7c:I[154500,[["$2",["$3","$4","$5"],[14451,7897,23184]],["$6",["$7","$8","$9","$a","$b","$c"],[40076,49828,28925,10525,30632,53430]]],"IconMark"] 79:T100b6,Bumps the python group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [litellm](https://github.com/BerriAI/litellm) | `1.101.0` | `1.106.4` | | [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.1` | `2.62.0` | | [boto3](https://github.com/boto/boto3) | `1.43.36` | `1.43.121` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.14.1` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.16.1` | | [docker](https://github.com/docker/docker-py) | `7.1.0` | `7.2.0` | | [caido-sdk-client](https://github.com/caido-community/sdk-py) | `0.2.0` | `0.3.2` | | [reportlab](https://www.reportlab.com/) | `5.0.0` | `5.1.0` | | [pypdf](https://github.com/py-pdf/pypdf) | `6.14.2` | `6.21.2` | | [mypy](https://github.com/python/mypy) | `2.1.0` | `2.4.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.17.3` | | [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.7.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.0` | `1.4.1` | Updates `litellm` from 1.101.0 to 1.106.4

Release notes

Sourced from litellm's releases.

v1.106.4

Verify this release
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.4
Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.4

3 PRs. 2 fixed. No action needed to upgrade

Changes

Deployment: Fixed the proxy sometimes exiting on startup with an ImportError when it cannot reach the remote model cost map, broken since v1.104.0 (#46711) Also in 1.104.7, 1.105.5

Deployment: Fixed image scans flagging brotli 1.2.0, the emSign ECC Root CA - G3 and unused lockfile packages (#48283, #48300)

Backport #48294 · Full changelog

v1.106.3

[!IMPORTANT] The image-signing key has changed. Starting with this release, every Docker image and Helm chart is signed with the new cosign key from commit e82a3c6. Verifying with the previous key from commit 0112e53 will fail.

Update anything that pins the old cosign.pub: cosign verify scripts, CI checks, and admission policies such as Kyverno, Sigstore policy-controller or Connaisseur.

New cosign.pub SHA-256: e3fe3e08c44b16407fe0b37c43b4f8b603b3a0f4ee74c29e647bc022d762c2c0

Verify this release
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.3
Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.3

4 PRs. 1 changed, 1 removed. 1 needs action

Action required

Deployment: Verify image signatures with the cosign.pub from commit e82a3c6, the previous key no longer matches (#48103) Also in 1.103.8, 1.104.6, 1.105.4

... (truncated)

Commits

ea7ca16 Merge pull request #48300 from BerriAI/lens-runtime-1.106
8c3bd28 build(deps): bump webpki-roots and webpki-root-certs to 1.0.11
020f635 build(docker): move the lens image to the newer wolfi-base
a554fcf Merge pull request #48294 from BerriAI/diag-catalog-1.106
3af2c05 Merge pull request #48283 from BerriAI/image-content-cleanup-slim-1.106
1cf20bf bump: version 1.106.4
f1ca9f9 refactor(rust-bridge): remove the LoggerRule concept from the catalog (#46711)
77fc426 build(docker): copy only runtime files into the gateway, backend and migratio...
b027ce7 build(docker): move to newer wolfi-base and nginx base images
4fa8bf1 Merge pull request #48142 from BerriAI/litellm_backport_1_106_x_liteadmin_pin
Additional commits viewable in compare view

Updates `google-auth` from 2.55.1 to 2.62.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.62.0

2.62.0 (2026-10-12)

Features

auth: enable bound ID tokens by default on Cloud Run (#18635) (8b625c4)

google-auth: v2.61.0

2.61.0 (2026-10-07)

Features

auth: support bound access and ID tokens for GKE (#18594) (9f5fd7b)

google-auth: v2.60.0

2.60.0 (2026-10-02)

Features

auth: Support sync credentials in AsyncAuthorizedSession (#18542) (3799568)

Commits

5deaacb chore(main): release google-auth 2.62.0 (#18637)
8b625c4 feat(auth): enable bound ID tokens by default on Cloud Run (#18635)
98fc304 feat(dbapi): wire timeout parameter through Connection to execute_sql (#18484)
0cabf7c test(spanner): increase stale database cleanup cutoff to 3 hours (#18633)
ab56473 perf(spanner): prune lock and begin event allocations on single-use snapshots...
78b9da2 fix(google-cloud-spanner): do not replay DDL statements on transaction retry ...
f18a11e feat(db-dtypes): support pandas 3.1 (#18590)
590e43d fix(bigquery): accept empty sourceFormat fields (#18472)
05b3775 perf(spanner): optimize single-chunk results and single-row lookups (#18602)
a7678fd fix(spanner): eliminate duplicate metrics capture and measure full streaming ...
Additional commits viewable in compare view

Updates `boto3` from 1.43.36 to 1.43.121

Commits

cc2e975 Merge branch 'release-1.43.121'
21a159b Bumping version to 1.43.121
426304c Add changelog entries from botocore
bb4b50f Bump the github-actions group with 5 updates (#4867)
912163e Bump https://github.com/astral-sh/ruff-pre-commit (#4866)
431a8a1 Merge branch 'release-1.43.120'
117bf30 Merge branch 'release-1.43.120' into develop
ae8a770 Bumping version to 1.43.120
9a9fd93 Add changelog entries from botocore
e745502 Merge branch 'release-1.43.119'
Additional commits viewable in compare view

Updates `pydantic` from 2.13.4 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

Avoid Python tuple allocation during model fields validation by @Viicos in #13955

Avoid unnecessary extra dict allocation in model validation by @Viicos in #13956

Fixes

Fix arguments-v3 schema with variadic keywords by @Viicos in #13954

Fix TypeError on ForwardRef on Python 3.10.0 by @Viicos in #13964

Support closed and extra_items via inheritance in TypedDict by @Viicos in #13967

Enforce the max_digits whole-digits limit in the Python Decimal validator by @Viicos in #13972

Reject out-of-range int inputs for timedelta by @Viicos in #13973

Support named tuples in Sequence validation by @Viicos in #13978

Full Changelog: https://github.com/pydantic/pydantic/compare/v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

Two security fixes are fixed by this release: https://github.com/pydantic/pydantic/security/advisories/GHSA-gj4f-r7mf-jjxh and https://github.com/pydantic/pydantic/security/advisories/GHSA-955g-x97g-8mcp.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Reject large exponents in Fraction validation by @Viicos in #13944. Addresses https://github.com/pydantic/pydantic/security/advisories/GHSA-gj4f-r7mf-jjxh.

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945. Addresses https://github.com/pydantic/pydantic/security/advisories/GHSA-955g-x97g-8mcp.

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

Add support for multiple_of constraint in fraction and timedelta core schemas by @Viicos in #13873

Add __namespace__ parameter to create_model() by @Viicos in #13895

Changes

Add an ordered-dict core schema by @Viicos in #13796

Add a counter core schema by @Viicos in #13824

Do not mutate model_config attribute by @Viicos in #13825

Reject newlines in NameEmail validation by @Viicos in #13897

Fixes

Call enum constructors in both validation modes by @Viicos in #13792

Fix documentation examples not raising and remove unused string_sub_type unused error code by @Viicos in #13821

Catch OverflowError during ByteSize validation by @Viicos in #13850

Require multiple_of constraints to be positive by @Viicos in #13862

Always pop field name and model type stacks during schema generation by @saquibjawedbit in #13859

Handle TypeError gracefully during docstring extraction by @Viicos in #13874

Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @Viicos in #13891

Don't apply ser_json_timedelta to all datetime types in serialization inference by @Viicos in #13892

Encode JSON Schema defaults with a consistent configuration by @Viicos in #13893

Propagate init and kw_only=False from Field() to stdlib dataclass fields by @Viicos in #13898

Respect propagated extra config in the JSON Schema of stdlib dataclasses by @Viicos in #13899

Handle OS errors during ZoneInfo validation by @Viicos in #13912

Handle exceptions during Decimal validation by @Viicos in #13940

Rebuild incomplete types during serialization inference by @Viicos in #13922

Reject large exponents in Fraction validation by @Viicos in #13944

Avoid validating URL prefix multiple times in multi host URLs by @Viicos in #13945

New Contributors

@saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

b2212c7 Prepare release v2.14.1
968fb2b Fix docs conversion table
6adc8b3 Support named tuples in Sequence validation
7637fbc Reject out-of-range int inputs for timedelta
dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
e2456d3 Support closed and extra_items via inheritance in TypedDict
317655d Harden CI security
3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
43681ab Bump samuelcolvin/check-python-version action to v5.1
d6bc53a Avoid unnecessary extra dict allocation in model validation
Additional commits viewable in compare view

Updates `pydantic-settings` from 2.14.2 to 2.16.1

Release notes

Sourced from pydantic-settings's releases.

v2.16.1

Highlights

This patch release fixes two CLI regressions introduced in 2.16.0.

Bug fixes

CLI

Fixed-length tuple positionals such as CliPositionalArg[tuple[int, int]] and NamedTuples are single-valued again (#1069). Since 2.16.0 they were treated as variadic, so a CLI either refused to start with a SettingsError or put the wrong argument into the tuple. Variable-length tuples (tuple[int, ...] and bare Tuple) are still variadic.

A field typed as an alias of a list of dicts, e.g. type ListOfDict = list[dict[str, int]], accepts a JSON list again (#1049). Since 2.16.0, --xx '[{"a":1},{"b":2}]' was merged into the single dict {"a": 1, "b": 2} and failed validation.

What's Changed

Harden CI by @Viicos in pydantic/pydantic-settings#1044

Keep list of dicts CLI values as lists by @hramezani in pydantic/pydantic-settings#1049

Keep fixed-length tuple CLI positionals single-valued by @hramezani in pydantic/pydantic-settings#1069

Prepare release 2.16.1 by @hramezani in pydantic/pydantic-settings#1087

build(deps): bump the python-packages group with 3 updates by @dependabot[bot] in pydantic/pydantic-settings#1056

Full Changelog: https://github.com/pydantic/pydantic-settings/compare/v2.16.0...v2.16.1

v2.16.0

Highlights

Breaking changes and behavior changes

Python 3.10 is no longer supported (#1003). pydantic-settings now requires Python 3.11+, since 3.10 reaches end of life this month. The tomli fallback is gone in favor of stdlib tomllib; the toml extra is kept as an empty extra so pip install pydantic-settings[toml] keeps working.

python-dotenv>=1.2.2 is now required (#971) to pick up the fix for CVE-2026-28684.

Aliases are ignored in every source when validate_by_alias=False (#1033). Env vars, secrets, CLI flags and defaults now use only field names, matching pydantic. An env var named after the alias is now ignored instead of raising extra_forbidden, and the CLI exposes --apple rather than --pomo.

validation_alias takes precedence over alias (#1038). When the two differ, values from JSON/YAML/TOML files and the CLI were silently ignored; they now load. CLI help lists the validation_alias flag first, and CliApp.serialize emits it.

CLI case-insensitivity only lowercases registered options (#1036). With case_sensitive=False, args after -- and those captured by CliUnknownArgs keep their case (-Xmx4G no longer becomes -xmx4g). Unrecognized options are now reported as typed (--NOPE instead of --nope).

JSON and YAML config files are read as UTF-8 by default (#955) instead of the locale encoding, completing the secrets-file fix from 2.15.0. json_file_encoding/yaml_file_encoding still override it.

Discriminated union defaults are partially updated again (#997). This reverts the 2.15.0 regression with nested_model_default_partial_update=True: the default is only dropped when the incoming value selects a different union member.

New features

Python 3.15 and pydantic 2.14 support (#1026, #1029, #1022). pydantic 2.14 broke CliApp.run and validate_by_alias=False handling; both are fixed.

Cached settings instances via Settings.settings_cached() and Settings.settings_clear_cache() (#952). These give you a process-local singleton per settings class without hand-rolling lru_cache wrappers. Calling the class directly still builds a fresh instance.

AWS Systems Manager Parameter Store source — AWSSystemsManagerSettingsSource (#941). It recursively reads every parameter under an ssm_path, with / mapping onto nested models. Install it with the new aws-systems-manager extra.

env_file_depth (#940) lets a relative env_file be found in parent directories, mirroring pyproject_toml_depth. This is useful when scripts run from a subdirectory of a monorepo. It defaults to 0, which keeps the current behavior.

CliVariadicArg for named variadic options (#949, #958). It accepts --param a b c in addition to repeated --param a --param b. Required fields need at least one value.

Bug fixes

CLI

... (truncated)

Commits

4e286e2 Prepare release 2.16.1 (#1087)
993b59e Keep fixed-length tuple CLI positionals single-valued (#1069)
f651a7a Keep list of dicts CLI values as lists (#1049)
ecf7d90 Harden CI (#1044)
8c259f4 Prepare release 2.16.0 (#1043)
4bc667a Keep case of non-option CLI args when case_sensitive=False (#1036)
f75a805 Simplify alias resolution branch and test alias with AliasChoices/AliasPath (...
cfdc558 Honor env_parse_none_str for GCP Secret Manager (#1040)
081d39f Fix config file and CLI values being ignored when alias differs from validati...
c46ebc4 Expand home paths when checking TOML table headers (#1034)
Additional commits viewable in compare view

Updates `docker` from 7.1.0 to 7.2.0

Release notes

Sourced from docker's releases.

7.2.0

Upgrade Notes

docker.from_env() now honors the active Docker CLI context when DOCKER_HOST is not set.

This means the client may connect to the daemon selected by DOCKER_CONTEXT or the current context in ~/.docker/config.json, matching Docker CLI behavior more closely.

If your application relied on the previous default connection behavior, set DOCKER_HOST explicitly, set DOCKER_CONTEXT=default, or pass use_context=False to DockerClient.from_env().

Added docker.from_context() / DockerClient.from_context() for explicitly creating a client from a Docker CLI context.

Features

Added support for Docker contexts when creating the default client

Added subpath support for volumes

Bugfixes

Fixed exec_run documentation for the stream parameter

Fixed image loading to avoid depending on the deprecated JSONMessage.error field

Preserved the rotated unlock key in swarm integration tests

Fixed SSL certificate generation in tests

Fixed IPv6 integration tests by explicitly enabling IPv6 where required

Miscellaneous

Updated tests for newer Docker Engine behavior

CI and build updates

What's Changed

tests/exec: expect 127 exit code for missing executable by @laurazard in docker/docker-py#3290

fixing doc for stream param in exec_run by @yasonk in docker/docker-py#3292

Bump default API version to 1.45 (Moby 26.0/26.1) by @thaJeztah in docker/docker-py#3261

Set a dummy-version if none set, and remove unused APT_MIRROR build-arg by @thaJeztah in docker/docker-py#3267

test_service_logs: stop testing experimental versions by @thaJeztah in docker/docker-py#2442

Makefile: fix circular reference for integration-dind by @thaJeztah in docker/docker-py#3297

image load: don't depend on deprecated JSONMessage.error field by @thaJeztah in docker/docker-py#3307

integration: test_create_volume_invalid_driver allow either 400 or 404 by @thaJeztah in docker/docker-py#3296

integration: adjust tests for omitted "OnBuild" by @thaJeztah in docker/docker-py#3336

Implement Subpath Support for Volumes in Docker-Py (#3243) by @Khushiyant in docker/docker-py#3270

tests: fix ssl generation by @thaJeztah in docker/docker-py#3365

test/integration: don't check for deprecated Networks field by @thaJeztah in docker/docker-py#3362

test: Skip from_env_unix tests if DOCKER_HOST is network socket by @ricardobranco777 in docker/docker-py#3366

test_connect_with_ipv6_address: enable IPv6 by @robmry in docker/docker-py#3372

test_create_with_ipv6_address: enable IPv6 by @robmry in docker/docker-py#3373

tests: Migrate off gpg2 and regenerate key ed25519 by @vvoland in docker/docker-py#3399

gha: Pin to digests by @vvoland in docker/docker-py#3408

Fix integration tests on non-amd64 hosts and add ARM64 CI by @vvoland in docker/docker-py#3407

integration/swarm: Preserve rotated unlock key by @vvoland in docker/docker-py#3410

[DKP-2535] Honour context if present for default client, add contexts support by @ebriney in docker/docker-py#3401

docs: 7.2.0 changelog by @vvoland in docker/docker-py#3415

New Contributors

@laurazard made their first contribution in docker/docker-py#3290

@yasonk made their first contribution in docker/docker-py#3292

@ricardobranco777 made their first contribution in docker/docker-py#3366

... (truncated)

Commits

5ad5327 Merge pull request #3415 from vvoland/update-changelog
d242230 docs: 7.2.0 changelog
ba01cc7 Merge pull request #3401 from ebriney/client-from-context
ae5dfe9 Merge pull request #3410 from vvoland/fix-flaky
aa99999 integration/swarm: Preserve rotated unlock key
059d371 Merge pull request #3407 from vvoland/fix-arm64
9b4b9b8 gha: Add arm64 integration CI
9e9f8ff Skip tests incompatible with host architecture
e0542d9 Merge pull request #3408 from vvoland/gha-pin
578a11d gha: Pin to digests
Additional commits viewable in compare view

Updates `caido-sdk-client` from 0.2.0 to 0.3.2

Commits

See full diff in compare view

Updates `reportlab` from 5.0.0 to 5.1.0 Updates `pypdf` from 6.14.2 to 6.21.2

Release notes

Sourced from pypdf's releases.

Version 6.21.2, 2026-10-21

What's new

Security (SEC)

Avoid repeated full file loads (#4240) by @stefan6419846

Limit size of standard xref table (#4239) by @stefan6419846

Bug Fixes (BUG)

Decode UniGB-UTF16 CMaps as UTF-16BE (#4231) by @4444wjt

Keep 8-bit DeviceRGB image mode (#4230) by @DGrutt

Preserve all annotation quadrilaterals when merging pages (#4223) by @repzakske

Robustness (ROB)

Multiple fixes

Full Changelog

Version 6.21.1, 2026-10-17

What's new

Security (SEC)

Only open /DCTDecode image data with the Pillow JPEG plugin (#4222) by @metsw24-max

Full Changelog

Version 6.21.0, 2026-10-16

What's new

Security (SEC)

Improve performance and limit field work (#4219) by @stefan6419846

Limit stream parsing work (#4218) by @stefan6419846

New Features (ENH)

Allow custom fit modes for named destinations (#4181) by @JackyHsu-X

Bug Fixes (BUG)

Treat NUL as whitespace in ArrayObject (#4198) by @Zephyr761

Avoid overwriting unread objects in add_form_topname (#4190) by @tigger0jk

Read an indirect page box on a writer page (#4179) by @usmanmateen

Full Changelog

Version 6.20.1, 2026-10-12

What's new

Security (SEC)

Prevent cyclic tree handling (#4188) by @stefan6419846

Bug Fixes (BUG)

Only read the color operator from a text field's default appearance (#4158) by @yaourtv

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.21.2, 2026-10-21

Security (SEC)

Avoid repeated full file loads (#4240)

Limit size of standard xref table (#4239)

Bug Fixes (BUG)

Decode UniGB-UTF16 CMaps as UTF-16BE (#4231)

Keep 8-bit DeviceRGB image mode (#4230)

Preserve all annotation quadrilaterals when merging pages (#4223)

Robustness (ROB)

Multiple fixes

Full Changelog

Version 6.21.1, 2026-10-17

Security (SEC)

Only open /DCTDecode image data with the Pillow JPEG plugin (#4222)

Full Changelog

Version 6.21.0, 2026-10-16

Security (SEC)

Improve performance and limit field work (#4219)

Limit stream parsing work (#4218)

New Features (ENH)

Allow custom fit modes for named destinations (#4181)

Bug Fixes (BUG)

Treat NUL as whitespace in ArrayObject (#4198)

Avoid overwriting unread objects in add_form_topname (#4190)

Read an indirect page box on a writer page (#4179)

Full Changelog

Version 6.20.1, 2026-10-12

Security (SEC)

Prevent cyclic tree handling (#4188)

Bug Fixes (BUG)

Only read the color operator from a text field's default appearance (#4158)

Full Changelog

Version 6.20.0, 2026-10-09

... (truncated)

Commits

37d05f6 REL: 6.21.2
68a0e50 SEC: Avoid repeated full file loads (#4240)
a3061e3 SEC: Limit size of standard xref table (#4239)
b7eb7b9 BUG: Decode UniGB-UTF16 CMaps as UTF-16BE (#4231)
885e743 ROB: Reject unsupported key lengths in the /Encrypt dictionary (#4226)
b68a335 TST: Enable type checking for PageRange tests (#4229)
3f9c7f4 ROB: Reject negative bfrange source ranges in /ToUnicode CMaps (#4225)
85c46ab ROB: Raise PdfReadError for malformed /ObjStm /N and /First headers (#4216)
a91817a BUG: Keep 8-bit DeviceRGB image mode (#4230)
b32df1d ROB: Validate the /Encrypt dictionary when opening an encrypted file (#4197)
Additional commits viewable in compare view

Updates `mypy` from 2.1.0 to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Python 3.15 Support

Mypy 2.4 supports running on Python 3.15 and type checking most Python 3.15 features. This includes the new builtin sentinel type for sentinel values (PEP 661), which mypy now supports (see below for details). Lazy imports (PEP 810) and unpacking in comprehensions (PEP 798) are also supported. Closed TypedDicts (PEP 728) have been supported since mypy 2.2, but the extra_items TypedDict argument, also introduced in PEP 728, is still unsupported. Support for extra_items will be added in a future mypy release.

Native Parser Enabled by Default

Mypy now uses the new native parser by default. It's based on the Ruff parser, and it's significantly faster than the legacy parser, which uses the stdlib ast module. The native parser also has other benefits:

You can target newer Python versions and use recent Python syntax even when running mypy on an older Python version. For example, you can use --python-version 3.15 when running mypy on Python 3.14.

Stub files can use syntax that is newer than the target Python version. For example, stubs can use the PEP 695 generic class syntax (class Box[T]: ...) when running on or targeting Python 3.10.

Parallel type checking requires the native parser.

The legacy parser is still available through --no-native-parser, or native_parser = False in the config file (native_parser = false under [tool.mypy] in pyproject.toml). We are planning to remove the legacy parser in early 2027. If you run into a problem with the native parser, please report it on the issue tracker.

Unlike the legacy parser, the native parser doesn't support type comments for variables defined by for and with statements. These type comments are silently ignored, and the types of the variables are

... (truncated)

Commits

935ba8a Bump version to 2.4.0
334a678 Add link for PR 22066 in mypy 2.4 changelog (#22082)
fe69660 Finalize mypy 2.4 changelog (#22080)
541fd87 Various mypy 2.4 changelog updates (#22077)
b231182 Update native parser docs (#22078)
04fe42c Initial Changelog for Mypy 2.4 (#22071)
0617494 Quick fix for non UTF-8 encodings with new parser (#22066)
b2f9b60 Bump librt to 0.16.0 (#22067)
9d798dc Sync typeshed (#22054)
0861bb6 Reduce max protocol stack size to 20 (#22053)
Additional commits viewable in compare view

Updates `ruff` from 0.15.20 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3 Release Notes

Released on 2026-10-26.

Preview features

[suspicious] Add shared-clock-mock (#29074)

Bug fixes

[pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

Buffer stdout in ruff format (#29631)
Specialize ASCII identifier lexing (#29503)
Speed up identifier and keyword lexing (#29463)

Documentation

[flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm...

_Description has been truncated_7a:T194e,build(deps): bump the python group across 1 directory with 14 updates

Bumps the python group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [litellm](https://github.com/BerriAI/litellm) | `1.101.0` | `1.106.4` |
| [google-auth](https://github.com/googleapis/google-cloud-python) | `2.55.1` | `2.62.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.36` | `1.43.121` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.14.1` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.14.2` | `2.16.1` |
| [docker](https://github.com/docker/docker-py) | `7.1.0` | `7.2.0` |
| [caido-sdk-client](https://github.com/caido-community/sdk-py) | `0.2.0` | `0.3.2` |
| [reportlab](https://www.reportlab.com/) | `5.0.0` | `5.1.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.14.2` | `6.21.2` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.4.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.17.3` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.411` | `1.1.414` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.7.0` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.0` | `1.4.1` |



Updates `litellm` from 1.101.0 to 1.106.4
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/compare/v1.101.0...v1.106.4)

Updates `google-auth` from 2.55.1 to 2.62.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.1...google-auth-v2.62.0)

Updates `boto3` from 1.43.36 to 1.43.121
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.121)

Updates `pydantic` from 2.13.4 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.14.1)

Updates `pydantic-settings` from 2.14.2 to 2.16.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.2...v2.16.1)

Updates `docker` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/docker-py/releases)
- [Commits](https://github.com/docker/docker-py/compare/7.1.0...7.2.0)

Updates `caido-sdk-client` from 0.2.0 to 0.3.2
- [Commits](https://github.com/caido-community/sdk-py/commits)

Updates `reportlab` from 5.0.0 to 5.1.0

Updates `pypdf` from 6.14.2 to 6.21.2
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/py-pdf/pypdf/compare/6.14.2...6.21.2)

Updates `mypy` from 2.1.0 to 2.4.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v2.1.0...v2.4.0)

Updates `ruff` from 0.15.20 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.20...0.17.3)

Updates `pyright` from 1.1.411 to 1.1.414
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.411...v1.1.414)

Updates `pre-commit` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v4.6.0...v4.7.0)

Updates `pytest-asyncio` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.106.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: google-auth
  dependency-version: 2.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: boto3
  dependency-version: 1.43.121
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pydantic-settings
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: docker
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: caido-sdk-client
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: reportlab
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pypdf
  dependency-version: 6.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: mypy
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pyright
  dependency-version: 1.1.414
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pytest-asyncio
  dependency-version: 1.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] 63:["$","$L76",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"usestrix","repo":"strix","pullNumber":1643}],"data":{"repositoryId":"5411","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/ee9ce3e41ccd83d0d82b44c3a379d115?key=ATdRna3MzMw8Hlfnq4en2QfWXAbcWt7Gs%2B6LJIK5idPcU0A%2BKMm36g5Tn87RFkNzLx0sTBQTbDz6ZwuI50wQwsUFZKKL3VMmSNfiwnzZKqg8A54YBKUuHI2wXCpWkb7sqOYvytoTlV%2FbmplzTzLHxkMr5yQlXx9xXA5X3EIK7cL6DdayqPfO1B6%2B0g%3D%3D","externalProvider":"github","login":"dependabot[bot]","type":"Bot","url":"https://github.com/apps/dependabot"},"authorId":"49699333","baseRefName":"main","closedAt":null,"comments":1,"createdAt":"2026-11-03T06:59:29Z","headRefName":"dependabot/uv/python-3fbda4497e","id":"4968503","isDraft":false,"labels":[{"color":"0366d6","description":"Pull requests that update a dependency file","name":"dependencies"},{"color":"2b67c6","description":"Pull requests that update python:uv code","name":"python:uv"}],"number":1643,"repository":{"name":"strix","owner":"usestrix","provider":"forgejo"},"state":"open","title":"build(deps): bump the python group across 1 directory with 14 updates","updatedAt":"2026-11-03T06:59:34Z","url":"https://trylle.com/usestrix/strix/pulls/1643","body":"$79","additions":429,"deletions":270,"changedFiles":1,"commits":1,"reviewComments":0,"headSha":"4aadee39b1a5d10dc6f8c65a2df4b8dbe1b3dadc","baseSha":"215482eb2204cd30ac6b87520e3f5c6511e2e2e8","headRepoOwner":"usestrix","headRepoName":"strix","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":true,"mergeableState":"clean","conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:1643"},"comments":[{"id":27078172,"graphqlId":"27078172","body":"\nPR author is in the excluded authors list.","createdAt":"2026-11-03T06:59:34Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d5fdefbe765e9f429d38a31328621291?key=Acl0%2BlhblDOxCrSlqfonNDhgrt1LwjH88FRgEld3W8TJMWD14w5hVMk945%2FUo6%2F4SXM8sWkkR1IS3%2FPkJicqQw3Nzkwzis1r900F6Ii81AW%2B6%2FgoEHT7u6ClQhGHk5zI5yHvly2ZTjc6HDW38z1iK%2FBzByCTQdN9niTDbBlKfNdTv6bYqay%2Boc9at4A%3D","externalProvider":"github","login":"greptile-apps[bot]","type":"Bot","url":"https://github.com/apps/greptile-apps"}}],"commits":[{"sha":"4aadee39b1a5d10dc6f8c65a2df4b8dbe1b3dadc","message":"$7a","createdAt":"2026-11-03T06:59:26Z","author":{"avatarUrl":"","login":"","name":"dependabot[bot]","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}}],"events":[],"reviews":[],"stackEvents":[],"commentPagination":{"totalCount":1,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1794163064019}],"children":"$L7b"}]
65:null
6c:[["$","title","0",{"children":"Commits · build(deps): bump the python group across 1 directory with 14 updates · usestrix/strix | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on build(deps): bump the python group across 1 directory with 14 updates (#1643) in usestrix/strix."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · build(deps): bump the python group across 1 directory with 14 updates · usestrix/strix, usestrix/strix, usestrix/strix repository, strix, Python repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/usestrix/strix/pulls/1643/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/usestrix/strix/pulls/1643/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · build(deps): bump the python group across 1 directory with 14 updates · usestrix/strix | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on build(deps): bump the python group across 1 directory with 14 updates (#1643) in usestrix/strix."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/usestrix/strix/pulls/1643/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=usestrix&repo=strix"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=usestrix&repo=strix"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"usestrix/strix repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · build(deps): bump the python group across 1 directory with 14 updates · usestrix/strix | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on build(deps): bump the python group across 1 directory with 14 updates (#1643) in usestrix/strix."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=usestrix&repo=strix"}],["$","meta","32",{"name":"twitter:image:alt","content":"usestrix/strix repository preview on Trylle"}],["$","link","33",{"rel":"icon","href":"/favicon.png","type":"image/png"}],["$","link","34",{"rel":"icon","href":"/favicon-white.png","type":"image/png","media":"(prefers-color-scheme: dark)"}],["$","link","35",{"rel":"apple-touch-icon","href":"/logo192.png"}],["$","$L7c","36",{}]]

Commits on Tue, Nov 3, 2026