Skip to content

build(deps): Bump pydantic from 2.13.4 to 2.14.1 - #6371

Closed
dependabot[bot] wants to merge 1 commit into
unstablefrom
dependabot/uv/pydantic-2.14.1
Closed

build(deps): Bump pydantic from 2.13.4 to 2.14.1#6371
dependabot[bot] wants to merge 1 commit into
unstablefrom
dependabot/uv/pydantic-2.14.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps pydantic from 2.13.4 to 2.14.1.

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

Two security fixes are fixed by this release: GHSA-gj4f-r7mf-jjxh and GHSA-955g-x97g-8mcp.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): Bump pydantic from 2.13.4 to 2.14.1
58fe479 
Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.13.4 to 2.14.1.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.14.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026
@dependabot
dependabot Bot requested a review from a team November 1, 2026 00:08
@dependabot dependabot Bot added the python:uv Pull requests that update python:uv code label Nov 1, 2026
@dependabot
dependabot Bot requested a review from leq-bot November 1, 2026 00:08
@rtibblesbot

rtibblesbot commented Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🟢 Reviewing

Last updated: 2026-11-01 00:51 UTC

rtibblesbot
rtibblesbot reviewed Nov 1, 2026
View reviewed changes

@rtibblesbot rtibblesbot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR #6371: dependency install fails because requirements-dev.txt still pins typing-extensions==4.15.0 (see inline). Dependabot won't regenerate that file. Recompile it before merging.

pydantic 2.13.4 → 2.14.1 is a minor bump of a production dependency (QTI models in contentcuration/utils/assessment/qti/).

  • Transitive: pydantic-core 2.46.4 → 2.50.1, typing-extensions 4.15.0 → 4.16.0, typing-inspection 0.4.2 → 0.4.4.
  • Breaking: none listed. Python 3.9 is dropped; Studio runs 3.10.
  • Behavior change: enum constructors now run in both validation modes.
  • Behavior change: model_config is no longer mutated.
  • Security: GHSA-gj4f-r7mf-jjxh (Fraction exponents), GHSA-955g-x97g-8mcp (multi-host URL validation).
  • CI: no tests ran. Re-check the QTI tests once install passes.

Written by rtibblesbot, an LLM-based coding agent.

Comment thread requirements.txt
stripe==5.5.0
# via -r requirements.in
typing-extensions==4.15.0
typing-extensions==4.16.0

@rtibblesbot rtibblesbot Nov 1, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocking: Conflicts with requirements-dev.txt:107 (typing-extensions==4.15.0). uv pip sync fails: Because you require typing-extensions==4.16.0 and typing-extensions==4.15.0 ... unsatisfiable. Recompile requirements-dev.txt against this requirements.txt.

Comment thread requirements.txt
exceptiongroup==1.3.1
# via celery
google-api-core[grpc]==2.30.0
google-api-core==2.30.0

@rtibblesbot rtibblesbot Nov 1, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion: The [grpc] extras are dropped here and on line 140. The grpcio pins remain, so a different compile tool likely caused this. Recompile with the repo's usual tool.

@rtibblesbot rtibblesbot mentioned this pull request Nov 1, 2026
Open
5 tasks
@rtibblesbot

rtibblesbot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Tracked in #6373.

@rtibblesbot rtibblesbot closed this Nov 1, 2026
@rtibblesbot

rtibblesbot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Quick check on rtibblesbot's review of this PR: react 👍 helpful · 😕 mixed · 👎 not helpful. Reply with anything specific.

@rtibblesbot rtibblesbot mentioned this pull request Nov 1, 2026
Open
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rtibblesbot rtibblesbot rtibblesbot left review comments
@leq-bot leq-bot Awaiting requested review from leq-bot leq-bot was automatically assigned from learningequality/le-admins-team

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rtibblesbot