Skip to content

deps(backend)(deps): bump the backend-minor-patch group across 1 directory with 6 updates - #653

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/backend/dev/backend-minor-patch-cc2e031884
Open

deps(backend)(deps): bump the backend-minor-patch group across 1 directory with 6 updates#653
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/services/backend/dev/backend-minor-patch-cc2e031884

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-patch group with 6 updates in the /services/backend directory:

Package From To
cryptography 50.0.0 50.0.1
psycopg 3.3.4 3.3.5
pydantic 2.13.4 2.13.5
python-dotenv 1.2.2 1.2.3
uvicorn 0.52.1 0.52.4
eth-account 0.13.7 0.14.0

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

Updates psycopg from 3.3.4 to 3.3.5

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Current release

Psycopg 3.3.5 ^^^^^^^^^^^^^

  • Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).
  • Fix !ProgrammingError when dumping non-!None values with no !NoneType dumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).
  • Fix !wait_selector wait function to not raise !KeyError (:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).
  • Fix !DataError messages leaking the literal {...} placeholder instead of the offending value when loading a pre-year-1 :sql:timestamp or a malformed binary :sql:jsonb value (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).
  • Raise !DataError instead of !ValueError when ~psycopg.rows.namedtuple_row receives duplicate column names (:ticket:[#1348](https://github.com/psycopg/psycopg/issues/1348)).
  • Raise !DataError on inconsistent copy data (:tickets:[#1359](https://github.com/psycopg/psycopg/issues/1359), [#1360](https://github.com/psycopg/psycopg/issues/1360)).
  • Handle client encodings aliases (:ticket:[#1363](https://github.com/psycopg/psycopg/issues/1363)).
  • Fix building C extension with Cython 3.3.

Psycopg 3.3.4 ^^^^^^^^^^^^^

  • Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:[#1280](https://github.com/psycopg/psycopg/issues/1280)).
  • Fix client-side adaptation of enums whose name require quotes (:ticket:[#1298](https://github.com/psycopg/psycopg/issues/1298)).
  • Consistently populate ~Cursor.statusmessage after ~Cursor.executemany() (:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).

Psycopg 3.3.3 ^^^^^^^^^^^^^

  • Retain Error.pgconn when raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).
  • Return a proper error when server sends ErrorResponse for a Sync after a Parse (:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).

... (truncated)

Commits
  • ea542c9 chore: bump psycopg package version to 3.3.5
  • 8d31e47 chore(deps): bump the actions group across 1 directory with 4 updates
  • 268f863 Merge pull request #1370 from Sanjays2402/fix/truncated-binary-copy-error
  • a412fa4 docs: put together different issues fixed around copy parsing
  • f757307 fix: clearer error messages according to truncated copy message part
  • b1f17c4 test: move existing COPY format parsing tests into a single module
  • 21eba57 test: drop useless parametrization of copy binary parsigh test
  • 6780e17 fix(copy): handle truncated binary row headers
  • 2f2fcfb Merge pull request #1364 from DylanYoung/fix_client_encoding_aliases
  • ccc351e refactor: don't store the encodings raw table as a dict
  • Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates uvicorn from 0.52.1 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)
Commits

Updates eth-account from 0.13.7 to 0.14.0

Release notes

Sourced from eth-account's releases.

v0.14.0

What's Changed

Full Changelog: ApeWorX/eth-account@v0.13.7...v0.14.0

Changelog

Sourced from eth-account's changelog.

Release Notes

.. towncrier release notes start

eth-account v0.14.0-beta.1 (2025-12-18)

Breaking Changes


- Drop support for Python 3.8 and 3.9 (`[#328](https://github.com/ApeWorX/eth-account/issues/328) <https://github.com/ethereum/eth-account/issues/328>`__)
- Bump eth-utils requirement to >=5.3.0 to allow for CamelModel usage (`[#329](https://github.com/ApeWorX/eth-account/issues/329) <https://github.com/ethereum/eth-account/issues/329>`__)

Features



- Add support for Python 3.14 (`[#328](https://github.com/ApeWorX/eth-account/issues/328) &lt;https://github.com/ethereum/eth-account/issues/328&gt;`__)

Internal Changes - for eth-account Contributors

</code></pre>

<ul>

<li>Fix mypy errors with BaseModel.model_json_schema introduced with Pydantic 2.12 (<code>#326 &lt;https://github.com/ethereum/eth-account/issues/326&amp;gt;&lt;/code&gt;__)&lt;/li>

</ul>

</blockquote>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/ApeWorX/eth-account/commit/7972dcd2b565315882fd1be5082cb1aa2a856689&quot;&gt;&lt;code&gt;7972dcd&lt;/code&gt;&lt;/a> refactor: drop &lt;3.10; add &lt;=3.14; migrate to prek and ruff; use Github Action...</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/20757b1138419e01da56ab4d79f09bb5b95fc079&quot;&gt;&lt;code&gt;20757b1&lt;/code&gt;&lt;/a> Breaking/add remaining breaking changes for major (<a href="https://redirect.github.com/ApeWorX/eth-account/issues/333&quot;&gt;#333&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/63a9fc5dcf0fe25cb79dbbdaeb09dea49e4ebf35&quot;&gt;&lt;code&gt;63a9fc5&lt;/code&gt;&lt;/a> parametrized sets -&gt; ordered list so we can run with xdist</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/7fe8e016da979e90030b7ef0ba9bad22ccac0195&quot;&gt;&lt;code&gt;7fe8e01&lt;/code&gt;&lt;/a> remove deprecated method, no longer needed after eth-utils bump</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/f5653f32371422248f0d21b37ce95643db1da3e5&quot;&gt;&lt;code&gt;f5653f3&lt;/code&gt;&lt;/a> Inherit from eth-utils CamelModel for pydantic types:</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/b8fc03a99d9b4f7b5601e4c5b496c518f9a32b67&quot;&gt;&lt;code&gt;b8fc03a&lt;/code&gt;&lt;/a> re-generate test vectors after go dep updates</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/e94fd3b5fb51b6e8f948e3a5e2810a90d3c011d1&quot;&gt;&lt;code&gt;e94fd3b&lt;/code&gt;&lt;/a> Bump github.com/consensys/gnark-crypto in /tests/_scripts/go-kzg-verify</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/c52a8ed5510a8b16e9ea9f7459a21e8691854d24&quot;&gt;&lt;code&gt;c52a8ed&lt;/code&gt;&lt;/a> re-generate test vectors after go dep updates</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/04bb3633e986524365a77b9905d17ab01072ee1f&quot;&gt;&lt;code&gt;04bb363&lt;/code&gt;&lt;/a> Bump golang.org/x/crypto in /tests/_scripts/go-kzg-verify</li>

<li><a href="https://github.com/ApeWorX/eth-account/commit/5eb3acb6f25de657310ff81f55b5d1e90a03f032&quot;&gt;&lt;code&gt;5eb3acb&lt;/code&gt;&lt;/a> move test scripts into</li>

<li>Additional commits viewable in <a href="https://github.com/ApeWorX/eth-account/compare/v0.13.7...v0.14.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    •

@dependabot
deps(backend)(deps): bump the backend-minor-patch group across 1 dire…
8dc9754 
…ctory with 6 updates

Bumps the backend-minor-patch group with 6 updates in the /services/backend directory:

| Package | From | To |
| --- | --- | --- |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [psycopg](https://github.com/psycopg/psycopg) | `3.3.4` | `3.3.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.52.4` |
| [eth-account](https://github.com/ApeWorX/eth-account) | `0.13.7` | `0.14.0` |



Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `psycopg` from 3.3.4 to 3.3.5
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.3.4...3.3.5)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `uvicorn` from 0.52.1 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.1...0.52.4)

Updates `eth-account` from 0.13.7 to 0.14.0
- [Release notes](https://github.com/ApeWorX/eth-account/releases)
- [Changelog](https://github.com/ApeWorX/eth-account/blob/main/docs/release_notes.rst)
- [Commits](ApeWorX/eth-account@v0.13.7...v0.14.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: psycopg
  dependency-version: 3.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: eth-account
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: backend, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@0x-copilot-dev 0x-copilot-dev Awaiting requested review from 0x-copilot-dev 0x-copilot-dev is a code owner
@parthpahwa1 parthpahwa1 Awaiting requested review from parthpahwa1 parthpahwa1 is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants