deps): Bump the python-deps group with 17 updates
7cef5f2 
Updates the requirements on [pymupdf](https://github.com/pymupdf/pymupdf), [pytesseract](https://github.com/madmaze/pytesseract), [pillow](https://github.com/python-pillow/Pillow), [openai](https://github.com/openai/openai-python), [python-dotenv](https://github.com/theskumar/python-dotenv), [pyyaml](https://github.com/yaml/pyyaml), [rich](https://github.com/Textualize/rich), [pikepdf](https://github.com/pikepdf/pikepdf), [fastapi](https://github.com/fastapi/fastapi), [starlette](https://github.com/Kludex/starlette), [uvicorn](https://github.com/Kludex/uvicorn), [python-multipart](https://github.com/Kludex/python-multipart), [pytest](https://github.com/pytest-dev/pytest), [pytest-cov](https://github.com/pytest-dev/pytest-cov), [mypy](https://github.com/python/mypy), [ruff](https://github.com/astral-sh/ruff) and [httpx](https://github.com/encode/httpx) to permit the latest version.

Updates `pymupdf` to 1.28.0
- [Release notes](https://github.com/pymupdf/pymupdf/releases)
- [Changelog](https://github.com/pymupdf/PyMuPDF/blob/main/changes.txt)
- [Commits](pymupdf/PyMuPDF@1.24.0...1.28.0)

Updates `pytesseract` to 0.3.13
- [Release notes](https://github.com/madmaze/pytesseract/releases)
- [Commits](madmaze/pytesseract@v0.3.10...v0.3.13)

Updates `pillow` to 12.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.0.0...12.3.0)

Updates `openai` to 2.44.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.40.0...v2.44.0)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `pyyaml` to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0...6.0.3)

Updates `rich` to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.0.0...v15.0.0)

Updates `pikepdf` to 10.9.1
- [Release notes](https://github.com/pikepdf/pikepdf/releases)
- [Commits](pikepdf/pikepdf@v9.0.0...v10.9.1)

Updates `fastapi` to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.119.0...0.139.0)

Updates `starlette` to 1.3.1
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@1.0.1...1.3.1)

Updates `uvicorn` to 0.50.2
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.32.0...0.50.2)

Updates `python-multipart` to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.9...0.0.32)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...9.1.1)

Updates `pytest-cov` to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v5.0.0...v7.1.0)

Updates `mypy` to 2.2.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.11...v2.2.0)

Updates `ruff` to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.0...0.15.20)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.0...0.28.1)

---
updated-dependencies:
- dependency-name: pymupdf
  dependency-version: 1.28.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pytesseract
  dependency-version: 0.3.13
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.44.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: pikepdf
  dependency-version: 10.9.1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: starlette
  dependency-version: 1.3.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.50.2
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 2.2.0
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:development
  dependency-group: python-deps
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:development
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 8, 2026
@github-actions github-actions Bot enabled auto-merge (squash) July 8, 2026 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants