Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
openai	>=1.72,<1.73 -> >=1.74,<1.75
pydantic (changelog)	~=2.10.6 -> ~=2.11.3
semgrep	>=1.118,<1.119 -> >=1.119,<1.120

---

Release Notes

openai/openai-python (openai)

v1.74.0

Compare Source

Full Changelog: v1.73.0...v1.74.0

Features

• api: adding gpt-4.1 family of model IDs (d4dae55)

Bug Fixes

• chat: skip azure async filter events (#​2255) (fd3a38b)

Chores

• client: minor internal fixes (6071ae5)
• internal: update pyright settings (c8f8beb)

v1.73.0

Compare Source

Full Changelog: v1.72.0...v1.73.0

Features

• api: manual updates (a3253dd)

Bug Fixes

• perf: optimize some hot paths (f79d39f)
• perf: skip traversing types for NotGiven values (28d220d)

Chores

• internal: expand CI branch coverage (#​2295) (0ae783b)
• internal: reduce CI branch coverage (2fb7d42)
• slight wording improvement in README (#​2291) (e020759)
• workaround build errors (4e10c96)

pydantic/pydantic (pydantic)

v2.11.3

Compare Source

GitHub release

What's Changed

Packaging

• Update V1 copy to v1.10.21 by @​Viicos in #​11706

Fixes

• Preserve field description when rebuilding model fields by @​Viicos in #​11698

v2.11.2

Compare Source

GitHub release

What's Changed

Fixes

• Bump pydantic-core to v2.33.1 by @​Viicos in #​11678
• Make sure __pydantic_private__ exists before setting private attributes by @​Viicos in #​11666
• Do not override FieldInfo._complete when using field from parent class by @​Viicos in #​11668
• Provide the available definitions when applying discriminated unions by @​Viicos in #​11670
• Do not expand root type in the mypy plugin for variables by @​Viicos in #​11676
• Mention the attribute name in model fields deprecation message by @​Viicos in #​11674
• Properly validate parameterized mappings by @​Viicos in #​11658

v2.11.1

Compare Source

GitHub release

What's Changed

Fixes

• Do not override 'definitions-ref' schemas containing serialization schemas or metadata by @​Viicos in #​11644

v2.11.0

Compare Source

GitHub release

What's Changed

Pydantic v2.11 is a version strongly focused on build time performance of Pydantic models (and core schema generation in general).
See the blog post for more details.

Packaging

• Bump pydantic-core to v2.33.0 by @​Viicos in #​11631

New Features

• Add encoded_string() method to the URL types by @​YassinNouh21 in #​11580
• Add support for defer_build with @validate_call decorator by @​Viicos in #​11584
• Allow @with_config decorator to be used with keyword arguments by @​Viicos in #​11608
• Simplify customization of default value inclusion in JSON Schema generation by @​Viicos in #​11634
• Add generate_arguments_schema() function by @​Viicos in #​11572

Fixes

• Allow generic typed dictionaries to be used for unpacked variadic keyword parameters by @​Viicos in #​11571
• Fix runtime error when computing model string representation involving cached properties and self-referenced models by @​Viicos in #​11579
• Preserve other steps when using the ellipsis in the pipeline API by @​Viicos in #​11626
• Fix deferred discriminator application logic by @​Viicos in #​11591

New Contributors

• @​cmenon12 made their first contribution in #​11562
• @​Jeukoh made their first contribution in #​11611

returntocorp/semgrep (semgrep)

v1.119.0

Compare Source

Added

• python: Semgrep will now perform dataflow analysis within and through comprehensions. (saf-1560)
• A new subcommand semgrep show project-root is now provided to display
  the project root path associated with a scan root. This is useful for
  troubleshooting Semgrepignore (v2) issues. (saf-1936)

Fixed

• tainting: Apply taint_assume_safe_numbers and taint_assume_safe_booleans
  earlier when considering to track taint through class fields and function
  parameters. If the field/parameter has a number/Boolean type and the
  corresponding option is set, it will just not be tracked. In some cases this
  can help with performance.

  Also added short/Short to the list of integer types recognized by
  taint_assume_safe_numbers. (code-8345)

• IDE: The Semgrep VS Code Extension will no longer hang on Getting code actions from Semgrep...
  on saving a file, when updating rules. (saf-1954)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[clavedeluna]

@andrecsilva FYI, hopefully this does work

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud