deps(deps): bump the python-minor group with 17 updates #38

dependabot · 2025-12-22T14:35:40Z

Bumps the python-minor group with 17 updates:

Package	From	To
fastapi	`0.109.2`	`0.127.0`
uvicorn[standard]	`0.27.1`	`0.40.0`
pydantic	`2.6.1`	`2.12.5`
pydantic-settings	`2.1.0`	`2.12.0`
sqlalchemy	`2.0.27`	`2.0.45`
psycopg2-binary	`2.9.9`	`2.9.11`
alembic	`1.13.1`	`1.17.2`
asyncpg	`0.29.0`	`0.31.0`
aiomysql	`0.2.0`	`0.3.2`
aiosqlite	`0.19.0`	`0.22.0`
python-dotenv	`1.0.1`	`1.2.1`
pyyaml	`6.0.1`	`6.0.3`
prometheus-client	`0.19.0`	`0.23.1`
python-jose[cryptography]	`3.3.0`	`3.5.0`
httpx	`0.26.0`	`0.28.1`
ruff	`0.2.1`	`0.14.10`
mypy	`1.8.0`	`1.19.1`

Updates fastapi from 0.109.2 to 0.127.0

Release notes

Sourced from fastapi's releases.

0.127.0

Breaking Changes

🔊 Add deprecation warnings when using pydantic.v1. PR #14583 by @tiangolo.

Translations

🔧 Add LLM prompt file for Korean, generated from the existing translations. PR #14546 by @tiangolo.

🔧 Add LLM prompt file for Japanese, generated from the existing translations. PR #14545 by @tiangolo.

Internal

⬆️ Upgrade OpenAI model for translations to gpt-5.2. PR #14579 by @tiangolo.

0.126.0

Upgrades

➖ Drop support for Pydantic v1, keeping short temporary support for Pydantic v2's pydantic.v1. PR #14575 by @tiangolo.

The minimum version of Pydantic installed is now pydantic >=2.7.0.

The standard dependencies now include pydantic-settings >=2.0.0 and pydantic-extra-types >=2.0.0.

Docs

📝 Fix duplicated variable in docs_src/python_types/tutorial005_py39.py. PR #14565 by @paras-verma7454.

Translations

🔧 Add LLM prompt file for Ukrainian, generated from the existing translations. PR #14548 by @tiangolo.

Internal

🔧 Tweak pre-commit to allow committing release-notes. PR #14577 by @tiangolo.

⬆️ Use prek as a pre-commit alternative. PR #14572 by @tiangolo.

👷 Add performance tests with CodSpeed. PR #14558 by @tiangolo.

0.125.0

Breaking Changes

🔧 Drop support for Python 3.8. PR #14563 by @tiangolo.

This would actually not be a breaking change as no code would really break. Any Python 3.8 installer would just refuse to install the latest version of FastAPI and would only install 0.124.4. Only marking it as a "breaking change" to make it visible.

Refactors

♻️ Upgrade internal syntax to Python 3.9+ 🎉. PR #14564 by @tiangolo.

Docs

⚰️ Remove Python 3.8 from CI and remove Python 3.8 examples from source docs. PR #14559 by @YuriiMotov and @tiangolo.

Translations

... (truncated)

Commits

c4a1ab5 🔖 Release version 0.127.0
22c7200 📝 Update release notes
6e42bcd 🔊 Add deprecation warnings when using pydantic.v1 (#14583)
6513d4d 📝 Update release notes
1d93d53 ⬆️ Upgrade OpenAI model for translations to gpt-5.2 (#14579)
c2c1cc8 📝 Update release notes
5289259 🔧 Add LLM prompt file for Korean, generated from the existing translations (#...
5783910 📝 Update release notes
026b43e 🔧 Add LLM prompt file for Japanese, generated from the existing translations ...
6b591dd 📝 Update release notes
Additional commits viewable in compare view

Updates uvicorn[standard] from 0.27.1 to 0.40.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.40.0

What's Changed

Drop Python 3.9 by @Kludex in Kludex/uvicorn#2772

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

Version 0.39.0

What's Changed

explicitly start ASGI run with empty context by @pmeier in Kludex/uvicorn#2742

fix(websockets): Send close frame on ASGI return by @Kludex in Kludex/uvicorn#2769

New Contributors

@pmeier made their first contribution in Kludex/uvicorn#2742

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

Version 0.38.0

What's Changed

Support Python 3.14 by @Kludex in Kludex/uvicorn#2723

New Contributors

@NGANAMODEIJunior made their first contribution in Kludex/uvicorn#2713

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Version 0.37.0

What's Changed

Add --timeout-worker-healthcheck setting by @Kludex in Kludex/uvicorn#2711

Add os.PathLike[str] type to ssl_ca_certs by @rnv812 in Kludex/uvicorn#2676

New Contributors

@LincolnPuzey made their first contribution in Kludex/uvicorn#2669

@rnv812 made their first contribution in Kludex/uvicorn#2676

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Raise an exception when calling removed Config.setup_event_loop() by @Kludex in Kludex/uvicorn#2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

Support custom IOLOOPs by @gnir-work in Kludex/uvicorn#2435

... (truncated)

Changelog

Sourced from uvicorn[standard]'s changelog.

0.40.0 (December 21, 2025)

Remove

Drop support for Python 3.9 (#2772)

0.39.0 (December 21, 2025)

Fixed

Send close frame on ASGI return for WebSockets (#2769)

Explicitly start ASGI run with empty context (#2742)

0.38.0 (October 18, 2025)

Added

Support Python 3.14 (#2723)

0.37.0 (September 23, 2025)

Added

Add --timeout-worker-healthcheck option (#2711)

Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

Support custom IOLOOPs (#2435)

Allow to provide importable string in --http, --ws and --loop (#2658)

0.35.0 (June 28, 2025)

Added

Add WebSocketsSansIOProtocol (#2540)

Changed

Refine help message for option --proxy-headers (#2653)

0.34.3 (June 1, 2025)

... (truncated)

Commits

9ff6004 Version 0.40.0 (#2773)
19df042 Drop Python 3.9 (#2772)
865ce7c Run strict mypy on test suite (#2771)
4f40b84 Version 0.39.0 (#2770)
5692dfc fix(websockets): Send close frame on ASGI return (#2769)
4194764 chore(deps): bump the github-actions group with 2 updates (#2763)
d94bf28 explicitly start ASGI run with empty context (#2742)
8ae0bcb chore(deps): bump the github-actions group with 2 updates (#2748)
4744ff9 Add groups configuration for GitHub Actions (#2747)
0391372 chore(deps): bump astral-sh/setup-uv from 6.8.0 to 7.1.2 (#2746)
Additional commits viewable in compare view

Updates pydantic from 2.6.1 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

v2.12.3 (2025-10-17)

GitHub release

... (truncated)

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
Additional commits viewable in compare view

Updates pydantic-settings from 2.1.0 to 2.12.0

Release notes

Sourced from pydantic-settings's releases.

v2.12.0

What's Changed

Support for enum kebab case. by @kschwab in pydantic/pydantic-settings#686

Apply source order: init > env > dotenv > secrets > defaults and pres… by @chbndrhnns in pydantic/pydantic-settings#688

Add NestedSecretsSettings source by @makukha in pydantic/pydantic-settings#690

Strip non-explicit default values. by @kschwab in pydantic/pydantic-settings#692

Coerce env vars if strict is True. by @kschwab in pydantic/pydantic-settings#693

Restore init kwarg names before returning final state dictionary. by @kschwab in pydantic/pydantic-settings#700

Drop Python3.9 support by @hramezani in pydantic/pydantic-settings#699

Adapt test_protected_namespace_defaults for dev. Pydantic by @musicinmybrain in pydantic/pydantic-settings#637

Add Python 3.14 by @hramezani in pydantic/pydantic-settings#704

Prepare release 2.12 by @hramezani in pydantic/pydantic-settings#705

New Contributors

@chbndrhnns made their first contribution in pydantic/pydantic-settings#688

Full Changelog: pydantic/pydantic-settings@v2.11.0...v2.12.0

v2.11.0

What's Changed

CLI Serialize Support by @kschwab in pydantic/pydantic-settings#643

Inspect type aliases to determine if an annotation is complex by @tselepakis in pydantic/pydantic-settings#644

Revert "fix: Respect 'cli_parse_args' from model_config with settings_customise_sources (#611)" by @hramezani in pydantic/pydantic-settings#655

Remove parsing of command line arguments from CliSettingsSource.__init__. by @trygve-baerland in pydantic/pydantic-settings#656

turn off allow_abbrev on subparsers by @mroch in pydantic/pydantic-settings#658

CLI Serialization Fixes by @kschwab in pydantic/pydantic-settings#649

Fix PydanticModel type checking. by @kschwab in pydantic/pydantic-settings#659

Avoid env_prefix falling back to env vars without prefix by @tselepakis in pydantic/pydantic-settings#648

Warn if model_config sets unused keys for missing settings sources by @HomerusJa in pydantic/pydantic-settings#663

Included endpoint_url kwarg in AWSSecretsManagerSettingsSource class by @adrianohrl in pydantic/pydantic-settings#664

Fix typo ("Accesing") in the "Adding sources" docs by @deepyaman in pydantic/pydantic-settings#668

CLI Windows Path Fix by @kschwab in pydantic/pydantic-settings#669

Cli root model support by @kschwab in pydantic/pydantic-settings#677

Snake case conversion in Azure Key Vault by @AndreuCodina in pydantic/pydantic-settings#680

Make InitSettingsSource resolution deterministic by @enrico-stauss in pydantic/pydantic-settings#681

Update deps by @hramezani in pydantic/pydantic-settings#683

New Contributors

@tselepakis made their first contribution in pydantic/pydantic-settings#644

@trygve-baerland made their first contribution in pydantic/pydantic-settings#656

@mroch made their first contribution in pydantic/pydantic-settings#658

@HomerusJa made their first contribution in pydantic/pydantic-settings#663

@adrianohrl made their first contribution in pydantic/pydantic-settings#664

@deepyaman made their first contribution in pydantic/pydantic-settings#668

@enrico-stauss made their first contribution in pydantic/pydantic-settings#681

Full Changelog: pydantic/pydantic-settings@2.10.1...v2.11.0

v2.10.1

What's Changed

... (truncated)

Commits

584983d Prepare release 2.12 (#705)
6b4d87e Add Python 3.14 (#704)
02de5b6 Adapt test_protected_namespace_defaults for dev. Pydantic (#637)
4239ea4 Drop Python3.9 support (#699)
5008c69 Restore init kwarg names before returning final state dictionary. (#700)
4433101 Coerce env vars if strict is True. (#693)
4d2ebfd Strip non-explicit default values. (#692)
4a6ffca Add NestedSecretsSettings source (#690)
7a6e96e Apply source order: init > env > dotenv > secrets > defaults and pres… (#688)
68563ed Support for enum kebab case. (#686)
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.27 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

[orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

References: #12858

[orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

References: #12952

examples

[examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

[sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

References: #12915

[sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

See full diff in compare view

Updates psycopg2-binary from 2.9.9 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).

Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

fd9ae8c chore: bump to version 2.9.11
d923840 chore: update docs requirements
d42dc71 Merge branch 'fix-1791'
4fde656 fix: avoid failed assert passing more arguments than placeholders
8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
1a1eabf build(deps): bump actions/github-script from 7 to 8
897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
ceefd30 build(deps): bump actions/checkout from 4 to 5
4dc5854 build(deps): bump actions/setup-python from 5 to 6
1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
Additional commits viewable in compare view

Updates alembic from 1.13.1 to 1.17.2

Release notes

Sourced from alembic's releases.

1.17.2

Released: November 14, 2025

feature

[feature] [operations] Added Operations.implementation_for.replace parameter to Operations.implementation_for(), allowing replacement of existing operation implementations. This allows for existing operations such as CreateTableOp to be extended directly. Pull request courtesy justanothercatgirl.

References: #1750

bug

[bug] [mssql] Fixed issue in SQL Server dialect where the DROP that's automatically emitted for existing default constraints during an ALTER COLUMN needs to take place before not just the modification of the column's default, but also before the column's type is changed.

References: #1744

1.17.1

Released: October 28, 2025

usecase

[usecase] [commands] Added command.current.check_heads parameter to command.current() command, available from the command line via the --check-heads option to alembic current. This tests if all head revisions are applied to the database and raises DatabaseNotAtHead (or from the command line, exits with a non-zero exit code) if this is not the case. The parameter operates equvialently to the cookbook recipe cookbook_check_heads. Pull request courtesy Stefan Scherfke.

References: #1705

bug

[bug] [commands] Disallow ':' character in custom revision identifiers. Previously, using a colon in a revision ID (e.g., 'REV:1') would create the revision, however revisions with colons in them are not correctly interpreted by other commands, as it overlaps with the revision range syntax. Pull request courtesy Kim Wooseok with original implementation by Hrushikesh Patil.

... (truncated)

Commits

See full diff in compare view

Updates asyncpg from 0.29.0 to 0.31.0

Release notes

Sourced from asyncpg's releases.

v0.31.0

Enable Python 3.14 with experimental subinterpreter/freethreading support.

Improvements

Add Python 3.14 support, experimental subinterpreter/freethreading support (#1279) (by @elprans in 9e42642b)

Avoid performing type introspection on known types (#1243) (by @elprans in 5c9986c4)

Make prepare() not use named statements by default when cache is disabled (#1245) (by @elprans in 5b14653e)

Implement connection service file functionality (#1223) (by @AndrewJackson2020 in 1d63bb15)

Fixes

Fix multi port connection string issue (#1222) (by @AndrewJackson2020 in 01c0db7b)

Avoid leaking connections if _can_use_connection fails (#1269) (by @yuliy-openai in e94302d2)

Other

Drop support for EOL Python 3.8 (#1281) (by @elprans in 6c2c4904)

v0.30.0

Support Python 3.13 and PostgreSQL 17.

Improvements

Implement GSSAPI authentication (by @eltoder in 1d4e5680 for #1122)

Implement SSPI authentication (by @eltoder in 1aab2094 for #1128)

Add initial typings (by @bryanforbes in d42432bf for #1127)

Allow building with Cython 3

... (truncated)

Commits

71775a6 asyncpg v0.31.0
508cae6 Test on PostgreSQL 18 (#1290)
e534e5f Bump cibuildwheel
07fe512 Bump pgproto
648b35f Bump Cython to 3.2.1 (#1288)
9e42642 Add Python 3.14 support, experimental subinterpreter/freethreading support (#...
6fe1c49 Move development deps away from extras and into dependency groups (#1280)
7a54816 Fix a couple of missed Python version guards
6c2c490 Drop support for EOL Python 3.8 (#1281)
4c60ae8 Bump version to 0.31.0.dev0
Additional commits viewable in compare view

Updates aiomysql from 0.2.0 to 0.3.2

Release notes

Sourced from aiomysql's releases.

v0.3.2

Changes

0.3.2 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix not persisting GitHub credentials during Git checkout action in CI for publishing release tags #1047

0.3.1 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix permissions in GitHub Actions workflow to allow pushing git tag after release #1046

0.3.0 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Drop support for Python 3.7 and 3.8, replaced by 3.12 and 3.13 #1026

Bump minimum Sphinx version to generate documentation to 6.2.0 for Python 3.13 support #1026

Sphinx now uses the furo theme for local and RTD builds #936

Drop support for EoL MySQL 5.7, replaced by 8.4 and 9.4 #1032

Drop support for EoL MariaDB 10.4, 10.5, 10.9, 10.10, replaced by 11.4, 11.8, 12.0 #1032

Use immutable GitHub tags and releases for future releases #1034

| Bump setuptools to >=80, setuptools-scm to >=7, <10 #1018 | setuptools-scm must be at least 9.2.0 for consistent hash lengths of non-release builds.

| Properly check whether loading of local files is enabled #1044 | Loading local data now requires using the local_infile parameter, passing just the client flag through client_flag is no longer supported. | Fixes GHSA-r397-ff8c-wv2g <https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g>_ | Thanks to @KonstantAnxiety for reporting this.

0.2.0 (2023-06-11) ^^^^^^^^^^^^^^^^^^

Bump minimal SQLAlchemy version to 1.3 #815

Remove deprecated Pool.get #706

| Partially ported PyMySQL#304 <https://github.com/PyMySQL/PyMySQL/pull/304>_ #792 | aiomysql now reraises the original exception during connect() if it's not IOError, OSError or asyncio.TimeoutError. | This was previously always raised as OperationalError.

Fix debug log level with sha256_password authentication #863

... (truncated)

Changelog

Sourced from aiomysql's changelog.

0.3.2 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix not persisting GitHub credentials during Git checkout action in CI for publishing release tags #1047

0.3.1 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Fix permissions in GitHub Actions workflow to allow pushing git tag after release #1046

0.3.0 (2025-10-21) ^^^^^^^^^^^^^^^^^^

Drop support for Python 3.7 and 3.8, replaced by 3.12 and 3.13 #1026

Bump minimum Sphinx version to generate documentation to 6.2.0 for Python 3.13 support #1026

Sphinx now uses the furo theme for local and RTD builds #936

Drop support for EoL MySQL 5.7, replaced by 8.4 and 9.4 #1032

Drop support for EoL MariaDB 10.4, 10.5, 10.9, 10.10, replaced by 11.4, 11.8, 12.0 #1032

Use immutable GitHub tags and releases for future releases #1034

| Bump setuptools to >=80, setuptools-scm to >=7, <10 #1018 | setuptools-scm must be at least 9.2.0 for consistent hash lengths of non-release builds.

| Properly check whether loading of local files is enabled #1044 | Loading local data now requires using the local_infile parameter, passing just the client flag through client_flag is no longer supported. | Fixes GHSA-r397-ff8c-wv2g <https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g>_ | Thanks to @KonstantAnxiety for reporting this.

Commits

72a4df6 Merge pull request #1047 from Nothing4You/fix-git-tag-release
59ba1a6 Revert not persisting GitHub credentials in workflow job for pushing a Git ta...
fd32a80 Merge pull request #1046 from Nothing4You/fix-git-tag-release
5e53c9f Fix permissions in GitHub Actions workflow to allow pushing git tag after rel...
ff23e01 Merge pull request #1045 from Nothing4You/release-prep
8fba3ff Prepare 0.3.0 release, add missing PR references to changelog
32c4520 Merge pull request #1044 from Nothing4You/local-infile
e2e895d Update docs for local infile
873dc39 Add test case for unexpecte LOAD_LOCAL packets
aa98494 check local_infile option when receiving a LOAD_LOCAL packet
Additional commits viewable in compare view

Updates aiosqlite from 0.19.0 to 0.22.0

Changelog

Sourced from aiosqlite's changelog.

v0.22.0

Feature release

Support set_authorizer query access controls (#349)

Wait for transaction queue to complete when closing connection (#305)

Emit warning when connection goes out of scope without being closed (#355)

Remove dependency on typing_extensions (#365)
$ git shortlog -s v0.21.0...v0.22.0
     1	Alec Berryman
     1	Amethyst Reese
     1	David Andreoletti
     1	Markus Heidelberg
     1	beerpsi
    19	dependabot[bot]
v0.21.0

Maintenance release

Fix: close connection correctly when BaseException raised in connection (#317)

Metadata improvements

Tested and supported on Python 3.13

Drop support for Python 3.8

Drop testing on PyPy
$ git shortlog -s v0.20.0...v0.21.0
     6	Amethyst Reese
     1	Gabriel
     1	Stanley Kudrow
    11	dependabot[bot]
v0.20.0

Feature release

Connection .close() method is now idempotent (#238)

Performance improvements in connection thread and event loop (#213, #271)

Updated contributor guide (#255)

Tested on Python 3.12

......

Description has been truncated

Bumps the python-minor group with 17 updates: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.109.2` | `0.127.0` | | [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.27.1` | `0.40.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.6.1` | `2.12.5` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.1.0` | `2.12.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.27` | `2.0.45` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.9` | `2.9.11` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.17.2` | | [asyncpg](https://github.com/MagicStack/asyncpg) | `0.29.0` | `0.31.0` | | [aiomysql](https://github.com/aio-libs/aiomysql) | `0.2.0` | `0.3.2` | | [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.19.0` | `0.22.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.2.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` | | [prometheus-client](https://github.com/prometheus/client_python) | `0.19.0` | `0.23.1` | | [python-jose[cryptography]](https://github.com/mpdavis/python-jose) | `3.3.0` | `3.5.0` | | [httpx](https://github.com/encode/httpx) | `0.26.0` | `0.28.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.2.1` | `0.14.10` | | [mypy](https://github.com/python/mypy) | `1.8.0` | `1.19.1` | Updates `fastapi` from 0.109.2 to 0.127.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.109.2...0.127.0) Updates `uvicorn[standard]` from 0.27.1 to 0.40.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.27.1...0.40.0) Updates `pydantic` from 2.6.1 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.6.1...v2.12.5) Updates `pydantic-settings` from 2.1.0 to 2.12.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.1.0...v2.12.0) Updates `sqlalchemy` from 2.0.27 to 2.0.45 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `psycopg2-binary` from 2.9.9 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.9...2.9.11) Updates `alembic` from 1.13.1 to 1.17.2 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `asyncpg` from 0.29.0 to 0.31.0 - [Release notes](https://github.com/MagicStack/asyncpg/releases) - [Commits](MagicStack/asyncpg@v0.29.0...v0.31.0) Updates `aiomysql` from 0.2.0 to 0.3.2 - [Release notes](https://github.com/aio-libs/aiomysql/releases) - [Changelog](https://github.com/aio-libs/aiomysql/blob/main/CHANGES.txt) - [Commits](aio-libs/aiomysql@v0.2.0...v0.3.2) Updates `aiosqlite` from 0.19.0 to 0.22.0 - [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md) - [Commits](omnilib/aiosqlite@v0.19.0...v0.22.0) Updates `python-dotenv` from 1.0.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.0.1...v1.2.1) Updates `pyyaml` from 6.0.1 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.1...6.0.3) Updates `prometheus-client` from 0.19.0 to 0.23.1 - [Release notes](https://github.com/prometheus/client_python/releases) - [Commits](prometheus/client_python@v0.19.0...v0.23.1) Updates `python-jose[cryptography]` from 3.3.0 to 3.5.0 - [Release notes](https://github.com/mpdavis/python-jose/releases) - [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md) - [Commits](mpdavis/python-jose@3.3.0...3.5.0) Updates `httpx` from 0.26.0 to 0.28.1 - [Release notes](https://github.com/encode/httpx/releases) - [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md) - [Commits](encode/httpx@0.26.0...0.28.1) Updates `ruff` from 0.2.1 to 0.14.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@v0.2.1...0.14.10) Updates `mypy` from 1.8.0 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.8.0...v1.19.1) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.127.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: uvicorn[standard] dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pydantic-settings dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: sqlalchemy dependency-version: 2.0.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: alembic dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: asyncpg dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: aiomysql dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: aiosqlite dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor - dependency-name: prometheus-client dependency-version: 0.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: python-jose[cryptography] dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: httpx dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: ruff dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-12-22T14:35:41Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot bot requested a review from Sakeeb91 as a code owner December 22, 2025 14:35

Sakeeb91 merged commit 8894d91 into main Dec 22, 2025
5 checks passed

dependabot bot deleted the dependabot/pip/python-minor-68ca544e2a branch December 22, 2025 20:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(deps): bump the python-minor group with 17 updates #38

deps(deps): bump the python-minor group with 17 updates #38

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps(deps): bump the python-minor group with 17 updates #38

deps(deps): bump the python-minor group with 17 updates #38

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 22, 2025

0.127.0

Breaking Changes

Translations

Internal

0.126.0

Upgrades

Docs

Translations

Internal

0.125.0

Breaking Changes

Refactors

Docs

Translations

Version 0.40.0

What's Changed

Version 0.39.0

What's Changed

New Contributors

Version 0.38.0

What's Changed

New Contributors

Version 0.37.0

What's Changed

New Contributors

Version 0.36.1

What's Changed

Version 0.36.0

Added

0.40.0 (December 21, 2025)

Remove

0.39.0 (December 21, 2025)

Fixed

0.38.0 (October 18, 2025)

Added

0.37.0 (September 23, 2025)

Added

0.36.1 (September 23, 2025)

Fixed

0.36.0 (September 20, 2025)

Added

0.35.0 (June 28, 2025)

Added

Changed

0.34.3 (June 1, 2025)

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

v2.12.3 (2025-10-17)

v2.12.0

What's Changed

New Contributors

v2.11.0

What's Changed

New Contributors

v2.10.1

What's Changed

2.0.45

orm

examples

sql

Current release

1.17.2

feature

bug

1.17.1

usecase

bug

v0.31.0