chore(deps): bump the minor-and-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #106 · tuirk/Kompl

dependabot · 2026-05-30T09:13:12Z

Bumps the minor-and-patch group with 6 updates in the /nlp-service directory:

Package	From	To
fastapi	`0.136.1`	`0.136.3`
uvicorn	`0.47.0`	`0.48.0`
markitdown	`0.1.5`	`0.1.6`
google-genai	`2.4.0`	`2.7.0`
sentence-transformers	`5.5.0`	`5.5.1`
chromadb	`0.4.24`	`0.6.3`

Updates fastapi from 0.136.1 to 0.136.3

Release notes

Sourced from fastapi's releases.

0.136.3

Refactors

♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @tiangolo.

0.136.2

Refactors

♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @tiangolo.

Docs

📝 Document --entrypoint CLI option. PR #15464 by @YuriiMotov.

📝 Update and simplify docs about help and management. PR #15583 by @tiangolo.

📝 Add docs references to central contributing docs. PR #15580 by @tiangolo.

📝 Update security policy. PR #15577 by @tiangolo.

🍱 Update sponsors: TalorData image. PR #15562 by @tiangolo.

📝 Update docs, simplify usage of admonitions, only default ones. PR #15553 by @tiangolo.

📝 Fix image URLs in index.md. PR #15534 by @YuriiMotov.

✏️ Fix Azkaban spelling typo in virtual-environments.md‎. PR #15463 by @isaacbernat.

💄 Improve layout and styling. PR #15462 by @alejsdev.

💄 Refactor opinions section with interactive tabs and new logos. PR #15458 by @alejsdev.

📝 Add FastAPI Conf '26 announcement to docs. PR #15457 by @alejsdev.

Translations

🌐 Improve translation consistency in ‎docs/pt/docs/advanced/generate-clients.md‎. PR #15456 by @Will-thom.

🌐 Update translations for ja (update-outdated). PR #15530 by @tiangolo.

🌐 Update translations for uk (update-outdated). PR #15529 by @tiangolo.

🌐 Update translations for pt (update-outdated). PR #15528 by @tiangolo.

🌐 Update translations for de (update-outdated). PR #15527 by @tiangolo.

🌐 Update translations for tr (update-outdated). PR #15526 by @tiangolo.

🌐 Update translations for ko (update-outdated). PR #15525 by @tiangolo.

🌐 Update translations for zh-hant (update-outdated). PR #15524 by @tiangolo.

🌐 Update translations for fr (update-outdated). PR #15522 by @tiangolo.

🌐 Update translations for es (update-outdated). PR #15523 by @tiangolo.

🌐 Update translations for zh (update-outdated). PR #15520 by @tiangolo.

🌐 Update translations for ru (update-outdated). PR #15521 by @tiangolo.

🌐 Fix typos in Spanish LLM-prompt. PR #15472 by @crr004.

Internal

✅ Update tests, don't double dispose the engine. PR #15587 by @tiangolo.

⚡️ Speed up test suite via caching and fixture scopes to make it ~24% faster. PR #13583 by @dikos1337.

🔥 Remove config files now in central GitHub repo. PR #15585 by @tiangolo.

⬆ Bump urllib3 from 2.6.3 to 2.7.0. PR #15502 by @dependabot[bot].

⬆ Bump idna from 3.11 to 3.15. PR #15565 by @dependabot[bot].

⬆ Bump cloudflare/wrangler-action from 3.15.0 to 4.0.0. PR #15571 by @dependabot[bot].

🔧 Migrate docs from MkDocs to Zensical. PR #15563 by @tiangolo.

🔒️ Only allow team members to modify dependencies. PR #15548 by @svlandeg.

... (truncated)

Commits

8206485 🔖 Release version 0.136.3
c910e01 📝 Update release notes
063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
22b02e2 🔖 Release version 0.136.2
3b252a2 📝 Update release notes
c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
cb83b83 📝 Update release notes
00f805c ✅ Update tests, don't double dispose the engine (#15587)
3675137 📝 Update release notes
7b57e42 📝 Document --entrypoint CLI option (#15464)
Additional commits viewable in compare view

Updates uvicorn from 0.47.0 to 0.48.0

Release notes

Sourced from uvicorn's releases.

Version 0.48.0

What's Changed

Default ssl_ciphers to None and use OpenSSL defaults by @Kludex in Kludex/uvicorn#2940

Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @Kludex in Kludex/uvicorn#2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

Changelog

Sourced from uvicorn's changelog.

0.48.0 (May 24, 2026)

Changed

Default ssl_ciphers to None and use OpenSSL defaults (#2940)

Fixed

Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)

Commits

73e84e5 Version 0.48.0 (#2951)
45ea116 Ignore duplicate forwarding headers in ProxyHeadersMiddleware (#2944)
dd4394c chore(deps): bump idna from 3.11 to 3.15 (#2941)
abe0781 Default ssl_ciphers to None and use OpenSSL defaults (#2940)
See full diff in compare view

Updates markitdown from 0.1.5 to 0.1.6

Release notes

Sourced from markitdown's releases.

Version 0.1.6

What's Changed

[MS] Add OCR layer service for embedded images and PDF scans by @lesyk in microsoft/markitdown#1541

Fix O(n) memory growth in PDF conversion by calling page.close() afte… by @lesyk in microsoft/markitdown#1612

Updated warning about binding to non-local interfaces. by @afourney in microsoft/markitdown#1653

fix: handle deeply nested HTML that triggers RecursionError by @jigangz in microsoft/markitdown#1644

Clarify security posture in READMEs by @afourney in microsoft/markitdown#1807

feat: Add Azure Content Understanding converter by @chienyuanchang in microsoft/markitdown#1865

Bump version to 0.1.6 by @afourney in microsoft/markitdown#1914

New Contributors

@jigangz made their first contribution in microsoft/markitdown#1644

@chienyuanchang made their first contribution in microsoft/markitdown#1865

Full Changelog: microsoft/markitdown@v0.1.5...v0.1.6

Commits

e144e0a Bump version to 0.1.6 (#1914)
a01d74d feat: Add Azure Content Understanding converter (#1865)
a51f725 Clarify security posture in READMEs (#1807)
604bba1 fix: handle deeply nested HTML that triggers RecursionError (#1644)
63cbbd9 Updated warning about binding to non-local interfaces. (#1653)
a6c8ac4 Fix O(n) memory growth in PDF conversion by calling page.close() afte… (#1612)
c6308dc [MS] Add OCR layer service for embedded images and PDF scans (#1541)
See full diff in compare view

Updates google-genai from 2.4.0 to 2.7.0

Release notes

Sourced from google-genai's releases.

v2.7.0

2.7.0 (2026-05-27)

Features

Additional computer_use field support for vertex. (b4828fa)

interaction-api: Allow "text/csv" as a supported document mime type for Interaction API. (543137b)

interaction-api: Enable BigQuery tool in Deep Research config. (5dc17e5)

Support Reinforcement Tuning in GenAI SDK (0ead888)

v2.6.0

2.6.0 (2026-05-21)

Features

Add enable_prompt_injection_detection for Computer Use feature for the Gemini API. (b1f632d)

Add budget_exceeded status (15443c0)

Add gemini-3.5-flash (15443c0)

Add new fields (2910346)

Documentation

Replace vertexai with enterprise in Client instantiation (c1c6df7)

v2.5.0

2.5.0 (2026-05-20)

Features

Add Gemini 3.5 Flash model to options (706fd02)

Changelog

Sourced from google-genai's changelog.

2.7.0 (2026-05-27)

Features

Additional computer_use field support for vertex. (b4828fa)

interaction-api: Allow "text/csv" as a supported document mime type for Interaction API. (543137b)

interaction-api: Enable BigQuery tool in Deep Research config. (5dc17e5)

Support Reinforcement Tuning in GenAI SDK (0ead888)

2.6.0 (2026-05-21)

Features

Add enable_prompt_injection_detection for Computer Use feature for the Gemini API. (b1f632d)

Add budget_exceeded status (15443c0)

Add gemini-3.5-flash (15443c0)

Add new fields (2910346)

Documentation

Replace vertexai with enterprise in Client instantiation (c1c6df7)

2.5.0 (2026-05-20)

Features

Add Gemini 3.5 Flash model to options (706fd02)

Commits

5d0dff8 chore(main): release 2.7.0 (#2501)
b4828fa feat: additional computer_use field support for vertex.
543137b feat(interaction-api): Allow "text/csv" as a supported document mime type for...
5dc17e5 feat(interaction-api): Enable BigQuery tool in Deep Research config.
cd66b68 chore: Internal cleanup
0ead888 feat: Support Reinforcement Tuning in GenAI SDK
a682e6a chore(main): release 2.6.0 (#2485)
b1f632d feat: add enable_prompt_injection_detection for Computer Use feature for th...
2910346 feat: add new fields
15443c0 feat: Add budget_exceeded status
Additional commits viewable in compare view

Updates sentence-transformers from 5.5.0 to 5.5.1

Release notes

Sourced from sentence-transformers's releases.

v5.5.1 - Small Multimodal patch

This patch release fixes a small quirk with multimodal inference when using single-key multimodal inputs like model.encode({"image": ...}).

Install this version with
# Training + Inference
pip install sentence-transformers[train]==5.5.1
Inference only, use one of:
pip install sentence-transformers==5.5.1
pip install sentence-transformers[onnx-gpu]==5.5.1
pip install sentence-transformers[onnx]==5.5.1
pip install sentence-transformers[openvino]==5.5.1
Multimodal dependencies (optional):
pip install sentence-transformers[image]==5.5.1
pip install sentence-transformers[audio]==5.5.1
pip install sentence-transformers[video]==5.5.1
Or combine as needed:
pip install sentence-transformers[train,onnx,image]==5.5.1
Bug fixed

Previously, inference like model.encode({"image": ...}) or model.encode([{"image": ...}, ...]) would be inferred as the ("image",) modality, which differed from the inferred modality of "image" for just model.encode(my_image) or model.encode([my_image, my_image_2, ...]).

This results in confusing errors if the model doesn't have a modality_config mapping for ("image",) in addition to "image", so now a single-key multimodal dict is collapsed to the bare modality (just "image" in this example).

This affected this code:
from sentence_transformers import SentenceTransformer
model = SentenceTransformer('BAAI/BGE-VL-base', trust_remote_code=True)
embedding = model.encode({"image": "https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/blog/ettin-reranker/mteb_ndcg10_all-MiniLM-L6-v2.png&quot;})
print(embedding.shape)
Which previously failed as the model only implements a path for "text", "image", and ("image", "text").

All Changes

[fix] Collapse single-key multimodal dicts to bare modality by @tomaarsen in #3779

Full Changelog: huggingface/sentence-transformers@v5.5.0...v5.5.1

Commits

ce3ec6d Release v5.5.1
610a7c5 [fix] Collapse single-key multimodal dicts to bare modality (#3779)
See full diff in compare view

Updates chromadb from 0.4.24 to 0.6.3

Release notes

Sourced from chromadb's releases.

0.6.3

Version: 0.6.3 Git ref: refs/tags/0.6.3 Build Date: 2025-01-14T22:21 PIP Package: chroma-0.6.3.tar.gz Github Container Registry Image: ghcr.io/chroma-core/chroma:0.6.3 DockerHub Image: chromadb/chroma:0.6.3

What's Changed

[DOC] Update broken blog link by @itaismith in chroma-core/chroma#3423

[BUG] Fix HNSW resize conditions to exclude deleted items by @eculver in chroma-core/chroma#3424

[BLD] Update Golang README and Makefile for generating protobuf dependencies by @eculver in chroma-core/chroma#3344

[RELEASE] JS-Client 10.1.2 by @itaismith in chroma-core/chroma#3425

[BLD]: fix apply-hotfix workflow by @codetheweb in chroma-core/chroma#3428

[ENH]: remove Helm chart copy workflow by @codetheweb in chroma-core/chroma#3430

[BLD] Add link to hotfix PR in action summary by @eculver in chroma-core/chroma#3433

[BUG] Use len_with_deleted instead of len by @eculver in chroma-core/chroma#3431

[BLD] Fix reference to html url by @eculver in chroma-core/chroma#3435

[Bug]: fix(vacuum): correctly state that vacuum was released in 0.5.6 not 0.6 (fixes #2956) by @Benzhaomin in chroma-core/chroma#2964

[BUG] Update Cohere embedding function to agree with new API by @itaismith in chroma-core/chroma#3438

[ENH] Update ef_search default value to 100 by @itaismith in chroma-core/chroma#3436

[BUG] Make memberlist use ips for routing by @HammadB in chroma-core/chroma#3405

[BUG] UniqueConstraintError not included as a ChromaError by @itaismith in chroma-core/chroma#3439

[BUG] Try bumping opentelemetry reqs for Python. by @rescrv in chroma-core/chroma#3441

[BUG] Support all iterables in toArrayOfArrays by @itaismith in chroma-core/chroma#3442

[BUG]: fix bad OpenAPI generation by @codetheweb in chroma-core/chroma#3445

[BLD] Make artifact names unique for the job being run by @eculver in chroma-core/chroma#3444

[ENH] Add flags to the go binary for concurrency and stream processing. by @rescrv in chroma-core/chroma#3449

[ENH] Setup GC tool and service by @sanketkedia in chroma-core/chroma#3451

[CHORE] Update to Rust 1.84. by @rescrv in chroma-core/chroma#3459

[CHORE] Do not log hnsw provider twice. by @rescrv in chroma-core/chroma#3458

[ENH] Move system and task into its own crate by @sanketkedia in chroma-core/chroma#3464

[ENH]: add API to list all databases for tenant by @codetheweb in chroma-core/chroma#3432

[ENH]: fix Go Dockerfile build time regression by @codetheweb in chroma-core/chroma#3461

[DOC] Expand HNSW params section by @itaismith in chroma-core/chroma#3447

[ENH] Proto defs for collection version file. #950 by @rohitcpbot in chroma-core/chroma#3453

[DOC] Point cloud section to new signup form by @itaismith in chroma-core/chroma#3448

[ENH]: add distributed impl for ListDatabases by @codetheweb in chroma-core/chroma#3440

Fix minor typo gcp.md by @eculver in chroma-core/chroma#3470

[ENH] Config to disable compactor on collections by @sanketkedia in chroma-core/chroma#3469

[BUG] Fix hnsw malloc of 0 bytes by @sanketkedia in chroma-core/chroma#3479

[ENH]: add method to delete database (single-node) by @codetheweb in chroma-core/chroma#3457

[ENH] add distributed implementation for database deletion by @codetheweb in chroma-core/chroma#3460

[DOC] Fix typos by @omahs in chroma-core/chroma#3419

[DOC]: Fix discord invite links by @tazarov in chroma-core/chroma#3467

[BUG] Make auth requests in async context async. by @rescrv in chroma-core/chroma#3477

[ENH] Add a simple rate limiter for async. by @rescrv in chroma-core/chroma#3476

[RELEASE] 0.6.3 by @itaismith in chroma-core/chroma#3485

New Contributors

... (truncated)

Commits

a3b86a0 [RELEASE] 0.6.3 (#3485)
82f769c [ENH] Add a simple rate limiter for async. (#3476)
1828a9c [BUG] Make auth requests in async context async. (#3477)
66e8b30 [DOC]: Fix discord invite links (#3467)
5808d7e [DOC] Fix typos (#3419)
9ee24fd [ENH] add distributed implementation for database deletion (#3460)
3105823 [ENH]: add method to delete database (single-node) (#3457)
cf95ad9 [BUG] Fix hnsw malloc of 0 bytes (#3479)
a632f2b [ENH] Config to disable compactor on collections (#3469)
d6c8f20 Fix minor typo gcp.md (#3470)
Additional commits viewable in compare view

… updates Bumps the minor-and-patch group with 6 updates in the /nlp-service directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.136.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.47.0` | `0.48.0` | | [markitdown](https://github.com/microsoft/markitdown) | `0.1.5` | `0.1.6` | | [google-genai](https://github.com/googleapis/python-genai) | `2.4.0` | `2.7.0` | | [sentence-transformers](https://github.com/huggingface/sentence-transformers) | `5.5.0` | `5.5.1` | | [chromadb](https://github.com/chroma-core/chroma) | `0.4.24` | `0.6.3` | Updates `fastapi` from 0.136.1 to 0.136.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.136.1...0.136.3) Updates `uvicorn` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.47.0...0.48.0) Updates `markitdown` from 0.1.5 to 0.1.6 - [Release notes](https://github.com/microsoft/markitdown/releases) - [Commits](microsoft/markitdown@v0.1.5...v0.1.6) Updates `google-genai` from 2.4.0 to 2.7.0 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/python-genai@v2.4.0...v2.7.0) Updates `sentence-transformers` from 5.5.0 to 5.5.1 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](huggingface/sentence-transformers@v5.5.0...v5.5.1) Updates `chromadb` from 0.4.24 to 0.6.3 - [Release notes](https://github.com/chroma-core/chroma/releases) - [Changelog](https://github.com/chroma-core/chroma/blob/main/RELEASE_PROCESS.md) - [Commits](chroma-core/chroma@0.4.24...0.6.3) --- updated-dependencies: - dependency-name: chromadb dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: google-genai dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: markitdown dependency-version: 0.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sentence-transformers dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: uvicorn dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-06T16:33:51Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 30, 2026

dependabot Bot requested review from ahjinsolo and tuirk as code owners May 30, 2026 09:13

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 30, 2026

tuirk force-pushed the main branch from 51c4a89 to 3313994 Compare May 30, 2026 13:52

dependabot Bot force-pushed the dependabot/pip/nlp-service/minor-and-patch-bf78ff28ea branch from 2d1eae6 to b5369b6 Compare June 2, 2026 03:53

dependabot Bot closed this Jun 6, 2026

dependabot Bot deleted the dependabot/pip/nlp-service/minor-and-patch-bf78ff28ea branch June 6, 2026 16:33

This was referenced Jun 6, 2026

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates #123

Closed

chore(deps): tighten Dependabot ignores for chromadb and marked #124

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-and-patch group across 1 directory with 6 updates#106

chore(deps): bump the minor-and-patch group across 1 directory with 6 updates#106
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nlp-service/minor-and-patch-bf78ff28ea

dependabot Bot commented on behalf of github May 30, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.136.3

Refactors

0.136.2

Refactors

Docs

Translations

Internal

Version 0.48.0

What's Changed

0.48.0 (May 24, 2026)

Changed

Fixed

Version 0.1.6

What's Changed

New Contributors

v2.7.0

2.7.0 (2026-05-27)

Features

v2.6.0

2.6.0 (2026-05-21)

Features

Documentation

v2.5.0

2.5.0 (2026-05-20)

Features

2.7.0 (2026-05-27)

Features

2.6.0 (2026-05-21)

Features

Documentation

2.5.0 (2026-05-20)

Features

v5.5.1 - Small Multimodal patch

Bug fixed

All Changes

0.6.3

What's Changed

New Contributors

Uh oh!

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 30, 2026 •

edited

Loading