Update Python: non-major updates #537

renovate · 2025-10-05T22:31:17Z

This PR contains the following updates:

Package	Type	Update	Change
coverage	tool.uv.dev-dependencies	patch	`==7.10.6` -> `==7.10.7`
fastapi (changelog)	project.dependencies	minor	`==0.116.1` -> `==0.118.0`
joserfc	project.dependencies	patch	`==1.3.3` -> `==1.3.4`
langchain-core (changelog)	project.dependencies	patch	`==0.3.76` -> `==0.3.78`
langchain-openai (changelog)	project.dependencies	patch	`==0.3.32` -> `==0.3.35`
langchain_community (changelog)	project.dependencies	patch	`==0.3.29` -> `==0.3.31`
langsmith	project.dependencies	patch	`==0.4.18` -> `==0.4.33`
openai	project.dependencies	minor	`==1.102.0` -> `==1.109.1`
pypdf (changelog)	project.dependencies	minor	`==6.0.0` -> `==6.1.1`
pytest-mock (changelog)	tool.uv.dev-dependencies	patch	`==3.15.0` -> `==3.15.1`
ruff (source, changelog)	tool.uv.dev-dependencies	minor	`==0.12.10` -> `==0.14.0`
uvicorn (changelog)	project.dependencies	minor	`==0.35.0` -> `==0.37.0`

Release Notes

nedbat/coveragepy (coverage)

`v7.10.7`

Compare Source

Performance: with branch coverage in large files, generating HTML, JSON, or
LCOV reports could take far too long due to some quadratic behavior when
creating the function and class index pages. This is now fixed, closing
issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.
Most warnings and a few errors now have links to a page in the docs
explaining the specific message. Closes issue 1921_.

.. _issue 1921: #1921
.. _issue 2048: #2048

.. _changes_7-10-6:

fastapi/fastapi (fastapi)

`v0.118.0`

Compare Source

0.118.0

Fixes

🐛 Fix support for StreamingResponses with dependencies with yield or UploadFiles, close after the response is done. PR #14099 by @tiangolo.

Before FastAPI 0.118.0, if you used a dependency with yield, it would run the exit code after the path operation function returned but right before sending the response.

This change also meant that if you returned a StreamingResponse, the exit code of the dependency with yield would have been already run.

For example, if you had a database session in a dependency with yield, the StreamingResponse would not be able to use that session while streaming data because the session would have already been closed in the exit code after yield.

This behavior was reverted in 0.118.0, to make the exit code after yield be executed after the response is sent.

You can read more about it in the docs for Advanced Dependencies - Dependencies with yield, HTTPException, except and Background Tasks. Including what you could do if you wanted to close a database session earlier, before returning the response to the client.

Docs

📝 Update tutorial/security/oauth2-jwt/ to use pwdlib with Argon2 instead of passlib. PR #13917 by @Neizvestnyj.
✏️ Fix typos in OAuth2 password request forms. PR #14112 by @alv2017.
📝 Update contributing guidelines for installing requirements. PR #14095 by @alejsdev.

Translations

🌐 Sync German docs. PR #14098 by @nilslindemann.

Internal

⬆ [pre-commit.ci] pre-commit autoupdate. PR #14103 by @pre-commit-ci[bot].
♻️ Refactor sponsor image handling. PR #14102 by @alejsdev.
🐛 Fix sponsor display issue by hiding element on image error. PR #14097 by @alejsdev.
🐛 Hide sponsor badge when sponsor image is not displayed. PR #14096 by @alejsdev.

`v0.117.1`

Compare Source

Fixes

🐛 Fix validation error when File is declared after Form parameter. PR #11194 by @thomasleveil.

`v0.117.0`

Compare Source

Features

✨ Allow None as return type for bodiless responses. PR #9425 by @hofrob.
✨ Allow array values for OpenAPI schema type field. PR #13639 by @sammasak.
✨ Add OpenAPI external_docs parameter to FastAPI. PR #13713 by @cmtoro.

Fixes

⚡️ Fix default_factory for response model field with Pydantic V1. PR #9704 by @vvanglro.
🐛 Fix inconsistent processing of model docstring formfeed char with Pydantic V1. PR #6039 by @MaxwellPayne.
🐛 Fix jsonable_encoder alters json_encoders of Pydantic v1 objects. PR #4972 by @aboubacs.
🐛 Reenable allow_arbitrary_types when only 1 argument is used on the API endpoint. PR #13694 by @rmawatson.
🐛 Fix inspect.getcoroutinefunction() can break testing with unittest.mock.patch(). PR #14022 by @secrett2633.

Refactors

♻️ Create dependency-cache dict in solve_dependencies only if None (don't re-create if empty). PR #13689 by @bokshitsky.
✅ Enable test case for duplicated headers in test_tutorial/test_header_params/test_tutorial003.py. PR #13864 by @Amogha-ark.
📌 Pin httpx to >=0.23.0,<1.0.0. PR #14086 by @YuriiMotov.

Docs

📝 Add note about Cookies and JavaScript on tutorial/cookie-params.md. PR #13510 by @Kludex.
📝 Remove outdated formatting from path-params-numeric-validations.md for languages en, es and uk.. PR #14059 by @svlandeg.
📝 Fix and Improve English Documentation. PR #14048 by @nilslindemann.

Translations

📝 Update prompts and German translation. PR #14015 by @nilslindemann.

Internal

✅ Simplify tests for response_model. PR #14062 by @dynamicy.
🚨 Install pydantic.mypy plugin. PR #14081 by @svlandeg.
✅ Add LLM test file. PR #14049 by @nilslindemann.
🔨 Update translations script. PR #13968 by @YuriiMotov.
🛠️ Update docs.py generate-readme command to remove permalinks from headers. PR #14055 by @YuriiMotov.
⬆️ Update mypy to 1.14.1. PR #12970 by @tamird.

`v0.116.2`

Compare Source

Upgrades

⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.49.0. PR #14077 by @musicinmybrain.

Docs

📝 Add documentation for Behind a Proxy - Proxy Forwarded Headers, using --forwarded-allow-ips="*". PR #14028 by @tiangolo.
📝 Add deprecation info block about dict() in docs/tutorial/body.md. PR #13906 by @jomkv.
📝 Fix Twitter to be X (Twitter) everywhere in documentation. PR #13809 by @valentinDruzhinin.
🐛 Prevent scroll-to-top on restart/fast buttons in termynal.js. PR #13714 by @Ashish-Pandey62.
📝 Update testing events documentation. PR #13259 by @z0z0r4.
📝 Remove obsolete url field in error responses in docs. PR #13655 by @Taoup.
📝 Bring the scope claim in line with the standard in docs_src/security/tutorial005.py. PR #11189 by @DurandA.
📝 Update TrustedHostMiddleware Documentation. PR #11441 by @soulee-dev.
📝 Remove links to site callbackhell.com that doesn't exist anymore. PR #14006 by @dennybiasiolli.
📝 Add permalinks to headers in English docs. PR #13993 by @YuriiMotov.
📝 Update docs/en/docs/advanced/generate-clients.md. PR #13793 by @mrlubos.
📝 Add discussion template for new language translation requests. PR #13535 by @alejsdev.

Translations

📝 Fix code include for Pydantic models example in docs/zh/docs/python-types.md. PR #13997 by @anfreshman.
🌐 Update Portuguese Translation for docs/pt/docs/async.md. PR #13863 by @EdmilsonRodrigues.
📝 Fix highlight line in docs/ja/docs/tutorial/body.md. PR #13927 by @KoyoMiyazaki.
🌐 Add Persian translation for docs/fa/docs/environment-variables.md. PR #13923 by @Mohammad222PR.
🌐 Add Persian translation for docs/fa/docs/python-types.md. PR #13524 by @Mohammad222PR.
🌐 Update Portuguese Translation for docs/pt/docs/project-generation.md. PR #13875 by @EdmilsonRodrigues.
🌐 Add Persian translation for docs/fa/docs/async.md. PR #13541 by @Mohammad222PR.
🌐 Add Bangali translation for docs/bn/about/index.md. PR #13882 by @sajjadrahman56.

Internal

⬆ Bump pyjwt from 2.8.0 to 2.9.0. PR #13960 by @dependabot[bot].
⬆ [pre-commit.ci] pre-commit autoupdate. PR #14080 by @pre-commit-ci[bot].
⬆ Bump actions/setup-python from 5 to 6. PR #14042 by @dependabot[bot].
⬆ Bump actions/labeler from 5 to 6. PR #14046 by @dependabot[bot].
⬆ [pre-commit.ci] pre-commit autoupdate. PR #14056 by @pre-commit-ci[bot].
⬆ [pre-commit.ci] pre-commit autoupdate. PR #14035 by @pre-commit-ci[bot].
⬆ Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0. PR #14041 by @dependabot[bot].
👥 Update FastAPI People - Contributors and Translators. PR #14029 by @tiangolo.
👥 Update FastAPI People - Sponsors. PR #14030 by @tiangolo.
👥 Update FastAPI GitHub topic repositories. PR #14031 by @tiangolo.
👥 Update FastAPI People - Experts. PR #14034 by @tiangolo.
👷 Detect and label merge conflicts on PRs automatically. PR #14045 by @svlandeg.
🔧 Update sponsors: remove Platform.sh. PR #14027 by @tiangolo.
🔧 Update sponsors: remove Mobb. PR #14026 by @tiangolo.
🛠️ Update mkdocs_hooks to handle headers with permalinks when building docs. PR #14025 by @tiangolo.
⬆ [pre-commit.ci] pre-commit autoupdate. PR #14016 by @pre-commit-ci[bot].
⬆ Bump mkdocs-macros-plugin from 1.3.7 to 1.3.9. PR #14003 by @YuriiMotov.
⬆ [pre-commit.ci] pre-commit autoupdate. PR #13999 by @pre-commit-ci[bot].
⬆ [pre-commit.ci] pre-commit autoupdate. PR #13983 by @pre-commit-ci[bot].
⬆ Bump actions/checkout from 4 to 5. PR #13986 by @dependabot[bot].
🔧 Update Speakeasy sponsor graphic. PR #13971 by @chailandau.
⬆ [pre-commit.ci] pre-commit autoupdate. PR #13969 by @pre-commit-ci[bot].
⬆ Bump actions/download-artifact from 4 to 5. PR #13975 by @dependabot[bot].
👥 Update FastAPI People - Experts. PR #13963 by @tiangolo.
⬆ Bump ruff from 0.11.2 to 0.12.7. PR #13957 by @dependabot[bot].
⬆ Bump cairosvg from 2.7.1 to 2.8.2. PR #13959 by @dependabot[bot].
⬆ Bump pydantic-ai from 0.0.30 to 0.4.10. PR #13958 by @dependabot[bot].
👥 Update FastAPI GitHub topic repositories. PR #13962 by @tiangolo.
⬆ Bump mkdocs-material from 9.6.15 to 9.6.16. PR #13961 by @dependabot[bot].
⬆ Bump tiangolo/latest-changes from 0.3.2 to 0.4.0. PR #13952 by @dependabot[bot].
👥 Update FastAPI People - Sponsors. PR #13956 by @tiangolo.
👥 Update FastAPI People - Contributors and Translators. PR #13955 by @tiangolo.
🔧 Update sponsors: Databento link and sponsors_badge data. PR #13954 by @tiangolo.
🔧 Update sponsors: Add Railway. PR #13953 by @tiangolo.
⚒️ Update translate script, update prompt to minimize generated diff. PR #13947 by @YuriiMotov.
⬆ [pre-commit.ci] pre-commit autoupdate. PR #13943 by @pre-commit-ci[bot].
⚒️ Tweak translate script and CI. PR #13939 by @tiangolo.
👷 Add CI to translate with LLMs. PR #13937 by @tiangolo.
⚒️ Update translate script, show and update outdated translations. PR #13933 by @tiangolo.
🔨 Refactor translate script with extra feedback (prints). PR #13932 by @tiangolo.
🔨 Update translations script to remove old (removed) files. PR #13928 by @tiangolo.
⬆ [pre-commit.ci] pre-commit autoupdate. PR #13894 by @pre-commit-ci[bot].
⬆ Update httpx requirement to >=0.23.0,<0.29.0. PR #13114 by @yan12125.
🔧 Update sponsors: Add Mobb. PR #13916 by @tiangolo.
👥 Update FastAPI People - Experts. PR #13889 by @tiangolo.
🔨 Update FastAPI People sleep interval, use external settings. PR #13888 by @tiangolo.

authlib/joserfc (joserfc)

`v1.3.4`

Compare Source

🐞 Bug Fixes

Use explicit type for json_b64encode and json_b64decode - by @lepture (61a17)
jws: Validating content size to avoid DoS - by @lepture (05ccf)
jwe: Add content size validation to avoid DoS - by @lepture (62d96)

View changes on GitHub

langchain-ai/langsmith-sdk (langsmith)

`v0.4.33`

Compare Source

What's Changed

release(js): 0.3.72 by @jacoblee93 in #2053
fix(python): Set llm OAI agent SDK spans to parent name for filtering by @angus-langchain in #2054
fix(py): return session feedback with experiment results by @baskaryan in #2049
fix ugly rendering of 'omit' in UI due to incorrect strip by @EugeneJinXin in #2057
feat(py): Dedupe examples purely by dataset_id and input/output content rather than by test name by @jacoblee93 in #2050
release(py): 0.4.33 by @jacoblee93 in #2060

Full Changelog: langchain-ai/langsmith-sdk@v0.4.32...v0.4.33

`v0.4.32`

Compare Source

What's Changed

fix: docstring of get_expeirment_results by @EugeneJinXin in #2038
fix(js): Make JS client respect max ops size limit by @jacoblee93 in #2041
chore(js): Remove log by @jacoblee93 in #2042
Non-beta parse awareness in the OpenAI wrapper by @cr-klarna in #2012
fix(js): Copy object prototype when copying tools in AI SDK wrapper by @jacoblee93 in #2051
release(py): 0.4.32 by @jacoblee93 in #2052
release(js): 0.3.72 by @jacoblee93 in #2053

New Contributors

@cr-klarna made their first contribution in #2012

Full Changelog: langchain-ai/langsmith-sdk@v0.4.31...v0.4.32

`v0.4.31`

Compare Source

What's Changed

fix(py): Inherit project name from parent for OpenAI agent wrapper by @jacoblee93 in #2037

Full Changelog: langchain-ai/langsmith-sdk@v0.4.30...v0.4.31

`v0.4.30`

Compare Source

What's Changed

Clear children after runtree posts by @angus-langchain in #2033

Full Changelog: langchain-ai/langsmith-sdk@v0.4.29...v0.4.30

`v0.4.29`

Compare Source

What's Changed

fix(js): Fix output processing for AI SDK streamText by @jacoblee93 in #2027
release(js): 0.3.69 by @jacoblee93 in #2028
feat(py): new get_experiment_results() endpoint by @EugeneJinXin in #2021
version bump after new method 0.4.29 by @EugeneJinXin in #2031

Full Changelog: langchain-ai/langsmith-sdk@v0.4.28...v0.4.29

`v0.4.28`

Compare Source

What's Changed

Don't compress patches when manually configuring api_key by @angus-langchain in #2013
feat(js): Backport new wrapper support to AI SDK 4 by @jacoblee93 in #2015
fix(py): include missing attributes in traces (extra, error, serialized) by @ng-plurai in #2017
fix: Store ended span to reserve parent span context by @EugeneJinXin in #2020

New Contributors

@ng-plurai made their first contribution in #2017

Full Changelog: langchain-ai/langsmith-sdk@v0.4.27...v0.4.28

`v0.4.27`

Compare Source

What's Changed

Set global configuration by @hinthornw in #2002

Full Changelog: langchain-ai/langsmith-sdk@v0.4.26...v0.4.27

`v0.4.26`

Compare Source

What's Changed

fix(js): Fix retries for empty bodies by @jacoblee93 in #2003
chore[py]: test py3.13 by @baskaryan in #2004
feat: support pushing structured prompts back as they're pulled by @madams0013 in #1953
feat(python): Otel developer improvements by @angus-langchain in #2001

Full Changelog: langchain-ai/langsmith-sdk@v0.4.25...v0.4.26

`v0.4.25`

Compare Source

What's Changed

fix: storage of already ended spans causes memory growth by @EugeneJinXin in #1998
release(py): 0.4.25 by @EugeneJinXin in #2000

Full Changelog: langchain-ai/langsmith-sdk@v0.4.24...v0.4.25

`v0.4.24`

Compare Source

What's Changed

update SDK readme for org-scoped API keys by @keshivtandon in #1994
chore(js): Deprecate very old AI SDK OTEL tracing by @jacoblee93 in #1995
feat(js,py): Add OpenAI service tier to input and output token details by @jacoblee93 in #1967
release(js): 0.3.67 by @jacoblee93 in #1997
feat: add metadata into dataset pydantic schema by @EugeneJinXin in #1943
fix(python): Set project name on run update for oai agent sdk by @angus-langchain in #1999

Full Changelog: langchain-ai/langsmith-sdk@v0.4.23...v0.4.24

`v0.4.23`

Compare Source

What's Changed

fix(python): Correctly recognize attachment with stringified annotations by @angus-langchain in #1990
release(py): 0.4.23 by @angus-langchain in #1993

Full Changelog: langchain-ai/langsmith-sdk@v0.4.22...v0.4.23

`v0.4.22`

Compare Source

What's Changed

fix(js): Allow passing partial args to distributed tracing run tree by @jacoblee93 in #1989
feat(py,js): Add include stats param to listProjects by @jacoblee93 in #1991
release(py): 0.4.22 by @jacoblee93 in #1992

Full Changelog: langchain-ai/langsmith-sdk@v0.4.21...v0.4.22

`v0.4.21`

Compare Source

What's Changed

release(js): 0.3.65 by @jacoblee93 in #1974
fix(js): Fix wrapOpenAI finish_reason tracing by @jacoblee93 in #1976
feat(py,js): Adds split parameter to test runners, metadata to Jestlike by @jacoblee93 in #1977
fix(js): Remove validation of usage metadata params by @jacoblee93 in #1980
fix(js): Only take metadata into account when updating in example if provided for Vitest runner by @jacoblee93 in #1981
release(js): 0.3.66 by @jacoblee93 in #1982
ci(py): Add format job to Python CI by @jacoblee93 in #1983
fix: memory leak risk from otel exporter persistance by @EugeneJinXin in #1979
feat(py): Allow overriding max batch size parameter on client, fix for disabled run compression by @jacoblee93 in #1985
release(py): 0.4.21 by @jacoblee93 in #1986

Full Changelog: langchain-ai/langsmith-sdk@v0.4.20...v0.4.21

`v0.4.20`

Compare Source

What's Changed

feat: update SDK for org-scoped keys by @keshivtandon in #1920
feat(pythong): allow nested openai agent tracing by @angus-langchain in #1971
fix(python): Avoid resetting operation.name to "chain" during update_run by @qnnn in #1861
fix(js): specify "Content-Type" for getRunStats to avoid parsing errors by @szedelenyi in #1598
feat(py): Add support system qwen to OTEL attributes by @dubin555 in #1717
feat(js): add datasetVersion parameter to listProjects by @tendev-eoghan in #1391
Pass multiple run ids to listFeedbacks correctly by @airhorns in #1465
feat(py): Fix list_projects typing, add dataset_version param by @jacoblee93 in #1973
feat(js): Allow manually specifying ids for examples in Jestlike runners by @jacoblee93 in #1972
feat(js): Add current repetition property to jestlike test wrapper by @tendev-liam in #1856
release(py): 0.4.20 by @jacoblee93 in #1975

New Contributors

@keshivtandon made their first contribution in #1920
@qnnn made their first contribution in #1861
@szedelenyi made their first contribution in #1598
@dubin555 made their first contribution in #1717
@airhorns made their first contribution in #1465

Full Changelog: langchain-ai/langsmith-sdk@v0.4.19...v0.4.20

`v0.4.19`

Compare Source

What's Changed

release(js): 0.3.64 by @jacoblee93 in #1964
fix(py): Disable API key warnings if tracing is disabled by @jacoblee93 in #1965
fix(python): Alleviate memory pressue from zstd flush by @angus-langchain in #1966

Full Changelog: langchain-ai/langsmith-sdk@v0.4.18...v0.4.19

openai/openai-python (openai)

`v1.109.1`

Compare Source

Full Changelog: v1.109.1...v2.0.0

⚠ BREAKING CHANGES

api: ResponseFunctionToolCallOutputItem.output and ResponseCustomToolCallOutput.output now return string | Array<ResponseInputText | ResponseInputImage | ResponseInputFile> instead of string only. This may break existing callsites that assume output is always a string.