Skip to content

build(deps): bump pydantic-settings from 2.14.1 to 2.14.2 in the uv group across 1 directory - #2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-10713fdc8d
Open

build(deps): bump pydantic-settings from 2.14.1 to 2.14.2 in the uv group across 1 directory#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-10713fdc8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown

Bumps the uv group with 1 update in the / directory: pydantic-settings.

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-10713fdc8d branch 4 times, most recently from b166883 to a7dc54d Compare June 26, 2026 20:44
@4dand 4dand mentioned this pull request Jun 27, 2026
4dand added a commit that referenced this pull request Jun 27, 2026
Первый (сводный) лидерборд сортировался по доле решённых только категории A,
из-за чего сильные в алгоритмике, но беспомощные на платформе 1С модели висели
вверху (Gemini 3.1 Pro: #2 при 0% по B). Таблица отвечает «кто лучше в целом»,
поэтому сортируем по среднему A и B. Ячейки A/B остаются раздельными.

Sonnet 4.6 поднялся на #3 (B 80%), Gemini 3.1 Pro опустился на #5.
@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-10713fdc8d branch 3 times, most recently from 65af558 to 8ed5e36 Compare July 4, 2026 01:58
@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-10713fdc8d branch 3 times, most recently from e939738 to 816424b Compare July 12, 2026 07:13
Bumps the uv group with 1 update in the / directory: [pydantic-settings](https://github.com/pydantic/pydantic-settings).


Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

---
updated-dependencies:
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/uv-10713fdc8d branch from 816424b to bdcb995 Compare July 19, 2026 19:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants