8000 build(deps): bump the python-minor group in /fastapi_backend with 10 updates by dependabot[bot] · Pull Request #732 · adeelahmad/lense · GitHub
[go: up one dir, main page]
Skip to content

build(deps): bump the python-minor group in /fastapi_backend with 10 updates - #732

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/fastapi_backend/python-minor-0f4ab20dc5
Open

build(deps): bump the python-minor group in /fastapi_backend with 10 updates#732
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/fastapi_backend/python-minor-0f4ab20dc5

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Nov 11, 2026
Copy link
Copy Markdown
Contributor

Bumps the python-minor group in /fastapi_backend with 10 updates:

Package From To
markdown 3.11.2 3.11.3
regex 2026.9.29 2026.11.7
funasr 1.4.21 1.4.23
transformers 5.22.1 5.22.2
openshell 0.1.6 0.1.7
botocore 1.43.123 1.43.126
extract-msg 0.58.1 0.58.2
ruff 0.17.3 0.17.4
coverage 7.17.1 7.17.2
mkdocs-material 9.8.0 9.8.1

Updates markdown from 3.11.2 to 3.11.3

Release notes

Sourced from markdown's releases.

Release 3.11.3

Fixed

  • Fix cases in new emphasis handling that did not handle long chains of tokens like they should (#1690).
  • Fix quadratic-time parsing of many consecutive reference definitions, and of many consecutive footnote definitions in the footnotes extension.
  • Support automatic links with URL schemes other than HTTP and FTP, such as <ssh://example.org> (#1244).
  • Fix quadratic-time id generation in the toc extension when many headers share the same text.
  • Ignore glossary abbreviations with empty definitions after inline elements, consistently with abbreviations before inline elements.
  • Strip complete HTML tags with quoted > characters from toc labels and generated heading IDs.
  • Fix quadratic-time regex backtracking in attr_list when a block ends with an unclosed attribute list followed by a long run of spaces, e.g. a line consisting only of { and some text with many trailing spaces (#1656).
  • Fix quadratic-time regex backtracking in hash headers when a long run of # characters is followed by more text on the same line.
  • Fix quadratic time when a document contains many unclosed HTML comments (<!-- with no matching -->).
  • Fix regression in BacktickInlineProcessor where text could be lost when opening and closing backticks did not match (#1668).
  • Escape the language name in the codehilite extension's non-Pygments output to maintain consistency with Pygments output.
  • Preserve attributes without a value in the attr_list extension exactly as provided, rather than rendering them as key="key", so the same source renders consistently under both the html and xhtml output formats (#1501).
Changelog

Sourced from markdown's changelog.

[3.11.3] - 2026-11-05

Fixed

  • Fix cases in new emphasis handling that did not handle long chains of tokens like they should (#1690).
  • Fix quadratic-time parsing of many consecutive reference definitions, and of many consecutive footnote definitions in the footnotes extension.
  • Support automatic links with URL schemes other than HTTP and FTP, such as <ssh://example.org> (#1244).
  • Fix quadratic-time id generation in the toc extension when many headers share the same text.
  • Ignore glossary abbreviations with empty definitions after inline elements, consistently with abbreviations before inline elements.
  • Strip complete HTML tags with quoted > characters from toc labels and generated heading IDs.
  • Fix quadratic-time regex backtracking in attr_list when a block ends with an unclosed attribute list followed by a long run of spaces, e.g. a line consisting only of { and some text with many trailing spaces (#1656).
  • Fix quadratic-time regex backtracking in hash headers when a long run of # characters is followed by more text on the same line.
  • Fix quadratic time when a document contains many unclosed HTML comments (<!-- with no matching -->).
  • Fix regression in BacktickInlineProcessor where text could be lost when opening and closing backticks did not match (#1668).
  • Escape the language name in the codehilite extension's non-Pygments output to maintain consistency with Pygments output.
  • Preserve attributes without a value in the attr_list extension exactly as provided, rather than rendering them as key="key", so the same source renders consistently under both the html and xhtml output formats (#1501).
Commits
  • 40eca04 Bump version to 3.11.3
  • a198bb3 Apply the CommonMark rule of 3 which we missed.
  • 0bfd8c3 Fix quadratic-time parsing of consecutive reference definitions
  • 3f2c551 Avoid rescanning for a comment close after unclosed comments
  • 8bfb9aa Ignore empty abbreviation definitions in element tails
  • 527b81e Recognize additional URL schemes in automatic links
  • b97b56c attr_list: preserve valueless attributes as provided
  • e76f0b7 Fix quadratic-time id generation in toc extension
  • 0f0a860 Fix quadratic-time backtracking in hash header regex
  • 5e335ef Fix TOC labels for quoted HTML angle brackets
  • Additional commits viewable in compare view

Updates regex from 2026.9.29 to 2026.11.7

Commits
  • bb0db39 Updated main.yml to build manylinux2014 wheels on Python 3.11.
  • ce4f246 Git issue 626: \X does not apply Unicode 18.0.0's changed GB9c (10 GraphemeBr...
  • edf9c06 Git issue 625: KeyError instead of ValueError when both VERSION0 and VERSION1...
  • See full diff in compare view

Updates funasr from 1.4.21 to 1.4.23

Commits
  • efe5504 Release FunASR 1.4.23 (#3851)
  • 47afec8 chore(release): prepare FunASR 1.4.23
  • 60adaf8 fix(runtime): release ONNX VAD and punctuation fixes as 0.4.9 (#3850)
  • cd6e169 fix(runtime): release ONNX VAD and punctuation fixes as 0.4.9
  • 49f7472 fix(onnx): preserve punctuation state on empty input (#3847)
  • 398c590 fix(tokenizer): honor supplied vocabulary IDs (#3783)
  • d8e6766 fix(onnx): handle empty and short offline VAD inputs (#3846)
  • 57485f7 fix(frontend): handle default no-LFR online features (#3849)
  • 7d8855a fix(frontend): initialize consumed frames without LFR
  • 190ff6e fix(onnx): handle empty punctuation input without consuming cache
  • Additional commits viewable in compare view

Updates transformers from 5.22.1 to 5.22.2

Release notes

Sourced from transformers's releases.

Patch release v5.22.2

Some in between patch for security and distributed fixes. See the included commits 🤗

Full Changelog: huggingface/transformers@v5.22.1...v5.22.2

Commits

Updates openshell from 0.1.6 to 0.1.7

Commits

Updates botocore from 1.43.123 to 1.43.126

Commits
  • 76ccee1 Merge branch 'release-1.43.126'
  • 51e0576 Bumping version to 1.43.126
  • a6d782a Update partitions file
  • bbb7c71 Update endpoints model
  • 1cd0552 Update to latest models
  • 7e892ec Merge branch 'release-1.43.125'
  • 4f864a4 Merge branch 'release-1.43.125' into develop
  • 651dc15 Bumping version to 1.43.125
  • 554b2fe Update to latest models
  • f6d89d8 Merge branch 'release-1.43.124'
  • Additional commits viewable in compare view

Updates extract-msg from 0.58.1 to 0.58.2

Release notes

Sourced from extract-msg's releases.

Version 0.58.2

v0.58.2

  • [Advisory GHSA-6p33-92hw-4v86] [Advisory GHSA-cxpg-prmv-g4pp] Fixed further attack vectors regarding the original advisory that were previously undiscovered. Most changes suggested in the new advisory were accepted as is, however a change was made to the handling of srcset to prevent it from being used at all if external files are not allowed.
  • Changed setup.py to exclude extract_msg_tests from installed packages.
  • Fixed an issue where the code for MSGPath was using a feature added in 3.9.
Changelog

Sourced from extract-msg's changelog.

v0.58.2

  • [Advisory GHSA-6p33-92hw-4v86] [Advisory GHSA-cxpg-prmv-g4pp] Fixed further attack vectors regarding the original advisory that were previously undiscovered. Most changes suggested in the new advisory were accepted as is, however a change was made to the handling of srcset to prevent it from being used at all if external files are not allowed.
  • Changed setup.py to exclude extract_msg_tests from installed packages.
  • Fixed an issue where the code for MSGPath was using a feature added in 3.9.

v0.58.1

  • [[TeamMsgExtractor #493](TeamMsgExtractor/msg-extractor#493 Fixed unable to open embedded msg files due to MSGBase.prefixList still being used after it was removed.
  • Corrected the typing signature of MSGBase.prefix.

v0.58.0

  • Changed module to primarily use MSGPath for pathing. All functions still except string paths or list paths, they now just also accept MSGPath and use it under the hood for path conversions. With this, some functions have been changed to specifically return MSGPath rather than list and string versions of paths. Removed: MSGBase.prefixList, utils.inputToMsgPath(), and utils.msgPathToString(). Modified: *.fixPath(), *.listDir(), and MSGBase.prefix.
  • Changed setup to use find_packages() to try and get ahead of deprecation and ensure all files are distributed correctly.
  • Fixed MSGFile.existsTypedProperty() to actually do what it says it will do. Previous code had it not checking if the right directory was being searched when location was specified.
  • Changed MSGFile.sExists() to correctly detect only the valid string stream type for the MSG file instead of unconditionally checking both types.
  • Re-added extract_msg.constants.PROPERTIES which was removed for unknown reasons in an earlier version (0.42.0). MSGBase.saveRaw() appears to have been non-functional since then.

v0.57.1

  • [[TeamMsgExtractor #489](TeamMsgExtractor/msg-extractor#489 Fix an issue where MessageSignedBase.body would raise an error when the plain text body was not utf-8 encoded bytes. This error was due to extract_msg.utils.unwrapMultipart() accidentally returning the plain text body as bytes instead of string.
  • Change some of the command line documentation.
  • Fix some of the imports in extract_msg/__init__.py.
  • Add additional tests to module.

v0.57.0

  • [Advisory GHSA-cxpg-prmv-g4pp] Fixed a vulnerability related to unchecked input passed out to wkhtmltopdf when converting the MSG file to PDF. Javascript is now strongly blocked from being enabled and will be stripped from the HTML where appropriate before reaching wkhtmltopdf. Additionally, the option --wk-allow-external-files on the command line (or wkAllowExternalFiles to MessageBase.save()) will be required for external files to be loaded into the HTML to convert. Without these, they will be stripped before reaching wkhtmltopdf for security.
  • [Advisory GHSA-mqxr-j8rh-p4q4] Fixed an issue where an attacker controlled MSG file could take advantage of a poorly written section of code in the RTF deencapsulation function on the extract-msg side to waste massive amounts of time and memory resources.
  • [Advisory GHSA-rgjf-vmqv-8pv9] Change the way multiple type properties are accessed for binary and string. This includes modifications to MSGFile.getMultipleBinary(), MSGFile.getMultipleString(), and MSGFile.exists() to significantly reduce wasted times for malicious files. Malicious files previously could cause extract-msg to do unnecessarily large numbers of calls to MSGFile.exists() which previously did not use caching to speed up its search.
  • Changed MSGFile.listDir() to return a tuple of tuples to prevent it's cache results from being tampered with.
  • Fixed an issue with MSGFile.listDir() that caused it to not cache in certain circumstances when it should always cache.
  • Fixed a check in MSGFile.getMultipleBinary() that executed wrong and did not properly check for bad data.
  • Fixed MSGFile._getTypedSteam() to correctly parse binary and string streams when an entry is missing.
  • Fixed StandardViolationError being raised without checking error behavior in MSGFile.getMultipleBinary() and MSGFile.getMultipleString().
  • Added check for standard violation in MSGFile.getMultipleString() that is raised (or logged, depending on error behavior) if a string stream is missing a null byte. This also doesn't strip the last character in the stream if it is not null.
  • Added length check log to MSGFile.getMultipleBinary() and MSGFile.getMultipleString() that checks to see if the expected length for each stream matches what the length stream says. If not, it logs a warning about the mismatch, but does not consider this a gross violation of the standard.
  • Changed how MessageBase.deencapsulatedRtf handles RTF data without a closing brace.
  • Fixed wrong return being used in extract_msg.encoding.utils.singleByteEncode() and extract_msg.encoding.utils.variableByteEncode().
  • Fixed missing return in extract_msg.encoding.utils.singleByteEncode().
  • Fixed wrong parameter names for codec types made in extract_msg.encoding.utils.createSBEncoding() and extract_msg.encoding.utils.createVBEncoding().
  • Fix some values being incorrectly returned from encode/decode functions in extract_msg.encoding.utils.

v0.56.1

v0.56.0

  • [[TeamMsgExtractor #478](TeamMsgExtractor/msg-extractor#478 Expand allowable versions of ebcdic to include 2.x. The 2.0 release is a pure technical release with no functional changes; it only drops support for Python 2 and 3.8. The lower bound is unchanged so installs on Python 3.8 will continue to resolve to ebcdic 1.1.1.
  • [[TeamMsgExtractor #469](TeamMsgExtractor/msg-extractor#469 Expanded beautifulsoup to allow for versions up to 5.*.*. I was previously hesitant to do so because they sometimes do what seems like non backwards compatible changes in minor versions, but it looks like this should be fine.
  • [[TeamMsgExtractor #471](TeamMsgExtractor/msg-extractor#471 Added .strip() to file name determination to ensure that folders with trailing spaces would be corrected before being used.
  • [[TeamMsgExtractor #481](TeamMsgExtractor/msg-extractor#481 Fixed a typo that caused an HTML body created from plain text to end with </head> instead of </html>.
  • [[TeamMsgExtractor #476](TeamMsgExtractor/msg-extractor#476 Fixed MessageBase.asEmailMessage() raising ValueError when a message has multiple To recipients.

v0.55.0

... (truncated)

Commits

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
  • c9150f0 Add project walltime benchmarks for Ruff (#30061)
  • 64989ec [ty] Report invalid module globs once per override pattern (#30031)
  • 367a563 [ty] Fix conditional type and tuple annotations (#29987)
  • Additional commits viewable in compare view

Updates coverage from 7.17.1 to 7.17.2

Release notes

Sourced from coverage's releases.

7.17.2

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with “attempt to write a readonly database”. These were regressions in 7.17.1. They are fixed, closing issue 2356:
    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.
    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can’t read is now reported like any other unusable data file, and is left in place.

➡️  PyPI page: coverage 7.17.2. :arrow_right:  To install: python3 -m pip install coverage==7.17.2

Changelog

Sourced from coverage's changelog.

Version 7.17.2 — 2026-11-04

  • Fix: two different scenarios failed with "attempt to write a readonly database". These were regressions in 7.17.1. They are fixed, closing issue 2356_:

    • When using a version of SQLite older than 3.34.0, such as on RHEL 8 or Ubuntu 20.04, coverage combine (and pytest-cov, which combines automatically) always failed.

    • coverage combine and coverage debug data failed when a data file existed but had no coverage schema, for example an empty file left behind by a worker that died. A file we can't read is now reported like any other unusable data file, and is left in place.

.. _issue 2356: coveragepy/coveragepy#2356

.. _changes_7-17-1:

Commits
  • d0d3e1d docs: combine the two 'combine' failure descriptions
  • 33cb85f fix: don't initialize a data file we can only read (#2360)
  • 6e71bac docs: prep for 7.17.2
  • 8273f72 test: fix two tests that failed on the Rocky 8 old_sqlite job
  • ce216fd build: a test environment for old version of SQLite
  • 36e4a18 fix: combine failed on SQLite<3.34.0 #2356
  • d80ed19 build: bump version to 7.17.2
  • See full diff in compare view

Updates mkdocs-material from 9.8.0 to 9.8.1

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.8.1

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

  • Updated Docker base image to Alpine 3.24
  • Updated Docker image dependencies to fix vulnerabilities
  • Updated Node build-time dependencies to fix vulnerabilities
Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.8.1 (2026-11-07)

  • Updated Docker base image to Alpine 3.24
  • Updated Docker image dependencies to fix vulnerabilities
  • Updated Node build-time dependencies to fix vulnerabilities

mkdocs-material-9.8.0 (2026-10-24)

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

  • Updated Node build-time dependencies to fix vulnerabilities
  • Updated Python dependency minimums and required Python 3.11
  • Removed RSS from recommended dependencies
  • Updated project status and maintenance links
  • Updated CLI notice with end-of-life and migration guidance
  • Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide: https://zensical.org/docs/compatibility/mkdocs/migration/

It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Jinja2: affected <=3.1.5; new minimum 3.1.6 (CVE-2025-27516) GHSA-cpwx-vrp4-4pq7

Markdown: affected <3.8.1; new minimum 3.8.1 (CVE-2025-69534) GHSA-5wmx-573v-2qwq

Pygments: affected <2.20.0; new minimum 2.20.0 (CVE-2026-4539) GHSA-5239-wwwm-4pmq

... (truncated)

Commits
  • 16c95ad Prepare 9.8.1 release
  • b3fe832 Fixed documentation workflow
  • 004d29e Updated dependencies to fix vulnerabilities
  • 7590e14 Documentation
  • 0f044db Updated documentation build to use public Material
  • dc38d1e Documentation
  • ebbfb46 Updated Docker base image to Alpine 3.24
  • 624aff1 Updated build and documentation workflows
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the python-minor group
8f6d0e5 
Bumps the python-minor group in /fastapi_backend with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.11.2` | `3.11.3` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2026.9.29` | `2026.11.7` |
| [funasr](https://github.com/modelscope/FunASR) | `1.4.21` | `1.4.23` |
| [transformers](https://github.com/huggingface/transformers) | `5.22.1` | `5.22.2` |
| [openshell](https://github.com/ai-openshell/sdk-python) | `0.1.6` | `0.1.7` |
| [botocore](https://github.com/boto/botocore) | `1.43.123` | `1.43.126` |
| [extract-msg](https://github.com/TeamMsgExtractor/msg-extractor) | `0.58.1` | `0.58.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.3` | `0.17.4` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.17.1` | `7.17.2` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.8.0` | `9.8.1` |


Updates `markdown` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.11.2...3.11.3)

Updates `regex` from 2026.9.29 to 2026.11.7
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.9.29...2026.11.7)

Updates `funasr` from 1.4.21 to 1.4.23
- [Release notes](https://github.com/modelscope/FunASR/releases)
- [Commits](modelscope/FunASR@v1.4.21...v1.4.23)

Updates `transformers` from 5.22.1 to 5.22.2
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.22.1...v5.22.2)

Updates `openshell` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/ai-openshell/sdk-python/releases)
- [Commits](https://github.com/ai-openshell/sdk-python/commits)

Updates `botocore` from 1.43.123 to 1.43.126
- [Commits](boto/botocore@1.43.123...1.43.126)

Updates `extract-msg` from 0.58.1 to 0.58.2
- [Release notes](https://github.com/TeamMsgExtractor/msg-extractor/releases)
- [Changelog](https://github.com/TeamMsgExtractor/msg-extractor/blob/master/CHANGELOG.md)
- [Commits](TeamMsgExtractor/msg-extractor@v0.58.1...v0.58.2)

Updates `ruff` from 0.17.3 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.3...0.17.4)

Updates `coverage` from 7.17.1 to 7.17.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.17.1...7.17.2)

Updates `mkdocs-material` from 9.8.0 to 9.8.1
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.8.0...9.8.1)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: 3.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- de
8000
pendency-name: regex
  dependency-version: 2026.11.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: funasr
  dependency-version: 1.4.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: transformers
  dependency-version: 5.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: openshell
  dependency-version: 0.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: botocore
  dependency-version: 1.43.126
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: extract-msg
  dependency-version: 0.58.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: ruff
  dependency-version: 0.17.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: coverage
  dependency-version: 7.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: mkdocs-material
  dependency-version: 9.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 11, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

0