Skip to content

chore(deps): bump the python-patch-minor group across 1 directory with 5 updates - #40

Merged
HelgDemidov merged 2 commits into
mainfrom
dependabot/pip/python-patch-minor-294dccc211
Sep 2, 2026
Merged

chore(deps): bump the python-patch-minor group across 1 directory with 5 updates#40
HelgDemidov merged 2 commits into
mainfrom
dependabot/pip/python-patch-minor-294dccc211

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-patch-minor group with 5 updates in the / directory:

Package From To
openai 3.3.1 3.6.0
anthropic 1.0.0 1.2.0
mcp 2.0.0 2.1.1
ruff 0.16.4 0.16.5
hypothesis 6.165.10 6.167.0

Updates openai from 3.3.1 to 3.6.0

Release notes

Sourced from openai's releases.

v3.6.0

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

v3.5.0

3.5.0 (2026-08-27)

Features

  • api: make function call output call IDs optional (#3738) (c74501d)

v3.4.0

3.4.0 (2026-08-25)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)
  • api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

3.5.0 (2026-08-27)

Features

  • api: make function call output call IDs optional (#3738) (c74501d)

3.4.0 (2026-08-25)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)
  • api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

  • api: encode Realtime call offers and session configuration (#3736) (555ac48)
  • apply consistent origin checks to WebSocket redirects (#3693) (1b324d0)

... (truncated)

Commits
  • 1cfa80a release: 3.6.0 (#3752)
  • 9917c6e chore(deps-dev): bump pyright from 1.1.399 to 1.1.413 (#3744)
  • 0b52c9e chore(deps-dev): bump mypy from 1.17 to 2.3.1 (#3747)
  • 4f5598c chore(deps-dev): bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719)
  • 95f0b43 chore(deps-dev): bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659)
  • a36010d chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745)
  • 7a5484d chore(deps-dev): bump rich from 14.2.0 to 15.0.0 (#3717)
  • d0a2550 chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#3665)
  • dacbb66 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666)
  • d765db7 build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 (#3672)
  • Additional commits viewable in compare view

Updates anthropic from 1.0.0 to 1.2.0

Release notes

Sourced from anthropic's releases.

v1.2.0

1.2.0 (2026-08-27)

Full Changelog: v1.1.0...v1.2.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (9df4565)

Bug Fixes

  • aws,bedrock: sign raw request bytes so binary file uploads work (#531) (f50e910)
  • ci: resolve assignment aliases in detect-breaking-changes (f2c4925)
  • sessions: make event accumulator forward-compatible with new event types (#533) (cbbaf6e)
  • tools: let read return a view_range of a file over the size cap (#538) (b68e876)
  • tools: preserve exact file bytes in the agent toolset and memory tool (no newline translation) (#540) (56921a8)
  • webhooks: require headers to be passed to unwrap() (0baa902)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (1832b27)

v1.1.0

1.1.0 (2026-08-26)

Full Changelog: v1.0.0...v1.1.0

Features

  • api: add updates thinking display mode (beta) (eb4a73f)
  • api: add missing anthropic-beta values (dbebd15)
  • api: add support for Organization API endpoints (5a5b8fc)

Bug Fixes

  • docs: correct link for long requests error (#1884) (4474f31), closes #1883
  • tools: keep the tool runner going on pause_turn (#343) (ab1ec60)

Chores

  • docs: clarify skill version latest support and memory version retention (a754f3b)
  • internal: cancel superseded CI runs (c061ab1)
  • internal: minor workflow reformat (1569002)
  • internal: remove the legacy response API (a48b1dd)
  • internal: use import httpx2 directly instead of aliasing as httpx (628d789)

... (truncated)

Changelog

Sourced from anthropic's changelog.

1.2.0 (2026-08-27)

Full Changelog: v1.1.0...v1.2.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (9df4565)

    The beta Files and Skills namespaces (client.beta.files, client.beta.skills) no longer send the files-api-2025-04-14 / skills-2025-10-02 headers and return the same shapes as client.files / client.skills (with Beta-prefixed type names under anthropic.types.beta). Requests that still send those headers on raw HTTP keep receiving the beta shapes.

    Changes in the beta namespaces:

    • client.beta.skills.delete() now deletes a Skill together with all of its versions (previously refused while any version existed). It returns BetaDeletedSkill (was SkillDeleteResponse).
    • Beta Messages type BetaSkill (container skill reference with skill_id, type, version) is renamed BetaContainerSkill; the request-side BetaSkillParams keeps its name. BetaSkill now names the Skill object returned by client.beta.skills.create() / retrieve() / list() (replacing SkillCreateResponse / SkillRetrieveResponse / SkillListResponse), and skill versions are BetaSkillVersion / BetaDeletedSkillVersion (replacing Version*Response).
    • client.beta.files.list() returns SyncPageCursor[BetaFileMetadata] / AsyncPageCursor[BetaFileMetadata] (with data / next_page) and paginates with page= / ids= (was SyncPage / AsyncPage with data, has_more, first_id, last_id and before_id= / after_id=); iterating the result for auto-pagination is unchanged. BetaSkill uses display_name (was display_title, also the create() keyword) and latest_version_id (was latest_version), and BetaSkillVersion is addressed by its skver_… id (the Unix-timestamp version field is gone).

    Migration guides: Migrate from files-api-2025-04-14 · Migrate from skills-2025-10-02

Bug Fixes

  • aws,bedrock: sign raw request bytes so binary file uploads work (#531) (f50e910)
  • ci: resolve assignment aliases in detect-breaking-changes (f2c4925)
  • sessions: make event accumulator forward-compatible with new event types (#533) (cbbaf6e)
  • tools: let read return a view_range of a file over the size cap (#538) (b68e876)
  • tools: preserve exact file bytes in the agent toolset and memory tool (no newline translation) (#540) (56921a8)
  • webhooks: require headers to be passed to unwrap() (0baa902)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (1832b27)

1.1.0 (2026-08-26)

Full Changelog: v1.0.0...v1.1.0

Features

  • api: add updates thinking display mode (beta) (eb4a73f)
  • api: add missing anthropic-beta values (dbebd15)
  • api: add support for Organization API endpoints (5a5b8fc)

Bug Fixes

  • docs: correct link for long requests error (#1884) (4474f31), closes #1883
  • tools: keep the tool runner going on pause_turn (#343) (ab1ec60)

Chores

... (truncated)

Commits
  • 071efb6 release: 1.2.0
  • 6d48fd0 docs(api): clarify pagination on the organization rate-limit list endpoints
  • 2f564a2 fix(tools): let read return a view_range of a file over the size cap (#538)
  • dffb22d fix(tools): preserve exact file bytes in the agent toolset and memory tool (n...
  • 932ab4b fix(ci): resolve assignment aliases in detect-breaking-changes
  • e541b4d feat(api): beta files/skills namespaces use GA shapes; drop dated beta header...
  • 0c1a85a fix(sessions): make event accumulator forward-compatible with new event types...
  • 39a670c fix(webhooks): require headers to be passed to unwrap()
  • 05532bc fix(aws,bedrock): sign raw request bytes so binary file uploads work (#531)
  • 181e2e5 release: 1.1.0
  • Additional commits viewable in compare view

Updates mcp from 2.0.0 to 2.1.1

Release notes

Sourced from mcp's releases.

v2.1.1

What's Changed

Full Changelog: modelcontextprotocol/python-sdk@v2.1.0...v2.1.1

v2.1.0

Highlights

  • Client accepts StdioServerParameters directly: Client(StdioServerParameters(command="uv", args=["run", "server.py"])) (#3321).
  • Prompt messages accept Image and Audio, prompt functions may return bare content blocks, and Message / UserMessage / AssistantMessage are exported from mcp.server.mcpserver (#3320).
  • The 4 MiB request body limit now also covers the SSE transport and the OAuth endpoints; SseServerTransport and MCPServer.sse_app() take max_request_body_size, and the SSE message endpoint answers 405 to non-POST requests (#3336).

Behaviour changes to be aware of

  • Handler exceptions (#3314): an unexpected exception from a tool, resource or prompt handler is logged once at ERROR with its traceback, and the client now sees only Error executing tool <name> (or the resource/prompt equivalent) rather than the exception text. Raise ToolError / ResourceError when the message is meant for the model; those still reach the client and are logged at INFO without a traceback.
  • Content-block return annotations (#3320): a tool annotated to return TextContent, EmbeddedResource, Image, Audio, or lists/unions of them no longer advertises outputSchema or returns structuredContent; its content is unchanged. Pass structured_output=True to keep the previous shape.

Fixes

  • TypedDict tool results: NotRequired keys are omitted instead of serialized as null, and registration no longer fails on Python 3.10 (#3224, #3227); recursive return types get an object-rooted outputSchema that pre-2026 clients accept (#3337).
  • 2026-07-28 over HTTP: a POSTed notification such as notifications/cancelled is acknowledged with 202 instead of rejected with 400 (#3324).
  • Pre-2026 sessions ignore cache-hint fields from later revisions instead of failing list_tools() (#3223), and accept boolean sub-schemas in tool schema properties (#3353).
  • mcp install reads and preserves a Claude Desktop config containing non-ASCII text on any Windows code page (#3296).

What's Changed

... (truncated)

Commits
  • 0921d94 Point imports of mcp.server.fastmcp at the migration guide (#3388)
  • 4d6f87e Build releases with the pinned hatchling and a publish action that accepts Me...
  • c5d7d0b docs: refresh translations for recent English changes (#3379)
  • d8b6383 Give recursive tool return types an object-rooted output schema (#3376)
  • 56af447 Log MCPServer handler exceptions by kind and keep crash details off the wire ...
  • f1c40b0 Accept boolean sub-schemas in 2025-11-25 tool schema properties (#3354)
  • 57394b0 Apply the request body limit to the SSE and OAuth endpoints (#3336)
  • 0cee624 Hand TypedDict tool results to pydantic natively (#3331)
  • 0d92192 Shorten stdio test comments (#3329)
  • b2025ab Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (#3326)
  • Additional commits viewable in compare view

Updates ruff from 0.16.4 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Commits

Updates hypothesis from 6.165.10 to 6.167.0

Commits
  • afe5b0b Bump hypothesis version to 6.167.0 and update changelog
  • 06bfa69 Merge pull request #4870 from Zac-HD/claude/status-reason-ideas-dum8wm
  • a0a7dfc Report the failing assume() when .map() gives up
  • d010799 Rename _filter_gave_ups test helper to _get_filter_gave_ups
  • ef98ff9 Fix the type of Bundle transformations
  • 8e36c8f Require passing data to SampledFromStrategy._transform
  • 47f1bc8 Pass location to __with_transform by keyword
  • d7a2dbd Rename filter_call_site to current_filter_call_site
  • 30b5f37 Move rejection_location onto ConjectureData
  • d390084 Access UnsatisfiedAssumption.location directly
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
chore(deps): bump the python-patch-minor group across 1 directory wit…
720a576 
…h 5 updates

Bumps the python-patch-minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [openai](https://github.com/openai/openai-python) | `3.3.1` | `3.6.0` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.0.0` | `1.2.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `2.0.0` | `2.1.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.4` | `0.16.5` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.165.10` | `6.167.0` |



Updates `openai` from 3.3.1 to 3.6.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.3.1...v3.6.0)

Updates `anthropic` from 1.0.0 to 1.2.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v1.0.0...v1.2.0)

Updates `mcp` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v2.0.0...v2.1.1)

Updates `ruff` from 0.16.4 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.4...0.16.5)

Updates `hypothesis` from 6.165.10 to 6.167.0
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.10...v6.167.0)

---
updated-dependencies:
- dependency-name: anthropic
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-patch-minor
- dependency-name: hypothesis
  dependency-version: 6.167.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-patch-minor
- dependency-name: mcp
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-patch-minor
- dependency-name: openai
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-patch-minor
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the python-patch-minor group with 5 updates chore(deps): bump the python-patch-minor group across 1 directory with 5 updates Sep 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-patch-minor-294dccc211 branch from bbcdffb to 720a576 Compare September 2, 2026 10:47
@HelgDemidov
fix(mcp): raise ToolError so tool-call error messages survive mcp 2.1
71bcda3 
mcp 2.1 hardened Tool.run()'s crash isolation: only ToolError/ResourceError
now keep their message visible to the client, everything else (bare
ValueError/RuntimeError, our own typed exceptions) collapses to a
message-less "Error executing tool <name>" (UnexpectedToolError). This
broke 16 tests in tests/unit/mcp/ on the mcp 2.0.0->2.1.1 bump in this PR.

_call_and_wrap_errors now raises mcp.server.mcpserver.exceptions.ToolError
instead of RuntimeError/bare ValueError — confirmed compatible with
mcp==2.0.0 too (that version wrapped every exception uniformly regardless
of type), so it works across this project's mcp>=2.0,<3 floor. Same
discipline this module already applies to resource-template handlers via
ResourceNotFoundError, now extended to tools.

Verified: 684 passed/3 skipped (unit+integration), ruff/mypy clean.
@HelgDemidov
HelgDemidov merged commit 6a147e9 into main Sep 2, 2026
39 checks passed
@HelgDemidov
HelgDemidov deleted the dependabot/pip/python-patch-minor-294dccc211 branch September 2, 2026 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@HelgDemidov