Skip to content

build(deps): bump the backend-minor-patch group in /Main/backend with 23 updates - #396

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/Main/backend/backend-minor-patch-d2df13a710
Closed

build(deps): bump the backend-minor-patch group in /Main/backend with 23 updates#396
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/Main/backend/backend-minor-patch-d2df13a710

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the backend-minor-patch group in /Main/backend with 23 updates:

Package From To
beautifulsoup4 4.14.3 4.15.0
numpy 2.4.2 2.5.1
openai 2.20.0 2.49.0
openai-agents 0.9.0 0.19.0
anthropic 0.79.0 0.120.0
tiktoken 0.12.0 0.13.0
requests 2.33.0 2.34.2
pytest 9.0.3 9.1.1
fastmcp 3.2.0 3.4.5
gunicorn 25.1.0 25.3.0
whitenoise 6.11.0 6.12.0
django 6.0.6 6.0.7
mammoth 1.11.0 1.12.0
yfinance 1.1.0 1.5.2
playwright 1.58.0 1.61.0
tradingview-screener 3.0.0 3.2.1
exchange-calendars 4.13.1 4.13.2
pytest-asyncio 1.3.0 1.4.0
duckdb 1.5.4 1.5.5
sphinx-rtd-theme 3.0.2 3.1.0
nbsphinx 0.9.6 0.9.8
nbsphinx-link 1.3.1 1.4.1
sphinx-design 0.6.1 0.7.0

Updates beautifulsoup4 from 4.14.3 to 4.15.0

Updates numpy from 2.4.2 to 2.5.1

Release notes

Sourced from numpy's releases.

v2.5.1 (July 4, 2026)

NumPy 2.5.1 Release Notes

The NumPy 2.5.1 is a patch release that fixes bugs discovered after the 2.5.0 release. The most noticeable is the fix is to the numpy datetime cython API which should allow downstream to support NumPy versions older than 2.5. Preparation for Python 3.15 continues along with typing improvements.

This release supports Python versions 3.12-3.14

Changes

  • The minimum supported GCC version has been updated from 9.3.0 to 10.3.0

    (gh-31843)

Contributors

A total of 10 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Adhyan Gupta +
  • Ankit Ahlawat
  • Charles Harris
  • Iason Krommydas
  • Joren Hammudoglu
  • Kumar Aditya
  • Nathan Goldbaum
  • Sebastian Berg
  • Ties Jan Hefting +
  • Vineet Kumar

Pull requests merged

A total of 20 pull requests were merged for this release.

  • #31707: MAINT: Prepare 2.5.x for further development
  • #31721: CI: fix new cython-lint errors (#31711)
  • #31723: MAINT: Update meson to match main
  • #31729: TST: use setup-sde instead of curl to get SDE binaries (#31727)
  • #31829: BUG: Relax finfo to be easier accessible for all user dtypes...
  • #31831: TYP: Fix flatiter.__next__ return type for object_ and...
  • #31832: BUG: avoid deadlocks using NpyString API (#31682)
  • #31833: BUG: fix out array leak in reduceat and accumulate when dtype...
  • #31835: BUG: fix numpy datetime cython APIs to be compatible with older...
  • #31836: TYP: Fix incorrect dtype inference of asarray([]) (#31732)
  • #31837: TYP: Fix np.ma.masked_array 2.5.0 regression
  • #31838: FIX: Refactor error handling in array_setstate to prevent typecode...
  • #31839: TST: xfail multithreaded BLAS test more generously
  • #31840: MAINT: Rename subroutine for crackfortran tests

... (truncated)

Commits
  • 5e1d03f Merge pull request #31863 from charris/prepare-2.5.1
  • ad0b66b REL: Prepare for the NumPy 2.5.1 release.
  • 9df8516 Merge pull request #31858 from charris/backport-31688
  • 4dee265 Merge pull request #31857 from charris/backport-31775
  • dc8d553 Merge pull request #31856 from charris/backport-31846
  • 67cb4a8 fix:Signed integer overflow in datetime.c (#31688)
  • baa2589 TST: Clean up imports, formatting, and assertions
  • 2fe5ba4 TEST: Refactor tests to use np.testing.assert_raises_regex per review
  • bb46581 MAINT: Remove deprecated Python recursion fix
  • 8f34214 MAINT: Move SeedSequence recursion guard to C-layer and add tests
  • Additional commits viewable in compare view

Updates openai from 2.20.0 to 2.49.0

Release notes

Sourced from openai's releases.

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

v2.48.0

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

v2.47.0

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

v2.46.0

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

  • api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (5a00941)
  • api: add owner_project_access to APIKeyListParams (f589d04)
  • api: manual updates (980f176)
  • api: manual updates (2eae984)

Bug Fixes

  • api: preserve generated type compatibility (00bd72a)

... (truncated)

Changelog

Sourced from openai's changelog.

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

  • api: /organization/projects/{project_id}/service_accounts/{service_account_id}/api_keys" endpoint (5a00941)
  • api: add owner_project_access to APIKeyListParams (f589d04)
  • api: manual updates (980f176)
  • api: manual updates (2eae984)

Bug Fixes

  • api: preserve generated type compatibility (00bd72a)
  • api: remove beta annotation compatibility aliases (99dbd15)

2.45.0 (2026-07-09)

... (truncated)

Commits
  • 6ba31bc release: 2.49.0 (#3539)
  • 90483ad test: support a hermetic local API reference (#3542)
  • d4c151d feat: require Python 3.10 and automate version reviews (#3537)
  • 8a6adcb release: 2.48.0
  • cbd2fba feat(api): add support for spend_limit admin apis
  • 00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
  • e67afa8 release: 2.47.0
  • e1925e9 feat(client): Add experimental runtime support for HTTPX2 clients (#3524)
  • 7f4edb6 feat(stlc): configurable CI runner and private-production-repo support in wor...
  • d4dceb2 fix(deps): require patched aiohttp on Python 3.10+ (#3515)
  • Additional commits viewable in compare view

Updates openai-agents from 0.9.0 to 0.19.0

Release notes

Sourced from openai-agents's releases.

v0.19.0

Key Changes

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added agents.tool.ProgrammaticToolCallingTool, which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added retries for WebSocket overloads that occur before a response starts.
  • Added VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

What's Changed

... (truncated)

Changelog

Sourced from openai-agents's changelog.

0.19.0

This minor release does not introduce a breaking change. The minor version bump reflects a significant new OpenAI Responses feature area: Programmatic Tool Calling.

Highlights:

  • Added [ProgrammaticToolCallingTool][agents.tool.ProgrammaticToolCallingTool], which lets supported OpenAI Responses models generate JavaScript to coordinate eligible tools. It supports per-tool allowed_callers, structured function-tool outputs, and integration with Runner streaming, guardrails, approvals, sessions, and RunState. See Programmatic Tool Calling for setup and constraints.
  • Added the public agents.decorators module and the shorter @tool alias alongside the existing function and guardrail decorators. Function tools now also support async callable objects.
  • SDK configuration now consistently accepts either typed settings objects or dictionaries across agents, runs, models, sessions, sandboxes, and voice pipelines, with validation for unknown settings.
  • Hardened error and diagnostic logging across models, tools, MCP, Realtime, sessions, sandboxes, and tracing to avoid exposing raw sensitive payloads while preserving useful debugging context.
  • Improved AnyLLM, LiteLLM, and Chat Completions compatibility, preserved session history across model retries, and added provider retry guidance for WebSocket overloads that occur before a response starts so opt-in Runner retry policies can act when replay is permitted.
  • Added create-time-only S3 mounts for Vercel sandboxes through VercelCloudBucketMountStrategy. Mounted sessions exclude bucket contents from workspace persistence and intentionally do not support dynamic mount changes or session resume.

0.18.0

This minor release does not introduce a breaking change. The minor version bump is for the Realtime agents default model update only.

Highlights:

  • Realtime agents now use gpt-realtime-2.1 as the default model, so new Realtime setups use the latest recommended model without extra configuration.

0.17.0

In this version, sandbox local source materialization keeps LocalFile.src and LocalDir.src within the materialization base_dir unless the source path is covered by Manifest.extra_path_grants. The base_dir is the SDK process current working directory when the manifest is applied; relative local sources are resolved from that directory, while absolute local sources must already be inside it or under an explicit grant. This closes a local artifact boundary issue, but it can affect applications that intentionally copy trusted host files or directories from outside that base directory into a sandbox workspace.

To migrate, grant trusted host roots at the manifest level with SandboxPathGrant, preferably as read-only when the sandbox only needs to read those files:

from pathlib import Path
from agents.sandbox import Manifest, SandboxPathGrant
from agents.sandbox.entries import Dir, LocalDir
This is an absolute host path outside the SDK process base_dir.
TRUSTED_DOCS_ROOT = Path("/opt/my-app/docs")
manifest = Manifest(
extra_path_grants=(
# This host root is outside the SDK process base_dir, so the manifest must grant it.
SandboxPathGrant(path=str(TRUSTED_DOCS_ROOT), read_only=True),
),
entries={
# No grant is needed for local sources that stay under the SDK process base_dir.
"fixtures": LocalDir(src=Path("fixtures"), description="Local test fixtures."),
# This entry reads from the granted host root and copies it into the sandbox workspace.
"docs": LocalDir(src=TRUSTED_DOCS_ROOT, description="Trusted local documents."),
# Dir creates a sandbox workspace directory; it does not read from the host filesystem.
"output": Dir(description="Generated artifacts."),
},
)
</tr></table>

... (truncated)

Commits
  • a2d8270 Release 0.19.0 (#3874)
  • da82ee7 fix: retry pre-response WebSocket overload errors (#3978)
  • fe41cc3 fix: use last_agent property in RunResultStreaming._create_error_details (#3967)
  • a335b32 fix: compare inspect sentinels by identity in function_schema (#3961)
  • 045b9ca chore: update FastAPI test dependency (#3974)
  • 3da2465 test: add unit tests covering #3965
  • da14e70 fix: use last_agent property in pretty_print_run_result_streaming to avoid No...
  • f663a06 chore: tighten implementation strategy review guidance
  • 117bd1b fix: preserve callable function tool compatibility (#3959)
  • 5aff70f fix: reuse the verbose stdout logging handler (#3957)
  • Additional commits viewable in compare view

Updates anthropic from 0.79.0 to 0.120.0

Release notes

Sourced from anthropic's releases.

v0.120.0

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

  • api: add claude-opus-5 model (bf4e31c)
  • api: add tool addition/removal blocks and tool_change events (bf4e31c)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

v0.119.0

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (d983cde)

Bug Fixes

  • tools: handle binary files in agent toolset read/edit (#283) (417b76b)

v0.118.0

0.118.0 (2026-07-22)

Full Changelog: v0.117.1...v0.118.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (712bc6f)

v0.117.1

0.117.1 (2026-07-21)

Full Changelog: v0.117.0...v0.117.1

Bug Fixes

  • aws: handle credentials correctly when using AnthropicAWS.copy() (85d3881)

Chores

  • api: add support for new refusal category (d1dea0b)
  • client: docs updates (b14f94c)
  • deps: bump http-snapshot to 0.1.9 (#275) (434b657)
  • deps: pin httpx_aiohttp major version (#271) (924487f)

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

  • api: add claude-opus-5 model (bf4e31c)
  • api: add tool addition/removal blocks and tool_change events (bf4e31c)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (d983cde)

Bug Fixes

  • tools: handle binary files in agent toolset read/edit (#283) (417b76b)

0.118.0 (2026-07-22)

Full Changelog: v0.117.1...v0.118.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (712bc6f)

0.117.1 (2026-07-21)

Full Changelog: v0.117.0...v0.117.1

Bug Fixes

  • aws: handle credentials correctly when using AnthropicAWS.copy() (85d3881)

Chores

  • api: add support for new refusal category (d1dea0b)
  • client: docs updates (b14f94c)
  • deps: bump http-snapshot to 0.1.9 (#275) (434b657)
  • deps: pin httpx_aiohttp major version (#271) (924487f)
  • docs: small updates (c48db8b)
  • docs: small updates (755c06c)
  • internal: codegen related update (a4fbecf)

... (truncated)

Commits
  • 60c64fb release: 0.120.0
  • 70c0a64 feat(api): add claude-opus-5 model
  • eb178ec release: 0.119.0
  • 6914718 feat(api): add new stop reason 'model_context_window_exceeded'
  • d2bad4f fix(tools): handle binary files in agent toolset read/edit (#283)
  • b527708 release: 0.118.0
  • f2412fd feat(api): add support for Managed Agents model effort, initial session event...
  • d7c0ea2 release: 0.117.1
  • 5ebdcb0 chore(api): add support for new refusal category
  • b50f8b1 chore(deps): bump http-snapshot to 0.1.9 (#275)
  • Additional commits viewable in compare view

Updates tiktoken from 0.12.0 to 0.13.0

Changelog

Sourced from tiktoken's changelog.

[v0.13.0]

  • Update fancy-regex for significantly increased performance
  • Branch byte pair encoding to fix performance on unusual input
  • Fix AttributeError caused by incomplete redaction of experimental code
  • Update version of pyo3
  • Update version of optional dependency blobfile
Commits

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in ...

    Description has been truncated

@dependabot
build(deps): bump the backend-minor-patch group
5339fbe 
Bumps the backend-minor-patch group in /Main/backend with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.14.3` | `4.15.0` |
| [numpy](https://github.com/numpy/numpy) | `2.4.2` | `2.5.1` |
| [openai](https://github.com/openai/openai-python) | `2.20.0` | `2.49.0` |
| [openai-agents](https://github.com/openai/openai-agents-python) | `0.9.0` | `0.19.0` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.79.0` | `0.120.0` |
| [tiktoken](https://github.com/openai/tiktoken) | `0.12.0` | `0.13.0` |
| [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.2.0` | `3.4.5` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `25.1.0` | `25.3.0` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.11.0` | `6.12.0` |
| [django](https://github.com/django/django) | `6.0.6` | `6.0.7` |
| [mammoth](https://github.com/mwilliamson/python-mammoth) | `1.11.0` | `1.12.0` |
| [yfinance](https://github.com/ranaroussi/yfinance) | `1.1.0` | `1.5.2` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.58.0` | `1.61.0` |
| [tradingview-screener](https://github.com/shner-elmo/TradingView-Screener) | `3.0.0` | `3.2.1` |
| [exchange-calendars](https://github.com/gerrymanoim/exchange_calendars) | `4.13.1` | `4.13.2` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.3.0` | `1.4.0` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.4` | `1.5.5` |
| [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.2` | `3.1.0` |
| [nbsphinx](https://github.com/spatialaudio/nbsphinx) | `0.9.6` | `0.9.8` |
| [nbsphinx-link](https://github.com/vidartf/nbsphinx-link) | `1.3.1` | `1.4.1` |
| [sphinx-design](https://github.com/executablebooks/sphinx-design) | `0.6.1` | `0.7.0` |


Updates `beautifulsoup4` from 4.14.3 to 4.15.0

Updates `numpy` from 2.4.2 to 2.5.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.4.2...v2.5.1)

Updates `openai` from 2.20.0 to 2.49.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.20.0...v2.49.0)

Updates `openai-agents` from 0.9.0 to 0.19.0
- [Release notes](https://github.com/openai/openai-agents-python/releases)
- [Changelog](https://github.com/openai/openai-agents-python/blob/main/docs/release.md)
- [Commits](openai/openai-agents-python@v0.9.0...v0.19.0)

Updates `anthropic` from 0.79.0 to 0.120.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.79.0...v0.120.0)

Updates `tiktoken` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.12.0...0.13.0)

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `fastmcp` from 3.2.0 to 3.4.5
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.2.0...v3.4.5)

Updates `gunicorn` from 25.1.0 to 25.3.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@25.1.0...25.3.0)

Updates `whitenoise` from 6.11.0 to 6.12.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.11.0...6.12.0)

Updates `django` from 6.0.6 to 6.0.7
- [Commits](django/django@6.0.6...6.0.7)

Updates `mammoth` from 1.11.0 to 1.12.0
- [Changelog](https://github.com/mwilliamson/python-mammoth/blob/master/NEWS)
- [Commits](mwilliamson/python-mammoth@1.11.0...1.12.0)

Updates `yfinance` from 1.1.0 to 1.5.2
- [Release notes](https://github.com/ranaroussi/yfinance/releases)
- [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst)
- [Commits](ranaroussi/yfinance@1.1.0...1.5.2)

Updates `playwright` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.58.0...v1.61.0)

Updates `tradingview-screener` from 3.0.0 to 3.2.1
- [Release notes](https://github.com/shner-elmo/TradingView-Screener/releases)
- [Commits](shner-elmo/TradingView-Screener@v3.0.0...v3.2.1)

Updates `exchange-calendars` from 4.13.1 to 4.13.2
- [Release notes](https://github.com/gerrymanoim/exchange_calendars/releases)
- [Changelog](https://github.com/gerrymanoim/exchange_calendars/blob/master/docs/changes_archive.md)
- [Commits](gerrymanoim/exchange_calendars@4.13.1...4.13.2)

Updates `pytest-asyncio` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0)

Updates `duckdb` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.4...v1.5.5)

Updates `sphinx-rtd-theme` from 3.0.2 to 3.1.0
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0)

Updates `nbsphinx` from 0.9.6 to 0.9.8
- [Release notes](https://github.com/spatialaudio/nbsphinx/releases)
- [Changelog](https://github.com/spatialaudio/nbsphinx/blob/master/NEWS.rst)
- [Commits](spatialaudio/nbsphinx@0.9.6...0.9.8)

Updates `nbsphinx-link` from 1.3.1 to 1.4.1
- [Commits](vidartf/nbsphinx-link@1.3.1...1.4.1)

Updates `sphinx-design` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/executablebooks/sphinx-design/releases)
- [Changelog](https://github.com/executablebooks/sphinx-design/blob/main/CHANGELOG.md)
- [Commits](executablebooks/sphinx-design@v0.6.1...v0.7.0)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: numpy
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: openai
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: openai-agents
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: anthropic
  dependency-version: 0.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: tiktoken
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: fastmcp
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: gunicorn
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: django
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: mammoth
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: yfinance
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: playwright
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: tradingview-screener
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: exchange-calendars
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: duckdb
  dependency-version: 1.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: nbsphinx
  dependency-version: 0.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: nbsphinx-link
  dependency-version: 1.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: sphinx-design
  dependency-version: 0.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 6, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/Main/backend/backend-minor-patch-d2df13a710 branch August 6, 2026 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants