From ec34b8aee3ade4e5d2376c8580b5ed09270a96ff Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Apr 2026 03:54:56 +0000 Subject: [PATCH] build(deps): bump the pip group across 2 directories with 8 updates --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: aiohttp dependency-version: 3.13.4 dependency-type: direct:production dependency-group: pip - dependency-name: anthropic dependency-version: 0.87.0 dependency-type: direct:production dependency-group: pip - dependency-name: pypdf dependency-version: 6.10.0 dependency-type: direct:production dependency-group: pip - dependency-name: nltk dependency-version: 3.9.4 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: aiohttp dependency-version: 3.13.4 dependency-type: direct:production dependency-group: pip - dependency-name: anthropic dependency-version: 0.87.0 dependency-type: direct:production dependency-group: pip - dependency-name: pypdf dependency-version: 6.10.0 dependency-type: direct:production dependency-group: pip - dependency-name: nltk dependency-version: 3.9.4 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- backend/requirements-min.txt | 8 ++++---- backend/requirements.txt | 24 ++++++++++++------------ pyproject.toml | 24 ++++++++++++------------ 3 files changed, 28 insertions(+), 28 deletions(-) diff --git a/backend/requirements-min.txt b/backend/requirements-min.txt index 13bd199f08..f8a330736e 100644 --- a/backend/requirements-min.txt +++ b/backend/requirements-min.txt @@ -13,10 +13,10 @@ cryptography bcrypt==5.0.0 argon2-cffi==25.1.0 PyJWT[crypto]==2.11.0 -authlib==1.6.9 +authlib==1.6.10 -requests==2.32.5 -aiohttp==3.13.2 # do not update to 3.13.3 - broken +requests==2.33.0 +aiohttp==3.13.4 # do not update to 3.13.3 - broken async-timeout aiocache aiofiles @@ -50,7 +50,7 @@ langchain-text-splitters==1.1.1 fake-useragent==2.2.0 chromadb==1.5.2 -black==26.1.0 +black==26.3.1 pydub chardet==5.2.0 beautifulsoup4 diff --git a/backend/requirements.txt b/backend/requirements.txt index a9275beaf3..f9238e2e4e 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -6,14 +6,14 @@ itsdangerous==2.2.0 python-socketio==5.16.1 python-jose==3.5.0 -cryptography==46.0.5 +cryptography==46.0.7 bcrypt==5.0.0 argon2-cffi==25.1.0 PyJWT[crypto]==2.11.0 -authlib==1.6.9 +authlib==1.6.10 -requests==2.32.5 -aiohttp==3.13.2 # do not update to 3.13.3 - broken +requests==2.33.0 +aiohttp==3.13.4 # do not update to 3.13.3 - broken async-timeout==5.0.1 aiocache==0.12.3 aiofiles==25.1.0 @@ -43,7 +43,7 @@ tiktoken==0.12.0 mcp==1.26.0 openai==2.29.0 -anthropic==0.86.0 +anthropic==0.87.0 google-genai==1.66.0 langchain==1.2.10 @@ -56,7 +56,7 @@ chromadb==1.5.2 weaviate-client==4.20.3 opensearch-py==3.1.0 -transformers==5.3.0 +transformers==5.5.4 sentence-transformers==5.2.3 accelerate==1.13.0 pyarrow==20.0.0 # fix: pin pyarrow version to 20 for rpi compatibility #15897 @@ -64,15 +64,15 @@ einops==0.8.2 ftfy==6.3.1 chardet==5.2.0 -pypdf==6.7.5 +pypdf==6.10.0 fpdf2==2.8.7 -pymdown-extensions==10.21 +pymdown-extensions==10.21.2 docx2txt==0.9 python-pptx==1.0.2 msoffcrypto-tool==6.0.0 unstructured==0.18.31 -nltk==3.9.3 +nltk==3.9.4 Markdown==3.10.2 beautifulsoup4==4.14.3 pypandoc==1.16.2 @@ -85,7 +85,7 @@ psutil==7.2.2 sentencepiece==0.2.1 soundfile==0.13.1 -pillow==12.1.1 +pillow==12.2.0 opencv-python-headless==4.13.0.92 rapidocr-onnxruntime==1.4.4 rank-bm25==0.2.2 @@ -93,7 +93,7 @@ rank-bm25==0.2.2 onnxruntime==1.24.3 faster-whisper==1.2.1 -black==26.1.0 +black==26.3.1 youtube-transcript-api==1.2.4 pytube==15.0.0 @@ -136,7 +136,7 @@ colbert-ai==0.2.22 ## Tests docker~=7.1.0 -pytest~=8.4.1 +pytest~=9.0.3 pytest-docker~=3.2.5 ## LDAP diff --git a/pyproject.toml b/pyproject.toml index 7a546e935f..5081781aba 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -14,14 +14,14 @@ dependencies = [ "python-socketio==5.16.1", "python-jose==3.5.0", - "cryptography==46.0.5", + "cryptography==46.0.7", "bcrypt==5.0.0", "argon2-cffi==25.1.0", "PyJWT[crypto]==2.11.0", - "authlib==1.6.9", + "authlib==1.6.10", - "requests==2.32.5", - "aiohttp==3.13.2", # do not update to 3.13.3 - broken + "requests==2.33.0", + "aiohttp==3.13.4", # do not update to 3.13.3 - broken "async-timeout==5.0.1", "aiocache==0.12.3", "aiofiles==25.1.0", @@ -50,7 +50,7 @@ dependencies = [ "mcp==1.26.0", "openai==2.29.0", - "anthropic==0.86.0", + "anthropic==0.87.0", "google-genai==1.66.0", "langchain==1.2.10", @@ -64,7 +64,7 @@ dependencies = [ "PyMySQL==1.1.2", "boto3==1.42.62", - "transformers==5.3.0", + "transformers==5.5.4", "sentence-transformers==5.2.3", "accelerate==1.13.0", "pyarrow==20.0.0", # fix: pin pyarrow version to 20 for rpi compatibility #15897 @@ -72,13 +72,13 @@ dependencies = [ "ftfy==6.3.1", "chardet==5.2.0", - "pypdf==6.7.5", + "pypdf==6.10.0", "fpdf2==2.8.7", - "pymdown-extensions==10.21", + "pymdown-extensions==10.21.2", "docx2txt==0.9", "python-pptx==1.0.2", "msoffcrypto-tool==6.0.0", - "nltk==3.9.3", + "nltk==3.9.4", "Markdown==3.10.2", "beautifulsoup4==4.14.3", "pypandoc==1.16.2", @@ -92,7 +92,7 @@ dependencies = [ "soundfile==0.13.1", "azure-ai-documentintelligence==1.0.2", - "pillow==12.1.1", + "pillow==12.2.0", "opencv-python-headless==4.13.0.92", "rapidocr-onnxruntime==1.4.4", "rank-bm25==0.2.2", @@ -100,7 +100,7 @@ dependencies = [ "onnxruntime==1.24.3", "faster-whisper==1.2.1", - "black==26.1.0", + "black==26.3.1", "youtube-transcript-api==1.2.4", "pytube==15.0.0", @@ -151,7 +151,7 @@ all = [ "moto[s3]>=5.0.26", "gcp-storage-emulator>=2024.8.3", "docker~=7.1.0", - "pytest~=8.3.2", + "pytest>=8.3.2,<9.1.0", "pytest-docker~=3.2.5", "playwright==1.58.0", # Caution: version must match docker-compose.playwright.yaml - Update the docker-compose.yaml if necessary "elasticsearch==9.3.0",