Skip to content

deps(python): bump the python-minor group with 6 updates#4925

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-minor-cbc1986b86
Open

deps(python): bump the python-minor group with 6 updates#4925
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-minor-cbc1986b86

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the python-minor group with 6 updates:

Package From To
fastmcp 3.1.0 3.1.1
anthropic 0.84.0 0.85.0
ruff 0.15.5 0.15.6
bokeh 3.8.2 3.9.0
lets-plot 4.8.2 4.9.0
cairosvg 2.8.2 2.9.0

Updates fastmcp from 3.1.0 to 3.1.1

Release notes

Sourced from fastmcp's releases.

v3.1.1: 'Tis But a Patch

Pins pydantic-monty<0.0.8 to fix a breaking change in Monty that affects code mode. Monty 0.0.8 removed the external_functions constructor parameter, causing MontySandboxProvider to fail. This patch caps the version so existing installs work correctly.

What's Changed

Fixes 🐞

Full Changelog: PrefectHQ/fastmcp@v3.1.0...v3.1.1

Commits

Updates anthropic from 0.84.0 to 0.85.0

Release notes

Sourced from anthropic's releases.

v0.85.0

0.85.0 (2026-03-16)

Full Changelog: v0.84.0...v0.85.0

Features

  • api: chore(config): clean up model enum list (#31) (cce1a5b)
  • api: GA thinking-display-setting (207340c)
  • tests: update mock server (7dc86a4)

Bug Fixes

  • client: add missing 413 and 529 error handlers to async client (#1554) (9c2986f)
  • tool runner: propagate container_id for programmatic tool calling (#1462) (3ae7ff6)
  • tools: use filtered messages list in async compaction (#1124) (710d666)

Chores

  • ci: bump uv version (09656ac)
  • internal: codegen related update (c9e9fc2)
  • internal: codegen related update (77f77d1)
  • tests: unskip tests that are now supported in steady (827330b)
Changelog

Sourced from anthropic's changelog.

0.85.0 (2026-03-16)

Full Changelog: v0.84.0...v0.85.0

Features

  • api: chore(config): clean up model enum list (#31) (cce1a5b)
  • api: GA thinking-display-setting (207340c)
  • tests: update mock server (7dc86a4)

Bug Fixes

  • client: add missing 413 and 529 error handlers to async client (#1554) (9c2986f)
  • tool runner: propagate container_id for programmatic tool calling (#1462) (3ae7ff6)
  • tools: use filtered messages list in async compaction (#1124) (710d666)

Chores

  • ci: bump uv version (09656ac)
  • internal: codegen related update (c9e9fc2)
  • internal: codegen related update (77f77d1)
  • tests: unskip tests that are now supported in steady (827330b)
Commits
  • be3dd14 release: 0.85.0
  • fc9f47e feat(api): GA thinking-display-setting
  • 42921e3 fix(client): add missing 413 and 529 error handlers to async client (#1554)
  • 8fe08ac codegen metadata
  • 1db0354 chore(internal): codegen related update
  • 72cbc5c revert changes to tool params
  • 1b6d568 chore(internal): codegen related update
  • 6b45a05 chore(tests): unskip tests that are now supported in steady
  • 6cf11ee feat(api): chore(config): clean up model enum list (#31)
  • 2b81494 feat(tests): update mock server
  • Additional commits viewable in compare view

Updates ruff from 0.15.5 to 0.15.6

Release notes

Sourced from ruff's releases.

0.15.6

Release Notes

Released on 2026-03-12.

Preview features

  • Add support for lazy import parsing (#23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#23788)
  • Reject semantic syntax errors for lazy imports (#23757)
  • Drop a few rules from the preview default set (#23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
  • [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
  • [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
  • [isort] Retain lazy keyword when sorting imports (#23762)
  • [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
  • [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
  • [ruff] Add os-path-commonprefix (RUF071) (#23814)
  • [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
  • [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
  • [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

  • Fix --add-noqa creating unwanted leading whitespace (#23773)
  • Fix --add-noqa breaking shebangs (#23577)
  • [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
  • [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
  • [formatter] Preserve type-expression parentheses in the formatter (#23867)
  • [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
  • [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
  • [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
  • [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
  • [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

  • [flake8-bandit] Flag S501 with requests.request (#23873)
  • [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
  • [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

  • Update docs for Markdown code block formatting (#23871)
  • [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.6

Released on 2026-03-12.

Preview features

  • Add support for lazy import parsing (#23755)
  • Add support for star-unpacking of comprehensions (PEP 798) (#23788)
  • Reject semantic syntax errors for lazy imports (#23757)
  • Drop a few rules from the preview default set (#23879)
  • [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
  • [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
  • [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
  • [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
  • [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
  • [isort] Retain lazy keyword when sorting imports (#23762)
  • [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
  • [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
  • [ruff] Add os-path-commonprefix (RUF071) (#23814)
  • [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
  • [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)
  • [ruff] Use starred unpacking for RUF017 in Python 3.15+ (#23789)

Bug fixes

  • Fix --add-noqa creating unwanted leading whitespace (#23773)
  • Fix --add-noqa breaking shebangs (#23577)
  • [formatter] Fix lambda body formatting for multiline calls and subscripts (#23866)
  • [formatter] Preserve required annotation parentheses in annotated assignments (#23865)
  • [formatter] Preserve type-expression parentheses in the formatter (#23867)
  • [flake8-annotations] Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23912)
  • [pep8-naming] Check naming conventions in match pattern bindings (N806, N815, N816) (#23899)
  • [perflint] Fix comment duplication in fixes (PERF401, PERF403) (#23729)
  • [pyupgrade] Properly trigger super change in nested class (UP008) (#22677)
  • [ruff] Avoid syntax errors in RUF036 fixes (#23764)

Rule changes

  • [flake8-bandit] Flag S501 with requests.request (#23873)
  • [flake8-executable] Fix WSL detection in non-Docker containers (#22879)
  • [flake8-print] Ignore pprint calls with stream= (#23787)

Documentation

  • Update docs for Markdown code block formatting (#23871)
  • [flake8-bugbear] Fix misleading description for B904 (#23731)

Contributors

... (truncated)

Commits
  • e4c7f35 Bump 0.15.6 (#23919)
  • edfe6c1 [ty] Narrow type context during collection literal inference (#23844)
  • dd16d68 Exclude broken symlink in ecosystem check (#23921)
  • 3f94c6a Fix stack overflow in ANN401 on quoted annotations with escape sequences (#23...
  • 91fc7bd [ty] Fix false-positive diagnostics for PEP-604 union annotations on attribut...
  • 04229cf [ty] Initial test suite for PEP-728 TypedDict features (#23832)
  • 728b9d6 [pep8-naming] Check naming conventions in match pattern bindings (N806,...
  • 88d1eec [ty] Ensure a type[] type T is always considered assignable to a union th...
  • 37cdd61 Fix lambda body formatting for multiline calls and subscripts (#23866)
  • a25a4df [ty] Disambiguate duplicate-looking overloaded callables in union display (#2...
  • Additional commits viewable in compare view

Updates bokeh from 3.8.2 to 3.9.0

Changelog

Sourced from bokeh's changelog.

2026-03-11 3.9:

  • bugfixes:

    • #14584 Div from bokeh.models.dom raisese ValueError in show call
    • #14724 Bokeh protocol doesn't use binary encoding in pull-doc-reply message
    • #14569 [component: bokehjs] Adjust overlay in case of 1D box zoom
    • #14799 [component: build] Compilation failing with whitespace in path
    • #13578 [component: tests] Unit tests are failing due to changes in pytest-asyncio
    • #14568 [component: bokehjs] [BUG] Wheel Zoom Tool and Categorical Axis Range
    • #14817 MyPy can crash on Bokeh 3.9.0.dev9 code
    • #14776 [component: bokehjs] Don't add BBox if an axis has fixed position
    • #14815 [component: bokehjs] Bounds using FactorRanges aren't respected in the first visualization
    • #14881 Default compression level seems too high
    • #14894 NoChannelsConfiguredError breaks CI after PR #14309
    • #10706 [component: bokehjs] [BUG] DataCube not respecting 'target' arg on initial creation
    • #14404 bokeh info should handle missing npm more gracefully
    • #14502 Legends fail to export using bokeh.io.export_svgs
    • #14549 [component: bokehjs] Updating Div text from hover causes infinite loop
    • #14616 Add is_silenced function to the public API
    • #14645 [component: bokehjs] CategoricalSlider shows 'undefined' for some categories when a certain number of categories is given
    • #14690 [component: bokehjs] Bokehjs test/devtools server examples error on Windows
    • #14700 [component: tests] Regression test for #11339 fails randomly since Chrome version upgrade.
    • #14709 [component: build] ESM minified bundles don't work due to bad imports
    • #14730 CI sometimes fails on MacOS with "The template is not valid"
    • #14744 [component: bokehjs] Use outline_width in Legend
    • #14750 [component: bokehjs] Block glyph doesn't account for reversed axes
    • #14756 [component: build] Build CI job failing
  • features:

    • #14417 [component: bokehjs] Cannot scroll or wrap large number of tabs
    • #14742 [FEATURE] Add padding to step
    • #14772 [component: bokehjs] Add support for property value editing in Examiner component
    • #14779 Add support for displaying contents with Markdown syntax
    • #14607 Enhancements for bokeh settings
    • #14716 [component: bokehjs] [Feature Request] Native Text/Glyph Outline Support (Inspired by Matplotlib PathEffects)
  • tasks:

    • #14346 Redesign Dropdown widget to use Menu model
    • #14698 Use auto_box_zoom as the default tool
    • #14786 [component: build] Replace ts-node and tsconfig-paths with tsc, ES modules and imports maps
    • #14789 [component: build] Migrate to eslint 9.x
    • #14793 Enhance performance of bitset in CDS view
    • #14795 [component: bokehjs] Enhance performance of indices map in CDS view
    • #14782 [component: build] Drop baseUrl from tsconfig.json files
    • #14802 [component: bokehjs] Enhance performance of _value_record_references in has_props
    • #14804 Pandas 3.0 compatibility
    • #14810 [component: bokehjs] Use ES2026 UInt8Array.{to,from}Base64 if available
    • #14816 Adapt to new CoW behavior in Pandas 3.0
    • #14822 Allow to disable linking layouts cross panels in Tabs
    • #14824 [component: bokehjs] Perform inplace byte swap for big endian conversion

... (truncated)

Commits

Updates lets-plot from 4.8.2 to 4.9.0

Release notes

Sourced from lets-plot's releases.

v4.9.0

[4.9.0] - 2026-03-11

Added

  • Python 3.14 support.

  • Python 3.14 free-threading support [#1454].

  • Plot Annotations:

    • New labels parameter in geom_smooth() designed to display statistical summaries of the fitted model directly on the plot.
      This parameter accepts a smooth_labels() object, which provides access to model-specific variables like $R^2$, the regression equation and others.

      See: example notebook.

    • Plot tags. A tag can be specified via labs(tag=...) and styled using theme parameters [#1407].

      See: example notebook and updated plot layout scheme.

    • Plot tags customization parameters in theme():

      • plot_tag - sets the tag style via element_text().
      • plot_tag_location - specifies the area used for positioning the tag.
      • plot_tag_position - specifies the position of the tag within the selected area.
      • plot_tag_prefix - text added before the tag value.
      • plot_tag_suffix - text added after the tag value.

      See: example notebook.

  • Geometries:

    • New geom_bracket(), geom_bracket_dodge() [#1114].

      See: example notebook.

    • geom_imshow():

      • Support for custom colormaps [#780].

      • New cguide parameter: use to customize the colorbar for grayscale images.

        See: example notebook.

  • Color Scales:

    • New palette() method for color scales: generates a list of hex color codes that can be used with scale_color_manual() to maintain consistent colors across multiple plots [#1444].

      See: example notebook.

    • New overflow parameter in scale_color_brewer() / scale_fill_brewer(): controls how colors are generated when more colors are needed than the palette provides.
      Options: 'interpolate' ('i'), 'cycle' ('c'), 'generate' ('g').

... (truncated)

Changelog

Sourced from lets-plot's changelog.

[4.9.0] - 2026-03-11

Added

  • Python 3.14 support.

  • Python 3.14 free-threading support [#1454].

  • Plot Annotations:

    • New labels parameter in geom_smooth() designed to display statistical summaries of the fitted model directly on the plot.
      This parameter accepts a smooth_labels() object, which provides access to model-specific variables like $R^2$, the regression equation and others.

      See: example notebook.

    • Plot tags. A tag can be specified via labs(tag=...) and styled using theme parameters [#1407].

      See: example notebook and updated plot layout scheme.

    • Plot tags customization parameters in theme():

      • plot_tag - sets the tag style via element_text().
      • plot_tag_location - specifies the area used for positioning the tag.
      • plot_tag_position - specifies the position of the tag within the selected area.
      • plot_tag_prefix - text added before the tag value.
      • plot_tag_suffix - text added after the tag value.

      See: example notebook.

  • Geometries:

    • New geom_bracket(), geom_bracket_dodge() [#1114].

      See: example notebook.

    • geom_imshow():

      • Support for custom colormaps [#780].

      • New cguide parameter: use to customize the colorbar for grayscale images.

        See: example notebook.

  • Color Scales:

    • New palette() method for color scales: generates a list of hex color codes that can be used with scale_color_manual() to maintain consistent colors across multiple plots [#1444].

      See: example notebook.

    • New overflow parameter in scale_color_brewer() / scale_fill_brewer(): controls how colors are generated when more colors are needed than the palette provides.
      Options: 'interpolate' ('i'), 'cycle' ('c'), 'generate' ('g').

... (truncated)

Commits
  • 130891f Updated version v4.9.0
  • d5536fa Docs 4.9.0 (#1473)
  • 41ed660 Docstrings: Change docstrings for the inherited members of the smooth_labels().
  • dc2399e Docstrings: Add example for the palette() method of the ColorScaleFeatureSpec.
  • b5b53a9 Add another demo-image
  • 7826946 Update future_changes.md
  • 71eabaf Run demos with 4.9.0rc1
  • f29feb8 Add demo images
  • 73e7caa Update geom_bracket demo
  • cace014 Update future_changes.md
  • Additional commits viewable in compare view

Updates cairosvg from 2.8.2 to 2.9.0

Release notes

Sourced from cairosvg's releases.

2.9.0

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14
Changelog

Sourced from cairosvg's changelog.

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14
Commits
  • fe5cae5 Version 2.9.0
  • 6dde868 Abort when more than 100k referenced elements are rendered
  • a6b3a98 Cut long line again
  • ce8b51d Cut long line
  • b7818c9 Clarify unsafe option scope without removing security warning
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [fastmcp](https://github.com/PrefectHQ/fastmcp) | `3.1.0` | `3.1.1` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `0.84.0` | `0.85.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.5` | `0.15.6` |
| [bokeh](https://github.com/bokeh/bokeh) | `3.8.2` | `3.9.0` |
| [lets-plot](https://github.com/JetBrains/lets-plot) | `4.8.2` | `4.9.0` |
| [cairosvg](https://github.com/Kozea/CairoSVG) | `2.8.2` | `2.9.0` |


Updates `fastmcp` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/PrefectHQ/fastmcp/releases)
- [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx)
- [Commits](PrefectHQ/fastmcp@v3.1.0...v3.1.1)

Updates `anthropic` from 0.84.0 to 0.85.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.84.0...v0.85.0)

Updates `ruff` from 0.15.5 to 0.15.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.5...0.15.6)

Updates `bokeh` from 3.8.2 to 3.9.0
- [Changelog](https://github.com/bokeh/bokeh/blob/3.9.0/docs/CHANGELOG)
- [Commits](bokeh/bokeh@3.8.2...3.9.0)

Updates `lets-plot` from 4.8.2 to 4.9.0
- [Release notes](https://github.com/JetBrains/lets-plot/releases)
- [Changelog](https://github.com/JetBrains/lets-plot/blob/master/CHANGELOG.md)
- [Commits](JetBrains/lets-plot@v4.8.2...v4.9.0)

Updates `cairosvg` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/Kozea/CairoSVG/releases)
- [Changelog](https://github.com/Kozea/CairoSVG/blob/main/NEWS.rst)
- [Commits](Kozea/CairoSVG@2.8.2...2.9.0)

---
updated-dependencies:
- dependency-name: fastmcp
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: anthropic
  dependency-version: 0.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: ruff
  dependency-version: 0.15.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor
- dependency-name: bokeh
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: lets-plot
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
- dependency-name: cairosvg
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python labels Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants