Skip to content

Bump the prod-deps group across 1 directory with 5 updates#1419

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/prod-deps-a9ba7ae78b
Closed

Bump the prod-deps group across 1 directory with 5 updates#1419
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/prod-deps-a9ba7ae78b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025 •
edited
Loading

Bumps the prod-deps group with 5 updates in the / directory:

Package From To
google-auth 2.43.0 2.45.0
mistralai 1.6.0 1.9.11
boto3 1.42.9 1.42.10
huggingface-hub 0.34.6 1.2.3
openai 1.109.1 2.12.0

Updates google-auth from 2.43.0 to 2.45.0

Release notes

Sourced from google-auth's releases.

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

  • Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

Bug Fixes

  • Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907)

  • Delegate workload cert and key default lookup to helper function (#1877) (b0993c7e)

  • Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f)

Changelog

Sourced from google-auth's changelog.

2.45.0 (2025-12-15)

Features

2.44.0 (2025-12-13)

Features

Bug Fixes

Commits
  • 08fabf7 chore: librarian release pull request: 20251215T132028Z (#1891)
  • b32c934 feat: Adding Agent Identity bound token support and handling certificate mism...
  • 262eb9e chore: librarian release pull request: 20251212T161150Z (#1888)
  • 0f7097e feat: support Python 3.14 (#1822)
  • e0c3296 fix(auth): Use public refresh method for source credentials in ImpersonatedCr...
  • 78de790 fix(auth): Add temporary patch to workload cert logic to accomodate Cloud Run...
  • 3e8a566 chore(tests): allow expired secret in system tests (#1883)
  • b0993c7 fix(auth): Delegate workload cert and key default lookup to helper function (...
  • 2c374d3 chore: update secret (#1879)
  • 39c381a feat: add ecdsa p-384 support (#1872)
  • Additional commits viewable in compare view

Updates mistralai from 1.6.0 to 1.9.11

Release notes

Sourced from mistralai's releases.

python - v1.9.11 - 2025-10-02 15:52:34

Generated by Speakeasy CLI

2025-10-02 15:52:34

Changes

Based on:

Generated

  • [python v1.9.11] .

Releases

Publishing Completed

python - v1.9.10 - 2025-09-02 07:43:34

Generated by Speakeasy CLI

2025-09-02 07:02:26

Changes

Based on:

Generated

  • [python v1.9.10] .

Releases

Publishing Completed

python - v1.9.9 - 2025-08-26 17:40:00

Generated by Speakeasy CLI

2025-08-26 17:34:05

Changes

Based on:

Generated

  • [python v1.9.9] .

Releases

Publishing Completed

python - v1.9.8 - 2025-08-25 16:29:24

Generated by Speakeasy CLI

2025-08-25 14:54:06

Changes

... (truncated)

Changelog

Sourced from mistralai's changelog.

2024-08-07 14:25:13

Changes

Based on:

Generated

  • [python v1.0.0] .

Releases

2024-08-08 18:12:16

Changes

Based on:

Generated

  • [python v1.0.1] .

Releases

2024-08-20 08:36:28

Changes

Based on:

Generated

  • [python v1.0.2] .

Releases

2024-08-29 09:09:05

Changes

Based on:

Generated

  • [python v1.0.3] .

Releases

2024-09-13 16:21:24

Changes

Based on:

Generated

  • [python v1.1.0] .

Releases

... (truncated)

Commits
  • 992b0cb ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.606.10 (#277)
  • 824187d Update Speakeasy SDKs to version 1.606.10 (#275)
  • 2bdff9f Merge pull request #271 from mistralai/speakeasy-sdk-regen-1756796562
  • d985faa Skip flaky remote MCP server example
  • 3784b47 ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.568.2
  • 806e91d ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.568.2 (#268)
  • 049014b Fix: update base azure sdk file to include OCR (#267)
  • 16d470c chore: 🐝 Update SDK - Generate MISTRALAI MISTRALAI-SDK 1.9.8 (#266)
  • 9357abe Merge pull request #265 from mistralai/speakeasy-sdk-regen-1755678497
  • a0c4bac ci: regenerated with OpenAPI Doc , Speakeasy CLI 1.568.2
  • Additional commits viewable in compare view

Updates boto3 from 1.42.9 to 1.42.10

Commits
  • 2b328a1 Merge branch 'release-1.42.10'
  • 3e83ce4 Bumping version to 1.42.10
  • ecb2be4 Add changelog entries from botocore
  • cc0a3ca Merge branch 'release-1.42.9' into develop
  • See full diff in compare view

Updates huggingface-hub from 0.34.6 to 1.2.3

Release notes

Sourced from huggingface-hub's releases.

[v1.2.3] Fix private default value in CLI

Patch release for #3618 by @​Wauplin.

When creating a new repo, we should default to private=None instead of private=False. This is already the case when using the API but not when using the CLI. This is a bug likely introduced when switching to Typer. When defaulting to None, the repo visibility will default to False except if the organization has configured repos to be "private by default" (the check happens server-side, so it shouldn't be hardcoded client-side).

Full Changelog: huggingface/huggingface_hub@v1.2.2...v1.2.3

[v1.2.2] Fix unbound local error in local folder metadata + fix hf auth list logs

Full Changelog: huggingface/huggingface_hub@v1.2.1...v1.2.2

v1.2.1: Smarter Rate Limit Handling, Daily Papers API and more QoL improvements!

🚦 Smarter Rate Limit Handling

We've improved how the huggingface_hub library handles rate limits from the Hub. When you hit a rate limit, you'll now see clear, actionable error messages telling you exactly how long to wait and how many requests you have left.

HfHubHTTPError: 429 Too Many Requests for url: https://huggingface.co/api/models/username/reponame.
Retry after 55 seconds (0/2500 requests remaining in current 300s window).

When a 429 error occurs, the SDK automatically parses the RateLimit header to extract the exact number of seconds until the rate limit resets, then waits precisely that duration before retrying. This applies to file downloads (i.e. Resolvers), uploads, and paginated Hub API calls (list_models, list_datasets, list_spaces, etc.).

More info about Hub rate limits in the docs 👉 here.

✨ HF API

Daily Papers endpoint: You can now programmatically access Hugging Face's daily papers feed. You can filter by week, month, or submitter, and sort by publication date or trending.

from huggingface_hub import list_daily_papers
for paper in list_daily_papers(date="2025-12-03"):
print(paper.title)
DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models
ToolOrchestra: Elevating Intelligence via Efficient Model and Tool Orchestration
MultiShotMaster: A Controllable Multi-Shot Video Generation Framework
Deep Research: A Systematic Survey
MG-Nav: Dual-Scale Visual Navigation via Sparse Spatial Memory
...
</tr></table>

... (truncated)

Commits

Updates openai from 1.109.1 to 2.12.0

Release notes

Sourced from openai's releases.

v2.12.0

2.12.0 (2025-12-15)

Full Changelog: v2.11.0...v2.12.0

Features

  • api: api update (a95c4d0)
  • api: fix grader input list, add dated slugs for sora-2 (b2c389b)

v2.11.0

2.11.0 (2025-12-11)

Full Changelog: v2.10.0...v2.11.0

Features

v2.10.0

2.10.0 (2025-12-10)

Full Changelog: v2.9.0...v2.10.0

Features

  • api: make model required for the responses/compact endpoint (a12936b)

Bug Fixes

  • types: allow pyright to infer TypedDict types within SequenceNotStr (8f0d230)

Chores

  • add missing docstrings (f20a9a1)
  • internal: update docstring (9a993f2)

v2.9.0

2.9.0 (2025-12-04)

Full Changelog: v2.8.1...v2.9.0

Features

  • api: gpt-5.1-codex-max and responses/compact (22f646e)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

2.12.0 (2025-12-15)

Full Changelog: v2.11.0...v2.12.0

Features

  • api: api update (a95c4d0)
  • api: fix grader input list, add dated slugs for sora-2 (b2c389b)

2.11.0 (2025-12-11)

Full Changelog: v2.10.0...v2.11.0

Features

2.10.0 (2025-12-10)

Full Changelog: v2.9.0...v2.10.0

Features

  • api: make model required for the responses/compact endpoint (a12936b)

Bug Fixes

  • types: allow pyright to infer TypedDict types within SequenceNotStr (8f0d230)

Chores

  • add missing docstrings (f20a9a1)
  • internal: update docstring (9a993f2)

2.9.0 (2025-12-04)

Full Changelog: v2.8.1...v2.9.0

Features

  • api: gpt-5.1-codex-max and responses/compact (22f646e)

Bug Fixes

  • client: avoid mutating user-provided response config object (#2700) (e040d22)
  • ensure streams are always closed (0b1a27f)
  • streaming: correct indentation (575bbac)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the prod-deps group across 1 directory with 5 updates
92c5364 
Bumps the prod-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.43.0` | `2.45.0` |
| [mistralai](https://github.com/mistralai/client-python) | `1.6.0` | `1.9.11` |
| [boto3](https://github.com/boto/boto3) | `1.42.9` | `1.42.10` |
| [huggingface-hub](https://github.com/huggingface/huggingface_hub) | `0.34.6` | `1.2.3` |
| [openai](https://github.com/openai/openai-python) | `1.109.1` | `2.12.0` |



Updates `google-auth` from 2.43.0 to 2.45.0
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.43.0...v2.45.0)

Updates `mistralai` from 1.6.0 to 1.9.11
- [Release notes](https://github.com/mistralai/client-python/releases)
- [Changelog](https://github.com/mistralai/client-python/blob/main/RELEASES.md)
- [Commits](mistralai/client-python@v1.6.0...v1.9.11)

Updates `boto3` from 1.42.9 to 1.42.10
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.9...1.42.10)

Updates `huggingface-hub` from 0.34.6 to 1.2.3
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v0.34.6...v1.2.3)

Updates `openai` from 1.109.1 to 2.12.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.109.1...v2.12.0)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-version: 2.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: mistralai
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: boto3
  dependency-version: 1.42.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: huggingface-hub
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: openai
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 15, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 15, 2025 23:15
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 15, 2025
@github-actions
Copy link

github-actions bot commented Dec 15, 2025

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 17, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 17, 2025
@dependabot dependabot bot deleted the dependabot/pip/prod-deps-a9ba7ae78b branch December 17, 2025 23:27
@github-actions github-actions bot locked and limited conversation to collaborators Dec 17, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants