Skip to content

chore(deps): refresh SDK dependencies and CI actions - #408

Merged
WH-2099 merged 3 commits into
mainfrom
dependabot/uv/uv-5b18fe017b
Nov 2, 2026
Merged

WH-2099 merged 3 commits into
mainfrom
dependabot/uv/uv-5b18fe017b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Refresh SDK runtime, development, build, and CI dependencies to the latest stable releases available on 2026-11-02.
All 54 resolved Python dependencies were checked against PyPI; 16 packages advance, and the remaining packages are already current.
Update the corresponding declared version requirements and use uv_build~=0.13.6.

Package Previous main Updated
anyio 4.15.1 4.16.0
certifi 2026.7.22 2026.10.23
coverage 7.16.2 7.17.0
hypothesis 6.169.0 6.170.14
multidict 7.1.0 7.2.1
pluggy 1.6.0 1.7.0
prek 0.5.5 0.5.9
pycparser 3.11 3.12
pydantic 2.14.1 2.14.2
pydantic-core 2.50.1 2.50.2
pydantic-settings 2.15.0 2.16.2
pytest 9.1.1 9.2.0
pytest-mock 3.16.0 3.17.0
ruff 0.17.0 0.17.3
ty 0.0.86 0.0.95
zope-interface 8.6 8.7

GitHub Actions remain pinned to verified release commit SHAs.
Update setup-uv to v10.3.3, upload-artifact to v7.0.2 throughout, and gh-action-pypi-publish to v1.14.3.
The other six Actions already use their latest stable release.

Ruff 0.17.3 detects four tests that replace functions on the shared time module.
Replace only the consuming modules' clock bindings so timing and reconnect tests cannot change clocks used by unrelated work.

Validation:

  • just check and git diff --check pass.
  • Python 3.12: 1,803 tests and all coverage gates pass.
  • Python 3.13: 1,803 tests and all coverage gates pass; the four adjusted test files also pass all 60 tests.
  • SDK coverage: 96.96% lines and 93.29% branches on both Python versions.
  • just build passes with the updated build backend.
  • Independent review verified package versions, Python support, Action SHAs and inputs, and clock isolation.

Compatibility Check

  • Reviewed runtime dependency changes and retained Python >=3.12 support.
  • Reviewed forward/backward compatibility; SDK public interfaces and wire payloads are unchanged.
  • Dependency minimums in package metadata match the updated versions where specified.
  • Package version remains the unreleased 0.11.0; no new SDK migration step is introduced.

Available Checks

  • just build has passed.
  • Required local checks, tests, and coverage gates have passed.

Live provider endpoints and native Windows/macOS were not exercised.

Bumps the uv group with 1 update in the / directory: [certifi](https://github.com/certifi/python-certifi).


Updates `certifi` from 2026.7.22 to 2026.10.19
- [Commits](certifi/python-certifi@2026.07.22...2026.10.19)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 23, 2026
@WH-2099 WH-2099 self-assigned this Nov 2, 2026
@WH-2099 WH-2099 added this to the 1.19.0 milestone Nov 2, 2026
@WH-2099 WH-2099 changed the title chore(deps): bump certifi from 2026.7.22 to 2026.10.19 in the uv group across 1 directory chore(deps): refresh SDK dependencies and CI actions Nov 2, 2026

@WH-2099 WH-2099 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the dependency refresh, verified current stable package versions and Action release SHAs, and checked the module-local clock mocks. Local checks, coverage gates and build pass. Python 3.12/3.13 CI, title validation, static checks and CodeQL all pass for 07df88d.

@WH-2099
WH-2099 merged commit 6fb518b into main Nov 2, 2026
7 checks passed
@WH-2099
WH-2099 deleted the dependabot/uv/uv-5b18fe017b branch November 2, 2026 03:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant