From 5eb7c7acb448b035e4a91dc7be36f65aec1930cd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Aug 2024 21:32:21 +0000 Subject: [PATCH 1/3] Bump the python-requirements group across 1 directory with 16 updates Bumps the python-requirements group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.3.5` | `2.4.0` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.10.2` | `3.10.5` | | azure-cognitiveservices-speech | `1.38.0` | `1.40.0` | | [fixedint](https://github.com/nneonneo/fixedint) | `0.1.6` | `0.2.0` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.0.0` | `8.3.0` | | [microsoft-kiota-http](https://github.com/microsoft/kiota) | `1.3.2` | `1.3.3` | | [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python) | `1.1.0` | `1.5.4` | | [numpy](https://github.com/numpy/numpy) | `2.0.1` | `2.1.0` | | [openai](https://github.com/openai/openai-python) | `1.40.1` | `1.41.0` | | [openai-messages-token-helper](https://github.com/pamelafox/openai-messages-token-helper) | `0.1.9` | `0.1.10` | | [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry) | `0.26.5` | `0.27.0` | | [psutil](https://github.com/giampaolo/psutil) | `5.9.8` | `6.0.0` | | [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.20.1` | `2.23.0` | | [soupsieve](https://github.com/facelessuser/soupsieve) | `2.5` | `2.6` | | [uvicorn](https://github.com/encode/uvicorn) | `0.30.5` | `0.30.6` | | [zipp](https://github.com/jaraco/zipp) | `3.19.2` | `3.20.0` | Updates `aiohappyeyeballs` from 2.3.5 to 2.4.0 - [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases) - [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md) - [Commits](https://github.com/aio-libs/aiohappyeyeballs/compare/v2.3.5...v2.4.0) Updates `aiohttp` from 3.10.2 to 3.10.5 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/v3.10.5/CHANGES.rst) - [Commits](https://github.com/aio-libs/aiohttp/compare/v3.10.2...v3.10.5) Updates `azure-cognitiveservices-speech` from 1.38.0 to 1.40.0 Updates `fixedint` from 0.1.6 to 0.2.0 - [Changelog](https://github.com/nneonneo/fixedint/blob/master/CHANGES) - [Commits](https://github.com/nneonneo/fixedint/compare/v0.1.6...v0.2.0) Updates `importlib-metadata` from 8.0.0 to 8.3.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](https://github.com/python/importlib_metadata/compare/v8.0.0...v8.3.0) Updates `microsoft-kiota-http` from 1.3.2 to 1.3.3 - [Release notes](https://github.com/microsoft/kiota/releases) - [Changelog](https://github.com/microsoft/kiota/blob/main/CHANGELOG.md) - [Commits](https://github.com/microsoft/kiota/commits) Updates `msgraph-sdk` from 1.1.0 to 1.5.4 - [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases) - [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/microsoftgraph/msgraph-sdk-python/compare/v1.1.0...v1.5.4) Updates `numpy` from 2.0.1 to 2.1.0 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](https://github.com/numpy/numpy/compare/v2.0.1...v2.1.0) Updates `openai` from 1.40.1 to 1.41.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/openai/openai-python/compare/v1.40.1...v1.41.0) Updates `openai-messages-token-helper` from 0.1.9 to 0.1.10 - [Changelog](https://github.com/pamelafox/openai-messages-token-helper/blob/main/CHANGELOG.md) - [Commits](https://github.com/pamelafox/openai-messages-token-helper/commits) Updates `opentelemetry-instrumentation-openai` from 0.26.5 to 0.27.0 - [Release notes](https://github.com/traceloop/openllmetry/releases) - [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md) - [Commits](https://github.com/traceloop/openllmetry/compare/0.26.5...0.27.0) Updates `psutil` from 5.9.8 to 6.0.0 - [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst) - [Commits](https://github.com/giampaolo/psutil/compare/release-5.9.8...release-6.0.0) Updates `pydantic-core` from 2.20.1 to 2.23.0 - [Release notes](https://github.com/pydantic/pydantic-core/releases) - [Commits](https://github.com/pydantic/pydantic-core/compare/v2.20.1...v2.23.0) Updates `soupsieve` from 2.5 to 2.6 - [Release notes](https://github.com/facelessuser/soupsieve/releases) - [Commits](https://github.com/facelessuser/soupsieve/compare/2.5...2.6) Updates `uvicorn` from 0.30.5 to 0.30.6 - [Release notes](https://github.com/encode/uvicorn/releases) - [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/uvicorn/compare/0.30.5...0.30.6) Updates `zipp` from 3.19.2 to 3.20.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](https://github.com/jaraco/zipp/compare/v3.19.2...v3.20.0) --- updated-dependencies: - dependency-name: aiohappyeyeballs dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: azure-cognitiveservices-speech dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: fixedint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: microsoft-kiota-http dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: msgraph-sdk dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: numpy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: openai dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: openai-messages-token-helper dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: opentelemetry-instrumentation-openai dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: psutil dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-requirements - dependency-name: pydantic-core dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: soupsieve dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements - dependency-name: uvicorn dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-requirements - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-requirements ... Signed-off-by: dependabot[bot] --- app/backend/requirements.txt | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/app/backend/requirements.txt b/app/backend/requirements.txt index b03884ce0c..709ac6dcad 100644 --- a/app/backend/requirements.txt +++ b/app/backend/requirements.txt @@ -6,9 +6,9 @@ # aiofiles==24.1.0 # via quart -aiohappyeyeballs==2.3.5 +aiohappyeyeballs==2.4.0 # via aiohttp -aiohttp==3.10.2 +aiohttp==3.10.5 # via # -r requirements.in # microsoft-kiota-authentication-azure @@ -26,7 +26,7 @@ attrs==24.2.0 # via aiohttp azure-ai-documentintelligence==1.0.0b3 # via -r requirements.in -azure-cognitiveservices-speech==1.38.0 +azure-cognitiveservices-speech==1.40.0 # via -r requirements.in azure-common==1.1.28 # via azure-search-documents @@ -94,7 +94,7 @@ deprecated==1.2.14 # opentelemetry-semantic-conventions distro==1.9.0 # via openai -fixedint==0.1.6 +fixedint==0.2.0 # via azure-monitor-opentelemetry-exporter flask==3.0.3 # via quart @@ -131,7 +131,7 @@ idna==3.7 # httpx # requests # yarl -importlib-metadata==8.0.0 +importlib-metadata==8.3.0 # via # opentelemetry-api # opentelemetry-instrumentation-flask @@ -169,7 +169,7 @@ microsoft-kiota-authentication-azure==1.0.0 # via # msgraph-core # msgraph-sdk -microsoft-kiota-http==1.3.2 +microsoft-kiota-http==1.3.3 # via # msgraph-core # msgraph-sdk @@ -186,7 +186,7 @@ msal-extensions==1.2.0 # via azure-identity msgraph-core==1.1.2 # via msgraph-sdk -msgraph-sdk==1.1.0 +msgraph-sdk==1.5.4 # via -r requirements.in msrest==0.7.1 # via azure-monitor-opentelemetry-exporter @@ -194,15 +194,15 @@ multidict==6.0.5 # via # aiohttp # yarl -numpy==2.0.1 +numpy==2.1.0 # via -r requirements.in oauthlib==3.2.2 # via requests-oauthlib -openai==1.40.1 +openai==1.41.0 # via # -r requirements.in # openai-messages-token-helper -openai-messages-token-helper==0.1.9 +openai-messages-token-helper==0.1.10 # via -r requirements.in opentelemetry-api==1.26.0 # via @@ -258,7 +258,7 @@ opentelemetry-instrumentation-flask==0.47b0 # via azure-monitor-opentelemetry opentelemetry-instrumentation-httpx==0.47b0 # via -r requirements.in -opentelemetry-instrumentation-openai==0.26.5 +opentelemetry-instrumentation-openai==0.27.0 # via -r requirements.in opentelemetry-instrumentation-psycopg2==0.47b0 # via azure-monitor-opentelemetry @@ -325,13 +325,13 @@ portalocker==2.10.1 # via msal-extensions priority==2.0.0 # via hypercorn -psutil==5.9.8 +psutil==6.0.0 # via azure-monitor-opentelemetry-exporter pycparser==2.22 # via cffi pydantic==2.8.2 # via openai -pydantic-core==2.20.1 +pydantic-core==2.23.0 # via pydantic pyjwt[crypto]==2.9.0 # via @@ -375,7 +375,7 @@ sniffio==1.3.1 # anyio # httpx # openai -soupsieve==2.5 +soupsieve==2.6 # via beautifulsoup4 std-uritemplate==1.0.5 # via microsoft-kiota-abstractions @@ -411,7 +411,7 @@ tzdata==2024.1 # via pendulum urllib3==2.2.2 # via requests -uvicorn==0.30.5 +uvicorn==0.30.6 # via -r requirements.in werkzeug==3.0.3 # via @@ -428,7 +428,7 @@ wsproto==1.2.0 # via hypercorn yarl==1.9.4 # via aiohttp -zipp==3.19.2 +zipp==3.20.0 # via importlib-metadata # The following packages are considered to be unsafe in a requirements file: From 86722d0f8e23dc12d68fe31611c5b1a80cd93909 Mon Sep 17 00:00:00 2001 From: Pamela Fox Date: Fri, 23 Aug 2024 13:55:32 -0700 Subject: [PATCH 2/3] Update requirements --- app/backend/requirements.txt | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/app/backend/requirements.txt b/app/backend/requirements.txt index 709ac6dcad..bc06eebfea 100644 --- a/app/backend/requirements.txt +++ b/app/backend/requirements.txt @@ -94,7 +94,7 @@ deprecated==1.2.14 # opentelemetry-semantic-conventions distro==1.9.0 # via openai -fixedint==0.2.0 +fixedint==0.1.6 # via azure-monitor-opentelemetry-exporter flask==3.0.3 # via quart @@ -125,13 +125,13 @@ hypercorn==0.17.3 # via quart hyperframe==6.0.1 # via h2 -idna==3.7 +idna==3.8 # via # anyio # httpx # requests # yarl -importlib-metadata==8.3.0 +importlib-metadata==8.0.0 # via # opentelemetry-api # opentelemetry-instrumentation-flask @@ -165,7 +165,7 @@ microsoft-kiota-abstractions==1.3.3 # microsoft-kiota-serialization-text # msgraph-core # msgraph-sdk -microsoft-kiota-authentication-azure==1.0.0 +microsoft-kiota-authentication-azure==1.1.0 # via # msgraph-core # msgraph-sdk @@ -186,7 +186,7 @@ msal-extensions==1.2.0 # via azure-identity msgraph-core==1.1.2 # via msgraph-sdk -msgraph-sdk==1.5.4 +msgraph-sdk==1.1.0 # via -r requirements.in msrest==0.7.1 # via azure-monitor-opentelemetry-exporter @@ -198,7 +198,7 @@ numpy==2.1.0 # via -r requirements.in oauthlib==3.2.2 # via requests-oauthlib -openai==1.41.0 +openai==1.42.0 # via # -r requirements.in # openai-messages-token-helper @@ -325,13 +325,13 @@ portalocker==2.10.1 # via msal-extensions priority==2.0.0 # via hypercorn -psutil==6.0.0 +psutil==5.9.8 # via azure-monitor-opentelemetry-exporter pycparser==2.22 # via cffi pydantic==2.8.2 # via openai -pydantic-core==2.23.0 +pydantic-core==2.20.1 # via pydantic pyjwt[crypto]==2.9.0 # via @@ -394,7 +394,7 @@ types-beautifulsoup4==4.12.0.20240511 # via -r requirements.in types-html5lib==1.1.11.20240806 # via types-beautifulsoup4 -types-pillow==10.2.0.20240520 +types-pillow==10.2.0.20240822 # via -r requirements.in typing-extensions==4.12.2 # via @@ -413,7 +413,7 @@ urllib3==2.2.2 # via requests uvicorn==0.30.6 # via -r requirements.in -werkzeug==3.0.3 +werkzeug==3.0.4 # via # flask # quart From 4e5eb66ae68b450d63343176a6fc661039186128 Mon Sep 17 00:00:00 2001 From: Pamela Fox Date: Fri, 23 Aug 2024 14:00:22 -0700 Subject: [PATCH 3/3] Pin numpy for 3.9 support --- app/backend/requirements.in | 2 +- app/backend/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/app/backend/requirements.in b/app/backend/requirements.in index 9a7e1b4c6d..ba7aed8fb0 100644 --- a/app/backend/requirements.in +++ b/app/backend/requirements.in @@ -2,7 +2,7 @@ azure-identity quart quart-cors openai>=1.3.7 -numpy>=1 # Used by openai embeddings.create to optimize embeddings (but not required) +numpy>=1,<2.1.0 # Used by openai embeddings.create to optimize embeddings (but not required) tiktoken tenacity azure-ai-documentintelligence diff --git a/app/backend/requirements.txt b/app/backend/requirements.txt index bc06eebfea..2234f99278 100644 --- a/app/backend/requirements.txt +++ b/app/backend/requirements.txt @@ -194,7 +194,7 @@ multidict==6.0.5 # via # aiohttp # yarl -numpy==2.1.0 +numpy==2.0.1 # via -r requirements.in oauthlib==3.2.2 # via requests-oauthlib