chore(deps): bump the python-dependencies group with 4 updates

[dependabot]

Bumps the python-dependencies group with 4 updates: pydantic, pgvector, litellm and pydantic-core.

Updates pydantic from 2.14.0 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

• Fix arguments-v3 schema with variadic keywords by @​Viicos in #13954
• Fix TypeError on ForwardRef on Python 3.10.0 by @​Viicos in #13964
• Support closed and extra_items via inheritance in TypedDict by @​Viicos in #13967
• Enforce the max_digits whole-digits limit in the Python Decimal validator by @​Viicos in #13972
• Reject out-of-range int inputs for timedelta by @​Viicos in #13973
• Support named tuples in Sequence validation by @​Viicos in #13978

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

Changelog

Sourced from pydantic's changelog.

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• See full diff in compare view

Updates pgvector from 0.5.0 to 0.5.1

Changelog

Sourced from pgvector's changelog.

0.5.1 (2026-10-08)

• Fixed error with non-canonical SciPy sparse arrays
• Fixed error with SciPy sparse arrays with explicit zeros
• Fixed error with Bit constructor for NumPy 1.24-1.26

Commits

• 5275164 Version bump to 0.5.1 [skip ci]
• 474522b Improved validation for bit strings - fixes #161
• 9005637 Updated changelog [skip ci]
• f3a05b4 Updated changelog [skip ci]
• f4dde19 Fixed handling of duplicates for SciPy sparse arrays - fixes #162
• c451fb0 Improved code consistency [skip ci]
• 63f5a48 Fixed typo [skip ci]
• cd18c3f Fixed error with SciPy sparse arrays with zeros
• d3c5d4b Improved performance by checking has_canonical_format [skip ci]
• fd74f78 Fixed error with unordered SciPy sparse arrays - resolves #160
• Additional commits viewable in compare view

Updates litellm from 1.104.2 to 1.105.0

Release notes

Sourced from litellm's releases.

v1.105.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.105.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(mcp): share compatibility-aware result conversion across tool surfaces by @​devin-ai-integration[bot] in BerriAI/litellm#43089
• fix(caching): propagate auth cache invalidation over Redis Cluster via a node-level pub/sub client by @​devin-ai-integration[bot] in BerriAI/litellm#43110
• feat(model-catalog): add Rust registry validation by @​devin-ai-integration[bot] in BerriAI/litellm#43136
• test(rust): reorganize core crate tests and split cache and OCR suites by @​devin-ai-integration[bot] in BerriAI/litellm#43177
• fix(proxy): give SpendLogToolIndex its own share of the cleanup budget and log a per-run summary by @​devin-ai-integration[bot] in BerriAI/litellm#41768
• feat(rust): hand upstream response headers to the native Messages stream by @​devin-ai-integration[bot] in BerriAI/litellm#43178
• feat(testkit): agent clients for Claude Code, Codex and opencode by @​devin-ai-integration[bot] in BerriAI/litellm#43181
• ci: run migrated unit selections on every event in legacy GHA shards by @​yuneng-berri in BerriAI/litellm#43182
• test: move tests/test_litellm root and small trees into tests/unit by @​yuneng-berri in BerriAI/litellm#43186
• fix(sso): gate /sso/debug routes behind ENABLE_SSO_DEBUG, off by default by @​ojensen-berri in BerriAI/litellm#43150
• refactor(framer): replace Framer trait with tokio-util codecs by @​devin-ai-integration[bot] in BerriAI/litellm#43193
• fix(anthropic): surface Responses bridge stream failures as Anthropic error events by @​devin-ai-integration[bot] in BerriAI/litellm#43126
• test: move tests/test_litellm/llms into tests/unit/llms by @​yuneng-berri in BerriAI/litellm#43191
• test: move tests/test_litellm integrations and secret_managers into tests/unit by @​yuneng-berri in BerriAI/litellm#43194
• feat(mcp): configure protocol versions and capability discovery by @​joshua-berri in BerriAI/litellm#43169

... (truncated)

Commits

• 80b9556 Merge pull request #45927 from BerriAI/litellm_ui_bundle_rc_1_105_0
• 919f027 chore: update Next.js build artifacts (2026-10-11 06:00 UTC, node v24.19.0)
• f15af9b feat(ui): backport decision auto-router setup to 1.105 (#45915)
• 2616b1a Merge pull request #45905 from BerriAI/litellm_backport_decisions_rc_1_105_0
• fcbb022 chore(backport): merge rc/1.105.0 and move supported_decisions_providers to l...
• 23fec69 test(unit): flush queued logging tasks after each test so systemone callback ...
• 212b42e chore(backport): regenerate dashboard API types and adapt the picks to rc/1.1...
• f26cff4 feat(sdk): add litellm.systemone and trim litellm.decisions to the OpenAI sha...
• 4032305 test(decisions): bill the OpenAI-format openrouter case from provider-reporte...
• 8f262b2 docs(proxy): describe /v1/decisions and /v1/systemone in Swagger UI (#45838)
• Additional commits viewable in compare view

Updates pydantic-core from 2.50.0 to 2.50.1

Commits

• b2212c7 Prepare release v2.14.1
• 968fb2b Fix docs conversion table
• 6adc8b3 Support named tuples in Sequence validation
• 7637fbc Reject out-of-range int inputs for timedelta
• dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
• e2456d3 Support closed and extra_items via inheritance in TypedDict
• 317655d Harden CI security
• 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
• 43681ab Bump samuelcolvin/check-python-version action to v5.1
• d6bc53a Avoid unnecessary extra dict allocation in model validation
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[smaramwbc]

Dependency bump, checks green.