Bump the minor-update group across 1 directory with 178 updates

[dependabot]

Bumps the minor-update group with 178 updates in the / directory:

Package	From	To
tblib	3.1.0	3.2.2
regex	2026.2.28	2026.7.19
requests	2.32.3	2.34.2
tqdm	4.67.3	4.70.0
tokenizers	0.22.2	0.23.1
fastapi	0.136.3	0.141.1
starlette	1.3.1	1.5.1
aiohttp	3.13.3	3.14.3
openai	2.44.0	2.53.0
pydantic	2.12.0	2.13.4
prometheus-client	0.22.0	0.26.0
prometheus-fastapi-instrumentator	8.0.2	8.1.0
tiktoken	0.12.0	0.13.0
lark	1.2.2	1.3.1
typing-extensions	4.15.0	4.16.0
filelock	3.16.1	3.32.2
jsonschema	4.23.0	4.26.0
pybase64	1.4.3	1.5.0
anthropic	0.112.0	0.121.0
opentelemetry-sdk	1.35.0	1.44.0
opentelemetry-api	1.35.0	1.44.0
opentelemetry-exporter-otlp	1.35.0	1.44.0
opentelemetry-semantic-conventions-ai	0.4.13	0.5.1
grpcio	1.78.0	1.83.0
grpcio-reflection	1.78.0	1.83.0
numba	0.65.0	0.66.0
peft	0.19.1	0.20.0
tensorizer	2.10.1	2.12.1
runai-model-streamer	0.15.7	0.16.1
conch-triton-kernels	1.2.1	1.3
torchcodec	0.14.0+cu130	0.15.0
pynvvideocodec	2.0.4	2.2.0
nvidia-cutlass-dsl	4.6.0	4.7.0
tokenspeed-mla	0.1.8	0.2.4
annotated-types	0.7.0	0.8.0
griffelib	2.0.2	2.1.0
idna	3.10	3.18
platformdirs	4.3.6	4.11.1
pydantic-core	2.41.1	2.48.0
pygments	2.18.0	2.20.0
ruff	0.15.12	0.16.2
six	1.16.0	1.17.0
urllib3	2.2.3	2.7.0
absl-py	2.1.0	2.5.0
accelerate	1.13.0	1.14.0
aiohappyeyeballs	2.6.1	2.7.1
alembic	1.16.4	1.19.1
arctic-inference	0.1.1	0.2.0
argcomplete	3.5.1	3.7.2
audioread	3.0.1	3.1.0
azure-core	1.38.2	1.41.0
azure-storage-blob	12.28.0	12.30.0
bitsandbytes	0.49.2	0.50.0
blobfile	3.0.0	3.2.0
bm25s	0.2.13	0.3.10
boto3	1.35.57	1.43.67
botocore	1.35.57	1.43.67
cffi	2.0.0	2.1.1
cohere-melody	0.9.0	0.13.0
colorlog	6.10.1	6.12.0
coverage	7.10.6	7.15.4
cramjam	2.9.0	2.11.0
cuda-bindings	13.0.3	13.3.1
cuda-pathfinder	1.3.3	1.6.0
cuda-toolkit	13.0.3.0	13.3.1
datamodel-code-generator	0.26.3	0.72.2
dataproperty	1.0.1	1.1.1
decorator	5.1.1	5.3.1
dill	0.3.8	0.4.1
distlib	0.3.9	0.4.3
dnspython	2.7.0	2.8.0
docker	7.1.0	7.2.0
einx	0.3.0	0.4.3
email-validator	2.2.0	2.3.0
fastapi-cloud-cli	0.21.0	0.23.0
fonttools	4.55.0	4.63.0
frozenlist	1.5.0	1.8.0
genson	1.3.0	1.4.0
google-api-core	2.24.2	2.34.0
google-auth	2.40.2	2.56.3
google-cloud-core	2.4.3	2.6.1
google-cloud-storage	3.4.0	3.13.1
google-crc32c	1.7.1	1.8.0
google-resumable-media	2.7.2	2.10.1
googleapis-common-protos	1.70.0	1.75.1
greenlet	3.2.3	3.5.4
h11	0.14.0	0.16.0
h2	4.3.0	4.4.1
hf-xet	1.5.1	1.6.0
hiredis	3.0.0	3.4.1
hpack	4.1.0	4.2.0
httpx	0.27.2	0.28.1
huggingface-hub	1.22.0	1.27.0
humanize	4.11.0	4.16.0
hypothesis	6.131.0	6.165.2
iniconfig	2.0.0	2.3.0
jiter	0.15.0	0.16.0
jmespath	1.0.1	1.1.0
joblib	1.4.2	1.5.3
jsonschema-rs	0.46.5	0.49.7
kiwisolver	1.4.7	1.5.0
lazy-loader	0.4	0.5
librosa	0.10.2.post1	0.11.0
llvmlite	0.47.0	0.48.0
mako	1.3.10	1.4.1
matplotlib	3.9.2	3.10.9
mpmath	1.3.0	1.4.1
msal	1.34.0	1.37.0
msgpack	1.1.0	1.2.1
mteb	2.8.3	2.18.16
multidict	6.1.0	6.7.1
mypy-extensions	1.0.0	1.1.0
networkx	3.2.1	3.4.2
nltk	3.9.1	3.10.2
nvidia-cublas	13.1.1.3	13.6.1.10
nvidia-cuda-cupti	13.0.85	13.3.75
nvidia-cuda-nvrtc	13.0.88	13.3.33
nvidia-cuda-runtime	13.0.96	13.3.29
nvidia-cudnn-cu13	9.20.0.48	9.24.0.43
nvidia-cufft	12.0.0.61	12.3.0.29
nvidia-cufile	1.15.1.6	1.18.1.6
nvidia-cusolver	12.0.4.66	12.2.6.9
nvidia-cusparse	12.6.3.3	12.8.2.51
nvidia-cusparselt-cu13	0.8.1	0.9.1
nvidia-nccl-cu13	2.29.7	2.30.7
nvidia-nvjitlink	13.0.88	13.3.33
nvidia-nvshmem-cu13	3.4.5	3.7.2
nvidia-nvtx	13.0.85	13.3.29
opentelemetry-exporter-otlp-proto-common	1.35.0	1.44.0
opentelemetry-exporter-otlp-proto-grpc	1.35.0	1.44.0
opentelemetry-exporter-otlp-proto-http	1.35.0	1.44.0
opentelemetry-exporter-prometheus	0.56b0	0.65b0
opentelemetry-proto	1.35.0	1.44.0
opentelemetry-semantic-conventions	0.56b0	0.65b0
pathvalidate	3.2.1	3.3.1
perceptron	0.1.4	0.3.5
pluggy	1.5.0	1.6.0
polars	1.29.0	1.43.2
pooch	1.8.2	1.9.0
propcache	0.2.0	0.5.2
proto-plus	1.26.1	1.28.3
pycryptodomex	3.22.0	3.23.0
pydantic-extra-types	2.10.5	2.11.1
pydantic-settings	2.14.2	2.15.0
pyjwt	2.11.0	2.13.0
pyparsing	3.2.0	3.3.2
pystemmer	3.0.0	3.1.0
pytest-forked	1.6.0	1.7.5
pytest-mock	3.14.0	3.15.1
pytest-timeout	2.3.1	2.4.0
python-rapidjson	1.20	1.23
rapidfuzz	3.12.1	3.14.5
referencing	0.35.1	0.37.0
responses	0.25.3	0.26.2
rignore	0.7.6	0.8.1
runai-model-streamer-azure	0.15.7	0.16.1
runai-model-streamer-gcs	0.15.7	0.16.1
runai-model-streamer-s3	0.15.7	0.16.1
s3transfer	0.10.3	0.19.2
sacrebleu	2.4.3	2.6.0
schemathesis	4.21.6	4.24.3
scikit-learn	1.5.2	1.7.2
scipy	1.13.1	1.15.3
sentence-transformers	5.2.0	5.7.0
sentry-sdk	2.63.0	2.66.1
soundfile	0.12.1	0.14.0
sympy	1.13.3	1.14.0
tabulate	0.9.0	0.10.0
termcolor	3.1.0	3.3.0
threadpoolctl	3.5.0	3.6.0
tritonclient	2.64.0	2.71.0
typer	0.26.8	0.27.1
uvicorn	0.35.0	0.52.1
vector-quantize-pytorch	1.21.2	1.31.1
wcwidth	0.2.13	0.8.2
xxhash	3.5.0	3.8.1
yarl	1.17.1	1.24.5
zentorch	2.11.0.0	2.13.0.0

Updates tblib from 3.1.0 to 3.2.2

Changelog

Sourced from tblib's changelog.

3.2.2 (2025-11-12)

* Fixed regression occurring with ``TimeoutError`` exceptions. They should be represented now exactly as the original when unpickling.
  Contributed by Jacob Tomlinson in `[#85](https://github.com/ionelmc/python-tblib/issues/85) <https://github.com/ionelmc/python-tblib/pull/85>`_.
3.2.1 (2025-10-31)

• Fixed regression occurring with ExceptionGroup exceptions. That exception type is now handled specifically in the new unpickle_exception_with_attrs function (just like OSError).

3.2.0 (2025-10-21)

* Changed ``tblib.pickling_support.install`` to support exceptions with ``__init__`` that does match the default
  ``BaseException.__reduce__`` (as it expects the positional arguments to ``__init__`` to match the ``args`` attribute).
Special handling for OSError (and subclasses) is also included. The errno, strerror, winerror, filename and filename2 attributes will be added in the reduce structure (if set).
This will support exception subclasses that do this without defining a custom __reduce__:
.. code-block:: python
def __init__(self):
    super().__init__('mistery argument')
def init(self, mistery_argument):

super().init()

self.mistery_argument = mistery_argument


Tests and POC contributed by Oldřich Jedlička in [#73](https://github.com/ionelmc/python-tblib/issues/73) <https://github.com/ionelmc/python-tblib/pull/73>_.

Fixed some doctest and coverage config. Contributed by Colin Watson in [#79](https://github.com/ionelmc/python-tblib/issues/79) <https://github.com/ionelmc/python-tblib/pull/79>_.

Commits

• d88606a Bump version: 3.2.1 → 3.2.2
• 530f874 Add test for timeouterror regression. Ref #85.
• 9c8f2ca Update changelog.
• df6185d Handle optional OSError attributes
• b197023 Bump version: 3.2.0 → 3.2.1
• d71e1ed Update changelog.
• 74ec645 Specifically handle ExceptionGroup in the new unpickle_exception_with_attrs. ...
• 580d579 Ooops, forgot to update these.
• ebc83e9 Bump version: 3.1.0 → 3.2.0
• abec37d Update changelog and add one more test.
• Additional commits viewable in compare view

Updates regex from 2026.2.28 to 2026.7.19

Changelog

Sourced from regex's changelog.

Version: 2026.7.19

Git issue 607: SIGSEGV: NULL pointer dereference in `basic_match()` when `(?R)`/`(?0)` recursion is used inside a fuzzy-matching quantifier
Git issue 608: SIGSEGV: out-of-bounds read in `bytes1_char_at()` with `DOTALL` + a fuzzy constraint + `(?r)` reverse-direction matching

Version: 2026.7.10

Clarified that the POSIX flag makes it look for only the longest overall match.
Git issue 606: regex's compiled-pattern cache eviction is not free-threading-safe

Version: 2026.6.28

Git issue 604: regex fails on free-threading python because setlocale is not thread-safe

Version: 2026.5.9

Reverse matching with full unicode casefolding could lead to out-of-range string indexes.

Version: 2026.4.4

A fix for older Python versions before free-threading was  supported.

Version: 2026.4.3

More fixes for free-threading.

Version: 2026.3.32

Fixed segfault.

Version: 2026.3.31

Fixed bug again.

Version: 2026.3.30

Fixed bug.

Version: 2026.3.28

Fixed version.

Version: 2026.3.27

Various fixes, including ones to improve free-threading support.

Version: 2026.2.28

Replaced atomic operations with mutex on pattern object for free-threaded Python.

... (truncated)

Commits

• 0525aff Git issue 608: SIGSEGV: out-of-bounds read in bytes1_char_at() with `DOTALL...
• 07dfa3b Git issue 607: SIGSEGV: NULL pointer dereference in basic_match() when `(?R...
• e7716da Python 3.15 not released yet.
• e204ddb Git issue 606: regex's compiled-pattern cache eviction is not free-threadin...
• d7e1927 Updated main.yml for Python 3.15.
• b18daa6 Git issue 604: regex fails on free-threading python because setlocale is not ...
• e57d185 Reverse matching with full unicode casefolding lead to out-of-range string in...
• bc57b04 A fix for older Python versions before free-threading was supported.
• 773e213 More fixes for free-threading.
• 5d51c75 Fixed segfault.
• Additional commits viewable in compare view

Updates requests from 2.32.3 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

• @​k223kim made their first contribution in psf/requests#7433

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
• Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• b7b549b v2.34.1
• e511bc7 Fix mutability issues with headers input types (#7431)
• 5691f59 Update JsonType containers to read-based collections (#7436)
• 2144213 Constrain Response.reason to str (#7437)
• 6404f34 Fix prepare_body stream detection for __getattr__-based file wrappers (#7...
• 0b401c7 v2.34.0
• 86b378d Align Session.get parameters with requests.get (#7429)
• a4f9a59 Port bpo-39057 to Requests (#7427)
• Additional commits viewable in compare view

Updates tqdm from 4.67.3 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

• contrib.concurrent: major improvements
  • support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)
  • fix total based on shortest iterable length (#1473)
  • use default max_workers (#1543 <- #1530, #1518)
  • support timeout, buffersize (#1576)
  • improve ETA (#1708 <- #1161)
  • update as_completed (#1709 <- #1565)
  • add tqdm.concurrent.intepreter_map (#1777)
• asyncio: support iterables with only __aiter__ (#1714 <- #1686)
• support reset(float("inf")) (#1783 <- #1781, #651)
• framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

• contrib.logging: preserve filters (#1775 <- #1581)
• rich: misc fixes (#1773)
  • support generators (without len) (#1391)
  • fix potential AttributeError on exit (#1674)
• fix total=float('inf') (#1781 <- #651)
• fix potential AttributeError on exit (#1778 <- #1668, #1537, #261)
• fix minor docs typos (#1780, #1746)

tqdm v4.69.0 stable

• add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
• misc minor framework updates
  • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

• trim to ncols even when '{bar}' not in bar_format (#1717, #1767 <- #1658)
• fix tqdm.write when stdout=None (#1768 <- #1654)

tqdm v4.68.3 stable

• utils: delay os.get_terminal_size (#1763 <- #1760)
• autonotebook: support QtConsole, Spyder, JupyterLite (#1763, #1628, #1559 <- #1283, #1098, #512)
• minor docs updates
  • fix typo (#1762)
  • use git-fame
• misc minor framework updates
  • fix & update CI build
  • pre-commit: add docs & metadata generation
  • move tox.ini -> pyproject.toml, move tox-gh-actions -> tox-gh
  • add Python 3.14, drop 3.7 support

tqdm v4.68.2 stable

• revert accidental change to ascii default (fixes #1760)
  • UnicodeEncodeError: 'charmap' codec can't encode characters in position 6-7: character maps to <undefined> can be fixed by installing tqdm!=4.68.0,!=4.68.1
• misc docs updates
  • fix links
  • replace stray rst -> md syntax
  • consistent "progress bar" terminology (#1737)

... (truncated)

Commits

• 96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
• c27393e misc tidy
• 061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
• 9fc160b Update how we check for interpreter_map support in the tests
• b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
• 16d5486 Add support for nested progress bars
• 9f5890f Add initial implementation for interpreter_map
• 321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
• 4664b57 minor tidy
• 426a098 Treat inf total as unknown in reset() too
• Additional commits viewable in compare view

Updates tokenizers from 0.22.2 to 0.23.1

Release notes

Sourced from tokenizers's releases.

Release v0.23.1

TL;DR

tokenizers 0.23.1 is the first proper stable release in the 0.23 line — 0.23.0 only ever shipped as rc0 because the release pipeline itself was broken (Node side hadn't shipped multi-platform binaries since 2023, Python side was on pyo3 0.27 without free-threaded support). 0.23.1 is the version where everything actually goes out the door together: full Node multi-platform wheels for the first time in years, Python 3.14 (regular and free-threaded 3.14t), full type hints for every Python class, and a stack of measurable perf wins on the BPE / added-vocab hot paths.

There is no functional 0.23.0 published — we tag 0.23.1 directly so users don't accidentally pull a never-shipped version.

---

🚨 Breaking changes

• Drop Python 3.9 (#1952) — requires-python = ">=3.10"; 3.9 users stay on 0.22.x.
• add_tokens normalizes content at insertion (#1995) — re-saved tokenizer.json may differ in the added_tokens block. Existing files load unchanged.
• Type stubs are precise (#1928, #1997) — methods that returned Any now return real types; mypy --strict may surface previously-hidden errors. Stub layout also moved from tokenizers/<sub>/__init__.pyi to tokenizers/<sub>.pyi. This breaks the surface of some of the processors like RobertaProcessign's __init__ .
• 3.14t-only: setters/getters return PyResult<T> because of Arc<RwLock<Tokenizer>>; a poisoned lock surfaces as PyException instead of a panic.

---

⚡ Performance — measured locally on this Mac, not lifted from PRs

Run with cargo bench --bench <name> -- --save-baseline v0_22_2 on v0.22.2, then --baseline v0_22_2 on v0.23.1. Numbers are point-in-time wall clock on a single laptop; relative deltas are what matters, absolute numbers will differ on CI hardware.

Added-vocabulary deserialize — the headline win (#1995, #1999)

bench: improve added_vocab_deserialize to reflect real-world workloads (#2000) is now representative of how transformers actually loads tokenizer.json files. The combined effect of daachorse for the matching automaton plus the normalize-on-insert refactor is enormous on this workload:

benchmark	v0.22.2	v0.23.1	change
100k tokens, special, no norm	~410 ms	248 ms	−40%
100k tokens, non-special, no norm	~7.1 s	273 ms	−96%
100k tokens, special, NFKC	~395 ms	235 ms	−40%
100k tokens, non-special, NFKC	~7.4 s	290 ms	−96%
400k tokens, special, no norm	~15 s	980 ms	−94%

Real-world impact: loading a Llama-3-style tokenizer with a large set of added tokens dropped from "noticeable pause" to "instant".

BPE encode

benchmark	v0.22.2	v0.23.1	change
BPE GPT2 encode batch, no cache	530 ms	446 ms	−16%
BPE GPT2 encode batch (cached)	690 ms	685 ms	noise
BPE GPT2 encode (single)	1.95 s	1.94 s	noise
BPE Train (small)	32.6 ms	31.5 ms	−3%
BPE Train (big)	1.01 s	988 ms	−2%

The BPE per-thread cache PR (#2028) shows much larger wins on highly-parallel workloads (+47–62% at 88+ threads on a server box, per the PR's own measurements on Vera). Single-thread batch numbers above are flat or slightly improved because cache-hit overhead was already low without contention.

Llama-3 encode

... (truncated)

Commits

• 7f1623b Bump version to 0.23.1
• bbe43ad ci: release workflow fixes (node + python) (#2043)
• ab0c5d8 Fix node release (#2034)
• decd8e0 bindings/python: free-threaded Python (3.14t) support (#2041)
• 3992692 update for release (#2033)
• bcdd25b BPE cache: per-thread read-through cache to avoid RwLock atomics on hits (#2028)
• 618eb38 Bump follow-redirects in /tokenizers/examples/unstable_wasm/www (#2024)
• b6b1688 chore: bump doc-builder SHA for PR upload workflow (#2025)
• 19015d6 fix: use uvx --with cairosvg instead of uv pip install --system (#2021)
• efbcc68 Ci benchmarks (#2019)
• Additional commits viewable in compare view

Updates fastapi from 0.136.3 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

• 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

• 📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @​tiangolo.

0.141.0

Features

• ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

• 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @​SAURABHSALVE.

Docs

• 📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @​AshNicolus.
• 📝 Add API reference page for fastapi.sse. PR #15930 by @​SAURABHSALVE.

0.140.12

Fixes

• 🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @​Zawwarsami16.

0.140.11

Fixes

• 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

• 🐛 Fix handling sequences with nested Annotated types. PR #14874 by @​YuriiMotov.

Internal

• 🐛 Accept any base test failure as regression. PR #16092 by @​tiangolo.
• 🐛 Preserve pytest exit code in regression check. PR #16091 by @​tiangolo.
• ✅ Test PR regressions against base code. PR #16090 by @​tiangolo.

0.140.9

Fixes

• 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits

• 95f8322 🔖 Release version 0.141.1 (#16106)
• f137944 📝 Update release notes
• d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
• 1d211b9 📝 Update release notes
• 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
• c7e7b65 🔖 Release version 0.141.0 (#16103)
• 6bceb84 📝 Update release notes
• 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
• 628663f 🔖 Release version 0.140.13 (#16096)
• 0b54fd0 📝 Update release notes
• Additional commits viewable in compare view

Updates starlette from 1.3.1 to 1.5.1

Release notes

Sourced from starlette's releases.

Version 1.5.1

What's Changed

• Reject inverted single-byte Range like bytes=5-4 by @​nikolauspschuetz in encode/starlette#3389
• Limit FileResponse to 100 ranges by @​Kludex in encode/starlette#3430

Full Changelog: Kludex/starlette@1.5.0...1.5.1

Version 1.5.0

This release is all about giving GZipMiddleware some love. 🗜️

What's Changed

• Add exclude_content_types parameter to GZipMiddleware by @​Kludex in encode/starlette#3418
• Flush GZip output for each streamed chunk by @​Kludex in encode/starlette#3419
• Skip compression of partial responses in GZipMiddleware by @​Kludex in encode/starlette#3420
• Expand default excluded content types in GZipMiddleware by @​Kludex in encode/starlette#3421

Full Changelog: Kludex/starlette@1.4.1...1.5.0

Version 1.4.1

What's Changed

• Default thread_minimum_size in GZipResponder by @​Kludex in Kludex/starlette#3415

Full Changelog: Kludex/starlette@1.4.0...1.4.1

Version 1.4.0

What's Changed

• Lazily allocate GZipMiddleware compression resources by @​Kludex in Kludex/starlette#3407
• Use zlib.compressobj instead of GzipFile in GZipMiddleware by @​Kludex in Kludex/starlette#3411
• Offload large GZip compression by @​Kludex in Kludex/starlette#3410

New Contributors

• @​benberryallwood made their first contribution in Kludex/starlette#3334
• @​lkk7 made their first contribution in Kludex/starlette#3359

Full Changelog: Kludex/starlette@1.3.1...1.4.0

Changelog

Sourced from starlette's changelog.

1.5.1 (August 8, 2026)

Fixed

• Reject inverted single-byte ranges in FileResponse #3389.
• Limit FileResponse to 100 ranges #3430.

1.5.0 (August 8, 2026)

Added

• Add exclude_content_types parameter to GZipMiddleware #3418.

Changed

• Expand default excluded content types in GZipMiddleware #3421.

Fixed

• Flush GZip output for each streamed chunk #3419.
• Skip compression of partial responses in GZipMiddleware #3420.

1.4.1 (August 5, 2026)

Fixed

• Default thread_minimum_size to 128 KiB in GZipResponder, keeping it usable without the new keyword argument #3415.

1.4.0 (August 5, 2026)

Added

• Offload large GZip compression to a worker thread, keeping the event loop responsive. GZipMiddleware accepts a new thread_minimum_size parameter (default 128 KiB) controlling the minimum body chunk size compressed in a thread #3410.

Changed

• Use zlib.compressobj instead of GzipFile in GZipMiddleware, reducing memory usage during compression #3411.
• Lazily allocate GZipMiddleware compression resources, avoiding compressor allocation for responses that are never compressed #3407.

Commits

• c41236c Version 1.5.1 (#3432)
• 9c500db Limit FileResponse to 100 ranges (#3430)
• 78ae82c Reject inverted single-byte Range like bytes=5-4 (#3389)
• c1d6eda chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 (#3429)
• ee66ca4 chore(deps): bump the python-packages group across 1 directory with 8 updates...
• 00d1016 fix(tests): skip test_staticfiles_filename_too_long on Windows where os.pathc...
• d96887e Add Pydantic Logfire banner to the docs (#3428)
• 07cb508 Version 1.5.0 (#3427)
• 45fb390 Add routing benchmarks (#3425)
• f1dc9b6 Expand default excluded content types in GZipMiddleware (#3421)
• Additional commits viewable in compare view

Updates aiohttp from 3.13.3 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

• Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

  Related issues and pull requests on GitHub: :issue:13180.

• Fixed error message construction in the C HTTP parser -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:13222.

---

3.14.2 (2026-07-20)

Bug fixes

• Fixed :py:attr:~aiohttp.web....

  Description has been truncated