[dependabot]

Bumps the python-uv-lock group with 15 updates in the / directory:

Package	From	To
langchain	1.3.17	1.4.9
pydantic	2.13.4	2.14.3
langchain-anthropic	1.6.1	1.7.10
langchain-openai	1.6.0	1.7.4
langchain-google-genai	4.3.4	4.4.3
google-auth	2.57.0	2.62.1
pytest	9.1.1	9.2.0
pytest-asyncio	1.4.0	1.4.1.post1
python-dotenv	1.2.3	1.2.4
build	1.5.0	1.6.1
sphinx	9.1.0	9.2.0
basedpyright	1.39.10	1.40.2
ruff	0.16.4	0.17.4
mbake	1.4.6	1.5.0
zizmor	1.29.0	1.32.0

Updates langchain from 1.3.17 to 1.4.9

Release notes

Sourced from langchain's releases.

langchain==1.4.9

Changes since langchain==1.4.8

release(langchain): 1.4.9 (#41684) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): standardize model refusal content blocks (#41582)

langchain==1.4.8

[!WARNING] Python 3.10 support will be dropped in langchain-core 1.8.0 and langchain 1.5.0. The current minor versions are the last to support Python 3.10. Please upgrade to Python 3.11 or later.

Changes since langchain==1.4.7

chore(langchain): bump langchain-core (#41640) release(langchain): 1.4.8 (#41636) chore(deps): bump pyasn1 from 0.6.4 to 0.6.5 in /libs/langchain_v1 (#41591) chore(deps): bump joserfc from 1.7.4 to 1.7.6 in /libs/langchain_v1 (#41587) chore(deps): bump authlib from 1.7.2 to 1.9.1 in /libs/langchain_v1 (#41539) chore(deps): bump the minor-and-patch group across 3 directories with 32 updates (#41465) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(deps): bump fastmcp from 4.0.11 to 4.1.2 in /libs/langchain_v1 (#41437) chore(deps): bump opentelemetry-api from 1.44.0 to 1.45.1 in /libs/langchain_v1 (#41423) chore(infra): relax third-party dependency upper bounds (#41407)

langchain==1.4.7

Changes since langchain==1.4.6

chore(langchain): update lockfile (#41402) release(langchain): 1.4.7 (#41401) chore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/langchain_v1 (#41370) feat(core,langchain,standard-tests): read tool-call-delta in stream consumers (#41246) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/langchain_v1 (#41360) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/langchain_v1 (#41330) chore(deps): bump mcp from 2.1.1 to 2.2.0 in /libs/langchain_v1 (#41270) feat(core): accept address inside LangChainTracer (#41006)

langchain==1.4.6

Changes since langchain==1.4.5

release(langchain): 1.4.6 (#41247) feat(langchain): add opt-in per-call interrupts to HITL middleware (#41062)

langchain==1.4.5

Changes since langchain==1.4.4

release(langchain): 1.4.5 (#41226) feat(langchain): accept summarizer in SummarizationMiddleware (#41225)

langchain==1.4.4

... (truncated)

Commits

• d1d95b7 release(langchain): 1.4.9 (#41684)
• bbcdd56 release(anthropic): 1.7.10 (#41685)
• 16a08bd release(openai): 1.7.4 (#41683)
• d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
• 504fd5c chore(model-profiles): refresh model profile data (#41669)
• aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
• 49b9dfb release(core): 1.7.5 (#41665)
• f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
• 4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
• 67f17db fix(core): end tool run on cancellation (#41660)
• Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.14.3

Release notes

Sourced from pydantic's releases.

v2.14.3 2026-11-04

v2.14.3 (2026-11-04)

What's Changed

Packaging

• Build wheels for GraalPy 3.13 by @​msimacek in #14136.

  The previous v2.14.2 release published GraalPy 3.11 wheels, which were not working due to a PyO3 version bump. A CI workflow issue made it so that the wheel wasn't tested before publishing. This is now fixed: starting in v2.14.3, we no longer publish GraalPy 3.11 wheels, and GraalPy 3.13 wheels are now published together with the existing 3.12 one.

Performance

• Improve schema generation for fixed type handlers by @​alexmojaki in #14130
• Skip general schema dispatch for builtin scalars by @​alexmojaki in #14141
• Skip annotation handler setup when annotations are empty by @​alexmojaki in #14149
• Fix quadratic serialization time with per-index include/exclude on sequences by @​Viicos in #14160
• Avoid type lookups when checking for None during serialization by @​Viicos in #14167
• Improve performance of model serialization by @​Viicos in #14171
• Improve performance of dict serialization by @​Viicos in #14172
• Improve performance of type inference during serialization by @​Viicos in #14173
• Avoid cloning the field name when using the default value during validation by @​Viicos in #14175
• Do not evaluate model_config annotations by @​Viicos in #14195
• Avoid slow runtime Protocol check when expanding GroupedMetadata annotations by @​Viicos in #14196
• Use a lightweight @contextmanager implementation internally by @​Viicos in #14199

Fixes

• Fix various issues about GC tracking in pydantic-core by @​Viicos in #13819
• Include null in serialization JSON Schema for unless-none field serializers by @​Kropiunig in #13848
• Fix RecursionError when copying or unpickling models with defer_build by @​Viicos in #14115
• Remove dead default_factory check in unsupported Field() attribute by @​owtaylor in #14129
• Disallow non string extra keys during validation by @​Viicos in #14135
• Fix deeply nested data being reported as a cyclic reference by @​Viicos in #14164

New Contributors

• @​owtaylor made their first contribution in #14129

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

• Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @​Viicos in #14003
• Bump speedate to v0.18.0 by @​Viicos in #14007
• Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @​Viicos in #14083

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

• Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
• Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

• Add an ordered-dict core schema by @​Viicos in #13796
• Add a counter core schema by @​Viicos in #13824
• Do not mutate model_config attribute by @​Viicos in #13825
• Reject newlines in NameEmail validation by @​Viicos in #13897

Fixes

• Call enum constructors in both validation modes by @​Viicos in #13792
• Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
• Catch OverflowError during ByteSize validation by @​Viicos in #13850
• Require multiple_of constraints to be positive by @​Viicos in #13862
• Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
• Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
• Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
• Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
• Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
• Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
• Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
• Handle OS errors during ZoneInfo validation by @​Viicos in #13912
• Handle exceptions during Decimal validation by @​Viicos in #13940
• Rebuild incomplete types during serialization inference by @​Viicos in #13922
• Reject large exponents in Fraction validation by @​Viicos in #13944
• Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

• @​saquibjawedbit made their first contribution in #13859

... (truncated)

Commits

• ea492e0 Bump pydantic-core to v2.50.4
• 4f4a33f Prepare release v2.14.3
• dca067b Benchmark TypedDict schema generation across builds
• a2d1f6c Skip annotation handler setup when annotations are empty
• 3ae0a40 Construct builtin scalar union schemas directly
• 358d36f Skip general schema dispatch for builtin scalars
• 3cc701a Improve schema generation for fixed type handlers
• 762db7e Remove redundant None check in union schema generation
• c214986 Bump pytest-codspeed to v5.0.4
• 038ee97 Bump typing-inspection to v0.4.5
• Additional commits viewable in compare view

Updates langchain-anthropic from 1.6.1 to 1.7.10

Release notes

Sourced from langchain-anthropic's releases.

langchain-anthropic==1.7.10

Changes since langchain-anthropic==1.7.9

release(anthropic): 1.7.10 (#41685) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): translate Gemini safety blocks to refusal content blocks (#41658) feat(core): standardize model refusal content blocks (#41582)

langchain-anthropic==1.7.9

Changes since langchain-anthropic==1.7.8

release(anthropic): 1.7.9 (#41644) fix(anthropic): report streamed content-block tokens to callbacks (#41643)

langchain-anthropic==1.7.8

Changes since langchain-anthropic==1.7.7

release(anthropic): 1.7.8 (#41638) fix(anthropic): strip index from compaction blocks (#41637) fix(anthropic): handle null cache-creation token counts (#41553)

langchain-anthropic==1.7.7

Changes since langchain-anthropic==1.7.6

release(anthropic): 1.7.7 (#41538) fix(anthropic): trace resolved reasoning effort (#41536) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump certifi from 2025.11.12 to 2026.10.19 in /libs/partners/anthropic (#41391) fix: fix dependencies in some partner packages (#41266)

langchain-anthropic==1.7.6

Changes since langchain-anthropic==1.7.5

release(anthropic): 1.7.6 (#41221) chore(model-profiles): refresh model profile data (#41145) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/anthropic (#41101) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/anthropic (#41080) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/anthropic (#40964)

langchain-anthropic==1.7.5

Changes since langchain-anthropic==1.7.4

release(anthropic): 1.7.5 (#40912) fix(anthropic): support Claude Sonnet 5.5 compatibility (#40882) fix(anthropic): serialize invalid tool calls as tool use on replay (#40864)

langchain-anthropic==1.7.4

Changes since langchain-anthropic==1.7.3

... (truncated)

Commits

• bbcdd56 release(anthropic): 1.7.10 (#41685)
• 16a08bd release(openai): 1.7.4 (#41683)
• d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
• 504fd5c chore(model-profiles): refresh model profile data (#41669)
• aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
• 49b9dfb release(core): 1.7.5 (#41665)
• f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
• 4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
• 67f17db fix(core): end tool run on cancellation (#41660)
• 0cc6e7c release(typesafe): 0.0.1 (#41650)
• Additional commits viewable in compare view

Updates langchain-openai from 1.6.0 to 1.7.4

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.7.4

Changes since langchain-openai==1.7.3

release(openai): 1.7.4 (#41683) chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682) feat(core): standardize model refusal content blocks (#41582) chore(model-profiles): refresh model profile data (#41556)

langchain-openai==1.7.3

Changes since langchain-openai==1.7.2

test(openai): use current lightweight model in integration tests (#41509) release(openai): 1.7.3 (#41506) chore(model-profiles): refresh openai model profile data (#41505) build(infra): patch test-only Pillow without dropping Python 3.10 (#41484) revert: patch vulnerable integration dependencies (#41481) build(deps): patch vulnerable integration dependencies (#41473) chore(infra): relax third-party dependency upper bounds (#41407) chore(deps): bump aiohttp from 3.14.4 to 3.14.5 in /libs/partners/openai (#41379) chore(deps): bump certifi from 2025.10.5 to 2026.10.19 in /libs/partners/openai (#41380) chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /libs/partners/openai (#41362) chore(model-profiles): refresh model profile data (#41325) chore(deps): bump pytest from 9.0.3 to 9.1.1 in /libs/partners/openai (#41328) chore(deps): bump pygments from 2.20.0 to 2.21.0 in /libs/partners/openai (#41333) chore(deps): bump requests from 2.33.0 to 2.34.2 in /libs/partners/openai (#41331) chore(deps): bump orjson from 3.11.6 to 3.13.0 in /libs/partners/openai (#41329) fix: fix dependencies in some partner packages (#41266)

langchain-openai==1.7.2

Changes since langchain-openai==1.7.1

release(openai): 1.7.2 (#41245) fix(openai): keep Responses stream items on one block when output_index drifts (#41121)

langchain-openai==1.7.1

Changes since langchain-openai==1.7.0

release(openai): 1.7.1 (#41222) feat(core,anthropic,openai): declare mid-conversation support in model profiles (#41180)

langchain-openai==1.7.0

Changes since langchain-openai==1.6.7

release(openai): 1.7.0 (#41154) feat(openai): support decisions api (#41125) chore(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /libs/partners/openai (#41096) chore(deps): bump langgraph-sdk from 0.4.2 to 0.4.4 in /libs/partners/openai (#41072) chore(deps): bump pyjwt from 2.15.0 to 2.15.1 in /libs/partners/openai (#40951) chore(deps): bump urllib3 from 2.7.0 to 2.8.0 in /libs/partners/openai (#40952)

... (truncated)

Commits

• 16a08bd release(openai): 1.7.4 (#41683)
• d5a9cd5 chore(deps): require langchain-core>=1.7.5 for refusal handling (#41682)
• 504fd5c chore(model-profiles): refresh model profile data (#41669)
• aa2528f feat(typesafe): accept a classifier in experimental middleware (#41657)
• 49b9dfb release(core): 1.7.5 (#41665)
• f1ca47a feat(core): translate Gemini safety blocks to refusal content blocks (#41658)
• 4a9d4da fix(infra): pin optional deps in min-version release checks (#41661)
• 67f17db fix(core): end tool run on cancellation (#41660)
• 0cc6e7c release(typesafe): 0.0.1 (#41650)
• ddd7303 feat(core): standardize model refusal content blocks (#41582)
• Additional commits viewable in compare view

Updates langchain-google-genai from 4.3.4 to 4.4.3

Release notes

Sourced from langchain-google-genai's releases.

langchain-google-genai==4.4.3

Changes since libs/genai/v4.4.2

release(genai): 4.4.3 (#2106) fix(genai): support all built-in Tool types in bind_tools, including enterprise_web_search (#2105) chore(model-profiles): refresh model profile data (#2059) feat(genai): surface Gemini safety blocks as refusal content blocks (#2104) chore: bump aiohttp from 3.14.4 to 3.14.5 in /libs/genai (#2075) chore: bump certifi from 2026.2.25 to 2026.10.19 in /libs/genai (#2077) chore: remove precautionary third-party dependency caps (#2074) chore: bump aiohttp from 3.14.3 to 3.14.4 in /libs/genai (#2067) chore: bump multidict from 6.7.1 to 6.9.1 in /libs/genai (#2053)

langchain-google-genai==4.4.2

Changes since libs/genai/v4.4.1

release(genai): 4.2.2 (#2058) fix(genai,vertexai): normalize model names and fix Gemini 3.5 cached content paths and streaming usage (#2044) chore(model-profiles): refresh model profile data (#1984)

langchain-google-genai==4.4.1

Changes since libs/genai/v4.4.0

release(genai): 4.4.1 (#2050) fix(genai): omit Bedrock cache points from Gemini prompts (#2049) fix(genai): treat Gemini 4+ models as Gemini 3 or later (#2047) chore: bump urllib3 from 2.7.0 to 2.8.0 in /libs/genai (#2032) chore: bump the minor-and-patch group in /libs/genai with 4 updates (#2034) chore: bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 in /libs/genai (#2035) chore: bump types-protobuf from 7.35.1.20260827 to 7.35.1.20260906 in /libs/genai (#2036) chore: bump types-google-cloud-ndb from 2.4.0.20260724 to 2.4.0.20260909 in /libs/genai (#2037) chore: bump anyio from 4.12.1 to 4.14.2 in /libs/genai (#2020) chore: bump the minor-and-patch group across 1 directory with 2 updates (#1990) chore: bump types-protobuf from 7.35.1.20260824 to 7.35.1.20260827 in /libs/genai (#1986)

langchain-google-genai==4.4.0

Changes since libs/genai/v4.3.7

release(genai): 4.4.0 (#1989) feat(genai): support agentic video understanding (#1988)

langchain-google-genai==4.3.7

Changes since libs/genai/v4.3.6

release(genai): 4.3.7 (#1977) fix(genai): apply distinct indexes to repeated block types (#1974) chore: bump types-google-cloud-ndb from 2.4.0.20260518 to 2.4.0.20260724 in /libs/genai (#1917) chore: bump the minor-and-patch group across 1 directory with 6 updates (#1969) fix(genai): remove __del__ that closes a potentially shared client (#1963) fix(genai): send skip_thought_signature_validator as a literal string (#1972)

... (truncated)

Commits

• b14e2ac release(genai): 4.4.3 (#2106)
• bead369 fix(genai): support all built-in Tool types in bind_tools, including enterpri...
• d2ac37d chore(model-profiles): refresh model profile data (#2059)
• a657a33 feat(genai): surface Gemini safety blocks as refusal content blocks (#2104)
• b5d58f4 chore: bump langgraph from 1.2.12 to 1.2.14 in /libs/community (#2087)
• a34e44c chore: bump pyasn1 from 0.6.4 to 0.6.5 in /libs/vertexai (#2093)
• e34175b chore: bump langgraph from 1.2.9 to 1.2.19 in /libs/vertexai (#2092)
• b49d2b7 chore: bump certifi from 2025.11.12 to 2026.10.19 in /libs/community (#2076)
• bc2a317 chore: bump certifi from 2025.11.12 to 2026.10.19 in /libs/vertexai (#2082)
• 6d84f6f chore: bump opentelemetry-api from 1.45.0 to 1.45.1 in /libs/community (#2083)
• Additional commits viewable in compare view

Updates google-auth from 2.57.0 to 2.62.1

Release notes

Sourced from google-auth's releases.

google-auth: v2.62.1

2.62.1 (2026-11-02)

Bug Fixes

• auth: strip -fips suffix from AWS service name in SigV4 signing (#18920) (2e1899e)
• auth: use an unencrypted key for mTLS certificate rotation (#18709) (8166325)

Commits

• d50415c chore(main): release google-auth 2.62.1 (#18786)
• 2e1899e fix(auth): strip -fips suffix from AWS service name in SigV4 signing (#18920)
• ad03b95 perf(spanner): optimize request ID header generation and retry closures (#18408)
• 6e80b83 fix(bigtable): encode str qualifier in DeleteRangeFromColumn and allow -2**63...
• 72e5f48 docs(bigtable): add samples for sync client (#17820)
• 8aa6d4d fix(bigtable): validate DirectRow and table match in MutationsBatcher.mutate ...
• 8e0c4ab chore(bigtable): update pytest-asyncio (#18922)
• 048ef17 chore(main): release google-cloud-bigquery 3.47.0 (#18812)
• a6d7f29 chore: release main (#18891)
• deb2194 fix(google-api-core): align HTTP T3 and T4 OpenTelemetry span status and attr...
• Additional commits viewable in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

• #14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

• #8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

  Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

• #993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

  • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
  • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

  pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

• #14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

• #14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

• #14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

  They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

• #14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

• #7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

• #14743: Full diff: now contains a legend explaining the + & - symbols in diff output.
• #2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.
• #6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

• #10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits

• ae1d0ff Prepare release version 9.2.0
• 143ce31 pre-commit: exclude codespell on generated release announcements
• 532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
• a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
• 679d09c [pre-commit.ci] pre-commit autoupdate (#15266)
• 41d12cd docs: clarify typing for yield fixtures
• b9022ba Merge pull request #15182 from 1871698/docs/improve-getting-started-description
• 16f87a7 docs: improve getting-started.rst test execution description
• 082ed70 Merge pull request #15255 from pytest-dev/claude/project-thread-eoi3d6
• ae37a01 Merge pull request #15227 from pytest-dev/claude/project-thread-4etye4
• Additional commits viewable in compare view

Updates pytest-asyncio from 1.4.0 to 1.4.1.post1

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.1.post1

1.4.1.post1 - 2026-11-01

Changed

• Removed the upper version bound on the pytest dependency. (#1605)

pytest-asyncio v1.4.1

1.4.1 - 2026-10-25

Added

• Declared support for Python 3.15 (#1588)

Fixed

• Allow AsyncIterable as a return type for asynchronous generator fixtures decorated with pytest_asyncio.fixture (#1090)

Notes for Downstream Packagers

• Source-tree development dependencies now use PEP 735 dependency groups and uv.lock. (#1518)

Commits

• e420349 Bump mypy pre-commit hook to v2.4.0 (#1601)
• 16a1ba4 chore: Prepare release of v1.4.1.post1.
• 7087e7f build: drop pytest upper bound (#1605) (#1606)
• 6af7f5c chore: Prepare release of v1.4.1.
• 32ccf64 Support 3.15 (#1588)
• 9830071 Build(deps): Bump certifi from 2026.6.17 to 2026.10.19 (#1590)
• 0238023 Build(deps): Bump virtualenv from 21.7.13 to 21.14.13 (#1589)
• 93893ec Build(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (#1583)
• f287e5e Build(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#1581)
• b71da4f Build(deps-dev): Bump hypothesis from 6.168.3 to 6.168.5 (#1582)
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [