Skip to content

deps: bump the uv-all-updates group with 3 updates - #527

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-all-updates-64ec884918
Open

deps: bump the uv-all-updates group with 3 updates#527
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-all-updates-64ec884918

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv-all-updates group with 3 updates: a2a-sdk, sqlalchemy and ruff.

Updates a2a-sdk from 1.1.2 to 1.1.5

Release notes

Sourced from a2a-sdk's releases.

v1.1.5

1.1.5 (2026-09-21)

Bug Fixes

  • deps: support protobuf 7 (#1260) (67ba0a4)
  • replace deprecated FieldDescriptor.label with is_repeated in proto_utils (#1158) (4554e2d)
  • server: avoid out-of-range datetime task ordering (#1220) (d55a3d3)

v1.1.4

1.1.4 (2026-09-07)

Features

  • itk: register itk-python-v10-agent as a uv workspace member and update dependency version markers (#1203) (6eee895)
  • itk: use shared scenarios (#1201) (b4a0b21)

Bug Fixes

  • make event queue sink removal idempotent (#1134) (58c72c6)
  • omit artifacts from list tasks responses (#1212) (35ef52e)
  • owner-scope cancel/subscribe and write terminal state on cancel (#1159, #1170) (#1172) (ddbf853)
  • prevent first-owner write loss in in-memory stores (#1194) (bcc489c)
  • server: let subscriber taps evict on full instead of wedging dispatch (#1137) (0c2126f)
  • server: surface producer errors after failed tasks (#1229) (bc32d7e)
  • server: validate push-notification URLs at config creation (#1173) (3eb88e2)
  • server: validate push-notification URLs before dispatch (SSRF hardening) (#1164) (57a9df3)
  • server: warn when queue_manager is ignored in DefaultRequestHandlerV2 (#1153) (08fd223)

Documentation

  • server: say what the evict-on-full check actually tests (#1209) (4b7b242)

v1.1.3

1.1.3 (2026-08-18)

Bug Fixes

  • use threading.RLock for in-memory server singletons (#1162) (5bae35b)
Changelog

Sourced from a2a-sdk's changelog.

1.1.5 (2026-09-21)

Bug Fixes

  • deps: support protobuf 7 (#1260) (67ba0a4)
  • replace deprecated FieldDescriptor.label with is_repeated in proto_utils (#1158) (4554e2d)
  • server: avoid out-of-range datetime task ordering (#1220) (d55a3d3)

1.1.4 (2026-09-07)

Features

  • itk: register itk-python-v10-agent as a uv workspace member and update dependency version markers (#1203) (6eee895)
  • itk: use shared scenarios (#1201) (b4a0b21)

Bug Fixes

  • make event queue sink removal idempotent (#1134) (58c72c6)
  • omit artifacts from list tasks responses (#1212) (35ef52e)
  • owner-scope cancel/subscribe and write terminal state on cancel (#1159, #1170) (#1172) (ddbf853)
  • prevent first-owner write loss in in-memory stores (#1194) (bcc489c)
  • server: let subscriber taps evict on full instead of wedging dispatch (#1137) (0c2126f)
  • server: surface producer errors after failed tasks (#1229) (bc32d7e)
  • server: validate push-notification URLs at config creation (#1173) (3eb88e2)
  • server: validate push-notification URLs before dispatch (SSRF hardening) (#1164) (57a9df3)
  • server: warn when queue_manager is ignored in DefaultRequestHandlerV2 (#1153) (08fd223)

Documentation

  • server: say what the evict-on-full check actually tests (#1209) (4b7b242)

1.1.3 (2026-08-18)

Bug Fixes

  • use threading.RLock for in-memory server singletons (#1162) (5bae35b)
Commits
  • 9f0f00c chore(main): release 1.1.5 (#1235)
  • 67ba0a4 fix(deps): support protobuf 7 (#1260)
  • 9a00f9b chore(deps): bump the github-actions group across 1 directory with 5 updates ...
  • c232f50 chore: revert "ci: simulate release failure to exercise notify-failure" (#1257)
  • 944542c ci: simulate release failure to exercise notify-failure (#1255)
  • d92f350 ci: create issue on release failures (#1254)
  • 0db0e7b ci: add A2A protocol authentication support and integrate ACTS conformance te...
  • 9ea4b60 chore(revert): revert "ci: allow publishing from existing tags" (#1252)
  • 5926871 ci: allow publishing from existing tags (#1251)
  • 45b92bc ci: upgrade pypa/gh-action-pypi-publish to 1.14.2 (#1250)
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.53 to 2.0.54

Release notes

Sourced from sqlalchemy's releases.

2.0.54

Released: September 15, 2026

platform

  • [platform] [change] Binary wheels are no longer built for Python 3.7. PyPI now rejects wheel files whose filename does not begin with the normalized project name, and the packaging tools that can be installed on Python 3.7 do not produce such a filename. As a result, SQLAlchemy 2.0.44 was the last release to publish Python 3.7 wheels to PyPI, and releases 2.0.45 and later have been available on Python 3.7 only as a source distribution; the wheel builds for Python 3.7 are now removed. Python 3.7 remains supported by the 2.0 series.

  • [platform] [bug] Fixed issue where the Cython extensions were compiled without the freethreading_compatible directive, so that they did not declare themselves as safe to run without the GIL. On a free-threaded Python interpreter such as Python 3.13t or 3.14t, importing SQLAlchemy would cause the interpreter to re-enable the GIL, emitting a RuntimeWarning. The directive is now set when building for Python 3.13 and above, and a test has been added which confirms that importing SQLAlchemy on a free-threaded build does not enable the GIL.

    References: #13592

Commits

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the uv-all-updates group with 3 updates
e92423a 
Bumps the uv-all-updates group with 3 updates: [a2a-sdk](https://github.com/a2aproject/a2a-python), [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) and [ruff](https://github.com/astral-sh/ruff).


Updates `a2a-sdk` from 1.1.2 to 1.1.5
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v1.1.2...v1.1.5)

Updates `sqlalchemy` from 2.0.53 to 2.0.54
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `ruff` from 0.16.7 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.7...0.16.8)

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-all-updates
- dependency-name: sqlalchemy
  dependency-version: 2.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-all-updates
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: uv-all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@liujuanjuan1984 liujuanjuan1984 mentioned this pull request Sep 25, 2026
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants