Skip to content

chore(deps): uv: bump the all-python group across 1 directory with 7 updates#398

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/agent/all-python-9753ede6df
Open

chore(deps): uv: bump the all-python group across 1 directory with 7 updates#398
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/agent/all-python-9753ede6df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-python group with 7 updates in the /agent directory:

Package From To
boto3 1.43.9 1.43.29
bedrock-agentcore 1.9.1 1.14.1
claude-agent-sdk 0.2.82 0.2.101
fastapi 0.136.1 0.136.3
uvicorn 0.47.0 0.49.0
aws-opentelemetry-distro 0.17.0 0.17.1
mcp 1.27.1 1.27.2

Updates boto3 from 1.43.9 to 1.43.29

Commits

Updates bedrock-agentcore from 1.9.1 to 1.14.1

Release notes

Sourced from bedrock-agentcore's releases.

Bedrock AgentCore SDK v1.14.1

Installation

pip install bedrock-agentcore==1.14.1

What's Changed

See CHANGELOG.md for details.

What's Changed

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.14.0...v1.14.1

Bedrock AgentCore SDK v1.14.0

Installation

pip install bedrock-agentcore==1.14.0

What's Changed

See CHANGELOG.md for details.

What's Changed

Full Changelog: aws/bedrock-agentcore-sdk-python@v1.13.0...v1.14.0

Bedrock AgentCore SDK v1.13.0

Installation

pip install bedrock-agentcore==1.13.0

What's Changed

See CHANGELOG.md for details.

What's Changed

... (truncated)

Changelog

Sourced from bedrock-agentcore's changelog.

[1.14.1] - 2026-06-11

Fixed

  • fix: declare requests as optional 'datasets' extra (#508) (2359137)

Other Changes

  • fix(payments): correct "extension" typo to "extensions" in x402 v2 he… (#513) (5f9031d)
  • fix(a2a): cap a2a-sdk below 1.0 to restore A2A server startup (#510) (12f0f8b)

[1.14.0] - 2026-06-05

Other Changes

  • feat(runtime): add interactive runtime shell support (#505) (cf19e57)
  • Revert "ci: skip bearer token integ tests pending AgentCredentialProviderService fix (#499)" (#502) (69954eb)

[1.13.0] - 2026-06-02

Added

  • feat: AgentCore tool search plugin for Strands Agents (#494) (1cdc356)

Other Changes

  • feat(workflows): add closed-PR comment redirect (#489) (cc10c12)
  • ci: skip bearer token integ tests pending AgentCredentialProviderService fix (#499) (8786b18)

[1.12.0] - 2026-05-28

Added

  • feat: add async support to MemorySessionManager (#478) (76edb16)

Fixed

  • fix: out-of-scope variable in catch block (#497) (4054115)

Other Changes

  • add metadata support for LTM (#481) (80c4b11)

[1.11.0] - 2026-05-22

Fixed

  • fix: stop retrying after successful payment signing is rejected by merchant (#492) (0b2b34f)

Other Changes

  • fix(payments): drop unsupported paymentConnectorId + add http_request plugin tool + EIP-3009 timing fix (#493) (d5428b2)
  • feat(evaluation): add DatasetClient and dataset management service provider (#491) (29287c2)
  • test: add OTEL span content leakage integration tests (#485) (c311682)

[1.10.0] - 2026-05-19

Added

  • feat: expandi custom request header forwarding to match runtime allowlist (#483) (5fde434)

... (truncated)

Commits
  • 469d3b8 chore: bump version to 1.14.1 (#515)
  • 5f9031d fix(payments): correct "extension" typo to "extensions" in x402 v2 he… (#513)
  • 2359137 fix: declare requests as optional 'datasets' extra (#508)
  • 12f0f8b fix(a2a): cap a2a-sdk below 1.0 to restore A2A server startup (#510)
  • 4838037 chore: bump version to 1.14.0 (#506)
  • cf19e57 feat(runtime): add interactive runtime shell support (#505)
  • 69954eb Revert "ci: skip bearer token integ tests pending AgentCredentialProviderServ...
  • 759eb0d chore: bump version to 1.13.0 (#501)
  • cc10c12 feat(workflows): add closed-PR comment redirect (#489)
  • 8786b18 ci: skip bearer token integ tests pending AgentCredentialProviderService fix ...
  • Additional commits viewable in compare view

Updates claude-agent-sdk from 0.2.82 to 0.2.101

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.101

Bug Fixes

  • Typed task_updated lifecycle events: Exposed terminal system/task_updated events as typed TaskUpdatedMessage with task_id, patch, status, session_id, and uuid fields. Consumers tracking active background tasks no longer hang when a task finishes via a task_updated message without a corresponding TaskNotificationMessage. Added TaskUpdatedStatus type and TERMINAL_TASK_STATUSES frozenset for reliable active-task bookkeeping (#1016)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.177

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.101/

pip install claude-agent-sdk==0.2.101

v0.2.100

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.176

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.100/

pip install claude-agent-sdk==0.2.100

v0.2.99

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.175

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.99/

pip install claude-agent-sdk==0.2.99

v0.2.98

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.101

Bug Fixes

  • Typed task_updated lifecycle events: Exposed terminal system/task_updated events as typed TaskUpdatedMessage with task_id, patch, status, session_id, and uuid fields. Consumers tracking active background tasks no longer hang when a task finishes via a task_updated message without a corresponding TaskNotificationMessage. Added TaskUpdatedStatus type and TERMINAL_TASK_STATUSES frozenset for reliable active-task bookkeeping (#1016)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.177

0.2.100

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.176

0.2.99

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.175

0.2.98

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.174

0.2.97

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.173

0.2.96

Bug Fixes

  • Pinned mcp dependency below 2.0.0 to prevent incompatible breaking changes (#1028)

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.172

0.2.95

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.170

... (truncated)

Commits
  • 634c2f6 docs: update changelog for v0.2.101
  • 178f444 chore: release v0.2.101
  • e5c6411 chore: bump bundled CLI version to 2.1.177
  • 141c37f fix: expose terminal task_updated events as typed TaskUpdatedMessage (#1016)
  • 44453be docs: update changelog for v0.2.100
  • d4c8e7a chore: release v0.2.100
  • d0d6ac8 chore: bump bundled CLI version to 2.1.176
  • 667f3ab docs: update changelog for v0.2.99
  • 2229c6d chore: release v0.2.99
  • de4562d chore: bump bundled CLI version to 2.1.175
  • Additional commits viewable in compare view

Updates fastapi from 0.136.1 to 0.136.3

Release notes

Sourced from fastapi's releases.

0.136.3

Refactors

  • ♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @​tiangolo.

0.136.2

Refactors

  • ♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits
  • 8206485 🔖 Release version 0.136.3
  • c910e01 📝 Update release notes
  • 063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
  • 22b02e2 🔖 Release version 0.136.2
  • 3b252a2 📝 Update release notes
  • c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
  • cb83b83 📝 Update release notes
  • 00f805c ✅ Update tests, don't double dispose the engine (#15587)
  • 3675137 📝 Update release notes
  • 7b57e42 📝 Document --entrypoint CLI option (#15464)
  • Additional commits viewable in compare view

Updates uvicorn from 0.47.0 to 0.49.0

Release notes

Sourced from uvicorn's releases.

Version 0.49.0

What's Changed

Full Changelog: Kludex/uvicorn@0.48.0...0.49.0

Version 0.48.0

What's Changed

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Changelog

Sourced from uvicorn's changelog.

0.49.0 (June 3, 2026)

Changed

  • Bump httptools minimum version to 0.8.0 (#2962)
  • Consume duplicate forwarding headers in ProxyHeadersMiddleware (reverses the 0.48.0 behavior of ignoring them) (#2971)

0.48.0 (May 24, 2026)

Changed

  • Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

  • Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)
Commits
  • 3ef2e3e Version 0.49.0 (#2973)
  • eeb64b1 Consume duplicate forwarding headers in ProxyHeadersMiddleware (#2971)
  • 630f4ac Make the watchfiles reload tests deterministic (#2972)
  • 9154922 chore(deps): bump the github-actions group across 1 directory with 6 updates ...
  • 739727a Migrate docs deploy from Cloudflare Pages to Workers (#2967)
  • be4a240 Gate docs preview deploy on Cloudflare token presence (#2966)
  • c489d7e Bump httptools minimum version to 0.8.0 (#2962)
  • 9f547bd Skip docs preview deploy for Dependabot PRs (#2961)
  • 44446b8 Migrate documentation from MkDocs Material to Zensical (#2959)
  • cfd659c Bump pymdown-extensions to 10.21.3 (#2958)
  • Additional commits viewable in compare view

Updates aws-opentelemetry-distro from 0.17.0 to 0.17.1

Release notes

Sourced from aws-opentelemetry-distro's releases.

Release v0.17.1

What's Changed

  • feat(agent-observability): add AWS_GENAI_CONTENT_EXTRACTION_OPT_OUT env var to allow disabling LLO content extraction from spans (#741)
  • fix(mcp-instrumentation): suppress MCP /ping spans when agent observability is enabled (#748)
  • fix: pin urllib3 to 2.7.0 to fix CVE-2026-44431 and CVE-2026-44432 (#753)

Upstream Components

  • opentelemetry-api - 1.40.0
  • opentelemetry-sdk - 1.40.0
  • opentelemetry-exporter-otlp-proto-grpc - 1.40.0
  • opentelemetry-exporter-otlp-proto-http - 1.40.0
  • opentelemetry-propagator-b3 - 1.40.0
  • opentelemetry-propagator-jaeger - 1.40.0
  • opentelemetry-exporter-otlp-proto-common - 1.40.0
  • opentelemetry-sdk-extension-aws - 2.1.0
  • opentelemetry-propagator-aws-xray - 1.0.2
  • opentelemetry-distro - 0.61b0
  • opentelemetry-processor-baggage - 0.61b0
  • opentelemetry-propagator-ot-trace - 0.61b0
  • opentelemetry-instrumentation - 0.61b0
  • opentelemetry-instrumentation-aws-lambda - 0.61b0
  • opentelemetry-instrumentation-aio-pika - 0.61b0
  • opentelemetry-instrumentation-aiohttp-client - 0.61b0
  • opentelemetry-instrumentation-aiokafka - 0.61b0
  • opentelemetry-instrumentation-aiopg - 0.61b0
  • opentelemetry-instrumentation-asgi - 0.61b0
  • opentelemetry-instrumentation-asyncpg - 0.61b0
  • opentelemetry-instrumentation-boto - 0.61b0
  • opentelemetry-instrumentation-boto3sqs - 0.61b0
  • opentelemetry-instrumentation-botocore - 0.61b0
  • opentelemetry-instrumentation-celery - 0.61b0
  • opentelemetry-instrumentation-confluent-kafka - 0.61b0
  • opentelemetry-instrumentation-dbapi - 0.61b0
  • opentelemetry-instrumentation-django - 0.61b0
  • opentelemetry-instrumentation-elasticsearch - 0.61b0
  • opentelemetry-instrumentation-falcon - 0.61b0
  • opentelemetry-instrumentation-fastapi - 0.61b0
  • opentelemetry-instrumentation-flask - 0.61b0
  • opentelemetry-instrumentation-grpc - 0.61b0
  • opentelemetry-instrumentation-httpx - 0.61b0
  • opentelemetry-instrumentation-jinja2 - 0.61b0
  • opentelemetry-instrumentation-kafka-python - 0.61b0
  • opentelemetry-instrumentation-logging - 0.61b0
  • opentelemetry-instrumentation-mysql - 0.61b0
  • opentelemetry-instrumentation-mysqlclient - 0.61b0
  • opentelemetry-instrumentation-pika - 0.61b0
  • opentelemetry-instrumentation-psycopg2 - 0.61b0
  • opentelemetry-instrumentation-pymemcache - 0.61b0
  • opentelemetry-instrumentation-pymongo - 0.61b0

... (truncated)

Changelog

Sourced from aws-opentelemetry-distro's changelog.

v0.17.1 - 2026-05-22

  • feat(agent-observability): add AWS_GENAI_CONTENT_EXTRACTION_OPT_OUT env var to allow disabling LLO content extraction from spans (#741)
  • fix(mcp-instrumentation): suppress MCP /ping spans when agent observability is enabled (#748)
  • fix: pin urllib3 to 2.7.0 to fix CVE-2026-44431 and CVE-2026-44432 (#753)
Commits

Updates mcp from 1.27.1 to 1.27.2

Release notes

Sourced from mcp's releases.

v1.27.2

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v1.27.1...v1.27.2

Commits
  • 6213787 [v1.x] Scope experimental tasks to the session that created them (#2720)
  • ce267b6 [v1.x] Bind transport sessions to the authenticated principal (#2719)
  • 1abcca2 [v1.x] Add subject and claims to AccessToken (#2690)
  • 9773a3f [v1.x] ci: deploy docs to py.sdk.modelcontextprotocol.io via Pages artifact (...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the all-python group with 7 updates in the /agent directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.9` | `1.43.29` |
| [bedrock-agentcore](https://github.com/aws/bedrock-agentcore-sdk-python) | `1.9.1` | `1.14.1` |
| [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) | `0.2.82` | `0.2.101` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.136.3` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.47.0` | `0.49.0` |
| [aws-opentelemetry-distro](https://github.com/aws-observability/aws-otel-python-instrumentation) | `0.17.0` | `0.17.1` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.1` | `1.27.2` |



Updates `boto3` from 1.43.9 to 1.43.29
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.9...1.43.29)

Updates `bedrock-agentcore` from 1.9.1 to 1.14.1
- [Release notes](https://github.com/aws/bedrock-agentcore-sdk-python/releases)
- [Changelog](https://github.com/aws/bedrock-agentcore-sdk-python/blob/main/CHANGELOG.md)
- [Commits](aws/bedrock-agentcore-sdk-python@v1.9.1...v1.14.1)

Updates `claude-agent-sdk` from 0.2.82 to 0.2.101
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.82...v0.2.101)

Updates `fastapi` from 0.136.1 to 0.136.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.1...0.136.3)

Updates `uvicorn` from 0.47.0 to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.47.0...0.49.0)

Updates `aws-opentelemetry-distro` from 0.17.0 to 0.17.1
- [Release notes](https://github.com/aws-observability/aws-otel-python-instrumentation/releases)
- [Changelog](https://github.com/aws-observability/aws-otel-python-instrumentation/blob/main/CHANGELOG.md)
- [Commits](aws-observability/aws-otel-python-instrumentation@v0.17.0...v0.17.1)

Updates `mcp` from 1.27.1 to 1.27.2
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.1...v1.27.2)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: bedrock-agentcore
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-python
- dependency-name: aws-opentelemetry-distro
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
- dependency-name: mcp
  dependency-version: 1.27.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 20, 2026
@dependabot dependabot Bot requested review from a team as code owners June 20, 2026 06:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants