Skip to content

build: bump the backend-deps group in /src/App with 13 updates #696

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 2, 2025
Merged

build: bump the backend-deps group in /src/App with 13 updates #696

merged 1 commit into from
Oct 2, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the backend-deps group in /src/App with 13 updates:

Package From To
azure-identity 1.24.0 1.25.0
openai 1.102.0 2.0.1
uvicorn 0.35.0 0.37.0
black 25.1.0 25.9.0
isort 6.0.1 6.1.0
pytest-asyncio 1.1.0 1.2.0
pytest-cov 6.2.1 7.0.0
azure-search-documents 11.6.0b12 11.7.0b1
opentelemetry-sdk 1.36.0 1.37.0
opentelemetry-api 1.36.0 1.37.0
opentelemetry-semantic-conventions 0.57b0 0.58b0
opentelemetry-instrumentation 0.57b0 0.58b0
azure-monitor-opentelemetry 1.7.0 1.8.1

Updates azure-identity from 1.24.0 to 1.25.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.25.0

1.25.0 (2025-09-11)

Features Added

  • AzureDeveloperCliCredential now supports claims in get_token and get_token_info. (#42568)
  • Added new keyword argument require_envvar to DefaultAzureCredential to enforce the presence of the AZURE_TOKEN_CREDENTIALS environment variable. (#42660)

Bugs Fixed

  • Fixed an issue where AzureDeveloperCliCredential would time out during token requests when azd prompts for user interaction. This issue commonly occurred in environments where the AZD_DEBUG environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. (#42535)
  • Fixed an issue where credentials configured with a default tenant ID of "organizations" (such as InteractiveBrowserCredential and DeviceCodeCredential) would fail authentication when a specific tenant ID was provided in get_token or get_token_info method calls. (#42721)

Other Changes

  • Updated SharedTokenCacheCredential to raise CredentialUnavailableError instead of ClientAuthenticationError during token refresh failures when within the context of DefaultAzureCredential. (#42934)
Commits
  • 0da8698 Make Prepare-Release.ps1 executable (#42976)
  • 2352685 Increment package version after release of azure-core (#42979)
  • 2dac85a updated CHANGELOG.md with the release information 4.14.0b4 (2025-09-11) (#42972)
  • fcc40eb Mypy Dev Requirement Installation Fix (#42973)
  • eb0ecce [Identity] Adjust cache credential error behavior in DAC (#42934)
  • 95c0373 Add custom instructions to fetch TypeSpec docs (#42970)
  • e150a42 Fix getting secret keys for connections of type "Custom Keys" (#42937)
  • f6ac36d Session Token Manual Override Fix (#42965)
  • e4fde9e [Core] Prepare release (#42966)
  • 4b71cbe Ensure that azpysdk checks are dispatched with correct working directory (#42...
  • Additional commits viewable in compare view

Updates openai from 1.102.0 to 2.0.1

Release notes

Sourced from openai's releases.

v2.0.1

2.0.1 (2025-10-01)

Full Changelog: v2.0.0...v2.0.1

Bug Fixes

  • api: add status, approval_request_id to MCP tool call (2a02255)

v2.0.0

2.0.0 (2025-09-30)

Full Changelog: v1.109.1...v2.0.0

⚠ BREAKING CHANGES

  • api: ResponseFunctionToolCallOutputItem.output and ResponseCustomToolCallOutput.output now return string | Array<ResponseInputText | ResponseInputImage | ResponseInputFile> instead of string only. This may break existing callsites that assume output is always a string.

Features

  • api: Support images and files for function call outputs in responses, BatchUsage (4105376)

v1.109.1

1.109.1 (2025-09-24)

Full Changelog: v1.109.0...v1.109.1

Bug Fixes

  • compat: compat with pydantic&lt;2.8.0 when using additional fields (5d95ecf)

v1.109.0

1.109.0 (2025-09-23)

Full Changelog: v1.108.2...v1.109.0

Features

v1.108.2

1.108.2 (2025-09-22)

Full Changelog: v1.108.1...v1.108.2

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

2.0.1 (2025-10-01)

Full Changelog: v2.0.0...v2.0.1

Bug Fixes

  • api: add status, approval_request_id to MCP tool call (2a02255)

2.0.0 (2025-09-30)

Full Changelog: v1.109.1...v2.0.0

⚠ BREAKING CHANGES

  • api: ResponseFunctionToolCallOutputItem.output and ResponseCustomToolCallOutput.output now return string | Array<ResponseInputText | ResponseInputImage | ResponseInputFile> instead of string only. This may break existing callsites that assume output is always a string.

Features

  • api: Support images and files for function call outputs in responses, BatchUsage (4105376)

1.109.1 (2025-09-24)

Full Changelog: v1.109.0...v1.109.1

Bug Fixes

  • compat: compat with pydantic&lt;2.8.0 when using additional fields (5d95ecf)

1.109.0 (2025-09-23)

Full Changelog: v1.108.2...v1.109.0

Features

1.108.2 (2025-09-22)

Full Changelog: v1.108.1...v1.108.2

Bug Fixes

Chores

  • api: openapi updates for conversations (3224f6f)
  • do not install brew dependencies in ./scripts/bootstrap by default (6764b00)
  • improve example values (20b58e1)

... (truncated)

Commits
  • 75a3aa4 release: 2.0.1
  • d5e7999 fix(api): add status, approval_request_id to MCP tool call
  • d1e2489 [realtime] Add gpt-realtime models to beta SDK interface
  • 7065069 release: 2.0.0
  • 8b333e6 feat(api): Support images and files for function call outputs in responses, B...
  • a1493f9 release: 1.109.1
  • edb8e10 fix(compat): compat with pydantic<2.8.0 when using additional fields
  • 9c4b995 release: 1.109.0
  • c523e63 feat(api): gpt-5-codex
  • 02af9aa release: 1.108.2
  • Additional commits viewable in compare view

Updates uvicorn from 0.35.0 to 0.37.0

Release notes

Sourced from uvicorn's releases.

Version 0.37.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

New Contributors

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

Changelog

Sourced from uvicorn's changelog.

0.37.0 (September 23, 2025)

Added

  • Add --timeout-worker-healthcheck option (#2711)
  • Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

  • Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

  • Support custom IOLOOPs (#2435)
  • Allow to provide importable string in --http, --ws and --loop (#2658)
Commits

Updates black from 25.1.0 to 25.9.0

Release notes

Sourced from black's releases.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)
  • Build gallery docker image with python3-slim and reduce image size (#4686)

... (truncated)

Changelog

Sourced from black's changelog.

25.9.0

Highlights

  • Remove support for pre-python 3.7 await/async as soft keywords/variable names (#4676)

Stable style

  • Fix crash while formatting a long del statement containing tuples (#4628)
  • Fix crash while formatting expressions using the walrus operator in complex with statements (#4630)
  • Handle # fmt: skip followed by a comment at the end of file (#4635)
  • Fix crash when a tuple appears in the as clause of a with statement (#4634)
  • Fix crash when tuple is used as a context manager inside a with statement (#4646)
  • Fix crash when formatting a \ followed by a \r followed by a comment (#4663)
  • Fix crash on a \\r\n (#4673)
  • Fix crash on await ... (where ... is a literal Ellipsis) (#4676)
  • Fix crash on parenthesized expression inside a type parameter bound (#4684)
  • Fix crash when using line ranges excluding indented single line decorated items (#4670)

Preview style

  • Fix a bug where one-liner functions/conditionals marked with # fmt: skip would still be formatted (#4552)
  • Improve multiline_string_handling with ternaries and dictionaries (#4657)
  • Fix a bug where string_processing would not split f-strings directly after expressions (#4680)
  • Wrap the in clause of comprehensions across lines if necessary (#4699)
  • Remove parentheses around multiple exception types in except and except* without as. (#4720)
  • Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)

Parser

  • Rewrite tokenizer to improve performance and compliance (#4536)
  • Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type parameter bounds and defaults. (#4602)

Performance

  • Avoid using an extra process when running with only one worker (#4734)

Integrations

  • Fix the version check in the vim file to reject Python 3.8 (#4567)
  • Enhance GitHub Action psf/black to read Black version from an additional section in pyproject.toml: [project.dependency-groups] (#4606)

... (truncated)

Commits

Updates isort from 6.0.1 to 6.1.0

Release notes

Sourced from isort's releases.

6.1.0

Changes

👷 Continuous Integration

📦 Dependencies

Commits
  • ec0efae Merge pull request #2410 from PyCQA/docs/discussion
  • 8af675f Update docs discussions channel
  • a03dae8 Merge pull request #2409 from PyCQA/build/py314-classifier
  • 2232a26 Add python 3.14 classifier and badge
  • ec48dd7 Merge pull request #2405 from dvarrazzo/fix/drop-pkg-resources
  • be46cd4 refactor: make importlib metadata package import lazy
  • 18ecd0c chore: drop branch guarding unsupported Python versions
  • 1d42e56 fix: drop use of non-standard pkg_resources API
  • 0c8fc82 Merge pull request #2406 from PyCQA/dependabot/github_actions/github-actions-...
  • 3478763 Bump actions/checkout from 4 to 5 in the github-actions group
  • Additional commits viewable in compare view

Updates pytest-asyncio from 1.1.0 to 1.2.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 1.2.0

1.2.0 - 2025-09-12

Added

  • --asyncio-debug CLI option and asyncio_debug configuration option to enable asyncio debug mode for the default event loop. (#980)
  • A pytest.UsageError for invalid configuration values of asyncio_default_fixture_loop_scope and asyncio_default_test_loop_scope. (#1189)
  • Compatibility with the Pyright type checker (#731)

Fixed

  • RuntimeError: There is no current event loop in thread 'MainThread' when any test unsets the event loop (such as when using asyncio.run and asyncio.Runner). (#1177)
  • Deprecation warning when decorating an asynchronous fixture with @pytest.fixture in [strict]{.title-ref} mode. The warning message now refers to the correct package. (#1198)

Notes for Downstream Packagers

  • Bump the minimum required version of tox to v4.28. This change is only relevant if you use the tox.ini file provided by pytest-asyncio to run tests.
  • Extend dependency on typing-extensions>=4.12 from Python<3.10 to Python<3.13.

pytest-asyncio 1.1.1

v1.1.1 - 2025-09-12

Notes for Downstream Packagers

- Addresses a build problem with setuptoos-scm >= 9 caused by invalid setuptools-scm configuration in pytest-asyncio. (#1192)

Commits
  • 0d3988f ci: Create GitHub release before publishing to PyPI.
  • 07c5a0b docs: Include orphaned news fragment in changelog.
  • be24582 chore: Prepare release of v1.2.0.
  • 7aeb296 docs: Streamline news fragments
  • 7b8311c ci: Fixes a bug that prevented SSH signature from being stripped from release...
  • 9d4c2bd docs: Add changelog entry for Pyright compatibility.
  • 94f6106 test: Added tests which assert that the event loop is reinstated if unset by ...
  • df61991 [pre-commit.ci] pre-commit autoupdate
  • f1f7941 Build(deps): Bump pytest from 8.4.1 to 8.4.2
  • c77d3d3 Build(deps): Bump twine from 6.1.0 to 6.2.0
  • Additional commits viewable in compare view

Updates pytest-cov from 6.2.1 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

  • Dropped support for subprocesses measurement.

    It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

    To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

    .. code-block:: ini

    [run] patch = subprocess

    This release also requires at least coverage 7.10.6.

  • Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

  • Removed some not really necessary testing deps like six.

6.3.0 (2025-09-06)

  • Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.
  • Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.
Commits
  • 224d896 Bump version: 6.3.0 → 7.0.0
  • 73424e3 Cleanup the docs a bit.
  • 36f1cc2 Bump pins in template.
  • f299c59 Bump the github-actions group with 2 updates
  • 25f0b2e Update docs/config.rst
  • bb23eac Improve configuration docs
  • a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
  • 82f9993 Update changelog.
  • 211b5cd Fix links.
  • 97aadd7 Update some ci config, reformat and apply some lint fixes.
  • Additional commits viewable in compare view

Updates azure-search-documents from 11.6.0b12 to 11.7.0b1

Release notes

Sourced from azure-search-documents's releases.

azure-search-documents_11.7.0b1

11.7.0b1 (2025-09-05)

Features Added

  • Added azure.search.documents.models.DebugInfo.
  • Added azure.search.documents.indexes.models.AzureBlobKnowledgeSource.
  • Added azure.search.documents.indexes.models.AzureBlobKnowledgeSourceParameters.
  • Added azure.search.documents.indexes.models.IndexerResyncBody.
  • Added azure.search.documents.indexes.models.KnowledgeAgentOutputConfiguration.
  • Added azure.search.documents.indexes.models.KnowledgeAgentOutputConfigurationModality.
  • Added azure.search.documents.indexes.models.KnowledgeSource.
  • Added azure.search.documents.indexes.models.KnowledgeSourceKind.
  • Added azure.search.documents.indexes.models.KnowledgeSourceReference.
  • Added azure.search.documents.indexes.models.SearchIndexKnowledgeSource.
  • Added azure.search.documents.indexes.models.SearchIndexKnowledgeSourceParameters.
  • Removed azure.search.documents.indexes.models.KnowledgeAgentTargetIndex.
  • Added azure.search.documents.indexes.models.SearchIndex.description.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobActivityArguments.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobReference.
  • Added azure.search.documents.agent.models.KnowledgeAgentModelAnswerSynthesisActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentRetrievalActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexActivityArguments.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexReference.
  • Added azure.search.documents.agent.models.KnowledgeAgentSemanticRerankerActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeSourceParams.
  • Added azure.search.documents.agent.models.SearchIndexKnowledgeSourceParams.
  • Removed azure.search.documents.agent.models.KnowledgeAgentAzureSearchDocReference.
  • Removed azure.search.documents.agent.models.KnowledgeAgentIndexParams.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSearchActivityRecord.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSearchActivityRecordQuery.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSemanticRankerActivityRecord.
  • Added KnowledgeSource operations in SearchIndexClient.

Other Changes

  • Updated default API version to 2025-08-01-preview.
Changelog

Sourced from azure-search-documents's changelog.

11.7.0b1 (2025-09-05)

Features Added

  • Added azure.search.documents.models.DebugInfo.
  • Added azure.search.documents.indexes.models.AzureBlobKnowledgeSource.
  • Added azure.search.documents.indexes.models.AzureBlobKnowledgeSourceParameters.
  • Added azure.search.documents.indexes.models.IndexerResyncBody.
  • Added azure.search.documents.indexes.models.KnowledgeAgentOutputConfiguration.
  • Added azure.search.documents.indexes.models.KnowledgeAgentOutputConfigurationModality.
  • Added azure.search.documents.indexes.models.KnowledgeSource.
  • Added azure.search.documents.indexes.models.KnowledgeSourceKind.
  • Added azure.search.documents.indexes.models.KnowledgeSourceReference.
  • Added azure.search.documents.indexes.models.SearchIndexKnowledgeSource.
  • Added azure.search.documents.indexes.models.SearchIndexKnowledgeSourceParameters.
  • Removed azure.search.documents.indexes.models.KnowledgeAgentTargetIndex.
  • Added azure.search.documents.indexes.models.SearchIndex.description.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobActivityArguments.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentAzureBlobReference.
  • Added azure.search.documents.agent.models.KnowledgeAgentModelAnswerSynthesisActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentRetrievalActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexActivityArguments.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeAgentSearchIndexReference.
  • Added azure.search.documents.agent.models.KnowledgeAgentSemanticRerankerActivityRecord.
  • Added azure.search.documents.agent.models.KnowledgeSourceParams.
  • Added azure.search.documents.agent.models.SearchIndexKnowledgeSourceParams.
  • Removed azure.search.documents.agent.models.KnowledgeAgentAzureSearchDocReference.
  • Removed azure.search.documents.agent.models.KnowledgeAgentIndexParams.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSearchActivityRecord.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSearchActivityRecordQuery.
  • Removed azure.search.documents.agent.models.KnowledgeAgentSemanticRankerActivityRecord.
  • Added KnowledgeSource operations in SearchIndexClient.

Other Changes

  • Updated default API version to 2025-08-01-preview.
Commits

Updates opentelemetry-sdk from 1.36.0 to 1.37.0

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
  • Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
  • docs: linked the examples with their github source code location and added Prometheus example (#4728)
  • Permit to override default HTTP OTLP exporters headers (#4634)
  • semantic-conventions: Bump to 1.37.0 (#4731)
  • opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
  • Performance: Cache importlib_metadata.entry_points (#4735)
  • opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)
Commits
  • bc413fc [release/v1.37.x-0.58bx] Prepare release 1.37.0/0.58b0 (#4745)
  • 712ed5d OTEL attribute count limit not respected, causing columns dropped (#4677)
  • dd93fa7 infra: ignore pushes on otelbot branches (#4742)
  • 22d1fd1 Fix API LogRecord serialization (#4741)
  • d6c0441 Add credentials environment variables to let ChannelCredentials and `Sessio...
  • c71c4a4 Cache importlib_metadata.entry_points (#4735)
  • 64de448 Permit to override default OTLP HTTP exporter headers (#4634)
  • 0d9e1b4 semantic-conventions: bump to 1.37.0 (#4731)
  • 31289bd fix: make client.py runnable without CLI arguments (#4694)
  • 8bca97d Add experimental composite sampler (#4714)
  • Additional commits viewable in compare view

Updates opentelemetry-api from 1.36.0 to 1.37.0

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
  • Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
  • docs: linked the examples with their github source code location and added Prometheus example (#4728)
  • Permit to override default HTTP OTLP exporters headers (#4634)
  • semantic-conventions: Bump to 1.37.0 (#4731)
  • opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
  • Performance: Cache importlib_metadata.entry_points (#4735)
  • opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)
Commits
  • bc413fc [release/v1.37.x-0.58bx] Prepare release 1.37.0/0.58b0 (#4745)
  • 712ed5d OTEL attribute count limit not respected, causing columns dropped (#4677)
  • dd93fa7 infra: ignore pushes on otelbot branches (#4742)
  • 22d1fd1 Fix API LogRecord serialization (#4741)
  • d6c0441 Add credentials environment variables to let ChannelCredentials and `Sessio...
  • c71c4a4 Cache importlib_metadata.entry_points (#4735)
  • 64de448 Permit to override default OTLP HTTP exporter headers (#4634)
  • 0d9e1b4 semantic-conventions: bump to 1.37.0 (#4731)
  • 31289bd fix: make client.py runnable without CLI arguments (#4694)
  • 8bca97d Add experimental composite sampler (#4714)
  • Additional commits viewable in compare view

Updates opentelemetry-semantic-conventions from 0.57b0 to 0.58b0

Changelog

Sourced from opentelemetry-semantic-conventions's changelog.

Version 1.37.0/0.58b0 (2025-09-11)

  • Add experimental composite samplers (#4714)
  • Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation

@dependabot
build: bump the backend-deps group in /src/App with 13 updates
2780351 
Bumps the backend-deps group in /src/App with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.24.0` | `1.25.0` |
| [openai](https://github.com/openai/openai-python) | `1.102.0` | `2.0.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.35.0` | `0.37.0` |
| [black](https://github.com/psf/black) | `25.1.0` | `25.9.0` |
| [isort](https://github.com/PyCQA/isort) | `6.0.1` | `6.1.0` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.1.0` | `1.2.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.2.1` | `7.0.0` |
| [azure-search-documents](https://github.com/Azure/azure-sdk-for-python) | `11.6.0b12` | `11.7.0b1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.37.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.37.0` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.57b0` | `0.58b0` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.57b0` | `0.58b0` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.7.0` | `1.8.1` |


Updates `azure-identity` from 1.24.0 to 1.25.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.24.0...azure-identity_1.25.0)

Updates `openai` from 1.102.0 to 2.0.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.102.0...v2.0.1)

Updates `uvicorn` from 0.35.0 to 0.37.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.35.0...0.37.0)

Updates `black` from 25.1.0 to 25.9.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.1.0...25.9.0)

Updates `isort` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.0.1...6.1.0)

Updates `pytest-asyncio` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.1.0...v1.2.0)

Updates `pytest-cov` from 6.2.1 to 7.0.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v6.2.1...v7.0.0)

Updates `azure-search-documents` from 11.6.0b12 to 11.7.0b1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/search/azure-search-documents/CHANGELOG.md)
- [Commits](Azure/azure-sdk-for-python@azure-search-documents_11.6.0b12...azure-search-documents_11.7.0b1)

Updates `opentelemetry-sdk` from 1.36.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.37.0)

Updates `opentelemetry-api` from 1.36.0 to 1.37.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.37.0)

Updates `opentelemetry-semantic-conventions` from 0.57b0 to 0.58b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-instrumentation` from 0.57b0 to 0.58b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `azure-monitor-opentelemetry` from 1.7.0 to 1.8.1
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.7.0...azure-monitor-opentelemetry_1.8.1)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: openai
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-deps
- dependency-name: uvicorn
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: black
  dependency-version: 25.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: isort
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: pytest-asyncio
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: pytest-cov
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-deps
- dependency-name: azure-search-documents
  dependency-version: 11.7.0b1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.58b0
  dependency-type: direct:production
  dependency-group: backend-deps
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.58b0
  dependency-type: direct:production
  dependency-group: backend-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 1, 2025
@dependabot dependabot bot requested a review from Avijit-Microsoft as a code owner October 1, 2025 20:29
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 1, 2025
@dependabot dependabot bot added the python Pull requests that update Python code label Oct 1, 2025
@dependabot dependabot bot requested a review from aniaroramsft as a code owner October 1, 2025 20:29
@github-actions github-actions bot merged commit fb0679a into dependabotchanges Oct 2, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/pip/src/App/dependabotchanges/backend-deps-970fb6864f branch October 2, 2025 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants