Skip to content

Bump the python group across 1 directory with 8 updates - #71

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-ff08d7587c
Open

Bump the python group across 1 directory with 8 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-ff08d7587c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown

Bumps the python group with 8 updates in the / directory:

Package From To
inspect-ai 0.3.266 0.3.282
pillow 12.3.0 13.0.0
openai 3.10.0 3.35.1
semver 3.0.4 3.1.0
inspect-k8s-sandbox 0.13.0 0.14.0
basedpyright 1.40.1 1.40.2
pre-commit 4.6.2 4.7.0
types-pyyaml 6.0.12.20260815 6.0.12.20260906

Updates inspect-ai from 0.3.266 to 0.3.282

Release notes

Sourced from inspect-ai's releases.

v0.3.282

0.3.282 (2026-10-19)

Breaking Changes

  • tool state scopes so agents running concurrently in one sample keep separate tool state (#5861)

Features

  • sharding: conditional S3 writes and a local lock helper (#5775) (5384f73)
  • show a sharded run as one task in inspect ctl --log-dir (#5774) (c0e60d0)
  • tool state scopes so agents running concurrently in one sample keep separate tool state (#5861) (c03cd92)

Bug Fixes

  • cancelled trio eval with the rich display fails instead of returning its log (#5872) (f99c61d)
  • gemini-2.5-pro repeating tool calls after a tool result (#5753) (8181840)
  • stop installing brotli with Inspect (#5900) (a699376)
  • usage undercounted when a provider call sends several billed requests (#5643) (9ac4412)
  • view: enforce the log viewer's Content-Security-Policy in inspect view and view bundle (#5552) (7afcb24)

Performance Improvements

  • faster events_df() on long agent transcripts (#5819) (21ea635)

v0.3.281

0.3.281 (2026-10-15)

Breaking Changes

  • require Python 3.11 and test on Python 3.14 (#5862)

Features

  • add swarm_controller and swarm_channel registry types (#5860) (a11afc9)
  • agent-bridge: forward allowed Anthropic betas, Accept-Encoding and Responses reasoning context (#5708) (be4fd1f)
  • let agent bridges transform model responses with response_filter (#5715) (19f9349)
  • require Python 3.11 and test on Python 3.14 (#5862) (f612192)
  • sentinel monitors can call context.host.score (#5865) (b0a5cd1)

Bug Fixes

  • Antigravity host tool calls being denied as unproposed by the sandbox agent bridge (#5717) (46e79a4)
  • count overlapping waits once in working time and add suspend_working_limit() (#5758) (974c17d)
  • litellm-proxy: Grok models keep reasoning across turns, accept every reasoning effort, and report refusals (#5874) (7158198)

... (truncated)

Changelog

Sourced from inspect-ai's changelog.

0.3.282 (2026-10-19)

Breaking Changes

  • tool state scopes so agents running concurrently in one sample keep separate tool state (#5861)

Features

  • sharding: conditional S3 writes and a local lock helper (#5775) (5384f73)
  • show a sharded run as one task in inspect ctl --log-dir (#5774) (c0e60d0)
  • tool state scopes so agents running concurrently in one sample keep separate tool state (#5861) (c03cd92)

Bug Fixes

  • cancelled trio eval with the rich display fails instead of returning its log (#5872) (f99c61d)
  • gemini-2.5-pro repeating tool calls after a tool result (#5753) (8181840)
  • stop installing brotli with Inspect (#5900) (a699376)
  • usage undercounted when a provider call sends several billed requests (#5643) (9ac4412)
  • view: enforce the log viewer's Content-Security-Policy in inspect view and view bundle (#5552) (7afcb24)

Performance Improvements

  • faster events_df() on long agent transcripts (#5819) (21ea635)

0.3.281 (2026-10-15)

Breaking Changes

  • require Python 3.11 and test on Python 3.14 (#5862)

Features

  • add swarm_controller and swarm_channel registry types (#5860) (a11afc9)
  • agent-bridge: forward allowed Anthropic betas, Accept-Encoding and Responses reasoning context (#5708) (be4fd1f)
  • let agent bridges transform model responses with response_filter (#5715) (19f9349)
  • require Python 3.11 and test on Python 3.14 (#5862) (f612192)
  • sentinel monitors can call context.host.score (#5865) (b0a5cd1)

Bug Fixes

  • Antigravity host tool calls being denied as unproposed by the sandbox agent bridge (#5717) (46e79a4)
  • count overlapping waits once in working time and add suspend_working_limit() (#5758) (974c17d)
  • litellm-proxy: Grok models keep reasoning across turns, accept every reasoning effort, and report refusals (#5874) (7158198)
  • litellm-proxy: Meta Muse models keep reasoning across turns, accept unsupported parameters, and report refusals (#5878) (08f8600)
  • litellm: stop the function-calling hint making Gemini loop on tool calls (#5761) (0c3b3e4)

... (truncated)

Commits
  • 386e099 chore(main): release 0.3.282 (#5885)
  • 4aa17c0 docs: ask non-maintainers to leave PR reviews as comments (#5957)
  • 6b3c96f fix(sentinel): human() shows the escalations inspect_sentinel now passes to a...
  • 8f55012 feat(sentinel): steps carry a person's earlier human() decisions in the conve...
  • 5a2bafe feat(sentinel): step.history holds every message the agent sent; the agent lo...
  • eac6af3 docs: clarify responsibility for Docker security updates (#5859)
  • bbb6682 update extensions and evals
  • a699376 fix: stop installing brotli with Inspect (#5900)
  • f99c61d fix: cancelled trio eval with the rich display fails instead of returning its...
  • 5384f73 feat(sharding): conditional S3 writes and a local lock helper (#5775)
  • Additional commits viewable in compare view

Updates pillow from 12.3.0 to 13.0.0

Release notes

Sourced from pillow's releases.

13.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits
  • 293218a 13.0.0 version bump
  • 262e8e4 Update release notes for Pillow 13.0.0 (#10223)
  • af56ace Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 570df03 Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 53318b5 Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)
  • 0a87417 Bound retained TIFF tag data by stream size (#10225)
  • 11582e5 Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)
  • 8501adc Fix test
  • ec5f1cb Take libtiff scanline geometry tags from the image, not tiffinfo/exif
  • 4b63dff Share TIFF tag data budget across frames
  • Additional commits viewable in compare view

Updates openai from 3.10.0 to 3.35.1

Release notes

Sourced from openai's releases.

v3.35.1

3.35.1 (2026-10-18)

Bug Fixes

  • preserve beta Realtime byte reads on websockets 13 (#4102) (5766349)

v3.35.0

3.35.0 (2026-10-17)

Features

Bug Fixes

  • realtime: preserve byte receives with websockets 13 (#4098) (309916e)

v3.34.0

3.34.0 (2026-10-17)

Features

  • api: add degraded external storage status (#4097) (b216cb2)
  • api: add Realtime Translation WebSocket sessions (#4095) (bfada50)

v3.33.0

3.33.0 (2026-10-16)

Features

  • api: add safety identifiers to image requests and responses (#4093) (c969e32)
  • api: share Decisions cache breakpoint parameter type (#4092) (f7cefda)

v3.32.0

3.32.0 (2026-10-16)

Features

  • api: add cache settings and key options [2/2] (#4087) (325da45)
  • api: add prompt-based voice creation (#4091) (2e39db7)
  • api: add regional processing residency options (#4081) (21ce0c2)
  • api: add response error diagnostics and model notices (#4086) (e71d781)

... (truncated)

Changelog

Sourced from openai's changelog.

3.35.1 (2026-10-18)

Bug Fixes

  • preserve beta Realtime byte reads on websockets 13 (#4102) (5766349)

3.35.0 (2026-10-17)

Features

Bug Fixes

  • realtime: preserve byte receives with websockets 13 (#4098) (309916e)

3.34.0 (2026-10-17)

Features

  • api: add degraded external storage status (#4097) (b216cb2)
  • api: add Realtime Translation WebSocket sessions (#4095) (bfada50)

3.33.0 (2026-10-16)

Features

  • api: add safety identifiers to image requests and responses (#4093) (c969e32)
  • api: share Decisions cache breakpoint parameter type (#4092) (f7cefda)

3.32.0 (2026-10-16)

Features

  • api: add cache settings and key options [2/2] (#4087) (325da45)
  • api: add prompt-based voice creation (#4091) (2e39db7)
  • api: add regional processing residency options (#4081) (21ce0c2)
  • api: add response error diagnostics and model notices (#4086) (e71d781)
  • api: support audio fixture playback in Live sessions (#4085) (9998c1a)
  • api: support Decisions in Live sessions (#4088) (230a923)

Bug Fixes

... (truncated)

Commits

Updates semver from 3.0.4 to 3.1.0

Release notes

Sourced from semver's releases.

3.1.0

What's Changed

New Contributors

Full Changelog: python-semver/python-semver@3.0.4...3.1.0 Documentation: https://python-semver.readthedocs.io/en/latest/

Changelog

Sourced from semver's changelog.

Version 3.1.0

:Released: 2026-09-12 :Maintainer: Tom Schraitle

Bug Fixes

  • :pr:478: Version.parse() and Version.is_valid() now reject non-ASCII digits and trailing newlines, in accordance with the SemVer grammar. Optional minor and patch parsing applies the same character restrictions.

  • :pr:479: Comparing a :class:~semver.Version with a dict, tuple, or list that cannot construct a valid version (for example, an empty collection, wrong number of parts, non-numeric parts, or unknown keys) no longer raises internal errors from Version.__init__. The comparison operators now return :py:const:NotImplemented for such operands, following the general rule for invalid comparison operand types: equality evaluates to False and ordering raises Python's standard :py:exc:TypeError (for example, '>' not supported between instances of 'Version' and 'dict').

  • :pr:480: (:meth:~semver.version.Version.bump_build) will now add .0 to an existing build when the last segment of the current build metadata, split by dots (.), is not numeric. This is to ensure the bumped version contains a raised build instead of silently returning an unchanged version. For example, 1.2.3+alpha is bumped to 1.2.3+alpha.0. This mirrors the corresponding fix for the prerelease part (:gh:460). Related to :gh:466.

  • :gh:460: :meth:~semver.version.Version.bump_prerelease will now add .0 to an existing prerelease when the last segment of the current prerelease, split by dots (.), is not numeric. This is to ensure the new prerelease is considered higher than the previous one.

    :meth:~semver.version.Version.bump_prerelease now also support an argument bump_when_empty which will bump the patch version if there is no existing prerelease, to ensure the resulting version is considered a higher version than the previous one.

Features

  • :pr:476: Added optional [native] extra to accelerate parsing on CPython via the fast-semver-rs-backend package. The pure-Python parser remains the default; the native backend is opt-in and only available on CPython.

Internal Changes

: Update GitHub Actions for astral-sh/setup-uv (version 0.10.1), github/codeql-action (version 4)

Trivial Changes

  • :gh:463: Remove double code in :meth:Version.bump_build

... (truncated)

Commits
  • 642d1bc Change version to 3.1.0 (#481)
  • 2a2cf63 Suppress deprecation warnings in test suite
  • a62477b Improve comparisons and fix test coverage.
  • 0aa17a3 Handle malformed collection operands in Version comparisons (#479)
  • 1b7350c Improve test coverage to 100% (Rust backend)
  • ea2524a Fix bump_build() silently returning an unchanged version for digitless build ...
  • 1e87579 Reject non-ASCII digits and trailing newlines in version parsing (#478)
  • 0f18aa0 Add optional native parser backend (minimal adapter) (#476)
  • 873a675 Declare support for Python 3.15 (#475)
  • 99d2032 Bump cryptography from 49.0.0 to 50.0.0 (#473)
  • Additional commits viewable in compare view

Updates inspect-k8s-sandbox from 0.13.0 to 0.14.0

Updates basedpyright from 1.40.1 to 1.40.2

Release notes

Sourced from basedpyright's releases.

v1.40.2 (pyright 1.1.414)

What's Changed

Full Changelog: DetachHead/basedpyright@v1.40.1...v1.40.2

Commits
  • 3447596 asdf
  • 9c403f1 retry vscode publish because vs marketplace was down
  • fa4b52d 1.40.2
  • 3ca944f pin python version to 3.15
  • 1f4822c add python 3.15 builtin docstrings
  • 77cfb2d bump python dependencies & pnpm (#1877)
  • a8a92cd formatting
  • d55e86a Fix typeshed packaging for browser-basedpyright
  • c63390c delete dependabot config. too much of a pain in the ass to configure it to no...
  • 278e99c delete weekly typechecker benchmark workflow
  • Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20260815 to 6.0.12.20260906

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python group across 1 directory with 8 updates
a014770 
Bumps the python group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [inspect-ai](https://github.com/UKGovernmentBEIS/inspect_ai) | `0.3.266` | `0.3.282` |
| [pillow](https://github.com/python-pillow/Pillow) | `12.3.0` | `13.0.0` |
| [openai](https://github.com/openai/openai-python) | `3.10.0` | `3.35.1` |
| [semver](https://github.com/python-semver/python-semver) | `3.0.4` | `3.1.0` |
| inspect-k8s-sandbox | `0.13.0` | `0.14.0` |
| [basedpyright](https://github.com/detachhead/basedpyright) | `1.40.1` | `1.40.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` |
| [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260815` | `6.0.12.20260906` |



Updates `inspect-ai` from 0.3.266 to 0.3.282
- [Release notes](https://github.com/UKGovernmentBEIS/inspect_ai/releases)
- [Changelog](https://github.com/UKGovernmentBEIS/inspect_ai/blob/main/CHANGELOG.md)
- [Commits](UKGovernmentBEIS/inspect_ai@0.3.266...0.3.282)

Updates `pillow` from 12.3.0 to 13.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.3.0...13.0.0)

Updates `openai` from 3.10.0 to 3.35.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.10.0...v3.35.1)

Updates `semver` from 3.0.4 to 3.1.0
- [Release notes](https://github.com/python-semver/python-semver/releases)
- [Changelog](https://github.com/python-semver/python-semver/blob/master/CHANGELOG.rst)
- [Commits](python-semver/python-semver@3.0.4...3.1.0)

Updates `inspect-k8s-sandbox` from 0.13.0 to 0.14.0

Updates `basedpyright` from 1.40.1 to 1.40.2
- [Release notes](https://github.com/detachhead/basedpyright/releases)
- [Commits](DetachHead/basedpyright@v1.40.1...v1.40.2)

Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `types-pyyaml` from 6.0.12.20260815 to 6.0.12.20260906
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: inspect-ai
  dependency-version: 0.3.282
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pillow
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: openai
  dependency-version: 3.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: semver
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: inspect-k8s-sandbox
  dependency-version: 0.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: basedpyright
  dependency-version: 1.40.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260906
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants