From f574df9e96160004fa9d73638cc2eb5a739a01a5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 12:16:06 +0000 Subject: [PATCH 1/2] chore(deps): bump the python-security group across 1 directory with 2 updates Bumps the python-security group with 2 updates in the / directory: [certifi](https://github.com/certifi/python-certifi) and [pyasn1](https://github.com/pyasn1/pyasn1). Updates `certifi` from 2026.1.4 to 2026.10.18 - [Commits](https://github.com/certifi/python-certifi/compare/2026.01.04...2026.10.18) Updates `pyasn1` from 0.6.4 to 0.6.5 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.4...v0.6.5) --- updated-dependencies: - dependency-name: certifi dependency-version: 2026.10.18 dependency-type: indirect dependency-group: python-security - dependency-name: pyasn1 dependency-version: 0.6.5 dependency-type: indirect dependency-group: python-security ... Signed-off-by: dependabot[bot] --- uv.lock | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/uv.lock b/uv.lock index f6594a3ed7..b48b84f230 100644 --- a/uv.lock +++ b/uv.lock @@ -349,11 +349,11 @@ wheels = [ [[package]] name = "certifi" -version = "2026.1.4" +version = "2026.10.18" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/e0/2d/a891ca51311197f6ad14a7ef42e2399f36cf2f9bd44752b3dc4eab60fdc5/certifi-2026.1.4.tar.gz", hash = "sha256:ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120", size = 154268, upload-time = "2026-01-04T02:42:41.825Z" } +sdist = { url = "https://files.pythonhosted.org/packages/7e/eb/a2aa1ac3ea30dd3f30ca57f40232138b6b0040719316ecb85daf61167771/certifi-2026.10.18.tar.gz", hash = "sha256:b9995d97b64d0431a5af837d8ca8cd6238104d1f319f04bd93ea43124d6c861e", size = 135227, upload-time = "2026-10-18T16:21:07.655Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/e6/ad/3cc14f097111b4de0040c83a525973216457bbeeb63739ef1ed275c1c021/certifi-2026.1.4-py3-none-any.whl", hash = "sha256:9943707519e4add1115f44c2bc244f782c0249876bf51b6599fee1ffbedd685c", size = 152900, upload-time = "2026-01-04T02:42:40.15Z" }, + { url = "https://files.pythonhosted.org/packages/08/ba/95dd616042484f7c83a06974388b37b837732740ee70bc5dc715b5fcd55a/certifi-2026.10.18-py3-none-any.whl", hash = "sha256:73191c47aaa79da394e8fee2dbc2ec827432cab56311122c9e47abf79e390f62", size = 134093, upload-time = "2026-10-18T16:21:06.276Z" }, ] [[package]] @@ -1506,7 +1506,7 @@ wheels = [ [[package]] name = "openai" -version = "3.49.0" # x-release-please-version +version = "3.49.0" source = { editable = "." } default-groups = ["dev", "pydantic-v2"] dependencies = [ @@ -1998,11 +1998,11 @@ wheels = [ [[package]] name = "pyasn1" -version = "0.6.4" +version = "0.6.5" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" } +sdist = { url = "https://files.pythonhosted.org/packages/88/7e/3c0da41061a2021cac7cd524fd57092adbe5b515e8bf9005702e366802e2/pyasn1-0.6.5.tar.gz", hash = "sha256:6b11616a6bcf3a40e635f082bb232fa57b5e0dd7f517bd7ddd69ec3794508a47", size = 155152, upload-time = "2026-10-27T06:32:49.125Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" }, + { url = "https://files.pythonhosted.org/packages/19/1f/3eefd5c84c35cae44549ce1c7f7e58f7945b34f5a6bce07a135438522073/pyasn1-0.6.5-py3-none-any.whl", hash = "sha256:4017b0fce125096b8573b39c989fdb1a4b19cf761e683398184550fea0e66587", size = 84807, upload-time = "2026-10-27T06:32:48.045Z" }, ] [[package]] From 8342d757c99863671631e9fd33d486fb10cf562b Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Wed, 11 Nov 2026 04:56:51 -0800 Subject: [PATCH 2/2] fix(deps): retain security constraints and release marker --- pyproject.toml | 2 ++ uv.lock | 4 +++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index b688beb280..f836ee7149 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -100,8 +100,10 @@ constraint-dependencies = [ # HTTPX2 also publishes an exact pin to its matching httpcore2 release. "httpcore2>=2.12.0", "azure-core>=1.38.0", + "certifi>=2026.10.18", "cryptography>=50.0.0", "msal>=1.37.0", + "pyasn1>=0.6.5", "pygments>=2.20.0", "pyjwt>=2.15.0", "requests>=2.33.0", diff --git a/uv.lock b/uv.lock index b48b84f230..174845ba54 100644 --- a/uv.lock +++ b/uv.lock @@ -28,9 +28,11 @@ exclude-newer-span = "P8D" [manifest] constraints = [ { name = "azure-core", specifier = ">=1.38.0" }, + { name = "certifi", specifier = ">=2026.10.18" }, { name = "cryptography", specifier = ">=50.0.0" }, { name = "httpcore2", specifier = ">=2.12.0" }, { name = "msal", specifier = ">=1.37.0" }, + { name = "pyasn1", specifier = ">=0.6.5" }, { name = "pygments", specifier = ">=2.20.0" }, { name = "pyjwt", specifier = ">=2.15.0" }, { name = "requests", specifier = ">=2.33.0" }, @@ -1506,7 +1508,7 @@ wheels = [ [[package]] name = "openai" -version = "3.49.0" +version = "3.49.0" # x-release-please-version source = { editable = "." } default-groups = ["dev", "pydantic-v2"] dependencies = [