deps(deps): bump the python-minor group with 17 updates #22

dependabot · 2025-12-15T08:39:46Z

Bumps the python-minor group with 17 updates:

Package	From	To
fastapi	`0.109.2`	`0.124.4`
uvicorn[standard]	`0.27.1`	`0.38.0`
pydantic	`2.6.1`	`2.12.5`
pydantic-settings	`2.1.0`	`2.12.0`
sqlalchemy	`2.0.27`	`2.0.45`
psycopg2-binary	`2.9.9`	`2.9.11`
alembic	`1.13.1`	`1.17.2`
asyncpg	`0.29.0`	`0.31.0`
aiomysql	`0.2.0`	`0.3.2`
aiosqlite	`0.19.0`	`0.22.0`
python-dotenv	`1.0.1`	`1.2.1`
pyyaml	`6.0.1`	`6.0.3`
prometheus-client	`0.19.0`	`0.23.1`
python-jose[cryptography]	`3.3.0`	`3.5.0`
httpx	`0.26.0`	`0.28.1`
ruff	`0.2.1`	`0.14.9`
mypy	`1.8.0`	`1.19.1`

Updates fastapi from 0.109.2 to 0.124.4

Release notes

Sourced from fastapi's releases.

0.124.4

Fixes

🐛 Fix parameter aliases. PR #14371 by @YuriiMotov.

0.124.3

Fixes

🐛 Fix support for tagged union with discriminator inside of Annotated with Body(). PR #14512 by @tiangolo.

Refactors

✅ Add set of tests for request parameters and alias. PR #14358 by @YuriiMotov.

Docs

📝 Tweak links format. PR #14505 by @tiangolo.

📝 Update docs about re-raising validation errors, do not include string as is to not leak information. PR #14487 by @tiangolo.

🔥 Remove external links section. PR #14486 by @tiangolo.

Translations

🌐 Sync Russian docs. PR #14509 by @YuriiMotov.

🌐 Sync German docs. PR #14488 by @nilslindemann.

Internal

👷 Tweak coverage to not pass Smokeshow max file size limit. PR #14507 by @tiangolo.

✅ Expand test matrix to include Windows and MacOS. PR #14171 by @svlandeg.

0.124.2

Fixes

🐛 Fix support for if TYPE_CHECKING, non-evaluated stringified annotations. PR #14485 by @tiangolo.

0.124.1

Fixes

🐛 Fix handling arbitrary types when using arbitrary_types_allowed=True. PR #14482 by @tiangolo.

Docs

📝 Add variants for code examples in "Advanced User Guide". PR #14413 by @YuriiMotov.

📝 Update tech stack in project generation docs. PR #14472 by @alejsdev.

Internal

✅ Add test for Pydantic v2, dataclasses, UUID, and __annotations__. PR #14477 by @tiangolo.

0.124.0

... (truncated)

Commits

b1d9769 🔖 Release version 0.124.4
89157a8 📝 Update release notes
d86c474 🐛 Fix parameter aliases (#14371)
3fe6522 🔖 Release version 0.124.3
80d1f73 📝 Update release notes
c0556ac 🐛 Fix support for tagged union with discriminator inside of Annotated with ...
1fcec88 📝 Update release notes
f8b216d 🌐 Sync Russian docs (#14509)
4b905b6 📝 Update release notes
6c54bce ✅ Add set of tests for request parameters and alias (#14358)
Additional commits viewable in compare view

Updates uvicorn[standard] from 0.27.1 to 0.38.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.38.0

What's Changed

Support Python 3.14 by @Kludex in Kludex/uvicorn#2723

New Contributors

@NGANAMODEIJunior made their first contribution in Kludex/uvicorn#2713

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Version 0.37.0

What's Changed

Add --timeout-worker-healthcheck setting by @Kludex in Kludex/uvicorn#2711

Add os.PathLike[str] type to ssl_ca_certs by @rnv812 in Kludex/uvicorn#2676

New Contributors

@LincolnPuzey made their first contribution in Kludex/uvicorn#2669

@rnv812 made their first contribution in Kludex/uvicorn#2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Raise an exception when calling removed Config.setup_event_loop() by @Kludex in Kludex/uvicorn#2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

Support custom IOLOOPs by @gnir-work in Kludex/uvicorn#2435

Allow to provide importable string in --http, --ws and --loop by @Kludex in Kludex/uvicorn#2658

New Contributors

@gnir-work made their first contribution in Kludex/uvicorn#2435

@musicinmybrain made their first contribution in Kludex/uvicorn#2659

@secrett2633 made their first contribution in Kludex/uvicorn#2684

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

Version 0.35.0

Added

Add WebSocketsSansIOProtocol by @Kludex in encode/uvicorn#2540

... (truncated)

Changelog

Sourced from uvicorn[standard]'s changelog.

0.38.0 (October 18, 2025)

Added

Support Python 3.14 (#2723)

0.37.0 (September 23, 2025)

Added

Add --timeout-worker-healthcheck option (#2711)

Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

Support custom IOLOOPs (#2435)

Allow to provide importable string in --http, --ws and --loop (#2658)

0.35.0 (June 28, 2025)

Added

Add WebSocketsSansIOProtocol (#2540)

Changed

Refine help message for option --proxy-headers (#2653)

0.34.3 (June 1, 2025)

Fixed

Don't include cwd() when non-empty --reload-dirs is passed (#2598)

Apply get_client_addr formatting to WebSocket logging (#2636)

0.34.2 (April 19, 2025)

Fixed

Flush stdout buffer on Windows to trigger reload (#2604)

0.34.1 (April 13, 2025)

... (truncated)

Commits

3850ad6 Version 0.38.0 (#2733)
9b3f17a Support Python 3.14 (#2723)
ce79f95 Revert "Add Marcelo Trylesinski to the license (#2699)" (#2730)
dbf8797 docs: add social icons (#2728)
58f28be Add section about event loop (#2725)
93d9510 Bump docs dependencies (#2724)
9b1c6c4 Move Marcelo Trylesinski to maintainers in pyproject.toml (#2719)
57a61d8 Add discord to README (#2718)
7ef5f9f chore(deps): bump astral-sh/setup-uv from 6.7.0 to 6.8.0 (#2717)
6d26d88 Update pyproject.toml for PEP639 compliance (#2713)
Additional commits viewable in compare view

Updates pydantic from 2.6.1 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

v2.12.3 (2025-10-17)

GitHub release

... (truncated)

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
Additional commits viewable in compare view

Updates pydantic-settings from 2.1.0 to 2.12.0

Release notes

Sourced from pydantic-settings's releases.

v2.12.0

What's Changed

Support for enum kebab case. by @kschwab in pydantic/pydantic-settings#686

Apply source order: init > env > dotenv > secrets > defaults and pres… by @chbndrhnns in pydantic/pydantic-settings#688

Add NestedSecretsSettings source by @makukha in pydantic/pydantic-settings#690

Strip non-explicit default values. by @kschwab in pydantic/pydantic-settings#692

Coerce env vars if strict is True. by @kschwab in pydantic/pydantic-settings#693

Restore init kwarg names before returning final state dictionary. by @kschwab in pydantic/pydantic-settings#700

Drop Python3.9 support by @hramezani in pydantic/pydantic-settings#699

Adapt test_protected_namespace_defaults for dev. Pydantic by @musicinmybrain in pydantic/pydantic-settings#637

Add Python 3.14 by @hramezani in pydantic/pydantic-settings#704

Prepare release 2.12 by @hramezani in pydantic/pydantic-settings#705

New Contributors

@chbndrhnns made their first contribution in pydantic/pydantic-settings#688

Full Changelog: pydantic/pydantic-settings@v2.11.0...v2.12.0

v2.11.0

What's Changed

CLI Serialize Support by @kschwab in pydantic/pydantic-settings#643

Inspect type aliases to determine if an annotation is complex by @tselepakis in pydantic/pydantic-settings#644

Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#611)" by @hramezani in pydantic/pydantic-settings#655

Remove parsing of command line arguments from CliSettingsSource.__init__. by @trygve-baerland in pydantic/pydantic-settings#656

turn off allow_abbrev on subparsers by @mroch in pydantic/pydantic-settings#658

CLI Serialization Fixes by @kschwab in pydantic/pydantic-settings#649

Fix PydanticModel type checking. by @kschwab in pydantic/pydantic-settings#659

Avoid env_prefix falling back to env vars without prefix by @tselepakis in pydantic/pydantic-settings#648

Warn if model_config sets unused keys for missing settings sources by @HomerusJa in pydantic/pydantic-settings#663

Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @adrianohrl in pydantic/pydantic-settings#664

Fix typo ("Accesing") in the "Adding sources" docs by @deepyaman in pydantic/pydantic-settings#668

CLI Windows Path Fix by @kschwab in pydantic/pydantic-settings#669

Cli root model support by @kschwab in pydantic/pydantic-settings#677

Snake case conversion in Azure Key Vault by @AndreuCodina in pydantic/pydantic-settings#680

Make InitSettingsSource resolution deterministic by @enrico-stauss in pydantic/pydantic-settings#681

Update deps by @hramezani in pydantic/pydantic-settings#683

New Contributors

@tselepakis made their first contribution in pydantic/pydantic-settings#644

@trygve-baerland made their first contribution in pydantic/pydantic-settings#656

@mroch made their first contribution in pydantic/pydantic-settings#658

@HomerusJa made their first contribution in pydantic/pydantic-settings#663

@adrianohrl made their first contribution in pydantic/pydantic-settings#664

@deepyaman made their first contribution in pydantic/pydantic-settings#668

@enrico-stauss made their first contribution in pydantic/pydantic-settings#681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

v2.10.1

What's Changed

... (truncated)

Commits

584983d Prepare release 2.12 (#705)
6b4d87e Add Python 3.14 (#704)
02de5b6 Adapt test_protected_namespace_defaults for dev. Pydantic (#637)
4239ea4 Drop Python3.9 support (#699)
5008c69 Restore init kwarg names before returning final state dictionary. (#700)
4433101 Coerce env vars if strict is True. (#693)
4d2ebfd Strip non-explicit default values. (#692)
4a6ffca Add NestedSecretsSettings source (#690)
7a6e96e Apply source order: init > env > dotenv > secrets > defaults and pres… (#688)
68563ed Support for enum kebab case. (#686)
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.27 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

[orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

References: #12858

[orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

References: #12952

examples

[examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

[sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

References: #12915

[sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

See full diff in compare view

Updates psycopg2-binary from 2.9.9 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).

Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

fd9ae8c chore: bump to version 2.9.11
d923840 chore: update docs requirements
d42dc71 Merge branch 'fix-1791'
4fde656 fix: avoid failed assert passing more arguments than placeholders
8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
1a1eabf build(deps): bump actions/github-script from 7 to 8
897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
ceefd30 build(deps): bump actions/checkout from 4 to 5
4dc5854 build(deps): bump actions/setup-python from 5 to 6
1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
Additional commits viewable in compare view

Updates alembic from 1.13.1 to 1.17.2

Release notes

Sourced from alembic's releases.

1.17.2

Released: November 14, 2025

feature

[feature] [operations] Added Operations.implementation_for.replace parameter to Operations.implementation_for(), allowing replacement of existing operation implementations. This allows for existing operations such as CreateTableOp to be extended directly. Pull request courtesy justanothercatgirl.

References: #1750

bug

[bug] [mssql] Fixed issue in SQL Server dialect where the DROP that's automatically emitted for existing default constraints during an ALTER COLUMN needs to take place before not just the modification of the column's default, but also before the column's type is changed.

References: #1744

1.17.1

Released: October 28, 2025

usecase

[usecase] [commands] Added command.current.check_heads parameter to command.current() command, available from the command line via the --check-heads option to alembic current. This tests if all head revisions are applied to the database and raises DatabaseNotAtHead (or from the command line, exits with a non-zero exit code) if this is not the case. The parameter operates equvialently to the cookbook recipe cookbook_check_heads. Pull request courtesy Stefan Scherfke.

References: #1705

bug

[bug] [commands] Disallow ':' character in custom revision identifiers. Previously, using a colon in a revision ID (e.g., 'REV:1') would create the revision, however revisions with colons in them are not correctly interpreted by other commands, as it overlaps with the revision range syntax. Pull request courtesy Kim Wooseok with original implementation by Hrushikesh Patil.

... (truncated)

Commits

See full diff in compare view

Updates asyncpg from 0.29.0 to 0.31.0

Release notes

Sourced from asyncpg's releases.

v0.31.0

Enable Python 3.14 with experimental subinterpreter/freethreading support.

Improvements

Add Python 3.14 support, experimental subinterpreter/freethreading support (#1279) (by @elprans in 9e42642b)

Avoid performing type introspection on known types (#1243) (by @elprans in 5c9986c4)

Make prepare() not use named statements by default when cache is disabled (#1245) (by @elprans in 5b14653e)

Implement connection service file functionality (#1223) (by @AndrewJackson2020 in 1d63bb15)

Fixes

Fix multi port connection string issue (#1222) (by @AndrewJackson2020 in 01c0db7b)

Avoid leaking connections if _can_use_connection fails (#1269) (by @yuliy-openai in e94302d2)

Other

Drop support for EOL Python 3.8 (#1281) (by @elprans in 6c2c4904)

v0.30.0

Support Python 3.13 and PostgreSQL 17.

Improvements

Implement GSSAPI authentication (by @eltoder in 1d4e5680 for #1122)

Implement SSPI authentication (by @eltoder in 1aab2094 for #1128)

Add initial typings (by @bryanforbes in d42432bf for #1127)

Allow building with Cython 3

... (truncated)

Commits

71775a6 asyncpg v0.31.0
508cae6 Test on PostgreSQL 18 (#1290)
e534e5f Bump cibuildwheel
07fe512 Bump pgproto
648b35f Bump Cython to 3.2.1 (#1288)
9e42642 Add Python 3.14 support, experimental subinterpreter/freethreading support (#...
6fe1c49 Move development deps away from extras and into dependency groups (#1280)
7a54816 Fix a couple of missed Python version guards
6c2c490 Drop support for EOL Python 3.8 (#1281)
4c60ae8 Bump version to 0.31.0.dev0
Additional commits viewable in compare view

Updates aiomysql from 0.2.0 to 0.3.2

Release notes

Sourced from aiomysql's releases.

v0.3.2

Changes

0.3.2 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix not persisting GitHub credentials during Git checkout action in CI for publishing release tags #1047

0.3.1 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix permissions in GitHub Actions workflow to allow pushing git tag after release #1046

0.3.0 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Drop support for Python 3.7 and 3.8, replaced by 3.12 and 3.13 #1026

Bump minimum Sphinx version to generate documentation to 6.2.0 for Python 3.13 support #1026

Sphinx now uses the furo theme for local and RTD builds #936

Drop support for EoL MySQL 5.7, replaced by 8.4 and 9.4 #1032

Drop support for EoL MariaDB 10.4, 10.5, 10.9, 10.10, replaced by 11.4, 11.8, 12.0 #1032

Use immutable GitHub tags and releases for future releases #1034

| Bump setuptools to >=80, setuptools-scm to >=7, <10 #1018 | setuptools-scm must be at least 9.2.0 for consistent hash lengths of non-release builds.

| Properly check whether loading of local files is enabled #1044 | Loading local data now requires using the local_infile parameter, passing just the client flag through client_flag is no longer supported. | Fixes GHSA-r397-ff8c-wv2g <https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g>_ | Thanks to @KonstantAnxiety for reporting this.

0.2.0 (2023-06-11) ^^^^^^^^^^^^^^^^^^

Bump minimal SQLAlchemy version to 1.3 #815

Remove deprecated Pool.get #706

| Partially ported PyMySQL#304 <https://github.com/PyMySQL/PyMySQL/pull/304>_ #792 | aiomysql now reraises the original exception during connect() if it's not IOError, OSError or asyncio.TimeoutError. | This was previously always raised as OperationalError.

Fix debug log level with sha256_password authentication #863

... (truncated)

Changelog

Sourced from aiomysql's changelog.

0.3.2 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix not persisting GitHub credentials during Git checkout action in CI for publishing release tags #1047

0.3.1 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix permissions in GitHub Actions workflow to allow pushing git tag after release #1046

0.3.0 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Drop support for Python 3.7 and 3.8, replaced by 3.12 and 3.13 #1026

Bump minimum Sphinx version to generate documentation to 6.2.0 for Python 3.13 support #1026

Sphinx now uses the furo theme for local and RTD builds #936

Drop support for EoL MySQL 5.7, replaced by 8.4 and 9.4 #1032

Drop support for EoL MariaDB 10.4, 10.5, 10.9, 10.10, replaced by 11.4, 11.8, 12.0 #1032

Use immutable GitHub tags and releases for future releases #1034

| Bump setuptools to >=80, setuptools-scm to >=7, <10 #1018 | setuptools-scm must be at least 9.2.0 for consistent hash lengths of non-release builds.

| Properly check whether loading of local files is enabled #1044 | Loading local data now requires using the local_infile parameter, passing just the client flag through client_flag is no longer supported. | Fixes GHSA-r397-ff8c-wv2g <https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g>_ | Thanks to @KonstantAnxiety for reporting this.

Commits

72a4df6 Merge pull request #1047 from Nothing4You/fix-git-tag-release
59ba1a6 Revert not persisting GitHub credentials in workflow job for pushing a Git ta...
fd32a80 Merge pull request #1046 from Nothing4You/fix-git-tag-release
5e53c9f Fix permissions in GitHub Actions workflow to allow pushing git tag after rel...
ff23e01 Merge pull request #1045 from Nothing4You/release-prep
8fba3ff Prepare 0.3.0 release, add missing PR references to changelog
32c4520 Merge pull request #1044 from Nothing4You/local-infile
e2e895d Update docs for local infile
873dc39 Add test case for unexpecte LOAD_LOCAL packets
aa98494 check local_infile option when receiving a LOAD_LOCAL packet
Additional commits viewable in compare view

Updates aiosqlite from 0.19.0 to 0.22.0

Changelog

Sourced from aiosqlite's changelog.

v0.22.0

Feature release

Support set_authorizer query access controls (#349)

Wait for transaction queue to complete when closing connection (#305)

Emit warning when connection goes out of scope without being closed (#355)

Remove dependency on typing_extensions (#365)
$ git shortlog -s v0.21.0...v0.22.0
     1	Alec Berryman
     1	Amethyst Reese
     1	David Andreoletti
     1	Markus Heidelberg
     1	beerpsi
    19	dependabot[bot]
v0.21.0

Maintenance release

Fix: close connection correctly when BaseException raised in connection (#317)

Metadata improvements

Tested and supported on Python 3.13

Drop support for Python 3.8

Drop testing on PyPy
$ git shortlog -s v0.20.0...v0.21.0
     6	Amethyst Reese
     1	Gabriel
     1	Stanley Kudrow
    11	dependabot[bot]
v0.20.0

Feature release

Connection .close() method is now idempotent (#238)

Performance improvements in connection thread and event loop (#213, #271)

Updated contributor guide (#255)

Tested on Python 3.12

... (truncated)

Commits

dependabot · 2025-12-15T08:39:47Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the python-minor group with 17 updates: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.109.2` | `0.124.4` | | [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.27.1` | `0.38.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.6.1` | `2.12.5` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.1.0` | `2.12.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.27` | `2.0.45` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.9` | `2.9.11` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.17.2` | | [asyncpg](https://github.com/MagicStack/asyncpg) | `0.29.0` | `0.31.0` | | [aiomysql](https://github.com/aio-libs/aiomysql) | `0.2.0` | `0.3.2` | | [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.19.0` | `0.22.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.2.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` | | [prometheus-client](https://github.com/prometheus/client_python) | `0.19.0` | `0.23.1` | | [python-jose[cryptography]](https://github.com/mpdavis/python-jose) | `3.3.0` | `3.5.0` | | [httpx](https://github.com/encode/httpx) | `0.26.0` | `0.28.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.2.1` | `0.14.9` | | [mypy](https://github.com/python/mypy) | `1.8.0` | `1.19.1` | Updates `fastapi` from 0.109.2 to 0.124.4 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.109.2...0.124.4) Updates `uvicorn[standard]` from 0.27.1 to 0.38.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.27.1...0.38.0) Updates `pydantic` from 2.6.1 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.6.1...v2.12.5) Updates `pydantic-settings` from 2.1.0 to 2.12.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.1.0...v2.12.0) Updates `sqlalchemy` from 2.0.27 to 2.0.45 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `psycopg2-binary` from 2.9.9 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.9...2.9.11) Updates `alembic` from 1.13.1 to 1.17.2 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `asyncpg` from 0.29.0 to 0.31.0 - [Release notes](https://github.com/MagicStack/asyncpg/releases) - [Commits](MagicStack/asyncpg@v0.29.0...v0.31.0) Updates `aiomysql` from 0.2.0 to 0.3.2 - [Release notes](https://github.com/aio-libs/aiomysql/releases) - [Changelog](https://github.com/aio-libs/aiomysql/blob/main/CHANGES.txt) - [Commits](aio-libs/aiomysql@v0.2.0...v0.3.2) Updates `aiosqlite` from 0.19.0 to 0.22.0 - [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md) - [Commits](omnilib/aiosqlite@v0.19.0...v0.22.0) Updates `python-dotenv` from 1.0.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.0.1...v1.2.1) Updates `pyyaml` from 6.0.1 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.1...6.0.3) Updates `prometheus-client` from 0.19.0 to 0.23.1 - [Release notes](https://github.com/prometheus/client_python/releases) - [Commits](prometheus/client_python@v0.19.0...v0.23.1) Updates `python-jose[cryptography]` from 3.3.0 to 3.5.0 - [Release notes](https://github.com/mpdavis/python-jose/releases) - [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md) - [Commits](mpdavis/python-jose@3.3.0...3.5.0) Updates `httpx` from 0.26.0 to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](encode/httpx@0.26.0...0.28.1) Updates `ruff` from 0.2.1 to 0.14.9 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@v0.2.1...0.14.9) Updates `mypy` from 1.8.0 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.8.0...v1.19.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.124.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: uvicorn[standard] dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pydantic-settings dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: sqlalchemy dependency-version: 2.0.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: alembic dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: asyncpg dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: aiomysql dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: aiosqlite dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: prometheus-client dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: python-jose[cryptography] dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: ruff dependency-version: 0.14.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor ... Signed-off-by: dependabot[bot] <[email protected]>

Sakeeb91 · 2025-12-19T14:42:01Z

Closing: Large group update. Better to handle individual dependency updates separately.

dependabot · 2025-12-19T14:42:04Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot requested a review from Sakeeb91 as a code owner December 15, 2025 08:39

dependabot bot force-pushed the dependabot/pip/python-minor-1cec4c3b83 branch 4 times, most recently from ac12f22 to 6689c2d Compare December 19, 2025 02:36

dependabot bot force-pushed the dependabot/pip/python-minor-1cec4c3b83 branch from 6689c2d to bae7331 Compare December 19, 2025 14:34

Sakeeb91 closed this Dec 19, 2025

dependabot bot deleted the dependabot/pip/python-minor-1cec4c3b83 branch December 19, 2025 14:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(deps): bump the python-minor group with 17 updates #22

deps(deps): bump the python-minor group with 17 updates #22

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 15, 2025

Uh oh!

Sakeeb91 commented Dec 19, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps(deps): bump the python-minor group with 17 updates #22

deps(deps): bump the python-minor group with 17 updates #22

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.124.4

Fixes

0.124.3

Fixes

Refactors

Docs

Translations

Internal

0.124.2

Fixes

0.124.1

Fixes

Docs

Internal

0.124.0

Version 0.38.0

What's Changed

New Contributors

Version 0.37.0

What's Changed

New Contributors

Version 0.36.1

What's Changed

Version 0.36.0

Added

New Contributors

Version 0.35.0

Added

0.38.0 (October 18, 2025)

Added

0.37.0 (September 23, 2025)

Added

0.36.1 (September 23, 2025)

Fixed

0.36.0 (September 20, 2025)

Added

0.35.0 (June 28, 2025)

Added

Changed

0.34.3 (June 1, 2025)

Fixed

0.34.2 (April 19, 2025)

Fixed

0.34.1 (April 13, 2025)

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

v2.12.3 (2025-10-17)

v2.12.0

What's Changed

New Contributors

v2.11.0

What's Changed

New Contributors

v2.10.1

What's Changed

2.0.45

orm

examples

sql

Current release

1.17.2

feature

bug

1.17.1

usecase

bug

v0.31.0

dependabot bot commented on behalf of github Dec 15, 2025 •

edited

Loading