Skip to content

deps(deps): bump the python-production group across 1 directory with 3 updates#84

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-production-6d067395d7
Open

deps(deps): bump the python-production group across 1 directory with 3 updates#84
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-production-6d067395d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown

Updates the requirements on fastapi[standard], multipart and typer to permit the latest version.
Updates fastapi[standard] to 0.139.2

Release notes

Sourced from fastapi[standard]'s releases.

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.
Commits
  • 866b7a3 🔖 Release version 0.139.2 (#16014)
  • 7b3effe 📝 Update release notes
  • 7fe315c 🐛 Refactor router route building to make it thread-safe, mainly relevant for ...
  • c48e67b 🔖 Release version 0.139.1 (#16012)
  • 2acc4fb 📝 Update release notes
  • eb75fd0 🐛 Fix frontend fallback support for doted paths like /users/john.doe (#16011)
  • 9b8410b 📝 Update release notes
  • e24d44c 📝 Fix topic repository list not being displayed and skip_users not being ap...
  • 93b78f8 📝 Update release notes
  • b959b44 📝 Update release notes
  • Additional commits viewable in compare view

Updates multipart from 1.3.1 to 2.0.0

Changelog

Sourced from multipart's changelog.

========= Changelog

This project follows Semantic Versioning (major.minor.patch), with the exception that behavior changes are allowed in minor releases as long as the change corrects behavior to match documentation, specification or expectation. In other words: Bugfixes do not count as backward incompatible changes, even if they technically change behavior from incorrect to correct and may break applications that rely on incorrect or undefined behavior or undocumented APIs. EOL Python versions may also be dropped during minor releases.

Release 2.0

This release drops EOL python versions, improves error handling and includes multiple performance improvements that can result in up to 30% faster file uploads and 50% faster text field handling.

  • change: Dropped support for Python 3.8 and 3.9 (both EOL), added support for Python 3.14
  • change: Accessing :attr:MultipartSegment.size before the segment is complete now raises :exc:ParserStateError. The new attribute :attr:MultipartSegment.bytes_received provides the in-progress segment body byte count previously exposed by :attr:MultipartSegment.size.
  • change: :class:PushMultipartParser now emits :class:bytes instead of :class:bytearray for part body chunks. Update your isinstance checks if you have any.
  • change: Enforce part_limit (128 by default) for url-encoded data in parse_form_data(). This is consistent with multipart handling and an important safeguard against denial of service attacks.
  • change: New strict-mode check to reject extremely large boundaries.
  • change: Raise more helpful :exc:ParserStateError instead of implicit :exc:AssertionError or :exc:TypeError when the parser is used incorrectly.
  • change: The boundary delimiter must not appear inside a segment body (RFC-7578 4.1). This triggers a fatal error now.
  • feat: Hardened (and faster) header validation.
  • build: Change default branch to main.

Release 1.3

This release adds new APIs and contains internal or non-breaking api changes.

  • feat: New convenience methods :meth:PushMultipartParser.parse_blocking and :meth:PushMultipartParser.parse_async.
  • feat: Nicer error messages when reading from a closed MultipartPart.

... (truncated)

Commits
  • a14fdd6 Release of 2.0.0
  • dca7836 Prepare 2.0 release
  • 1240e8c build: fix venv builder in makefile
  • ba1d834 change: MultipartSegment.size now throws if incomplete.
  • 59322fe build: More github CI checks and fixed makefile
  • 4421f32 Switch to stdlib cached_property
  • 520fdf9 All public APIs should be in all
  • 42e7ea7 docs: cleanup
  • bce8554 feat: parse_content_disposition is now a publich API
  • e1c47df Link to defnull.de for benchmarks
  • Additional commits viewable in compare view

Updates typer from 0.26.8 to 0.27.0

Release notes

Sourced from typer's releases.

0.27.0

Breaking Changes

Internal

Changelog

Sourced from typer's changelog.

0.27.0 (2026-07-15)

Breaking Changes

Internal

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 20, 2026
@dependabot @d3rky
deps(deps): bump the python-production group across 1 directory with …
105c4a5 
…3 updates

Updates the requirements on [fastapi[standard]](https://github.com/fastapi/fastapi), [multipart](https://github.com/defnull/multipart) and [typer](https://github.com/fastapi/typer) to permit the latest version.

Updates `fastapi[standard]` to 0.139.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.139.2)

Updates `multipart` from 1.3.1 to 2.0.0
- [Release notes](https://github.com/defnull/multipart/releases)
- [Changelog](https://github.com/defnull/multipart/blob/main/CHANGELOG.rst)
- [Commits](defnull/multipart@v1.3.1...v2.0.0)

Updates `typer` from 0.26.8 to 0.27.0
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.8...0.27.0)

---
updated-dependencies:
- dependency-name: fastapi[standard]
  dependency-version: 0.139.2
  dependency-type: direct:production
  dependency-group: python-production
- dependency-name: multipart
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-production
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@d3rky
d3rky force-pushed the dependabot/uv/python-production-6d067395d7 branch from 675a17f to 105c4a5 Compare July 20, 2026 14:49
@sonarqubecloud

sonarqubecloud Bot commented Jul 20, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants