Skip to content

build(deps): Bump the backend group across 1 directory with 4 updates - #67

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-f64848ca81
Open

build(deps): Bump the backend group across 1 directory with 4 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-f64848ca81

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend group with 4 updates in the /backend directory: fastapi, mssql-python, cachetools and testcontainers.

Updates fastapi from 0.138.2 to 0.140.7

Release notes

Sourced from fastapi's releases.

0.140.6

Refactors

  • ⚡️ Avoid flattening dependencies for request parameters, mainly for OpenAPI. PR #16073 by @​tiangolo.

0.140.5

Refactors

0.140.4

Refactors

0.140.3

Refactors

0.140.2

Refactors

Internal

0.140.1

Refactors

  • ♻️ Update the lru_cache limit for dependencies to account for large apps. PR #16062 by @​tiangolo.

0.140.0

Refactors

Docs

Internal

... (truncated)

Commits

Updates mssql-python from 1.10.0 to 1.12.0

Release notes

Sourced from mssql-python's releases.

Release Notes - Version 1.12.0

Enhancements

• Standalone mssql-python-odbc Package for ODBC Driver Binaries (#663, #687)

What changed: The ODBC driver binaries that mssql-python needs at runtime are now also published as a separate, pure-data companion package called mssql-python-odbc (import name mssql_python_odbc, currently pinned to version 18.6.2). mssql-python declares mssql-python-odbc==18.6.2 in install_requires, so pip install mssql-python transparently pulls the driver package alongside it. The native loader prefers the external mssql_python_odbc package when it is present, and falls back to the ODBC driver binaries still bundled inside the mssql-python wheel when it is not — so existing installations keep working with no code changes. The fallback is GIL-safe and Alpine/musl-safe.

Who benefits: Users who want to keep driver binaries pinned or updated independently of the Python driver code, redistributors who want a slimmer mssql-python wheel over time, and anyone who was hitting duplicate-ownership issues from bundled ODBC files.

Impact: The Phase-2 split ships without a breaking change. In a future major release (v2.0.0) the bundled libs/ tree will be removed and mssql-python-odbc will become a hard dependency.

PR #663 | PR #687

Bug Fixes

• Bulk Copy Connection Timeout Not Honored (#650)

What changed: cursor.bulkcopy() opens a separate connection through mssql_py_core, which previously defaulted to a hardcoded 15-second connect timeout with no way to override it from Python. The cursor's query timeout (set via connect(timeout=X)) is now forwarded into mssql_py_core's connect_timeout when it is set. timeout=0 is preserved as "no override" and leaves mssql_py_core on its 15s default. The cursor's timeout snapshot at the time of the bulkcopy() call is what is used — later changes to the parent connection do not affect an in-flight bulk copy.

Who benefits: Applications that call bulkcopy() against slow, throttled, or high-latency SQL Server endpoints (for example over VPN or in cross-region scenarios) and need a longer connect timeout, or that need to fail fast with a shorter one.

Impact: bulkcopy() now honors the same connect timeout as the rest of the driver.

PR #650 | GitHub Issue #626

• Bulk Copy Fails on Custom CLR UDT Columns (via mssql_py_core) (#688)

What changed: cursor.bulkcopy() into a column whose type is a custom, assembly-registered CLR UDT (any UDT other than the built-in geography / geometry / hierarchyid) previously failed with Protocol Error: Unsupported TDS type for bulk copy: 0xF0, because the wire path in the native core had no handler for the UDT (0xF0) type token when writing COLMETADATA. The Rust core now maps UDT columns to varbinary(max) on the wire and streams the supplied bytes as the UDT's serialized form (its IBinarySerialize payload), matching how pyodbc and python-tds load UDT columns. SQL Server materializes the UDT on insert. Delivered via the mssql_py_core 0.1.6 → 0.1.7 bump.

Who benefits: Users who bulk-load rows into tables with custom CLR UDT columns.

Impact: Bulk copy into custom CLR UDT columns now succeeds when the supplied values are the UDT's serialized bytes.

PR #688 | GitHub Issue #667

v1.11.0

Bug Fixes

• SSH-tunnel / in-process forwarder deadlock (#604)

What changed: The driver now releases the GIL around blocking ODBC network round-trips that previously held it — the teardown path (SQLFreeHandle / SQLFreeStmt(SQL_CLOSE) when closing a statement with an open server-side cursor) and the SQLDescribeParam call issued for parametrized queries containing a None argument. The teardown release is guarded against interpreter finalization to stay safe during shutdown. Who benefits: Users whose connection is routed through an in-process Python TCP forwarder (SSH-tunnel-style setups), where a GIL held across a blocking network syscall wedged the forwarder thread. Impact: conn.close() / cursor.close() after a parametrized query, and parametrized queries with None values, no longer deadlock the interpreter.

PR #604 | GitHub Issue #565

• BINARY/VARBINARY NULL parameters in temp tables and table variables (#654)

What changed: Unknown NULL parameter types are now proactively resolved before any parameter is bound (for both single and batch execution paths). When SQLDescribeParam fails and the type falls back to SQL_VARCHAR, the driver emits a Python warning with concrete cursor.setinputsizes() guidance for binary columns. Who benefits: Users inserting NULL values into BINARY / VARBINARY columns of temp tables or table variables, which previously hit driver errors or SQL Server implicit-conversion failures.

... (truncated)

Commits
  • 8d82966 CHORE: Bump mssql-py-core to 0.1.7 (#688)
  • e6d7918 CHORE: Couple mssql-python to mssql-python-odbc==18.6.2 (#687)
  • f18b164 CHORE: Add OneBranch release pipelines for mssql-python-odbc (#664)
  • 710ee5b CHORE: move nightly build schedule to 4:30 AM IST (#686)
  • aa45d7f CHORE: Add standalone mssql-python-odbc package for ODBC driver binaries (#663)
  • 0966b05 DOC: add copilot-instructions.md for coding-agent guidance (#406)
  • 3202ebd CHORE: reduce perf-benchmark run-to-run variance (normalized score, median, w...
  • 7d22409 CHORE: validate macOS wheel is self-contained by removing system ODBC before ...
  • d94debd FIX: forward connection timeout to bulkcopy pycore connection (#650)
  • f118aa3 RELEASE:1.11.0 (#672)
  • Additional commits viewable in compare view

Updates cachetools from 7.1.4 to 7.1.6

Changelog

Sourced from cachetools's changelog.

v7.1.6 (2026-07-24)

  • Minor style improvements to keep ruff happy.

v7.1.5 (2026-07-23)

  • Fix TLRUCache silently keeping stale values on expired overwrites.

  • Reject negative cache item getsizeof values.

  • Update build environment.

Commits
  • 13bb86a Minor style improvements to keep ruff happy.
  • e2250be Fix RTD version handling.
  • 0d2a6ea Release v7.1.5.
  • d64cf80 Prepare v7.1.5.
  • fcbb0de Fix #406: Merge branch 'gaoflow-fix-tlru-overwrite-expired-stale-value' into ...
  • c0fdf6a Fix TLRUCache silently keeping stale value on expired overwrite
  • 978d34d Bump actions/setup-python from 6.2.0 to 6.3.0
  • d5c7eea Reject negative cache item sizes
  • 578e976 Update build environment.
  • e164b70 Bump codecov/codecov-action from 6.0.0 to 7.0.0
  • Additional commits viewable in compare view

Updates testcontainers from 4.14.2 to 4.15.0

Release notes

Sourced from testcontainers's releases.

testcontainers: v4.15.0

4.15.0 (2026-07-24)

Bug Fixes

testcontainers: v4.15.0-rc4

4.15.0-rc4 (2026-06-11)

Features

  • extended configuration options for container.exec method (#1050) (7dee471)
  • main: enable typing for complete package (237be27)
  • main: make legacy imports available with deprecation notice (ab6cca8)
  • test: start working on parallel-running tests (WIP!) (2d24429)

Bug Fixes

  • arangodb: replace deprecated add_hash_index with add_persistent_index (50bb202)
  • aws: wrong path of test (38089b0)
  • ci: correct coverage paths (b21eccd)
  • ci: fix community test selection (5287fc8)
  • ci: ignore @​overload in coverage (592c6d1)
  • ci: ignore TYPE_CHECKING block in coverage (3bdc561)
  • core/registry: use relative import for _LocalRegistryContainer (961e3d1)
  • core: make is_podman respect resolved docker host (#1048) (6018da3)
  • docs: update docs reflecting new structure (9427055)
  • doctests: Ensure paths are correct (f777673)
  • k3s: replace tmpfs dict kwarg with with_tmpfs_mount() (4d1da0c)
  • keycloak: disable SSL requirement for master realm after start (2a85595)
  • main: adopt ci to new src structure (dae421d)
  • main: adopt imports to new structure (9155677)
  • rabbitmq: declare queue as durable (2622736)
  • ruff: add **/*_example.py to per-file-ignores for T201 (01dbd16)
  • sftp: remove redundant start() calls and fix SSH connection options (54cef56)
  • trino: increase default startup timeout from 30s to 60s (2940501)
  • weaviate: update and fix module (5dd2aa1)

testcontainers: v4.15.0-rc3

4.15.0-rc3 (2026-06-03)

Features

... (truncated)

Changelog

Sourced from testcontainers's changelog.

4.15.0 (2026-07-24)

Bug Fixes

4.15.0-rc4 (2026-06-11)

Features

  • extended configuration options for container.exec method (#1050) (7dee471)
  • main: enable typing for complete package (237be27)
  • main: make legacy imports available with deprecation notice (ab6cca8)
  • test: start working on parallel-running tests (WIP!) (2d24429)

Bug Fixes

  • arangodb: replace deprecated add_hash_index with add_persistent_index (50bb202)
  • aws: wrong path of test (38089b0)
  • ci: correct coverage paths (b21eccd)
  • ci: fix community test selection (5287fc8)
  • ci: ignore @​overload in coverage (592c6d1)
  • ci: ignore TYPE_CHECKING block in coverage (3bdc561)
  • core/registry: use relative import for _LocalRegistryContainer (961e3d1)
  • core: make is_podman respect resolved docker host (#1048) (6018da3)
  • docs: update docs reflecting new structure (9427055)
  • doctests: Ensure paths are correct (f777673)
  • k3s: replace tmpfs dict kwarg with with_tmpfs_mount() (4d1da0c)
  • keycloak: disable SSL requirement for master realm after start (2a85595)
  • main: adopt ci to new src structure (dae421d)
  • main: adopt imports to new structure (9155677)
  • rabbitmq: declare queue as durable (2622736)
  • ruff: add **/*_example.py to per-file-ignores for T201 (01dbd16)
  • sftp: remove redundant start() calls and fix SSH connection options (54cef56)
  • trino: increase default startup timeout from 30s to 60s (2940501)
  • weaviate: update and fix module (5dd2aa1)

4.15.0-rc3 (2026-06-03)

Features

Bug Fixes

... (truncated)

Commits
  • 04267b3 chore(main): release testcontainers 4.15.0 (#1057)
  • 0f23105 chore(deps): bump boto3 from 1.43.36 to 1.43.50 (#1077)
  • bee755c chore(deps): bump kubernetes from 36.0.2 to 36.0.3 (#1078)
  • 9b6837d chore(deps): bump docker from 7.1.0 to 7.2.0 (#1076)
  • 7685f20 chore(deps): bump openfga-sdk from 0.10.3 to 0.10.4 (#1074)
  • 007e5ac chore(deps): bump redis from 8.0.0 to 8.0.1 (#1072)
  • 977279b chore(deps-dev): bump anyio from 4.14.0 to 4.14.1 (#1070)
  • 1571ff2 chore(deps-dev): bump ruff from 0.15.17 to 0.15.20 (#1068)
  • 1f683f9 chore(deps): bump wrapt from 2.2.1 to 2.2.2 (#1067)
  • 230b3be chore(deps): bump selenium from 4.44.0 to 4.45.0 (#1066)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the backend group across 1 directory with 4 updates
1c492b8 
Bumps the backend group with 4 updates in the /backend directory: [fastapi](https://github.com/fastapi/fastapi), [mssql-python](https://github.com/microsoft/mssql-python), [cachetools](https://github.com/tkem/cachetools) and [testcontainers](https://github.com/testcontainers/testcontainers-python).


Updates `fastapi` from 0.138.2 to 0.140.7
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.138.2...0.140.7)

Updates `mssql-python` from 1.10.0 to 1.12.0
- [Release notes](https://github.com/microsoft/mssql-python/releases)
- [Changelog](https://github.com/microsoft/mssql-python/blob/main/CHANGELOG.md)
- [Commits](microsoft/mssql-python@v1.10.0...v1.12.0)

Updates `cachetools` from 7.1.4 to 7.1.6
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.4...v7.1.6)

Updates `testcontainers` from 4.14.2 to 4.15.0
- [Release notes](https://github.com/testcontainers/testcontainers-python/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-python/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-python@testcontainers-v4.14.2...testcontainers-v4.15.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: mssql-python
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: cachetools
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: testcontainers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants