Skip to content

build(deps): bump the pip group across 2 directories with 4 updates#1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-9268a6379e
Open

build(deps): bump the pip group across 2 directories with 4 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-9268a6379e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Dec 3, 2025

Bumps the pip group with 4 updates in the / directory: python-socketio, langchain-community, pypdf and authlib.
Bumps the pip group with 4 updates in the /backend directory: python-socketio, langchain-community, pypdf and authlib.

Updates python-socketio from 5.13.0 to 5.14.0

Release notes

Sourced from python-socketio's releases.

Release 5.14.0

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.15.0 - 2025-11-22

Release 5.14.3 - 2025-10-29

  • Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
  • Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

  • Restore binary message support in message queue setups #1509 (commit)
  • Fix formatting of client connection error #1507 (commit)
  • Add 3.14 and pypy-3.11 CI tasks (commit)
  • Improve documentation of the BaseManager.get_participants() method (commit)

Release 5.14.1 - 2025-10-02

  • Restore support for rediss:// URLs, and add support for valkeys:// as well (commit)
  • Add support for Redis connections using unix sockets #1503 (commit) (thanks Darren Chang!)

Release 5.14.0 - 2025-09-30

  • Replace pickle with json in message queue communications #1502 (commit)
  • Add support for Valkey in the Redis client managers #1488 (commit) (thanks phi-friday!)
  • Keep track of which namespaces failed to connect #1496 (commit)
  • Fixed transport property of the simple clients to be a string as documented #1499 (commit)
  • SimpleClient.call does not raise TimeoutError on timeout #1501 (commit) (thanks James Thistlewood!)
  • Wait for client to end background tasks on disconnect #1500 (commit)
  • Better error logging for the Redis managers #1479 (commit) (thanks Eugnee!)
  • Channel was not properly initialized in several pubsub client managers #1476 (commit) (thanks Eugnee!)
  • Add message queue deployment recommendations for security (commit)
  • Add missing async on session examples for the async server #1465 (commit) (thanks Func!)
  • Add SPDX license identifier #1453 (commit) (thanks Marc Mueller!)

Release 5.13.0 - 2025-04-12

  • Eliminate race conditions on disconnect #1441 (commit)
  • Preserve exception context in Client.connect and AsyncClient.connect #1450 (commit) (thanks Tim Van Baak!)
  • Allow custom client subclasses to be used in SimpleClient and AsyncSimpleClient #1432 (commit)
  • Add support for Redis Sentinel URLs in RedisManager and AsyncRedisManager #1448 (commit)
  • Remove incorrect reference to an asyncio installation extra in documentation #1449 (commit)

... (truncated)

Commits
  • 400200e Release 5.14.0
  • 53f6be0 Replace pickle with json (#1502)
  • a59c6f5 Fix: SimpleClient.call does not raise TimeoutError on timeout (#1501)
  • f61e0be wait for client to end background tasks on disconnect (#1500)
  • 23556fb Fixed transport property of the simple clients to be a string as documented (...
  • e59acf1 Address failures of test suite on Mac (#1497)
  • 36a8922 Add support for valkey in the Redis client managers (#1488)
  • 5dc2aea keep track of which namespaces failed to connect (#1496)
  • b3da354 Add message queue deployment recommendations
  • 3625fe8 Bump eventlet from 0.35.2 to 0.40.3 in /examples/server/wsgi (#1491) #nolog
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.26 to 0.3.27

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates pypdf from 4.3.1 to 6.4.0

Release notes

Sourced from pypdf's releases.

Version 6.4.0, 2025-11-23

What's new

Security (SEC)

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519) by @​PJBrs

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528) by @​mbierma

Full Changelog

Version 6.3.0, 2025-11-16

What's new

New Features (ENH)

Bug Fixes (BUG)

Full Changelog

Version 6.2.0, 2025-11-09

What's new

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Version 6.1.3, 2025-10-22

What's new

Security (SEC)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489) by @​Nid01

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.4.0, 2025-11-23

Security (SEC)

  • Reduce default limit for LZW decoding

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519)

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528)

Full Changelog

Version 6.3.0, 2025-11-16

New Features (ENH)

  • Wrap and align text in flattened PDF forms (#3465)

Bug Fixes (BUG)

  • Fix missing "PreventGC" when cloning (#3520)
  • Preserve JPEG image quality by default (#3516)

Full Changelog

Version 6.2.0, 2025-11-09

New Features (ENH)

  • Add 'strict' parameter to PDFWriter (#3503)

Bug Fixes (BUG)

  • PdfWriter.append fails when there are articles being None (#3509)

Documentation (DOC)

  • Execute docs examples in CI (#3507)

Full Changelog

Version 6.1.3, 2025-10-22

Security (SEC)

  • Allow limiting size of LZWDecode streams (#3502)
  • Avoid infinite loop when reading broken DCT-based inline images (#3501)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489)

Robustness (ROB)

  • Fail with explicit exception when image mode is an empty array (#3500)

Full Changelog

... (truncated)

Commits

Updates authlib from 1.6.1 to 1.6.5

Release notes

Sourced from authlib's releases.

v1.6.5

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.6.4...v1.6.5

v1.6.4

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.6.3...v1.6.4

Version 1.6.3

What's Changed

Full Changelog: authlib/authlib@v1.6.2...v1.6.3

Version 1.6.2

What's Changed

Full Changelog: authlib/authlib@v1.6.1...v1.6.2

Changelog

Sourced from authlib's changelog.

Version 1.6.5

Released on Oct 2, 2025

  • RFC7591 generate_client_info and generate_client_secret take a request parameter.
  • Add size limitation when decode JWS/JWE to prevent DoS.
  • Add size limitation for DEF JWE zip algorithm.

Version 1.6.4

Released on Sep 17, 2025

  • Fix InsecureTransportError error raising. :issue:795
  • Fix response_mode=form_post with Starlette client. :issue:793
  • Validate crit header value, reject unprotected header in crit header.

Version 1.6.3

Released on Aug 26, 2025

  • OIDC id_token are signed according to id_token_signed_response_alg client metadata. :issue:755

Version 1.6.2

Released on Aug 23, 2025

  • Temporarily restore OAuth2Request body parameter. :issue:781 :pr:791
  • Allow 127.0.0.1 in insecure transport mode. :pr:788
  • Raise MissingCodeException when the code parameter is missing. :issue:793 :pr:794
  • Fix id_token generation with EdDSA algs. :issue:799 :pr:800
Commits

Updates python-socketio from 5.13.0 to 5.14.0

Release notes

Sourced from python-socketio's releases.

Release 5.14.0

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.15.0 - 2025-11-22

Release 5.14.3 - 2025-10-29

  • Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
  • Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

  • Restore binary message support in message queue setups #1509 (commit)
  • Fix formatting of client connection error #1507 (commit)
  • Add 3.14 and pypy-3.11 CI tasks (commit)
  • Improve documentation of the BaseManager.get_participants() method (commit)

Release 5.14.1 - 2025-10-02

  • Restore support for rediss:// URLs, and add support for valkeys:// as well (commit)
  • Add support for Redis connections using unix sockets #1503 (commit) (thanks Darren Chang!)

Release 5.14.0 - 2025-09-30

  • Replace pickle with json in message queue communications #1502 (commit)
  • Add support for Valkey in the Redis client managers #1488 (commit) (thanks phi-friday!)
  • Keep track of which namespaces failed to connect #1496 (commit)
  • Fixed transport property of the simple clients to be a string as documented #1499 (commit)
  • SimpleClient.call does not raise TimeoutError on timeout #1501 (commit) (thanks James Thistlewood!)
  • Wait for client to end background tasks on disconnect #1500 (commit)
  • Better error logging for the Redis managers #1479 (commit) (thanks Eugnee!)
  • Channel was not properly initialized in several pubsub client managers #1476 (commit) (thanks Eugnee!)
  • Add message queue deployment recommendations for security (commit)
  • Add missing async on session examples for the async server #1465 (commit) (thanks Func!)
  • Add SPDX license identifier #1453 (commit) (thanks Marc Mueller!)

Release 5.13.0 - 2025-04-12

  • Eliminate race conditions on disconnect #1441 (commit)
  • Preserve exception context in Client.connect and AsyncClient.connect #1450 (commit) (thanks Tim Van Baak!)
  • Allow custom client subclasses to be used in SimpleClient and AsyncSimpleClient #1432 (commit)
  • Add support for Redis Sentinel URLs in RedisManager and AsyncRedisManager #1448 (commit)
  • Remove incorrect reference to an asyncio installation extra in documentation #1449 (commit)

... (truncated)

Commits
  • 400200e Release 5.14.0
  • 53f6be0 Replace pickle with json (#1502)
  • a59c6f5 Fix: SimpleClient.call does not raise TimeoutError on timeout (#1501)
  • f61e0be wait for client to end background tasks on disconnect (#1500)
  • 23556fb Fixed transport property of the simple clients to be a string as documented (...
  • e59acf1 Address failures of test suite on Mac (#1497)
  • 36a8922 Add support for valkey in the Redis client managers (#1488)
  • 5dc2aea keep track of which namespaces failed to connect (#1496)
  • b3da354 Add message queue deployment recommendations
  • 3625fe8 Bump eventlet from 0.35.2 to 0.40.3 in /examples/server/wsgi (#1491) #nolog
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.26 to 0.3.27

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates pypdf from 4.3.1 to 6.4.0

Release notes

Sourced from pypdf's releases.

Version 6.4.0, 2025-11-23

What's new

Security (SEC)

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519) by @​PJBrs

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528) by @​mbierma

Full Changelog

Version 6.3.0, 2025-11-16

What's new

New Features (ENH)

Bug Fixes (BUG)

Full Changelog

Version 6.2.0, 2025-11-09

What's new

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Version 6.1.3, 2025-10-22

What's new

Security (SEC)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489) by @​Nid01

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.4.0, 2025-11-23

Security (SEC)

  • Reduce default limit for LZW decoding

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519)

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528)

Full Changelog

Version 6.3.0, 2025-11-16

New Features (ENH)

  • Wrap and align text in flattened PDF forms (#3465)

Bug Fixes (BUG)

  • Fix missing "PreventGC" when cloning (#3520)
  • Preserve JPEG image quality by default (#3516)

Full Changelog

Version 6.2.0, 2025-11-09

New Features (ENH)

  • Add 'strict' parameter to PDFWriter (#3503)

Bug Fixes (BUG)

  • PdfWriter.append fails when there are articles being None (#3509)

Documentation (DOC)

  • Execute docs examples in CI (#3507)

Full Changelog

Version 6.1.3, 2025-10-22

Security (SEC)

  • Allow limiting size of LZWDecode streams (#3502)
  • Avoid infinite loop when reading broken DCT-based inline images (#3501)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489)

Robustness (ROB)

  • Fail with explicit exception when image mode is an empty array (#3500)

Full Changelog

... (truncated)

Commits

Updates authlib from 1.6.1 to 1.6.5

Release notes

Sourced from authlib's releases.

v1.6.5

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.6.4...v1.6.5

v1.6.4

What's Changed

New Contributors

Full Changelog: authlib/authlib@v1.6.3...v1.6.4

Version 1.6.3

What's Changed

Full Changelog: authlib/authlib@v1.6.2...v1.6.3

Version 1.6.2

What's Changed

Full Changelog: authlib/authlib@v1.6.1...v1.6.2

Changelog

Sourced from authlib's changelog.

Version 1.6.5

Released on Oct 2, 2025

  • RFC7591 generate_client_info and generate_client_secret take a request parameter.
  • Add size limitation when decode JWS/JWE to prevent DoS.
  • Add size limitation for DEF JWE zip algorithm.
...

Description has been truncated

@dependabot
build(deps): bump the pip group across 2 directories with 4 updates
e57f714 
Bumps the pip group with 4 updates in the / directory: [python-socketio](https://github.com/miguelgrinberg/python-socketio), [langchain-community](https://github.com/langchain-ai/langchain), [pypdf](https://github.com/py-pdf/pypdf) and [authlib](https://github.com/authlib/authlib).
Bumps the pip group with 4 updates in the /backend directory: [python-socketio](https://github.com/miguelgrinberg/python-socketio), [langchain-community](https://github.com/langchain-ai/langchain), [pypdf](https://github.com/py-pdf/pypdf) and [authlib](https://github.com/authlib/authlib).


Updates `python-socketio` from 5.13.0 to 5.14.0
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.13.0...v5.14.0)

Updates `langchain-community` from 0.3.26 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.26...langchain==0.3.27)

Updates `pypdf` from 4.3.1 to 6.4.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@4.3.1...6.4.0)

Updates `authlib` from 1.6.1 to 1.6.5
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/main/docs/changelog.rst)
- [Commits](authlib/authlib@v1.6.1...v1.6.5)

Updates `python-socketio` from 5.13.0 to 5.14.0
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.13.0...v5.14.0)

Updates `langchain-community` from 0.3.26 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.26...langchain==0.3.27)

Updates `pypdf` from 4.3.1 to 6.4.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@4.3.1...6.4.0)

Updates `authlib` from 1.6.1 to 1.6.5
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/main/docs/changelog.rst)
- [Commits](authlib/authlib@v1.6.1...v1.6.5)

---
updated-dependencies:
- dependency-name: python-socketio
  dependency-version: 5.14.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pypdf
  dependency-version: 6.4.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: authlib
  dependency-version: 1.6.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-socketio
  dependency-version: 5.14.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pypdf
  dependency-version: 6.4.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: authlib
  dependency-version: 1.6.5
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants