Skip to content

Bump the python-dependencies group with 4 updates - #24

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-dependencies-5746276310
Closed

Bump the python-dependencies group with 4 updates#24
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/python-dependencies-5746276310

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on streamlit, openai, python-dotenv and cmake to permit the latest version.
Updates streamlit to 1.64.0

Release notes

Sourced from streamlit's releases.

1.64.0

What's Changed

New Features 🎉

Bug Fixes 🐛

Other Changes

... (truncated)

Commits
  • bab1da9 Up version to 1.64.0
  • a1df3bd Exclude Emscripten from development lock
  • 3d6c65c [chore] Enable string and index oxlint rules (#16923)
  • 81d08ba [chore] Note downstream uv compatibility (#16919)
  • a828f9b [chore] Add typing tests for st.chat_message (#16905)
  • 6109f88 Bump the frontend-minor-patch group in /frontend with 2 updates (#16918)
  • e952b34 Bump @​swc/plugin-emotion from 15.0.0 to 16.0.0 in /frontend in the vite group...
  • 786c5a6 Bump vitest-canvas-mock from 1.1.5 to 1.2.0 in /frontend in the vitest group ...
  • 1e3b386 Bump eslint from 10.9.1 to 10.10.0 in /frontend in the eslint group (#16915)
  • 24f75d8 [fix] Prevent callback rerun coalescing races (#16765)
  • Additional commits viewable in compare view

Updates openai to 3.19.2

Release notes

Sourced from openai's releases.

v3.19.2

3.19.2 (2026-09-23)

Bug Fixes

  • preserve single files for fallback extraction paths (#3875) (bfd3680)

Chores

  • api: clarify approximate web search location defaults (#3953) (a95c95e)
  • api: clarify Realtime modality array definitions (#3954) (e79cf53)
  • api: correct fine-tuning bounds and Realtime response reference (#3949) (325a948)
Changelog

Sourced from openai's changelog.

3.19.2 (2026-09-23)

Bug Fixes

  • preserve single files for fallback extraction paths (#3875) (bfd3680)

Chores

  • api: clarify approximate web search location defaults (#3953) (a95c95e)
  • api: clarify Realtime modality array definitions (#3954) (e79cf53)
  • api: correct fine-tuning bounds and Realtime response reference (#3949) (325a948)

3.19.1 (2026-09-23)

Bug Fixes

  • chat: preserve single-pass tool iterables (#3770) (33ffa1f)
  • client: merge HTTP headers case-insensitively (#3486) (5e39766)

Chores

  • api: clarify Chat Completions seed limits (#3945) (be9d666)

Documentation

  • clarify collaborator-only pull request policy (#3948) (ead1fa2)

3.19.0 (2026-09-22)

Features

Bug Fixes

  • _utils/_transform: propagate api_exclude in _async_transform_recursive (#3324) (161ae65)
  • api: handle omission markers in queued WebSocket events (#3944) (63e4616)
  • client: retry only replayable request content (#3771) (6e0c2be)
  • client: tolerate older optional aiohttp installations (#3941) (0d91efb)
  • helpers: use asyncio.get_running_loop() inside async methods (#3289) (bac3545)

3.18.0 (2026-09-22)

... (truncated)

Commits
  • d9f7b7a release: 3.19.2 (#3951)
  • e79cf53 chore(api): clarify Realtime modality array definitions (#3954)
  • a95c95e chore(api): clarify approximate web search location defaults (#3953)
  • 325a948 chore(api): correct fine-tuning bounds and Realtime response reference (#3949)
  • bfd3680 fix: preserve single files for fallback extraction paths (#3875)
  • 4d12746 release: 3.19.1 (#3946)
  • 33ffa1f fix(chat): preserve single-pass tool iterables (#3770)
  • 5e39766 fix(client): merge HTTP headers case-insensitively (#3486)
  • ead1fa2 docs: clarify collaborator-only pull request policy (#3948)
  • be9d666 chore(api): clarify Chat Completions seed limits (#3945)
  • Additional commits viewable in compare view

Updates python-dotenv to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

... (truncated)

Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates cmake to 4.4.3

Release notes

Sourced from cmake's releases.

4.4.3

What's Changed

Full Changelog: scikit-build/cmake-python-distributions@4.4.2...4.4.3

Commits
  • 6003035 [Bot] Update to CMake 4.4.3 (#727)
  • 23030f4 chore(deps): bump the actions group with 2 updates (#728)
  • ceee561 [Bot] Update to OpenSSL 3.5.8 (#726)
  • ce3a7eb chore(deps): bump the actions group with 2 updates (#725)
  • f320aff chore(deps): bump pypa/cibuildwheel (#724)
  • 0cb59ec ci: use actions/attest instead of actions/attest-build-provenance (#723)
  • 030dd2a chore(deps): update pre-commit hooks (#720)
  • 140e91c chore(deps): bump the actions group with 2 updates (#721)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-dependencies group with 4 updates
3a53db7 
Updates the requirements on [streamlit](https://github.com/streamlit/streamlit), [openai](https://github.com/openai/openai-python), [python-dotenv](https://github.com/theskumar/python-dotenv) and [cmake](https://github.com/scikit-build/cmake-python-distributions) to permit the latest version.

Updates `streamlit` to 1.64.0
- [Release notes](https://github.com/streamlit/streamlit/releases)
- [Commits](streamlit/streamlit@1.61.1...1.64.0)

Updates `openai` to 3.19.2
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.54.0...v3.19.2)

Updates `python-dotenv` to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `cmake` to 4.4.3
- [Release notes](https://github.com/scikit-build/cmake-python-distributions/releases)
- [Changelog](https://github.com/scikit-build/cmake-python-distributions/blob/main/HISTORY.rst)
- [Commits](scikit-build/cmake-python-distributions@4.4.2...4.4.3)

---
updated-dependencies:
- dependency-name: streamlit
  dependency-version: 1.64.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: openai
  dependency-version: 3.19.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: cmake
  dependency-version: 4.4.3
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 1, 2026
@widmonstertony widmonstertony mentioned this pull request Oct 11, 2026
Merged
@dependabot @github

dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-5746276310 branch October 11, 2026 00:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants