Skip to content

chore(deps-dev): bump the gha group across 1 directory with 6 updates #3120

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 13, 2025

Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-weaviate directory:

Package From To
flake8 7.0.0 7.3.0
pytest 8.2.2 8.4.1
openai 1.35.15 1.95.1
vcrpy 6.0.1 7.0.0
pytest-recording 0.13.2 0.13.4
weaviate-client 4.6.5 4.15.4

Updates flake8 from 7.0.0 to 7.3.0

Commits

Updates pytest from 8.2.2 to 8.4.1

Release notes

Sourced from pytest's releases.

8.4.1

pytest 8.4.1 (2025-06-17)

Bug fixes

  • #13461: Corrected _pytest.terminal.TerminalReporter.isatty to support being called as a method. Before it was just a boolean which could break correct code when using -o log_cli=true).

  • #13477: Reintroduced pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.

    This warning is raised when a test functions returns a value other than None, which is often a mistake made by beginners.

    See return-not-none{.interpreted-text role="ref"} for more information.

  • #13497: Fixed compatibility with Twisted 25+.

Improved documentation

  • #13492: Fixed outdated warning about faulthandler not working on Windows.

8.4.0

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

  • #11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.

  • #12346: Tests will now fail, instead of raising a warning, if they return any value other than None.

  • #12874: We dropped support for Python 3.8 following its end of life (2024-10-07).

  • #12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

    See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

  • #10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

  • #11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.

  • #12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.

  • #12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.

  • #12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

... (truncated)

Commits

Updates openai from 1.35.15 to 1.95.1

Release notes

Sourced from openai's releases.

v1.95.1

1.95.1 (2025-07-11)

Full Changelog: v1.95.0...v1.95.1

Bug Fixes

  • client: don't send Content-Type header on GET requests (182b763)

v1.95.0

1.95.0 (2025-07-10)

Full Changelog: v1.94.0...v1.95.0

Features

  • api: add file_url, fix event ID (265e216)

Chores

  • readme: fix version rendering on pypi (1eee5ca)

v1.94.0

1.94.0 (2025-07-10)

Full Changelog: v1.93.3...v1.94.0

Features

  • api: return better error message on missing embedding (#2369) (e53464a)

v1.93.3

1.93.3 (2025-07-09)

Full Changelog: v1.93.2...v1.93.3

Bug Fixes

  • parsing: correctly handle nested discriminated unions (fc8a677)

v1.93.2

1.93.2 (2025-07-08)

Full Changelog: v1.93.1...v1.93.2

Chores

  • internal: bump pinned h11 dep (4fca6ae)
  • package: mark python 3.13 as supported (2229047)

... (truncated)

Changelog

Sourced from openai's changelog.

1.95.1 (2025-07-11)

Full Changelog: v1.95.0...v1.95.1

Bug Fixes

  • client: don't send Content-Type header on GET requests (182b763)

1.95.0 (2025-07-10)

Full Changelog: v1.94.0...v1.95.0

Features

  • api: add file_url, fix event ID (265e216)

Chores

  • readme: fix version rendering on pypi (1eee5ca)

1.94.0 (2025-07-10)

Full Changelog: v1.93.3...v1.94.0

Features

  • api: return better error message on missing embedding (#2369) (e53464a)

1.93.3 (2025-07-09)

Full Changelog: v1.93.2...v1.93.3

Bug Fixes

  • parsing: correctly handle nested discriminated unions (fc8a677)

1.93.2 (2025-07-08)

Full Changelog: v1.93.1...v1.93.2

Chores

  • internal: bump pinned h11 dep (4fca6ae)
  • package: mark python 3.13 as supported (2229047)

1.93.1 (2025-07-07)

Full Changelog: v1.93.0...v1.93.1

... (truncated)

Commits

Updates vcrpy from 6.0.1 to 7.0.0

Release notes

Sourced from vcrpy's releases.

v7.0.0

What's Changed

- Drop support for python 3.8 (major version bump) - thanks @jairhenrique
- Various linting and test fixes - thanks @jairhenrique
- Bugfix for urllib2>=2.3.0 - missing version_string ([#888](https://github.com/kevin1024/vcrpy/issues/888))
- Bugfix for asyncio.run - thanks @alekeik1

New Contributors

v6.0.2

Changelog

Sourced from vcrpy's changelog.

Changelog

For a full list of triaged issues, bugs and PRs and what release they are targeted for please see the following link.

ROADMAP MILESTONES <https://github.com/kevin1024/vcrpy/milestones>_

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

  • 7.0.0

  • 6.0.2

  • 6.0.1

    • Bugfix with to Tornado cassette generator (thanks @​graingert)
  • 6.0.0

    • BREAKING: Fix issue with httpx support (thanks @​parkerhancock) in #784. NOTE: You may have to recreate some of your cassettes produced in previous releases due to the binary format being saved incorrectly in previous releases
    • BREAKING: Drop support for boto (vcrpy still supports boto3, but is dropping the deprecated boto support in this release. (thanks @​jairhenrique)
    • Fix compatibility issue with Python 3.12 (thanks @​hartwork)
    • Drop simplejson (fixes some compatibility issues) (thanks @​jairhenrique)
    • Run CI on Python 3.12 and PyPy 3.9-3.10 (thanks @​mgorny)
    • Various linting and docs improvements (thanks @​jairhenrique)
    • Tornado fixes (thanks @​graingert)
  • 5.1.0

  • 5.0.0

    • BREAKING CHANGE: Drop support for Python 3.7. 3.7 is EOL as of 6/27/23 Thanks @​jairhenrique
    • BREAKING CHANGE: Custom Cassette persisters no longer catch ValueError. If you have implemented a custom persister (has anyone implemented a custom persister? Let us know!) then you will need to throw a CassetteNotFoundError when unable to find a cassette. See #681 for discussion and reason for this change. Thanks @​amosjyng for the PR and the review from @​hartwork
  • 4.4.0

    • HUGE thanks to @​hartwork for all the work done on this release!
    • Bring vcr/unittest in to vcrpy as a full feature of vcr instead of a separate library. Big thanks to @​hartwork for doing this and to @​agriffis for originally creating the library
    • Make decompression robust towards already decompressed input (thanks @​hartwork)

... (truncated)

Commits
  • 3278619 Release v7.0.0
  • 3fb62e0 fix: correctly handle asyncio.run when loop exists
  • 8197865 build(deps): update sphinx requirement from <8 to <9
  • be651bd pre-commit: Autoupdate
  • a6698ed Fix aiohttp tests
  • 48d0a2e Fixed missing version_string attribute when used with urllib3>=2.3.0
  • 5b858b1 Fix lint
  • c8d99a9 Fix ruff configuration
  • ce27c63 Merge pull request #736 from kevin1024/drop-python38
  • ab8944d Drop python 3.8 support
  • Additional commits viewable in compare view

Updates pytest-recording from 0.13.2 to 0.13.4

Release notes

Sourced from pytest-recording's releases.

Release 0.13.4

Fixed

  • AttributeError on Windows. #174

Release 0.13.3

Fixed

  • Limit generated cassette names to prevent OSError. #172
Changelog

Sourced from pytest-recording's changelog.

0.13.4_ - 2025-04-24

  • AttributeError on Windows. [#174](https://github.com/kiwicom/pytest-recording/issues/174)_

0.13.3_ - 2025-04-24

  • Limit generated cassette names to prevent OSError. [#172](https://github.com/kiwicom/pytest-recording/issues/172)_
Commits
  • c2d2db7 chore: Release 0.13.4
  • cf919c9 test: Run tests on Windows
  • b8b45b7 fix: Use fallback for max filename length on Windows
  • 8a7e19f docs: Update README.rst
  • 3ad7910 chore: Release 0.13.3
  • 9a6e12c docs: Add a note for package maintainers
  • a70532b chore: Revert "test: Disable pretty plugin in pytest"
  • 6b84832 chore(deps): update codecov/codecov-action action to v5.4.2
  • 460a7f9 test: Add long_cassette_name test
  • 9822a50 fix: Check default_cassette to prevent it from being too long.
  • Additional commits viewable in compare view

Updates weaviate-client from 4.6.5 to 4.15.4

Release notes

Sourced from weaviate-client's releases.

v4.15.4

What's Changed

Full Changelog: weaviate/weaviate-python-client@v4.15.3...v4.15.4

v4.15.3

What's Changed

Full Changelog: weaviate/weaviate-python-client@v4.15.2...v4.15.3

v4.15.2

What's Changed

Full Changelog: weaviate/weaviate-python-client@v4.15.1...v4.15.2

v4.15.1

What's Changed

New Contributors

Full Changelog: weaviate/weaviate-python-client@v4.15.0...v4.15.1

v4.15.0

What's Changed

Full Changelog: weaviate/weaviate-python-client@v4.14.4...v4.15.0

v4.14.4

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from weaviate-client's changelog.

Version 4.15.4

This patch version includes:

  • Adds deprecation warning for connecting to Weaviate Cloud (WCD) using OIDC. Support for this will be removed in early August, please switch to using API keys instead.

Version 4.15.3

This patch version includes:

  • Allows newer versions of authlib as dependency

Version 4.15.2

This patch version includes:

  • Fixes adding the original weaviate error message to our exceptions for async client

Version 4.15.1

This patch version includes:

  • Adds the original weaviate error message to our exceptions

Version 4.15.0

This minor version includes: - Support for new 1.31 features: - Adding new named vectors to existing collections - Support for bm25 operators - Mueva configuration - Fixes config.get() for multivector collections - Copy context to ensure open telemetry makes it to batch requests - Update cohere models - Update voyageai models - Update embedded version to 1.30.5 - Fix storage location for embedded mode - Add agents docs to the readthedocs page

Version 4.14.4

This patch version includes: - Fixes interfaces for user.db/oidc - If a string is passed into auth= we assume that it is an api-key - Fix extracting nested array properties from data models

Version 4.14.3

This patch version includes: - Fixes return type for aggregate with group_by and zero results - Fix multi-vector with hybrid search

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Important

Update development dependencies in pyproject.toml for opentelemetry-instrumentation-weaviate package.

  • Dependency Updates:
    • flake8 updated from 7.0.0 to 7.3.0.
    • pytest updated from 8.2.2 to 8.4.1.
    • openai updated from 1.35.15 to 1.95.1.
    • vcrpy updated from 6.0.1 to 7.0.0.
    • pytest-recording updated from 0.13.2 to 0.13.4.
    • weaviate-client updated from 4.6.5 to 4.15.4.

This description was created by Ellipsis for 62e5eac. You can customize this summary. It will automatically update as commits are pushed.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 13, 2025
Copy link
Contributor

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Important

Looks good to me! 👍

Reviewed everything up to 62e5eac in 1 minute and 47 seconds. Click for details.
  • Reviewed 22 lines of code in 1 files
  • Skipped 1 files when reviewing.
  • Skipped posting 2 draft comments. View those below.
  • Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.
1. packages/opentelemetry-instrumentation-weaviate/pyproject.toml:34
  • Draft comment:
    The flake8 update to 7.3.0 looks good and aligns with the intended bump.
  • Reason this comment was not posted:
    Confidence changes required: 0% <= threshold 50% None
2. packages/opentelemetry-instrumentation-weaviate/pyproject.toml:42
  • Draft comment:
    The updated vcrpy constraint now allows versions starting at 6.0.1, but the bump intends v7.0.0. Consider updating the lower bound to '>=7.0.0' to enforce the desired version.
  • Reason this comment was not posted:
    Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 10% vs. threshold = 50% The comment makes an assumption about the PR author's intention to bump to v7.0.0, but there's no evidence for this in the diff or file. The change from "^6.0.1" to ">=6.0.1,<8.0.0" actually looks like a reasonable version constraint update that maintains compatibility while allowing newer versions. The comment is speculative and assumes intent that isn't documented. Maybe there's context in the PR description or commit message that indicates an intention to specifically use v7.0.0? Maybe there are compatibility requirements with other dependencies? Even if there was such context, one of our rules is to not assume anything about dependencies or versions we don't recognize. We should trust the author's judgment on dependency versioning unless there's a clear error. The comment should be deleted as it makes assumptions about intent, is speculative, and relates to dependency versioning which we're explicitly told not to comment on.

Workflow ID: wflow_MlCxiwu67qhbxONW

You can customize Ellipsis by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.

@dependabot dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-weaviate/gha-b3cbe995d2 branch 2 times, most recently from f64f817 to 390394c Compare July 17, 2025 19:45
Copy link

coderabbitai bot commented Jul 17, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-weaviate directory:

| Package | From | To |
| --- | --- | --- |
| [flake8](https://github.com/pycqa/flake8) | `7.0.0` | `7.3.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.4.1` |
| [openai](https://github.com/openai/openai-python) | `1.35.15` | `1.95.1` |
| [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.1` | `7.0.0` |
| [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.2` | `0.13.4` |
| [weaviate-client](https://github.com/weaviate/weaviate-python-client) | `4.6.5` | `4.15.4` |



Updates `flake8` from 7.0.0 to 7.3.0
- [Commits](PyCQA/flake8@7.0.0...7.3.0)

Updates `pytest` from 8.2.2 to 8.4.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.2.2...8.4.1)

Updates `openai` from 1.35.15 to 1.95.1
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.35.15...v1.95.1)

Updates `vcrpy` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v6.0.1...v7.0.0)

Updates `pytest-recording` from 0.13.2 to 0.13.4
- [Release notes](https://github.com/kiwicom/pytest-recording/releases)
- [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst)
- [Commits](kiwicom/pytest-recording@v0.13.2...v0.13.4)

Updates `weaviate-client` from 4.6.5 to 4.15.4
- [Release notes](https://github.com/weaviate/weaviate-python-client/releases)
- [Changelog](https://github.com/weaviate/weaviate-python-client/blob/main/docs/changelog.rst)
- [Commits](weaviate/weaviate-python-client@v4.6.5...v4.15.4)

---
updated-dependencies:
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest
  dependency-version: 8.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: openai
  dependency-version: 1.95.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: vcrpy
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: gha
- dependency-name: pytest-recording
  dependency-version: 0.13.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: weaviate-client
  dependency-version: 4.15.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/packages/opentelemetry-instrumentation-weaviate/gha-b3cbe995d2 branch from 390394c to ef28793 Compare July 21, 2025 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants