Skip to content

Bump the uv group across 8 directories with 5 updates#2123

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-e98edb3bb2
Open

Bump the uv group across 8 directories with 5 updates#2123
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/uv-e98edb3bb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the uv group with 3 updates in the / directory: python-socketio, joserfc and ujson.
Bumps the uv group with 3 updates in the /backend directory: python-socketio, azure-identity and ujson.
Bumps the uv group with 1 update in the /platform-service directory: ujson.
Bumps the uv group with 1 update in the /unstract/connectors directory: ujson.
Bumps the uv group with 1 update in the /unstract/filesystem directory: ujson.
Bumps the uv group with 1 update in the /unstract/sdk1 directory: ujson.
Bumps the uv group with 1 update in the /unstract/tool-registry directory: ujson.
Bumps the uv group with 2 updates in the /workers directory: python-socketio and ujson.

Updates python-socketio from 5.16.1 to 5.16.2

Release notes

Sourced from python-socketio's releases.

Release 5.16.2

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.16.3 - 2026-06-15

  • Catch all exceptions in redis and rabbitmq client managers #1581 (commit)

Release 5.16.2 - 2026-05-21

Release 5.16.1 - 2026-02-06

  • Use configured JSON module in managers #1549 (commit)
  • Admin UI fixes: remove duplicate tasks, report transport upgrades (commit)
  • Switch to Furo documentation template (commit)
  • Add Python free-threading to CI #1554 (commit)

Release 5.16.0 - 2025-12-24

  • Address deprecation warnings (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 5.15.1 - 2025-12-16

  • Restore support multiple arguments via pubsub emits #1540 (commit)

Release 5.15.0 - 2025-11-22

Release 5.14.3 - 2025-10-29

  • Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
  • Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

  • Restore binary message support in message queue setups #1509 (commit)
  • Fix formatting of client connection error #1507 (commit)
  • Add 3.14 and pypy-3.11 CI tasks (commit)
  • Improve documentation of the BaseManager.get_participants() method (commit)

Release 5.14.1 - 2025-10-02

... (truncated)

Commits
  • 6e2b717 Release 5.16.2
  • cb65829 update python-engineio version
  • ca140fe prevent unnecessary resource allocation (#1574)
  • b29beef tox configuration
  • e898130 Bump ujson from 5.4.0 to 5.12.1 in /examples/server/sanic (#1573) #nolog
  • 05c32f5 Bump qs and body-parser in /examples/server/javascript (#1572) #nolog
  • 287dc67 Bump qs and body-parser in /examples/client/javascript (#1571) #nolog
  • 664dc27 add zizmor to ci (#1570)
  • 14c6236 Bump django in /examples/server/wsgi/django_socketio (#1566) #nolog
  • 29b2e5c Bump aiohttp from 3.13.3 to 3.13.4 in /examples/server/aiohttp (#1565) #nolog
  • Additional commits viewable in compare view

Updates joserfc from 1.6.5 to 1.6.7

Release notes

Sourced from joserfc's releases.

1.6.7

   🐞 Bug Fixes

    View changes on GitHub
Changelog

Sourced from joserfc's changelog.

1.6.7

Released on May 23, 2026

  • Update for type hints.

1.6.6

Released on May 18, 2026

  • JWS: validate payload size when b64=false.
Commits
  • 1e5b94d chore: release 1.6.7
  • 75d9f95 fix(typing): use cast for type hints
  • 6d24037 Merge pull request #98 from jonathangreen/algorithms-accept-collection
  • 102a7a7 fix(typing): accept any Collection for algorithms, not just list
  • 8b869e8 chore: release 1.6.6
  • 00d599b chore: update actions
  • 9186561 Merge pull request #97 from authlib/fix-b64
  • 4d4ea2e fix(jws): validate payload size for b64=false
  • b6554cc Merge pull request #96 from sebasxsala/fix-p512-fixture
  • b89eadf test: normalize P-521 private key fixture
  • See full diff in compare view

Updates python-engineio from 4.13.1 to 4.13.3

Release notes

Sourced from python-engineio's releases.

Release 4.13.3

See CHANGES.md for release notes.

Release 4.13.2

See CHANGES.md for release notes.

Changelog

Sourced from python-engineio's changelog.

python-engineio change log

Release 4.13.3 - 2026-06-20

  • Make sure client disconnects when write loop exits #455 (commit)
  • Address flaky unit test #444 (commit)
  • Stop using codecov service, since it has been failing for a long time (commit)

Release 4.13.2 - 2026-05-21

Release 4.13.1 - 2026-02-06

  • Document that a process can have only one custom JSON module (commit)
  • Switch to Furo documentation template (commit)

Release 4.13.0 - 2025-12-24

  • Apply escaping rules when parsing cookie values (commit)
  • Several minor improvements to the aiohttp integration #419 (commit) (thanks PaulWasTaken!)
  • Clarify logging behavior in documentation #421 (commit) (thanks ZipFile!)
  • Address deprecation warnings #422 (commit)
  • Add 3.14 and pypy-3.11 CI builds (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 4.12.3 - 2025-09-28

  • Reset client queue upon disconnection #414 (commit)
  • Support ['*'] in addition to '*' in the cors_allowed_origins option #410 (commit) (thanks Wu Clan!)

Release 4.12.2 - 2025-06-04

  • Support new monkey-patched gevent Queue class in the client #403 (commit)
  • Better support of the ASGI spec when interpreting WebSocket events #405 (commit) (thanks Eric Zhang!)

Release 4.12.1 - 2025-05-11

  • Accept empty binary values in the async server #404 (commit)
  • Add SPDX license identifier #401 (commit) (thanks Marc Mueller!)

Release 4.12.0 - 2025-04-12

  • Optimize packet parsing to avoid unnecessary calls to JSON parser #399 (commit)
  • Pass environ as a second argument to callable option cors_allowed_origins #398 (commit) (thanks wft-swas!)

Release 4.11.2 - 2024-12-29

  • Fix incorrect disconnection reason reported when browser page is closed (commit)

... (truncated)

Commits
  • a53d58c Release 4.13.3
  • 9e72608 Remove failing coverage.py service
  • 7517473 Make sure client disconnects when write loop exists (Fixes #454) (#455)
  • 6902ffc Bump ws, engine.io and engine.io-client in /examples/client/javascript (#453)...
  • 883c8f4 Bump tornado from 6.5.5 to 6.5.7 in /examples/server/tornado (#451)
  • 0d6654e Bump aiohttp from 3.14.0 to 3.14.1 in /examples/server/aiohttp (#450) #nolog
  • 588a4db Bump qs and express in /examples/server/javascript (#447) #nolog
  • 28ed709 Bump aiohttp from 3.13.4 to 3.14.0 in /examples/server/aiohttp (#446) #nolog
  • d5ef0e4 Bump qs and express in /examples/client/javascript (#445) #nolog
  • ed46b24 Bump ws, engine.io and engine.io-client in /examples/client/javascript (#442)...
  • Additional commits viewable in compare view

Updates ujson from 5.12.1 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk
Commits
  • 1a23a68 Create manylinux2014 wheels (#745)
  • bd943e8 Build separate manylinux2014 + modern wheels
  • 87ae2df Create manylinux2014 wheels
  • 209371e Verify expected number of dists (#743)
  • 6392258 Also check SHA of wheels in case manylinux version changes
  • a00edea Verify expected number of dists
  • e24aeb7 Fix utf-8 test for graalpy
  • 9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
  • 0bbf9a3 Add support for Python 3.15 (#742)
  • 90ddea2 Replace pre-commit with prek to fix deprecation warning
  • Additional commits viewable in compare view

Updates python-socketio from 5.9.0 to 5.16.2

Release notes

Sourced from python-socketio's releases.

Release 5.16.2

See CHANGES.md for release notes.

Changelog

Sourced from python-socketio's changelog.

python-socketio change log

Release 5.16.3 - 2026-06-15

  • Catch all exceptions in redis and rabbitmq client managers #1581 (commit)

Release 5.16.2 - 2026-05-21

Release 5.16.1 - 2026-02-06

  • Use configured JSON module in managers #1549 (commit)
  • Admin UI fixes: remove duplicate tasks, report transport upgrades (commit)
  • Switch to Furo documentation template (commit)
  • Add Python free-threading to CI #1554 (commit)

Release 5.16.0 - 2025-12-24

  • Address deprecation warnings (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 5.15.1 - 2025-12-16

  • Restore support multiple arguments via pubsub emits #1540 (commit)

Release 5.15.0 - 2025-11-22

Release 5.14.3 - 2025-10-29

  • Support Python's native ConnectionRefusedError exception to reject a connection #1515 (commit)
  • Push binary data to the aiopika client manager #1514 (commit)

Release 5.14.2 - 2025-10-15

  • Restore binary message support in message queue setups #1509 (commit)
  • Fix formatting of client connection error #1507 (commit)
  • Add 3.14 and pypy-3.11 CI tasks (commit)
  • Improve documentation of the BaseManager.get_participants() method (commit)

Release 5.14.1 - 2025-10-02

... (truncated)

Commits
  • 6e2b717 Release 5.16.2
  • cb65829 update python-engineio version
  • ca140fe prevent unnecessary resource allocation (#1574)
  • b29beef tox configuration
  • e898130 Bump ujson from 5.4.0 to 5.12.1 in /examples/server/sanic (#1573) #nolog
  • 05c32f5 Bump qs and body-parser in /examples/server/javascript (#1572) #nolog
  • 287dc67 Bump qs and body-parser in /examples/client/javascript (#1571) #nolog
  • 664dc27 add zizmor to ci (#1570)
  • 14c6236 Bump django in /examples/server/wsgi/django_socketio (#1566) #nolog
  • 29b2e5c Bump aiohttp from 3.13.3 to 3.13.4 in /examples/server/aiohttp (#1565) #nolog
  • Additional commits viewable in compare view

Updates azure-identity from 1.16.0 to 1.16.1

Commits

Updates python-engineio from 4.13.1 to 4.13.3

Release notes

Sourced from python-engineio's releases.

Release 4.13.3

See CHANGES.md for release notes.

Release 4.13.2

See CHANGES.md for release notes.

Changelog

Sourced from python-engineio's changelog.

python-engineio change log

Release 4.13.3 - 2026-06-20

  • Make sure client disconnects when write loop exits #455 (commit)
  • Address flaky unit test #444 (commit)
  • Stop using codecov service, since it has been failing for a long time (commit)

Release 4.13.2 - 2026-05-21

Release 4.13.1 - 2026-02-06

  • Document that a process can have only one custom JSON module (commit)
  • Switch to Furo documentation template (commit)

Release 4.13.0 - 2025-12-24

  • Apply escaping rules when parsing cookie values (commit)
  • Several minor improvements to the aiohttp integration #419 (commit) (thanks PaulWasTaken!)
  • Clarify logging behavior in documentation #421 (commit) (thanks ZipFile!)
  • Address deprecation warnings #422 (commit)
  • Add 3.14 and pypy-3.11 CI builds (commit)
  • Drop Python 3.8 and 3.9 from CI builds (commit)

Release 4.12.3 - 2025-09-28

  • Reset client queue upon disconnection #414 (commit)
  • Support ['*'] in addition to '*' in the cors_allowed_origins option #410 (commit) (thanks Wu Clan!)

Release 4.12.2 - 2025-06-04

  • Support new monkey-patched gevent Queue class in the client #403 (commit)
  • Better support of the ASGI spec when interpreting WebSocket events #405 (commit) (thanks Eric Zhang!)

Release 4.12.1 - 2025-05-11

  • Accept empty binary values in the async server #404 (commit)
  • Add SPDX license identifier #401 (commit) (thanks Marc Mueller!)

Release 4.12.0 - 2025-04-12

  • Optimize packet parsing to avoid unnecessary calls to JSON parser #399 (commit)
  • Pass environ as a second argument to callable option cors_allowed_origins #398 (commit) (thanks wft-swas!)

Release 4.11.2 - 2024-12-29

  • Fix incorrect disconnection reason reported when browser page is closed (commit)

... (truncated)

Commits
  • a53d58c Release 4.13.3
  • 9e72608 Remove failing coverage.py service
  • 7517473 Make sure client disconnects when write loop exists (Fixes #454) (#455)
  • 6902ffc Bump ws, engine.io and engine.io-client in /examples/client/javascript (#453)...
  • 883c8f4 Bump tornado from 6.5.5 to 6.5.7 in /examples/server/tornado (#451)
  • 0d6654e Bump aiohttp from 3.14.0 to 3.14.1 in /examples/server/aiohttp (#450) #nolog
  • 588a4db Bump qs and express in /examples/server/javascript (#447) #nolog
  • 28ed709 Bump aiohttp from 3.13.4 to 3.14.0 in /examples/server/aiohttp (#446) #nolog
  • d5ef0e4 Bump qs and express in /examples/client/javascript (#445) #nolog
  • ed46b24 Bump ws, engine.io and engine.io-client in /examples/client/javascript (#442)...
  • Additional commits viewable in compare view

Updates ujson from 5.12.1 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk
Commits
  • 1a23a68 Create manylinux2014 wheels (#745)
  • bd943e8 Build separate manylinux2014 + modern wheels
  • 87ae2df Create manylinux2014 wheels
  • 209371e Verify expected number of dists (#743)
  • 6392258 Also check SHA of wheels in case manylinux version changes
  • a00edea Verify expected number of dists
  • e24aeb7 Fix utf-8 test for graalpy
  • 9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
  • 0bbf9a3 Add support for Python 3.15 (#742)
  • 90ddea2 Replace pre-commit with prek to fix deprecation warning
  • Additional commits viewable in compare view

Updates ujson from 5.12.1 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk
Commits
  • 1a23a68 Create manylinux2014 wheels (#745)
  • bd943e8 Build separate manylinux2014 + modern wheels
  • 87ae2df Create manylinux2014 wheels
  • 209371e Verify expected number of dists (#743)
  • 6392258 Also check SHA of wheels in case manylinux version changes
  • a00edea Verify expected number of dists
  • e24aeb7 Fix utf-8 test for graalpy
  • 9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
  • 0bbf9a3 Add support for Python 3.15 (#742)
  • 90ddea2 Replace pre-commit with prek to fix deprecation warning
  • Additional commits viewable in compare view

Updates ujson from 5.12.1 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk
Commits
  • 1a23a68 Create manylinux2014 wheels (#745)
  • bd943e8 Build separate manylinux2014 + modern wheels
  • 87ae2df Create manylinux2014 wheels
  • 209371e Verify expected number of dists (#743)
  • 6392258 Also check SHA of wheels in case manylinux version changes
  • a00edea Verify expected number of dists
  • e24aeb7 Fix utf-8 test for graalpy
  • 9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
  • 0bbf9a3 Add support for Python 3.15 (#742)
  • 90ddea2 Replace pre-commit with prek to fix deprecation warning
  • Additional commits viewable in compare view

Updates ujson from 5.12.1 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk
Commits

Bumps the uv group with 3 updates in the / directory: [python-socketio](https://github.com/miguelgrinberg/python-socketio), [joserfc](https://github.com/authlib/joserfc) and [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 3 updates in the /backend directory: [python-socketio](https://github.com/miguelgrinberg/python-socketio), [azure-identity](https://github.com/Azure/azure-sdk-for-python) and [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 1 update in the /platform-service directory: [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 1 update in the /unstract/connectors directory: [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 1 update in the /unstract/filesystem directory: [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 1 update in the /unstract/sdk1 directory: [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 1 update in the /unstract/tool-registry directory: [ujson](https://github.com/ultrajson/ultrajson).
Bumps the uv group with 2 updates in the /workers directory: [python-socketio](https://github.com/miguelgrinberg/python-socketio) and [ujson](https://github.com/ultrajson/ultrajson).


Updates `python-socketio` from 5.16.1 to 5.16.2
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.16.1...v5.16.2)

Updates `joserfc` from 1.6.5 to 1.6.7
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](authlib/joserfc@1.6.5...1.6.7)

Updates `python-engineio` from 4.13.1 to 4.13.3
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-engineio@v4.13.1...v4.13.3)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `python-socketio` from 5.9.0 to 5.16.2
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.16.1...v5.16.2)

Updates `azure-identity` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.16.0...azure-identity_1.16.1)

Updates `python-engineio` from 4.13.1 to 4.13.3
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-engineio@v4.13.1...v4.13.3)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `python-socketio` from 5.16.1 to 5.16.2
- [Release notes](https://github.com/miguelgrinberg/python-socketio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-socketio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-socketio@v5.16.1...v5.16.2)

Updates `python-engineio` from 4.13.1 to 4.13.3
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/python-engineio@v4.13.1...v4.13.3)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

---
updated-dependencies:
- dependency-name: python-socketio
  dependency-version: 5.16.2
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: joserfc
  dependency-version: 1.6.7
  dependency-type: indirect
  dependency-group: uv
- dependency-name: python-engineio
  dependency-version: 4.13.3
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: python-socketio
  dependency-version: 5.16.2
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: azure-identity
  dependency-version: 1.16.1
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: python-engineio
  dependency-version: 4.13.3
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: python-socketio
  dependency-version: 5.16.2
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: python-engineio
  dependency-version: 4.13.3
  dependency-type: indirect
  dependency-group: uv
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 29, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@sonarqubecloud

Copy link
Copy Markdown

@greptile-apps

greptile-apps Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR bumps five dependencies (python-socketio, joserfc, ujson, azure-identity, and the transitive python-engineio) across eight workspace directories via dependabot.

  • python-socketio receives the largest version jump in the backend (5.9.05.16.2), pulling in several minor releases that add Redis retry logic, RabbitMQ reconnection fixes, binary pub/sub improvements, and Python free-threading support — all backwards-compatible changes.
  • joserfc is bumped from 1.6.5 to 1.6.7 in the root workspace; 1.6.6 introduced a security fix that validates payload size when b64=false is used in JWS operations.
  • ujson is updated from 5.12.1 to 5.13.0 across all eight directories, adding manylinux2014 wheels and tightening UTF-8 validation for bytes input.

Confidence Score: 5/5

All changes are automated dependency bumps with no application logic modified; each package update is backwards-compatible and includes only bug fixes or additive features.

The backend receives the largest jump (python-socketio 5.9.0 → 5.16.2), but the intervening releases are all bug fixes, binary-transport improvements, and CI changes with no breaking API changes. The joserfc bump closes a JWS payload-size validation gap. All lock file hashes are regenerated correctly by uv.

No files require special attention; the backend/pyproject.toml python-socketio pin deserves a quick sanity check given the seven-minor-version jump, but the changelog confirms full backwards compatibility.

Important Files Changed

Filename Overview
backend/pyproject.toml Bumps python-socketio from exact pin 5.9.0 → 5.16.2 and azure-identity from 1.16.0 → 1.16.1; straightforward version pin updates.
workers/pyproject.toml Raises the python-socketio lower bound from >=5.9.0 to >=5.16.2; lock file resolves it to 5.16.2.
uv.lock Root lock updated for joserfc (1.6.5→1.6.7), python-engineio (4.13.1→4.13.3), python-socketio (5.16.1→5.16.2), and ujson (5.12.1→5.13.0); hashes verified by uv.
backend/uv.lock Reflects the larger python-socketio jump (5.9.0→5.16.2), azure-identity (1.16.0→1.16.1), ujson, and python-engineio bumps; hashes updated correctly.
workers/uv.lock Resolves python-socketio to 5.16.2 (from 5.16.1), python-engineio to 4.13.3, and ujson to 5.13.0; all hashes valid.
platform-service/uv.lock ujson bumped to 5.13.0 only; straightforward lock update.
unstract/connectors/uv.lock ujson bumped to 5.13.0 only; straightforward lock update.
unstract/sdk1/uv.lock ujson bumped to 5.13.0 only; straightforward lock update.
unstract/filesystem/uv.lock ujson bumped to 5.13.0 only; straightforward lock update.
unstract/tool-registry/uv.lock ujson bumped to 5.13.0 only; straightforward lock update.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    subgraph rootdir["root /"]
        joserfc["joserfc 1.6.5 → 1.6.7"]
        socketio_root["python-socketio 5.16.1 → 5.16.2"]
        engineio_root["python-engineio 4.13.1 → 4.13.3"]
        ujson_root["ujson 5.12.1 → 5.13.0"]
    end

    subgraph backend["backend/"]
        socketio_be["python-socketio 5.9.0 → 5.16.2"]
        azure["azure-identity 1.16.0 → 1.16.1"]
        engineio_be["python-engineio 4.13.1 → 4.13.3"]
        ujson_be["ujson 5.12.1 → 5.13.0"]
    end

    subgraph workers["workers/"]
        socketio_wk["python-socketio 5.16.1 → 5.16.2"]
        engineio_wk["python-engineio 4.13.1 → 4.13.3"]
        ujson_wk["ujson 5.12.1 → 5.13.0"]
    end

    subgraph others["5 other dirs"]
        ujson_other["ujson 5.12.1 → 5.13.0"]
    end

    socketio_root --> engineio_root
    socketio_be --> engineio_be
    socketio_wk --> engineio_wk
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    subgraph rootdir["root /"]
        joserfc["joserfc 1.6.5 → 1.6.7"]
        socketio_root["python-socketio 5.16.1 → 5.16.2"]
        engineio_root["python-engineio 4.13.1 → 4.13.3"]
        ujson_root["ujson 5.12.1 → 5.13.0"]
    end

    subgraph backend["backend/"]
        socketio_be["python-socketio 5.9.0 → 5.16.2"]
        azure["azure-identity 1.16.0 → 1.16.1"]
        engineio_be["python-engineio 4.13.1 → 4.13.3"]
        ujson_be["ujson 5.12.1 → 5.13.0"]
    end

    subgraph workers["workers/"]
        socketio_wk["python-socketio 5.16.1 → 5.16.2"]
        engineio_wk["python-engineio 4.13.1 → 4.13.3"]
        ujson_wk["ujson 5.12.1 → 5.13.0"]
    end

    subgraph others["5 other dirs"]
        ujson_other["ujson 5.12.1 → 5.13.0"]
    end

    socketio_root --> engineio_root
    socketio_be --> engineio_be
    socketio_wk --> engineio_wk
Loading

Reviews (1): Last reviewed commit: "Bump the uv group across 8 directories w..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant