Skip to content

chore(deps)(deps): bump the python-minor-and-patch group across 1 directory with 10 updates#38

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-minor-and-patch-cf761e0e86
Open

chore(deps)(deps): bump the python-minor-and-patch group across 1 directory with 10 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/python-minor-and-patch-cf761e0e86

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Bumps the python-minor-and-patch group with 10 updates in the /backend directory:

Package From To
fastapi 0.111.0 0.136.3
uvicorn 0.29.0 0.49.0
python-multipart 0.0.9 0.0.31
httpx 0.27.2 0.28.1
sqlalchemy 2.0.36 2.0.50
pyodbc 5.1.0 5.3.0
email-validator 2.2.0 2.3.0
ultralytics 8.2.18 8.4.60
opencv-python 4.9.0.80 4.13.0.92
scikit-learn 1.4.2 1.9.0

Updates fastapi from 0.111.0 to 0.136.3

Release notes

Sourced from fastapi's releases.

0.136.3

Refactors

  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @​tiangolo.

0.136.2

Refactors

  • ♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits
  • 8206485 🔖 Release version 0.136.3
  • c910e01 📝 Update release notes
  • 063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
  • 22b02e2 🔖 Release version 0.136.2
  • 3b252a2 📝 Update release notes
  • c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
  • cb83b83 📝 Update release notes
  • 00f805c ✅ Update tests, don't double dispose the engine (#15587)
  • 3675137 📝 Update release notes
  • 7b57e42 📝 Document --entrypoint CLI option (#15464)
  • Additional commits viewable in compare view

Updates uvicorn from 0.29.0 to 0.49.0

Release notes

Sourced from uvicorn's releases.

Version 0.49.0

What's Changed

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Version 0.47.0

What's Changed

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Version 0.46.0

What's Changed

Full Changelog: Kludex/uvicorn@0.45.0...0.46.0

Version 0.45.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.44.0...0.45.0

Version 0.44.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

0.47.0 (May 14, 2026)

Added

  • Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

  • Eagerly import the ASGI app in the parent process (#2919)

Fixed

  • Treat fd=0 as a valid file descriptor with reload/workers (#2927)

0.46.0 (April 23, 2026)

Added

  • Support ws_max_size in wsproto implementation (#2915)
  • Support ws_ping_interval and ws_ping_timeout in wsproto implementation (#2916)

Changed

  • Use bytearray for incoming WebSocket message buffer in websockets-sansio (#2917)

0.45.0 (April 21, 2026)

Added

  • Add --reset-contextvars flag to isolate ASGI request context (#2912)
  • Accept os.PathLike for log_config (#2905)
  • Accept log_level strings case-insensitively (#2907)

... (truncated)

Commits
  • 3ef2e3e Version 0.49.0 (#2973)
  • eeb64b1 Consume duplicate forwarding headers in ProxyHeadersMiddleware (#2971)
  • 630f4ac Make the watchfiles reload tests deterministic (#2972)
  • 9154922 chore(deps): bump the github-actions group across 1 directory with 6 updates ...
  • 739727a Migrate docs deploy from Cloudflare Pages to Workers (#2967)
  • be4a240 Gate docs preview deploy on Cloudflare token presence (#2966)
  • c489d7e Bump httptools minimum version to 0.8.0 (#2962)
  • 9f547bd Skip docs preview deploy for Dependabot PRs (#2961)
  • 44446b8 Migrate documentation from MkDocs Material to Zensical (#2959)
  • cfd659c Bump pymdown-extensions to 10.21.3 (#2958)
  • Additional commits viewable in compare view

Updates python-multipart from 0.0.9 to 0.0.31

Release notes

Sourced from python-multipart's releases.

Version 0.0.31

What's Changed

Full Changelog: Kludex/python-multipart@0.0.30...0.0.31

Version 0.0.30

What's Changed

Full Changelog: Kludex/python-multipart@0.0.29...0.0.30

Version 0.0.29

What's Changed

Full Changelog: Kludex/python-multipart@0.0.28...0.0.29

Version 0.0.28

What's Changed

Full Changelog: Kludex/python-multipart@0.0.27...0.0.28

Version 0.0.27

What's Changed

Full Changelog: Kludex/python-multipart@0.0.26...0.0.27

Version 0.0.26

What's Changed

Full Changelog: Kludex/python-multipart@0.0.25...0.0.26

Version 0.0.25

What's Changed

... (truncated)

Changelog

Sourced from python-multipart's changelog.

0.0.31 (2026-06-04)

  • Speed up multipart header parsing and callback dispatch #295.
  • Bound header field name size before validating #296.
  • Validate Content-Length is non-negative in parse_form #297.

0.0.30 (2026-05-31)

  • Parse application/x-www-form-urlencoded bodies per the WHATWG URL standard, treating only & as a field separator #290.
  • Ignore RFC 2231/5987 extended parameters (name*, filename*) in parse_options_header, keeping the plain parameter authoritative per RFC 7578 §4.2 #291.

0.0.29 (2026-05-17)

  • Handle malformed RFC 2231 continuations in parse_options_header #270.

0.0.28 (2026-05-10)

  • Speed up partial-boundary tail scan via bytes.find #281.
  • Cap multipart boundary length at 256 bytes #282.

0.0.27 (2026-04-27)

  • Add multipart header limits #267.
  • Pass parse offsets via constructors #268.

0.0.26 (2026-04-10)

  • Skip preamble before the first multipart boundary more efficiently #262.
  • Silently discard epilogue data after the closing multipart boundary #259.

0.0.25 (2026-04-10)

  • Add MIME content type info to File #143.
  • Handle CTE values case-insensitively #258.
  • Remove custom FormParser classes #257.
  • Add UPLOAD_DELETE_TMP to FormParser config #254.
  • Emit field_end for trailing bare field names on finalize #230.
  • Handle multipart headers case-insensitively #252.
  • Apply Apache-2.0 properly #247.

0.0.24 (2026-04-05)

  • Validate chunk_size in parse_form() #244.

0.0.23 (2026-04-05)

  • Remove unused trust_x_headers parameter and X-File-Name fallback #196.
  • Return processed length from QuerystringParser._internal_write #229.
  • Cleanup metadata dunders from __init__.py #227.

... (truncated)

Commits

Updates httpx from 0.27.2 to 0.28.1

Release notes

Sourced from httpx's releases.

Version 0.28.1

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

Version 0.28.0

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)
Changelog

Sourced from httpx's changelog.

0.28.1 (6th December, 2024)

  • Fix SSL case where verify=False together with client side certificates.

0.28.0 (28th November, 2024)

Be aware that the default JSON request bodies now use a more compact representation. This is generally considered a prefered style, tho may require updates to test suites.

The 0.28 release includes a limited set of deprecations...

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
  • Bugfix: When passing params={}, always strictly update rather than merge with an existing querystring. (#3364)
Commits

Updates sqlalchemy from 2.0.36 to 2.0.50

Release notes

Sourced from sqlalchemy's releases.

2.0.50

Released: May 24, 2026

orm

  • [orm] [bug] Fixed issue where using _orm.joinedload() with PropComparator.of_type() targeting a joined-table subclass combined with PropComparator.and_() referencing a column on that subclass would generate invalid SQL, where the subclass column was not adapted to the subquery alias. Pull request courtesy Joaquin Hui Gomez.

    References: #13203

  • [orm] [bug] Fixed issue where the presence of a SessionEvents.do_orm_execute() event hook would cause internal execution options such as yield_per and loader-specific state from the first orm_pre_session_exec pass to leak into the second pass, leading to errors when using relationship loaders such as selectinload() and immediateload(). The execution options passed to the second compilation pass are now based on the original options plus only the explicit updates made via ORMExecuteState.update_execution_options() within the event hook.

    References: #13301

  • [orm] [bug] Fixed issue where using _orm.with_polymorphic() on a leaf class (a subclass with no further descendants) or a non-inherited class would fail with an AttributeError when used in an ORM statement, due to _orm.configure_mappers() not being triggered implicitly. The fix ensures that AliasedInsp participates in the _post_inspect hook, triggering mapper configuration during ORM statement compilation.

    References: #13319

sql

  • [sql] [bug] Fixed issue where floor division (//) between a Float or Numeric numerator and an Integer denominator would omit the FLOOR() SQL wrapper on dialects where Dialect.div_is_floordiv is True (the default, including PostgreSQL and SQLite). FLOOR() is now applied if either the denominator or the numerator is a non-integer, so that expressions such as float_col // int_col render as FLOOR(float_col / int_col) instead of the incorrect float_col / int_col. Pull request courtesy r266-tech.

    References: #10528

postgresql

... (truncated)

Commits

Updates pyodbc from 5.1.0 to 5.3.0

Commits
  • 7ee5b56 Update version to 5.3
  • 7fe96df Run Github CodeQL action on all branches
  • e6b44ef Use License-Expression in pyproject.toml instead of licence
  • a40c873 Do not perform type check on NULL pointer
  • c1db16c Use HOMEBREW_PREFIX to locate Homebrew (#1212)
  • 80de786 Move sqlite tests from old directory
  • 135fbf8 Port sqlite tests from unittest to pytest
  • 14cbdcc Drop support for EOL Python 3.8
  • ac3f151 bump cibuildwheel to v3.2.1
  • 378d19e Add py3.14 to ubuntu build artifacts
  • Additional commits viewable in compare view

Updates email-validator from 2.2.0 to 2.3.0

Release notes

Sourced from email-validator's releases.

v2.3.0

  • The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
  • The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
  • New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
  • When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
  • TypeError is now raised if something other than str (or bytes) is passed as the email address.
Changelog

Sourced from email-validator's changelog.

2.3.0 (August 26, 2025)

  • The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
  • The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
  • New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
  • When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
  • TypeError is now raised if something other than str (or bytes) is passed as the email address.
Commits
  • 030a63a Version 2.3.0
  • e943a0f Raise TypeError when an invalid argument is passed for email, closes #155
  • f90d256 Remove local part length check unless new strict flag is given, fixes #158
  • 98800ba Add explicit checks for internationalized domain name characters invalid unde...
  • 936aead Fix final syntax checks on normalized internationalized domains checking the ...
  • 8043de4 NFC-normalize display names per UTS #39
  • bc08faa Add one-off error messages for full-width-at and small-commercial-at which ar...
  • a1c90ab Split exceptions_types.py into exceptions.py and types.py
  • dbcf07c Change package name from using underscore to dash to match PyPi normalized pa...
  • 7c22208 Support ALLOW_DISPLAY_NAME and ALLOW_EMPTY_LOCAL in the CLI (#145)
  • Additional commits viewable in compare view

Updates ultralytics from 8.2.18 to 8.4.60

Release notes

Sourced from ultralytics's releases.

v8.4.59 - Validate RKNN INT8 calibration dataset path (#24659)

🌟 Summary

Ultralytics v8.4.59 improves Rockchip RKNN export with safer and clearer INT8 quantization support, making deployment on Rockchip edge devices more reliable and easier to use 🚀

📊 Key Changes

  • ✅ RKNN INT8 calibration file is now validated before export proceeds

    • The release’s main follow-up change from @​glenn-jocher checks that the internally generated calibration image list actually exists before loading the RKNN Toolkit.
    • This helps catch setup issues earlier, with clearer error messages instead of failing later in a more confusing way.

  • 🧠 Simpler RKNN INT8 workflow for users

    • Users continue to provide a standard YOLO dataset YAML with data=... during export.
    • Ultralytics now handles conversion of that dataset into RKNN’s internal dataset.txt calibration file automatically.
    • dataset.txt stays an internal implementation detail, not something users are expected to manage directly.

  • ⚡ New RKNN INT8 export support introduced in this release cycle

    • RKNN export now supports:
      • int8=True
      • data=...
      • fraction=...
    • This enables INT8-quantized RKNN model export, which is especially important for Rockchip devices that require INT8 models.

  • 📱 Expanded support for INT8-only Rockchip chips

    • Devices such as RV1103, RV1106, RV1103B, and RV1106B are now supported through INT8 export.
    • The exporter also warns and auto-adjusts when a selected chip requires int8=True.

  • 📚 Documentation and export tables updated

    • RKNN docs now clearly explain:
      • floating-point export behavior for FP16-capable targets
      • when int8=True is required
      • use of data and fraction for calibration
    • Export reference tables and tutorial content were updated to reflect the new RKNN options.

  • 🛡️ Better RKNN API error handling

    • Internal RKNN API calls now check return values more carefully.
    • Failures in config, ONNX loading, build, or export are surfaced as clearer runtime errors.

🎯 Purpose & Impact

  • More reliable RKNN exports 🔒

    • Validating the calibration file up front reduces frustrating export failures and makes debugging easier.

  • Easier INT8 quantization for everyone 🙌

    • Users can stick to the familiar Ultralytics pattern of passing data=coco8.yaml or another dataset YAML, without learning RKNN-specific file conventions.

  • Better support for edge deployment on Rockchip hardware 📦

    • INT8 export opens the door to more Rockchip NPUs, including chips that cannot use floating-point RKNN models.

  • Cleaner user experience 🧹

    • The release hides low-level RKNN details from users and keeps the interface aligned with other Ultralytics export formats.

  • Potential performance and compatibility gains 🚀

... (truncated)

Commits

Updates opencv-python from 4.9.0.80 to 4.13.0.92

Release notes

Sourced from opencv-python's releases.

4.13.0.92

Follow up release for 4.13.0 with X server dependency fix. See #28438 for details.

4.13.0.90

Complete OpenCV 4.13.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

Python specific:

  • Manylinux 2_28 support, Numpy 2.4 support, Python 3.14 support
  • Tuned Python bindings for logging #27812
  • Marked Feature2D.detectAndCompute mask as optional in Python type stubs #27544
  • Marked distCoeffs/R/D as optional in calib3d functions #27564
  • Added DLPACK support #27581, #27861
  • Fixed memory leaks in pybindings #27738
  • Add PathLike type hints for args annotated with CV_WRAP_FILE_PATH #27767
  • Fixed memory leak in pyopencv_to for path-like objects #28047
  • Tunned Python bindings: use export_name as resolved typename for AliasTypeNode #27997
  • python: fix pytest-cov false warnings by using compile() with full file path in exec_file_wrapper #28093
  • Fixed python scalar typing issues #27620
  • Fixed bug in ifdef state machine in header parser for bindings #27393
  • Wrap GridType field in cv::findCirclesGrid parameters structure #27689

4.12.0.88

Complete OpenCV 4.12.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4120

Python:

  • Added libavif to the package and corresponding image format support on Linux and Mac OS. Windows is in progress.
  • Enabled GIF support by default.
  • Updated Numpy dependency rules. Packages for Python 3.9+ are built with Numpy 2.x. Packages for older Python version are built with Numpy 1.x.
  • Improved libjpeg-turbo performance in Windows builds (added NASM and assembly branches).
  • Made DNN, FLANN, G-API modules optional during the package build (bindings generation and typing).

4.11.0.86

Complete OpenCV 4.11.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4110

Python:

  • Added Python 3.13 support
  • Fixed build with Python 3.12
  • Fixed confg path for the case when Python Limited API is disabled
  • Fixed build with system wide CMake, if CMake is not available with pip
  • Enabled all jpeg-turbo optimizations on Windows (assembler)
  • Split Python type stubs per-module to allow modules list customization
  • Minimal Mac OS raised to 13.0.

4.10.0.84

Complete OpenCV 4.10.0 chnagelog: https://github.com/opencv/opencv/wiki/ChangeLog

Python:

  • NumPy 2.0 support in pre-built OpenCV packages for Python 3.9+
  • Added python bindings for Rect2f and Point3i #24919
  • Switched to numeric dtype for MatLike instead of generic #25406

... (truncated)

Commits

Updates scikit-learn from 1.4.2 to 1.9.0

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.9.0

We're happy to announce the 1.9.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_9_0.html and the long version of the change log under https://scikit-learn.org/stable/whats_new/v1.9.html

This release adds narwhals as a new dependency that will help to improve dataframe interoperability across the project.

This version supports Python versions 3.11 to 3.14.

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Release 1.8.0

We're happy to announce the 1.8.0 release.

You can read the release highlights under https://scikit-learn.org/stable/auto_examples/release_highlights/plot_release_highlights_1_8_0.html and the long version of the change log under

@dependabot
chore(deps)(deps): bump the python-minor-and-patch group across 1 dir…
4158e3c 
…ectory with 10 updates

Bumps the python-minor-and-patch group with 10 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.111.0` | `0.136.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.29.0` | `0.49.0` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.9` | `0.0.31` |
| [httpx](https://github.com/encode/httpx) | `0.27.2` | `0.28.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.36` | `2.0.50` |
| [pyodbc](https://github.com/mkleehammer/pyodbc) | `5.1.0` | `5.3.0` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [ultralytics](https://github.com/ultralytics/ultralytics) | `8.2.18` | `8.4.60` |
| [opencv-python](https://github.com/opencv/opencv-python) | `4.9.0.80` | `4.13.0.92` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.4.2` | `1.9.0` |



Updates `fastapi` from 0.111.0 to 0.136.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.111.0...0.136.3)

Updates `uvicorn` from 0.29.0 to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.29.0...0.49.0)

Updates `python-multipart` from 0.0.9 to 0.0.31
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.9...0.0.31)

Updates `httpx` from 0.27.2 to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.2...0.28.1)

Updates `sqlalchemy` from 2.0.36 to 2.0.50
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `pyodbc` from 5.1.0 to 5.3.0
- [Release notes](https://github.com/mkleehammer/pyodbc/releases)
- [Commits](mkleehammer/pyodbc@5.1.0...5.3.0)

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `ultralytics` from 8.2.18 to 8.4.60
- [Release notes](https://github.com/ultralytics/ultralytics/releases)
- [Commits](ultralytics/ultralytics@v8.2.18...v8.4.60)

Updates `opencv-python` from 4.9.0.80 to 4.13.0.92
- [Release notes](https://github.com/opencv/opencv-python/releases)
- [Commits](https://github.com/opencv/opencv-python/commits)

Updates `scikit-learn` from 1.4.2 to 1.9.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.4.2...1.9.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: python-multipart
  dependency-version: 0.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: sqlalchemy
  dependency-version: 2.0.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pyodbc
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ultralytics
  dependency-version: 8.4.60
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: opencv-python
  dependency-version: 4.13.0.92
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: scikit-learn
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from Tcordeir0 as a code owner June 4, 2026 09:36
@dependabot dependabot Bot added backend Backend (FastAPI / Python) dependencies Dependency updates labels Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Tcordeir0 Tcordeir0 Awaiting requested review from Tcordeir0 Tcordeir0 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

backend Backend (FastAPI / Python) dependencies Dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants