Skip to content

chore(deps): uv: bump the all-python group across 1 directory with 10 updates - #859

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/agent/all-python-4666157a7c
Open

chore(deps): uv: bump the all-python group across 1 directory with 10 updates#859
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/agent/all-python-4666157a7c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-python group with 10 updates in the /agent directory:

Package From To
boto3 1.43.78 1.43.83
bedrock-agentcore 1.18.1 1.22.0
claude-agent-sdk 0.2.110 0.2.148
fastapi 0.139.0 0.141.1
uvicorn 0.50.0 0.52.4
aws-opentelemetry-distro 0.18.0 0.19.0
mcp 1.28.1 2.1.1
ruff 0.15.20 0.16.5
ty 0.0.56 0.0.75
pygments 2.20.0 2.21.0

Updates boto3 from 1.43.78 to 1.43.83

Commits

Updates bedrock-agentcore from 1.18.1 to 1.22.0

Release notes

Sourced from bedrock-agentcore's releases.

Bedrock AgentCore SDK v1.22.0

Installation

pip install bedrock-agentcore==1.22.0

What's Changed

See CHANGELOG.md for details.

What's Changed

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.21.0...v1.22.0

Bedrock AgentCore SDK v1.21.0

Installation

pip install bedrock-agentcore==1.21.0

What's Changed

See CHANGELOG.md for details.

What's Changed

New Contributors

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.20.0...v1.21.0

Bedrock AgentCore SDK v1.20.0

Installation

pip install bedrock-agentcore==1.20.0

What's Changed

See CHANGELOG.md for details.

What's Changed

... (truncated)

Changelog

Sourced from bedrock-agentcore's changelog.

[1.22.0] - 2026-08-18

Other Changes

  • feat(payments): add MPP, x402 upto, and Quick Create support (#643) (66a68e3)

[1.21.0] - 2026-08-06

Other Changes

  • feat(memory): add AgentCoreMemoryStore Strands integration (#588) (439d788)
  • feat(runtime): propagate X-Amz-Bedrock-AgentCore-Identity-WAT on outbound calls (#607) (01d3800)

[1.20.0] - 2026-08-04

Added

  • feat: third-party eval metrics adapter (DeepEval + Autoevals) with strands-evals mappers (#568) (9b7d38e)

Fixed

  • fix: validate sample agent inputs (#612) (528471e)

Other Changes

  • fix(test): pin autoevals judge to the OpenAI API (#617) (703ccfd)
  • fix(a2a): bind the A2A contract port, ignore generic PORT (#615) (207adb7)
  • fix(test): repair eval adapter integ fixture and wire LLM judge key (#614) (9d8cc26)
  • fix(test): repair four unit tests drifting behind source and upstream APIs (#610) (53b0b48)
  • ci: install deepeval and autoevals for evaluation integ tests (#608) (5d23292)
  • fix(ci): add pinned deepeval and autoevals to dev group (#609) (70165d9)
  • ci: wire shared composite actions (#601) (a3382a4)

[1.19.0] - 2026-07-28

Fixed

  • fix: preserve generated API reference content (#595) (4a7a8c4)
  • fix: convert RST admonition to ADOC (#594) (641000d)

Other Changes

  • fix(a2a): advertise resolved port on explicit cards (#605) (34e06f0)
  • fix(memory-integ): address capacity cap and update failures in tests (#604) (59cbff3)
  • ci: migrate workflows to shared reusable workflows (#597) (f1a7106)
  • fix(ci): pin Twine to 6.2.0 (#600) (c707388)
  • fix(a2a): honor PORT when serving locally (#593) (331f441)
  • feat(a2a): migrate runtime integration to a2a-sdk v1 (#591) (16f732f)
  • Add LLM issue auto-triage: type and high-severity labelers (#584) (3000d50)
Commits
  • b981f7e chore: bump version to 1.22.0 (#644)
  • 66a68e3 feat(payments): add MPP, x402 upto, and Quick Create support (#643)
  • 5d4ca0d chore: bump version to 1.21.0 (#623)
  • 439d788 feat(memory): add AgentCoreMemoryStore Strands integration (#588)
  • 01d3800 feat(runtime): propagate X-Amz-Bedrock-AgentCore-Identity-WAT on outbound cal...
  • 9195576 chore: bump version to 1.20.0 (#619)
  • 703ccfd fix(test): pin autoevals judge to the OpenAI API (#617)
  • 207adb7 fix(a2a): bind the A2A contract port, ignore generic PORT (#615)
  • 9d8cc26 fix(test): repair eval adapter integ fixture and wire LLM judge key (#614)
  • 528471e fix: validate sample agent inputs (#612)
  • Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.110 to 0.2.148

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.148

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.251

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.148/

pip install claude-agent-sdk==0.2.148

v0.2.147

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.250

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.147/

pip install claude-agent-sdk==0.2.147

v0.2.146

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.248

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.146/

pip install claude-agent-sdk==0.2.146

v0.2.145

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.247

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.148

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.251

0.2.147

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.250

0.2.146

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.248

0.2.145

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.247

0.2.144

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.246

0.2.143

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.238

0.2.142

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.237

0.2.141

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.236

0.2.140

... (truncated)

Commits
  • af5ff1b docs: update changelog for v0.2.148
  • 3251a7d chore: release v0.2.148
  • 46b8e63 chore: bump bundled CLI version to 2.1.251
  • 1cd478b docs: update changelog for v0.2.147
  • 08a4ed9 chore: release v0.2.147
  • 6daedeb chore: bump bundled CLI version to 2.1.250
  • 9b0b0df docs: update changelog for v0.2.146
  • cc20b56 chore: release v0.2.146
  • e05a783 chore: bump bundled CLI version to 2.1.248
  • 4d29963 docs: update changelog for v0.2.145
  • Additional commits viewable in compare view

Updates fastapi from 0.139.0 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.50.0 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

... (truncated)

Commits

Updates aws-opentelemetry-distro from 0.18.0 to 0.19.0

Release notes

Sourced from aws-opentelemetry-distro's releases.

Release v0.19.0

What's Changed

  • fix(mcp): fall back to HTTP headers for server-side trace context when params._meta is absent (#829)
  • fix(mcp-instrumentation): always inject W3C trace context into outbound HTTP request headers so MCP servers that read context only from HTTP (API Gateways, service meshes, non-Python MCP servers) can join the caller's trace, even with OTEL_MCP_SUPPRESS_HTTP_INSTRUMENTATION enabled (#827)
  • Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)
  • feat(genai): capture user input and agent output on llama_index invoke_agent spans (#824)
  • fix(crewai): use native per-call token usage when crewai provides it (#822)
  • fix(crewai): normalize tool description across crewai versions (#821)
  • fix(serviceevents): key the incident-snapshot dedup hash on operation + bounded throw-site origin (module/path.function) (#825)
  • fix(crewai): report per-call LLM token usage instead of cumulative total (#806)
  • fix(genai): serialize tool call arguments/results and blob bytes to match OTel util-genai (primitives kept native, bytes base64-encoded) (#817)
  • feat(genai): capture user input and agent output on invoke_agent spans (#815)
  • refactor(serviceevents): make the endpoint span processor framework-agnostic
  • fix(serviceevents): gate incident trace correlation on the SAMPLED flag and harden incident dedup/rate-limiting
  • fix(genai): serialize list-valued message content into typed parts so multimodal/reasoning content is no longer stringified to a Python repr in gen_ai.input/output.messages across langchain, llama_index, and crewai (#805)
  • feat: add OTel lite SDK for Lambda cold start optimization (#789)

Upstream Components

  • opentelemetry-api - 1.44.0
  • opentelemetry-sdk - 1.44.0
  • opentelemetry-exporter-otlp-proto-grpc - 1.44.0
  • opentelemetry-exporter-otlp-proto-http - 1.44.0
  • opentelemetry-propagator-b3 - 1.44.0
  • opentelemetry-propagator-jaeger - 1.44.0
  • opentelemetry-exporter-otlp-proto-common - 1.44.0
  • opentelemetry-sdk-extension-aws - 2.1.0
  • opentelemetry-propagator-aws-xray - 1.0.2
  • opentelemetry-distro - 0.65b0
  • opentelemetry-processor-baggage - 0.65b0
  • opentelemetry-propagator-ot-trace - 0.65b0
  • opentelemetry-instrumentation - 0.65b0
  • opentelemetry-instrumentation-aws-lambda - 0.65b0
  • opentelemetry-instrumentation-aio-pika - 0.65b0
  • opentelemetry-instrumentation-aiohttp-client - 0.65b0
  • opentelemetry-instrumentation-aiokafka - 0.65b0
  • opentelemetry-instrumentation-aiopg - 0.65b0
  • opentelemetry-instrumentation-asgi - 0.65b0
  • opentelemetry-instrumentation-asyncpg - 0.65b0
  • opentelemetry-instrumentation-boto3sqs - 0.65b0
  • opentelemetry-instrumentation-botocore - 0.65b0
  • opentelemetry-instrumentation-celery - 0.65b0
  • opentelemetry-instrumentation-confluent-kafka - 0.65b0
  • opentelemetry-instrumentation-dbapi - 0.65b0
  • opentelemetry-instrumentation-django - 0.65b0
  • opentelemetry-instrumentation-falcon - 0.65b0
  • opentelemetry-instrumentation-fastapi - 0.65b0
  • opentelemetry-instrumentation-flask - 0.65b0
  • opentelemetry-instrumentation-grpc - 0.65b0
  • opentelemetry-instrumentation-httpx - 0.65b0

... (truncated)

Changelog

Sourced from aws-opentelemetry-distro's changelog.

v0.19.0 - 2026-07-22

  • fix(mcp): fall back to HTTP headers for server-side trace context when params._meta is absent (#829)
  • fix(mcp-instrumentation): always inject W3C trace context into outbound HTTP request headers so MCP servers that read context only from HTTP (API Gateways, service meshes, non-Python MCP servers) can join the caller's trace, even with OTEL_MCP_SUPPRESS_HTTP_INSTRUMENTATION enabled (#827)
  • Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)
  • feat(genai): capture user input and agent output on llama_index invoke_agent spans (#824)
  • fix(crewai): use native per-call token usage when crewai provides it (#822)
  • fix(crewai): normalize tool description across crewai versions (#821)
  • fix(serviceevents): key the incident-snapshot dedup hash on operation + bounded throw-site origin (module/path.function) (#825)
  • fix(crewai): report per-call LLM token usage instead of cumulative total (#806)
  • fix(genai): serialize tool call arguments/results and blob bytes to match OTel util-genai (primitives kept native, bytes base64-encoded) (#817)
  • feat(genai): capture user input and agent output on invoke_agent spans (#815)
  • refactor(serviceevents): make the endpoint span processor framework-agnostic
  • fix(serviceevents): gate incident trace correlation on the SAMPLED flag and harden incident dedup/rate-limiting
  • fix(genai): serialize list-valued message content into typed parts so multimodal/reasoning content is no longer stringified to a Python repr in gen_ai.input/output.messages across langchain, llama_index, and crewai (#805)
  • feat: add OTel lite SDK for Lambda cold start optimization (#789)
Commits
  • 821465a Pre-release: Update version to 0.19.0 (#834)
  • ed8782f Backport #797 to release/v0.19.x: add Python 3.14 Lambda runtime (#835)
  • 4dcbf60 test(e2e): wire Python Lambda Lite SDK test into Application Signals E2E (#833)
  • 315bddd fix(mcp): extract server-side trace context from HTTP headers when _meta is a...
  • 76f8f2d Nightly dependency update: OpenTelemetry 1.44.0/0.65b0 (#799)
  • ffa8c72 fix(mcp-instrumentation): inject W3C trace context into outbound HTTP headers...
  • d7e49b5 Revert "feat(genai): extract gen_ai.tool.call.arguments/result as LLO content...
  • f9bb4f5 feat(genai): capture user input and agent output on llama_index invoke_agent ...
  • 2b43f03 Add best-effort public ECR image signing to release workflow (#828)
  • 9356e72 Key incident-snapshot dedup hash on operation + throw-site origin (#825)
  • Additional commits viewable in compare view

Updates mcp from 1.28.1 to 2.1.1

Release notes

Sourced from mcp's releases.

v2.1.1

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v2.1.0...v2.1.1

v2.1.0

Highlights

  • Client accepts StdioServerParameters directly: Client(StdioServerParameters(command="uv", args=["run", "server.py"])) (#3321).
  • Prompt messages accept Image and Audio, prompt functions may return bare content blocks, and Message / UserMessage / AssistantMessage are exported from mcp.server.mcpserver (#3320).
  • The 4 MiB request body limit now also covers the SSE transport and the OAuth endpoints; SseServerTransport and MCPServer.sse_app() take max_request_body_size, and the SSE message endpoint answers 405 to non-POST requests (#3336).

Behaviour changes to be aware of

  • Handler exceptions (#3314): an unexpected exception from a tool, resource or prompt handler is logged once at ERROR with its traceback, and the client now sees only Error executing tool <name> (or the resource/prompt equivalent) rather than the exception text. Raise ToolError / ResourceError when the message is meant for the model; those still reach the client and are logged at INFO without a traceback.
  • Content-block return annotations (#3320): a tool annotated to return TextContent, EmbeddedResource, Image, Audio, or lists/unions of them no longer advertises outputSchema or returns structuredContent; its content is unchanged. Pass structured_output=True to keep the previous shape.

Fixes

  • TypedDict tool results: NotRequired keys are omitted instead of serialized as null, and registration no longer fails on Python 3.10 (#3224, #3227); recursive return types get an object-rooted outputSchema that pre-2026 clients accept (#3337).
  • 2026-07-28 over HTTP: a POSTed notification such as notifications/cancelled is acknowledged with 202 instead of rejected with 400 (#3324).
  • Pre-2026 sessions ignore cache-hint fields from later revisions instead of failing list_tools() (#3223), and accept boolean sub-schemas in tool schema properties (#3353).
  • mcp install reads and preserves a Claude Desktop config containing non-ASCII text on any Windows code page (#3296).

What's Changed

... (truncated)

Commits
  • 0921d94 Point imports of mcp.server.fastmcp at the migration guide (#3388)
  • 4d6f87e Build releases with the pinned hatchling and a publish action that accepts Me...
  • c5d7d0b docs: refresh translations for recent English changes (#3379)
  • d8b6383 Give recursive tool return types an object-rooted output schema (#3376)
  • 56af447 Log MCPServer handler exceptions by kind and keep crash details off the wire ...
  • f1c40b0 Accept boolean sub-schemas in 2025-11-25 tool schema properties (#3354)
  • 57394b0 Apply the request body limit to the SSE and OAuth endpoints (#3336)
  • 0cee624 Hand TypedDict tool results to pydantic natively (#3331)
  • 0d92192 Shorten stdio test comments (#3329)
  • b2025ab Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (#3326)
  • Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (

@dependabot
chore(deps): uv: bump the all-python group across 1 directory with 10…
22c37e7 
… updates

Bumps the all-python group with 10 updates in the /agent directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.78` | `1.43.83` |
| [bedrock-agentcore](https://github.com/aws/bedrock-agentcore-sdk-python) | `1.18.1` | `1.22.0` |
| [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) | `0.2.110` | `0.2.148` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.141.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.50.0` | `0.52.4` |
| [aws-opentelemetry-distro](https://github.com/aws-observability/aws-otel-python-instrumentation) | `0.18.0` | `0.19.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.28.1` | `2.1.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.5` |
| [ty](https://github.com/astral-sh/ty) | `0.0.56` | `0.0.75` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |



Updates `boto3` from 1.43.78 to 1.43.83
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.78...1.43.83)

Updates `bedrock-agentcore` from 1.18.1 to 1.22.0
- [Release notes](https://github.com/aws/bedrock-agentcore-sdk-python/releases)
- [Changelog](https://github.com/aws/bedrock-agentcore-sdk-python/blob/main/CHANGELOG.md)
- [Commits](aws/bedrock-agentcore-sdk-python@v1.18.1...v1.22.0)

Updates `claude-agent-sdk` from 0.2.110 to 0.2.148
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.110...v0.2.148)

Updates `fastapi` from 0.139.0 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.0...0.141.1)

Updates `uvicorn` from 0.50.0 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.50.0...0.52.4)

Updates `aws-opentelemetry-distro` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/aws-observability/aws-otel-python-instrumentation/releases)
- [Changelog](https://github.com/aws-observability/aws-otel-python-instrumentation/blob/main/CHANGELOG.md)
- [Commits](aws-observability/aws-otel-python-instrumentation@v0.18.0...v0.19.0)

Updates `mcp` from 1.28.1 to 2.1.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v2.1.1)

Updates `ruff` from 0.15.20 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.16.5)

Updates `ty` from 0.0.56 to 0.0.75
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.56...0.0.75)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.20.0...2.21.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.83
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: bedrock-agentcore
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.148
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: aws-opentelemetry-distro
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: mcp
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-python
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: ty
  dependency-version: 0.0.75
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 5, 2026
@dependabot
dependabot Bot requested review from a team and backgroundagents as code owners September 5, 2026 06:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@backgroundagents backgroundagents Awaiting requested review from backgroundagents backgroundagents is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants