From 8ae35ef7573e25874fc8479d40b7722f74fb6996 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 24 Apr 2026 00:22:37 +0000 Subject: [PATCH] Update wrapt requirement from <2.0.0,>=1.0.0 to >=2.1.2,<3.0.0 Updates the requirements on [wrapt](https://github.com/GrahamDumpleton/wrapt) to permit the latest version. - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](https://github.com/GrahamDumpleton/wrapt/compare/1.0.0...2.1.2) --- updated-dependencies: - dependency-name: wrapt dependency-version: 2.1.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 3264fced..8d0789fc 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -34,7 +34,7 @@ dependencies = [ "opentelemetry-instrumentation-system-metrics==0.62b0", "opentelemetry-semantic-conventions==0.62b0", "protobuf>=6.33.5", # not our direct dep, prevents installing vulnerable proto versions (CVE‑2025‑4565, CVE-2026-0994) - "wrapt>=1.0.0,<2.0.0", # wrapt 2 breaks TracedCursorProxy iteration in opentelemetry-instrumentation-dbapi 0.62b0 + "wrapt>=2.1.2,<3.0.0", # wrapt 2 breaks TracedCursorProxy iteration in opentelemetry-instrumentation-dbapi 0.62b0 ] [project.urls]