Skip to content

build(deps): bump the minor-updates group across 1 directory with 27 updates#116

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-updates-fd990f2690
Open

build(deps): bump the minor-updates group across 1 directory with 27 updates#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/minor-updates-fd990f2690

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps the minor-updates group with 27 updates in the / directory:

Package From To
boto3 1.42.85 1.43.6
mcp 1.27.0 1.27.1
strands-agents 1.35.0 1.39.0
compliance-trestle 4.0.1 4.0.2
botocore 1.42.85 1.43.6
certifi 2026.2.25 2026.4.22
click 8.3.2 8.3.3
cryptography 46.0.5 46.0.7
docstring-parser 0.17.0 0.18.0
idna 3.11 3.13
importlib-metadata 8.7.1 8.9.0
opentelemetry-api 1.40.0 1.41.1
opentelemetry-instrumentation 0.61b0 0.62b1
opentelemetry-instrumentation-threading 0.61b0 0.62b1
opentelemetry-sdk 1.40.0 1.41.1
opentelemetry-semantic-conventions 0.61b0 0.62b1
orjson 3.11.8 3.11.9
packaging 26.0 26.2
pydantic 2.12.5 2.13.4
pydantic-core 2.41.5 2.46.4
pydantic-settings 2.13.1 2.14.1
python-multipart 0.0.24 0.0.27
s3transfer 0.16.0 0.17.0
sse-starlette 3.3.4 3.4.2
urllib3 2.6.3 2.7.0
uvicorn 0.44.0 0.46.0
zipp 3.23.0 3.23.1

Updates boto3 from 1.42.85 to 1.43.6

Commits

Updates mcp from 1.27.0 to 1.27.1

Release notes

Sourced from mcp's releases.

v1.27.1

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v1.27.0...v1.27.1

Commits
  • 77431eb [v1.x] refactor: import SSEError from httpx_sse public API (#2561)
  • 2034cae [v1.x] build: restrict httpx to <1.0.0 (#2559)
  • 73d458b [v1.x] fix(auth): coerce empty-string optional URL fields to None in OAuthCli...
  • 8d4c2f5 [v1.x] fix: catch PydanticUserError when generating output schema (pydantic 2...
  • See full diff in compare view

Updates strands-agents from 1.35.0 to 1.39.0

Release notes

Sourced from strands-agents's releases.

v1.39.0

What's Changed

New Contributors

Full Changelog: strands-agents/sdk-python@v1.38.0...v1.39.0

v1.38.0

What's Changed

New Contributors

... (truncated)

Commits
  • ead3179 fix: integration test updates (#2262)
  • fc386a3 feat(a2a): implement full A2A task lifecycle state support (#2245)
  • 980bc91 fix: correct MCPClient.exit and stop() type annotations (#2248)
  • 800e7c4 feat: add useNativeTokenCount flag to skip token counting API calls (#2255)
  • 6b0df9a fix: cache unsupported models for bedrocks token counting (#2250)
  • d94d516 fix: fix count tokens for bedrock models (#2254)
  • 559b2a0 feat: add context window limit lookup table (#2249)
  • 8638fc2 fix: include root cause in MCPClientInitializationError message (#2238)
  • a245e6d feat: enable openai provider use aws profile (#2230)
  • 6e208a8 feat(bedrock): add strict_tools config with auto-inject of additional… (#2213)
  • Additional commits viewable in compare view

Updates compliance-trestle from 4.0.1 to 4.0.2

Release notes

Sourced from compliance-trestle's releases.

v4.0.2 (2026-04-17)

This release is published under the Apache-2.0 License.

Bug Fixes

  • Align OSCAL version references and fix CONTRIBUTING.md typos (#2141, 7b614c6)

  • Allow empty parameter labels in OSCAL imports (#2177, 0e354a5)

  • Correct additional CONTRIBUTING.md typos (#2141, 7b614c6)

  • Cryptography (#2199, cb54edf)

  • Datetime.datetime.utcnow() is deprecated (#2173, 87fe40b)

  • Invalid escape sequence warning while runnign tests (#2172, 0848cb4)

  • Invalid escape sequence warning while running tests (#2172, 0848cb4)

  • Switch from rev4 to rev5 in test files (#2116, 64639b0)

  • Update to sonarqube replacement action (90e731a)

  • Use timezone-aware datetimes in cache _time_since_modification (#2130, 16cde53)

  • cache: Avoid duplicate file read in get_raw (#2166, 921145b)

  • deps: Bump actions/cache from 5.0.3 to 5.0.4 (#2176, a9bb479)

  • deps: Bump actions/create-github-app-token from 2.2.1 to 3.0.0 (#2157, 42557af)

  • deps: Bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#2196, f2abb5c)

  • deps: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2198, bccc714)

  • deps: Bump cryptography from 46.0.5 to 46.0.6 (#2180, 4bf82c0)

  • deps: Bump cryptography from 46.0.6 to 46.0.7 (#2194, 11bacba)

  • deps: Bump github/codeql-action from 4.32.6 to 4.34.1 (#2175, 72b0e2d)

  • deps: Bump github/codeql-action from 4.34.1 to 4.35.1 (#2183, 8c5784e)

  • deps: Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#2197, 66627af)

  • deps: Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 (#2182, 582171f)

  • deps: Bump SonarSource/sonarqube-scan-action from 7.0.0 to 7.1.0 (#2192, 49c5ef0)

... (truncated)

Changelog

Sourced from compliance-trestle's changelog.

v4.0.2 (2026-04-17)

Bug Fixes

  • Align OSCAL version references and fix CONTRIBUTING.md typos (#2141, 7b614c6)

  • Allow empty parameter labels in OSCAL imports (#2177, 0e354a5)

  • Correct additional CONTRIBUTING.md typos (#2141, 7b614c6)

  • Cryptography (#2199, cb54edf)

  • Datetime.datetime.utcnow() is deprecated (#2173, 87fe40b)

  • Invalid escape sequence warning while runnign tests (#2172, 0848cb4)

  • Invalid escape sequence warning while running tests (#2172, 0848cb4)

  • Switch from rev4 to rev5 in test files (#2116, 64639b0)

  • Update to sonarqube replacement action (90e731a)

  • Use timezone-aware datetimes in cache _time_since_modification (#2130, 16cde53)

  • cache: Avoid duplicate file read in get_raw (#2166, 921145b)

  • deps: Bump actions/cache from 5.0.3 to 5.0.4 (#2176, a9bb479)

... (truncated)

Commits
  • ae54daa 4.0.2
  • 7ac610f Merge pull request #2203 from oscal-compass/develop
  • 64639b0 fix: switch from rev4 to rev5 in test files (#2116)
  • cb54edf fix: cryptography (#2199)
  • 49c5ef0 fix(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 7.1.0 (#2192)
  • f2abb5c fix(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#2196)
  • 66627af fix(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#2197)
  • 11bacba fix(deps): bump cryptography from 46.0.6 to 46.0.7 (#2194)
  • bccc714 fix(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2198)
  • 0e354a5 fix: allow empty parameter labels in OSCAL imports (#2177)
  • Additional commits viewable in compare view

Updates botocore from 1.42.85 to 1.43.6

Commits

Updates certifi from 2026.2.25 to 2026.4.22

Commits
  • 5dddfb0 2026.04.22 (#410)
  • f99eccd Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#404)
  • 918bed0 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#405)
  • 0a49067 Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#403)
  • acf6ce8 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#398)
  • feb0ed2 Bump actions/download-artifact from 7.0.0 to 8.0.0 (#397)
  • d9c11a5 Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#396)
  • See full diff in compare view

Updates click from 8.3.2 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177
  • Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239
  • Mark make_default_short_help as private API. #3189 #3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248
Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

  • Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775
  • Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299
  • Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238
  • Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240
  • Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235
  • Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151
  • Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177
  • Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328
  • Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239
  • Mark make_default_short_help as private API. :issue:3189 :pr:3250
  • CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865
  • Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248
Commits
  • c06d2d0 Release 8.3.3
  • f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
  • bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
  • 4a35225 Reduce blast-radius of UNSET in default_map (#3240)
  • c07bb93 Merge branch 'stable' into unset-in-default-map
  • c7e1ba8 Reorder ParameterSource (#3248)
  • 76552ff Show default string in prompt (#3328)
  • ac5cec5 Reorder ParameterSource from most to least explicit
  • 8c452e0 Merge branch 'stable' into show-default-string-in-prompt
  • 8c95c73 Reconcile default value passing and default activation (#3239)
  • Additional commits viewable in compare view

Updates cryptography from 46.0.5 to 46.0.7

Changelog

Sourced from cryptography's changelog.

46.0.7 - 2026-04-07


* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be
  passed to APIs that accept Python buffers, which could lead to buffer
  overflow. **CVE-2026-39892**
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.

.. _v46-0-6:


46.0.6 - 2026-03-25

  • SECURITY ISSUE: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to Oleh Konko (1seal) for reporting the issue. CVE-2026-34073

.. _v46-0-5:

Commits

Updates docstring-parser from 0.17.0 to 0.18.0

Changelog

Sourced from docstring-parser's changelog.

0.18 (2026-04-14)

  • General: Allow parse() to work with missing __doc__ (thanks to @​jamesbraza)
  • General: Officially support Python 3.14 (thanks to @​mauvilsa)
  • General: Exclude docstring_parser.tests from built wheels (thanks to @​gvalkov)
  • Epydoc: Add missing attribute parsing, which includes the "@​ivar", "@​cvar" and "@​var" syntax (thanks to @​Masara)
  • Numpydoc: Add support for defaults in type declarations and improve compose behavior (thanks to @​jwlodek)

0.17 (2025-07-21)

  • General: Replace poetry with hatchling (thanks to @​LecrisUT)
  • General: Drop support for Python 3.6 and 3.7 (thanks to @​LecrisUT)
  • General: Officially support Python 3.13 (thanks to @​mauvilsa)
  • General: Publish packages to PyPI with digital attestations (thanks to @​mauvilsa)
  • Google: Fix multi-line parameter definitions (thanks to @​coolbeevip)
  • Attrdoc: Remove use of deprecated ast classes (thanks to @​fedepell)

0.16 (2024-03-15)

  • Parser: add a new property, description, that combines short and long descriptions into a single string (thanks to @​pR0Ps)
  • General: support Python 3.12 (thanks to @​mauvilsa)

0.15 (2022-09-05)

  • Parser: add a new function, parse_from_object, that supports scattered docstrings (thanks to @​mauvilsa)

0.14.1 (2022-04-27)

  • Parser: fix autodetection (regression from 0.14)

0.14 (2022-04-25)

  • Numpydoc: Improved support for Example / Examples section

0.13 (2021-11-17)

  • Google: Added support for Example / Examples section

0.12 (2021-10-15)

  • General: Added support for lone :rtype: meta information (thanks to @​abergou)

0.11 (2021-09-30)

  • General: Started tracking changes
  • General: Added ability to combine function docstrings (thanks to @​abergou)
  • ReST: Added support for :type: and :rtype: (thanks to @​abergou)
Commits
  • 87dca55 Bump version: 0.17.0 → 0.18.0
  • 059d189 Support Python 3.14 (#111)
  • 9f8501f Remove docstring_parser.tests from bdist (#107)
  • 352ac5a Add support for setting default value in type declaration for numpydoc, vario...
  • 434078c build: fix builds
  • fd6fe7b epydoc: add missing attribute parsing
  • 37fac3d docs: fix missing changelog
  • b4a3c48 Allowing parse to work with missing __doc__ (#103)
  • See full diff in compare view

Updates idna from 3.11 to 3.13

Changelog

Sourced from idna's changelog.

3.13 (2026-04-22) +++++++++++++++++

  • Correct classification error for codepoint U+A7F1

3.12 (2026-04-21) +++++++++++++++++

  • Update to Unicode 17.0.0.
  • Issue a deprecation warning for the transitional argument.
  • Added lazy-loading to provide some performance improvements.
  • Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

Commits
  • 89cdfd2 Release v3.13
  • 1eb0686 Pre-release 3.13
  • 5f20d1e Merge pull request #220 from kjd/unicode-next
  • 4ea8425 Regenerate idnadata.py with correct NFKC_CF data
  • fd47341 Use NFKC_CF from Unicode data files instead of Python's unicodedata module
  • a5304a4 Merge pull request #219 from kjd/release-3.12
  • d80d6f9 Release v3.12
  • 1bb44dd Merge pull request #218 from kjd/release-candidate-3.12rc0
  • 909c49d Release candidate for 3.12
  • c5459a1 Merge pull request #217 from kjd/housekeeping-2
  • Additional commits viewable in compare view

Updates importlib-metadata from 8.7.1 to 8.9.0

Changelog

Sourced from importlib-metadata's changelog.

v8.9.0

Features

v8.8.0

Features

  • Removed Python 3.9 compatibility.
Commits
  • 76f03df 🚡 Toil the docs.
  • 613e980 Finalize
  • 349957e Add news fragment.
  • 8c5d91b Improve performance of name normalization (#533)
  • 27169dc Move behavior description into the docstring. Remove references to intermedia...
  • cbadafc Repeat the operation to get performance visibility.
  • a77d0d1 Add performance test for Prepared.normalize.
  • 1b0be12 Use parameterize fixture for parameterized tests.
  • 1738b20 Merge branch 'backport-cpython-140141' into maint/8.x
  • 164e666 Merge branch 'backport-cpython-110937' into maint/8.x
  • Additional commits viewable in compare view

Updates opentelemetry-api from 1.40.0 to 1.41.1

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.41.1/0.62b1 (2026-04-24)

Version 1.41.0/0.62b0 (2026-04-09)

  • opentelemetry-sdk: Add host resource detector support to declarative file configuration via detection_development.detectors[].host (#5002)
  • opentelemetry-sdk: Add container resource detector support to declarative file configuration via detection_development.detectors[].container, using entry point loading of the opentelemetry-resource-detector-containerid contrib package (#5004)
  • opentelemetry-sdk: Add create_tracer_provider/configure_tracer_provider to declarative file configuration, enabling TracerProvider instantiation from config files without reading env vars (#4985)
  • Enabled the flake8-tidy-import plugins rules for the ruff linter. These rules throw warnings for relative imports in the modules. (#5019)
  • opentelemetry-sdk: Fix AttributeError in ExplicitBucketHistogramAggregation when applied to non-Histogram instruments without explicit boundaries (#5034)
  • Fix BatchLogRecordProcessor default schedule_delay_millis from 5000ms to 1000ms to comply with the OTel specification. Note: logs may be exported 5x more frequently by default (e.g. for users who don't explicitly set the OTEL_BLRP_SCHEDULE_DELAY env var). (#4998)
  • opentelemetry-sdk: Add process resource detector support to declarative file configuration via detection_development.detectors[].process (#5001)
  • opentelemetry-sdk: Add shared _parse_headers helper for declarative config OTLP exporters (#5021)
  • opentelemetry-api: Replace a broad exception in attribute cleaning tests to satisfy pylint in the lint-opentelemetry-api CI job
  • opentelemetry-sdk: Add create_meter_provider/configure_meter_provider to declarative file configuration, enabling MeterProvider instantiation from config files without reading env vars (#4987)
  • opentelemetry-sdk: Add create_resource and create_propagator/configure_propagator to declarative file configuration, enabling Resource and propagator instantiation from config files without reading env vars (

@dependabot
build(deps): bump the minor-updates group across 1 directory with 27 …
9d2251c 
…updates

Bumps the minor-updates group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.42.85` | `1.43.6` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.0` | `1.27.1` |
| [strands-agents](https://github.com/strands-agents/sdk-python) | `1.35.0` | `1.39.0` |
| [compliance-trestle](https://github.com/oscal-compass/compliance-trestle) | `4.0.1` | `4.0.2` |
| [botocore](https://github.com/boto/botocore) | `1.42.85` | `1.43.6` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.4.22` |
| [click](https://github.com/pallets/click) | `8.3.2` | `8.3.3` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.5` | `46.0.7` |
| [docstring-parser](https://github.com/rr-/docstring_parser) | `0.17.0` | `0.18.0` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.13` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `8.9.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-instrumentation-threading](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` |
| [orjson](https://github.com/ijl/orjson) | `3.11.8` | `3.11.9` |
| [packaging](https://github.com/pypa/packaging) | `26.0` | `26.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.46.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.24` | `0.0.27` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.16.0` | `0.17.0` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.3.4` | `3.4.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.44.0` | `0.46.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.23.0` | `3.23.1` |



Updates `boto3` from 1.42.85 to 1.43.6
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.85...1.43.6)

Updates `mcp` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.0...v1.27.1)

Updates `strands-agents` from 1.35.0 to 1.39.0
- [Release notes](https://github.com/strands-agents/sdk-python/releases)
- [Commits](strands-agents/sdk-python@v1.35.0...v1.39.0)

Updates `compliance-trestle` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/oscal-compass/compliance-trestle/releases)
- [Changelog](https://github.com/oscal-compass/compliance-trestle/blob/develop/CHANGELOG.md)
- [Commits](oscal-compass/compliance-trestle@v4.0.1...v4.0.2)

Updates `botocore` from 1.42.85 to 1.43.6
- [Commits](boto/botocore@1.42.85...1.43.6)

Updates `certifi` from 2026.2.25 to 2026.4.22
- [Commits](certifi/python-certifi@2026.02.25...2026.04.22)

Updates `click` from 8.3.2 to 8.3.3
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.2...8.3.3)

Updates `cryptography` from 46.0.5 to 46.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...46.0.7)

Updates `docstring-parser` from 0.17.0 to 0.18.0
- [Changelog](https://github.com/rr-/docstring_parser/blob/master/CHANGELOG.md)
- [Commits](rr-/docstring_parser@0.17.0...0.18.0)

Updates `idna` from 3.11 to 3.13
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.11...v3.13)

Updates `importlib-metadata` from 8.7.1 to 8.9.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.1...v8.9.0)

Updates `opentelemetry-api` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-threading` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-sdk` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `orjson` from 3.11.8 to 3.11.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.8...3.11.9)

Updates `packaging` from 26.0 to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.0...26.2)

Updates `pydantic` from 2.12.5 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.4/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.4)

Updates `pydantic-core` from 2.41.5 to 2.46.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits/core-v2.46.4)

Updates `pydantic-settings` from 2.13.1 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.1)

Updates `python-multipart` from 0.0.24 to 0.0.27
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.24...0.0.27)

Updates `s3transfer` from 0.16.0 to 0.17.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.16.0...0.17.0)

Updates `sse-starlette` from 3.3.4 to 3.4.2
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.3.4...v3.4.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `uvicorn` from 0.44.0 to 0.46.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.44.0...0.46.0)

Updates `zipp` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.0...v3.23.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: mcp
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: strands-agents
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: compliance-trestle
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: botocore
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: certifi
  dependency-version: 2026.4.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: click
  dependency-version: 8.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: docstring-parser
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: idna
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: importlib-metadata
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-api
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: opentelemetry-instrumentation-threading
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic-core
  dependency-version: 2.46.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: s3transfer
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: sse-starlette
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: uvicorn
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: zipp
  dependency-version: 3.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 12, 2026
@dependabot dependabot Bot requested a review from a team May 12, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants