Skip to content

chore(deps): consolidate Python dependency upgrades (non-major) - #12921

Merged
mekarpeles merged 2 commits into
masterfrom
deps/python-consolidation-2026-06-13
Jun 14, 2026
Merged

chore(deps): consolidate Python dependency upgrades (non-major)#12921
mekarpeles merged 2 commits into
masterfrom
deps/python-consolidation-2026-06-13

Conversation

@mekarpeles

Copy link
Copy Markdown
Member

Summary

Consolidates Renovate PR #12807 into a single tested upgrade. All packages are non-major bumps.

Packages upgraded

Package Before After Risk Closes
fastapi 0.136.1 0.136.3 Low (patch) #12807
Genshi 0.7.10 0.7.11 Low (patch) #12807
internetarchive 5.8.0 5.9.0 Low (minor) #12807
lxml 6.1.0 6.1.1 Low (patch) #12807
python-amazon-paapi 6.2.0 6.3.0 Low (minor) #12807
python-multipart 0.0.28 0.0.32 Low (patch) #12807
requests 2.34.0 2.34.2 Low (patch) #12807
sentry-sdk 2.59.0 2.61.1 Low (minor, monitoring) #12807
uvicorn 0.46.0 0.49.0 Low (minor) #12807
pytest-asyncio 1.3.0 1.4.0 Low (minor, test-only) #12807
ruff 0.15.15 0.15.16 Low (patch, dev-only) #12807

Excluded packages

Package Reason
luqum (0.11.0β†’0.14.0) 3-version minor jump; historically changed query parenthesization; defer to own PR for careful testing

Testing

All packages installed cleanly in the Docker web container (pip install -r requirements.txt -r requirements_test.txt). Local test suite could not be run because oldev:latest still uses Python 3.12 while master now requires Python 3.14.5 (per PR #12643 / pyproject.toml). CI will run on the correct Python version.

Checklist

  • All packages install cleanly
  • App serves HTTP 200 (blocked: local Docker uses Python 3.12, project now requires 3.14.5 β€” CI will verify)
  • Tests passing (same blocker β€” CI will verify)
  • CI passing (in progress)

Closes #12807

Packages bumped (all non-major):
  fastapi          0.136.1  β†’ 0.136.3
  Genshi           0.7.10   β†’ 0.7.11
  internetarchive  5.8.0    β†’ 5.9.0
  lxml             6.1.0    β†’ 6.1.1
  python-amazon-paapi  6.2.0 β†’ 6.3.0
  python-multipart 0.0.28   β†’ 0.0.32
  requests         2.34.0   β†’ 2.34.2  (main + gh_scripts)
  sentry-sdk       2.59.0   β†’ 2.61.1
  uvicorn          0.46.0   β†’ 0.49.0
  pytest-asyncio   1.3.0    β†’ 1.4.0
  ruff             0.15.15  β†’ 0.15.16

Excluded: luqum (0.11.0β†’0.14.0) β€” larger jump, defer to own PR for careful testing.
Copilot AI review requested due to automatic review settings June 14, 2026 05:50

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Consolidates Renovate’s non-major Python dependency updates into a single upgrade set by bumping pinned versions in the repo’s requirements files.

Changes:

  • Bumped runtime dependencies in requirements.txt (FastAPI, Genshi, internetarchive, lxml, python-amazon-paapi, python-multipart, requests, sentry-sdk, uvicorn).
  • Bumped dev/test dependencies in requirements_test.txt (pytest-asyncio, ruff).
  • Bumped requests in the GitHub scripts requirements.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
scripts/gh_scripts/requirements.txt Updates requests pin for GitHub automation scripts.
requirements.txt Updates pinned production/runtime Python dependencies.
requirements_test.txt Updates pinned test/dev tool dependencies (incl. ruff).

Comment thread requirements_test.txt
@mekarpeles
mekarpeles merged commit 15987af into master Jun 14, 2026
8 checks passed
@mekarpeles
mekarpeles deleted the deps/python-consolidation-2026-06-13 branch June 14, 2026 18:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants