Skip to content

chore(deps): update pydantic-settings requirement from >=2.2.1 to >=2.14.2#4

Merged
Edge-Explorer merged 1 commit into
mainfrom
dependabot/pip/pydantic-settings-gte-2.14.2
Jul 18, 2026
Merged

chore(deps): update pydantic-settings requirement from >=2.2.1 to >=2.14.2#4
Edge-Explorer merged 1 commit into
mainfrom
dependabot/pip/pydantic-settings-gte-2.14.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic-settings to permit the latest version.

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits
  • d703bd7 Prepare release 2.14.2 (#890)
  • e95c30b Prepare release 2.14.1 (#859)
  • 0c87345 Fix field named cls conflicting with classmethod parameter (#858)
  • 7bd0072 Bump the python-packages group with 2 updates (#856)
  • b03e573 Bump the github-actions group with 3 updates (#853)
  • eaa3b43 Bump the python-packages group with 5 updates (#854)
  • 9f95615 Bump the python-packages group with 4 updates (#850)
  • 8916bee Prepare release 2.14.0 (#848)
  • 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
  • 9ed7f48 Bump the python-packages group with 4 updates (#847)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 18, 2026
@vercel

vercel Bot commented Jul 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
quant-iq Ready Ready Preview, Comment Jul 18, 2026 10:45am

Updates the requirements on [pydantic-settings](https://github.com/pydantic/pydantic-settings) to permit the latest version.
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.2.1...v2.14.2)

---
updated-dependencies:
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pydantic-settings-gte-2.14.2 branch from dd3025c to 9746eb2 Compare July 18, 2026 10:45
@Edge-Explorer
Edge-Explorer merged commit 4939208 into main Jul 18, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/pydantic-settings-gte-2.14.2 branch July 18, 2026 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant