deps: bump the deps group with 4 updates by dependabot[bot] · Pull Request #85 · aturret/FastFetchBot

dependabot · 2026-05-24T08:51:24Z

Bumps the deps group with 4 updates: fastapi, playwright, openai and uvicorn.

Updates fastapi from 0.136.1 to 0.136.3

Release notes

0.136.3

Refactors

♻️ Do not accept underscore headers when using convert_underscores=True (the default). PR #15589 by @tiangolo.

0.136.2

Refactors

♻️ Validate Server Sent Event fields to avoid applications from sending broken data. PR #15588 by @tiangolo.

Docs

📝 Document --entrypoint CLI option. PR #15464 by @YuriiMotov.

📝 Update and simplify docs about help and management. PR #15583 by @tiangolo.

📝 Add docs references to central contributing docs. PR #15580 by @tiangolo.

📝 Update security policy. PR #15577 by @tiangolo.

🍱 Update sponsors: TalorData image. PR #15562 by @tiangolo.

📝 Update docs, simplify usage of admonitions, only default ones. PR #15553 by @tiangolo.

📝 Fix image URLs in index.md. PR #15534 by @YuriiMotov.

✏️ Fix Azkaban spelling typo in virtual-environments.md‎. PR #15463 by @isaacbernat.

💄 Improve layout and styling. PR #15462 by @alejsdev.

💄 Refactor opinions section with interactive tabs and new logos. PR #15458 by @alejsdev.

📝 Add FastAPI Conf '26 announcement to docs. PR #15457 by @alejsdev.

Translations

🌐 Improve translation consistency in ‎docs/pt/docs/advanced/generate-clients.md‎. PR #15456 by @Will-thom.

🌐 Update translations for ja (update-outdated). PR #15530 by @tiangolo.

🌐 Update translations for uk (update-outdated). PR #15529 by @tiangolo.

🌐 Update translations for pt (update-outdated). PR #15528 by @tiangolo.

🌐 Update translations for de (update-outdated). PR #15527 by @tiangolo.

🌐 Update translations for tr (update-outdated). PR #15526 by @tiangolo.

🌐 Update translations for ko (update-outdated). PR #15525 by @tiangolo.

🌐 Update translations for zh-hant (update-outdated). PR #15524 by @tiangolo.

🌐 Update translations for fr (update-outdated). PR #15522 by @tiangolo.

🌐 Update translations for es (update-outdated). PR #15523 by @tiangolo.

🌐 Update translations for zh (update-outdated). PR #15520 by @tiangolo.

🌐 Update translations for ru (update-outdated). PR #15521 by @tiangolo.

🌐 Fix typos in Spanish LLM-prompt. PR #15472 by @crr004.

Internal

✅ Update tests, don't double dispose the engine. PR #15587 by @tiangolo.

⚡️ Speed up test suite via caching and fixture scopes to make it ~24% faster. PR #13583 by @dikos1337.

🔥 Remove config files now in central GitHub repo. PR #15585 by @tiangolo.

⬆ Bump urllib3 from 2.6.3 to 2.7.0. PR #15502 by @dependabot[bot].

⬆ Bump idna from 3.11 to 3.15. PR #15565 by @dependabot[bot].

⬆ Bump cloudflare/wrangler-action from 3.15.0 to 4.0.0. PR #15571 by @dependabot[bot].

🔧 Migrate docs from MkDocs to Zensical. PR #15563 by @tiangolo.

🔒️ Only allow team members to modify dependencies. PR #15548 by @svlandeg.

... (truncated)

Commits

8206485 🔖 Release version 0.136.3
c910e01 📝 Update release notes
063b5bf ♻️ Do not accept underscore headers when using convert_underscores=True (th...
22b02e2 🔖 Release version 0.136.2
3b252a2 📝 Update release notes
c7fb785 ♻️ Validate Server Sent Event fields to avoid applications from sending broke...
cb83b83 📝 Update release notes
00f805c ✅ Update tests, don't double dispose the engine (#15587)
3675137 📝 Update release notes
7b57e42 📝 Document --entrypoint CLI option (#15464)
Additional commits viewable in compare view

Updates playwright from 1.59.0 to 1.60.0

Release notes

Sourced from playwright's releases.

v1.60.0

🐍 Python improvements

New FormData class for building multipart/form-data request bodies — pass to api_request_context.post(form=…) etc.

expect.soft(...) soft assertions collect multiple failures in a test instead of stopping at the first one. Requires up-to-date pytest integration to work.

All timeout parameters now accept datetime.timedelta — applies wherever a timeout is taken, e.g. page.goto(), locator.click(), expect(...).to_be_visible().

Async context manager support across more APIs — async with now works for objects returned from screencast.show_actions(), screencast.show_overlays(), etc.

page.expect_request(...) and page.expect_response(...) now accept async predicates.

Typed overloads for expect_event / wait_for_event so the event payload type is inferred per event name.

🌐 HAR recording on Tracing

tracing.start_har() / tracing.stop_har() expose HAR recording as a first-class tracing API, with the same content, mode and url_filter options as record_har:
context.tracing.start_har("trace.har")
page = context.new_page()
page.goto("https://playwright.dev")
context.tracing.stop_har()
🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic DataTransfer in the page context — works cross-browser and is great for testing upload zones:
page.locator("#dropzone").drop(
    files={"name": "note.txt", "mime_type": "text/plain", "buffer": b"hello"},
)
page.locator("#dropzone").drop(
data={
"text/plain": "hello world",
"text/uri-list": "https://example.com",
},
)
🎯 Aria snapshots

expect(page).to_match_aria_snapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator("body").

New boxes option on locator.aria_snapshot() / page.aria_snapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

New APIs

Browser, Context and Page

Event browser.on("context") — fired when a new context is created on the browser.

BrowserContext now mirrors lifecycle events from its pages: browser_context.on("download"), browser_context.on("frameattached"), browser_context.on("framedetached"), browser_context.on("framenavigated"), browser_context.on("pageclose"), browser_context.on("pageload").

Locators and Assertions

... (truncated)

Commits

93f3201 chore: roll driver to 1.60.0 (#3079)
0ebdf2d feat(assertions): add expect.soft() for collecting multiple failures (#3065)
18810d8 feat: add FormData class for form and multipart requests (#3060)
b846cee chore: roll to 1.60.0-beta-1778142790000 (#3069)
873c5c7 fix(setup): update auditwheel to 6.4.0 for InWheel tempdir fix (#3063)
9df9fac feat: accept datetime.timedelta for timeout parameters (#3059)
856ae37 devops: Update EsrpRelease (#3064)
161bd3d build(deps): bump flake8 from 7.2.0 to 7.3.0 (#2896)
ac9bf29 build(deps): bump types-requests from 2.32.4.20250809 to 2.32.4.20260107 (#2975)
deb2df8 build(deps): bump pytest-cov from 6.3.0 to 7.1.0 (#2976)
Additional commits viewable in compare view

Updates openai from 2.37.0 to 2.38.0

Release notes

Sourced from openai's releases.

v2.38.0

2.38.0 (2026-05-21)

Full Changelog: v2.37.0...v2.38.0

Features

api: api update (33d1d01)

api: manual updates (a21700a)

api: update OpenAPI spec or Stainless config (00265c5)

Chores

api: docs updates (ee10152)

check release PR custom code sync (2638779)

remove release automation trigger (bd6eea5)

trigger release automation (f62d082)

Changelog

Sourced from openai's changelog.

2.38.0 (2026-05-21)

Full Changelog: v2.37.0...v2.38.0

Features

api: api update (33d1d01)

api: manual updates (a21700a)

api: update OpenAPI spec or Stainless config (00265c5)

Chores

api: docs updates (ee10152)

check release PR custom code sync (2638779)

remove release automation trigger (bd6eea5)

trigger release automation (f62d082)

Commits

e757667 release: 2.38.0
b85b647 feat(api): api update
d881c67 Revert "chore: check release PR custom code sync"
d4a3228 chore: check release PR custom code sync
4888838 chore: remove release automation trigger
74978f0 chore: trigger release automation
bab18af chore(api): docs updates
a6f899a feat(api): manual updates
2897485 feat(api): update OpenAPI spec or Stainless config
a2f1d6c codegen metadata
Additional commits viewable in compare view

Updates uvicorn from 0.46.0 to 0.47.0

Release notes

Sourced from uvicorn's releases.

Version 0.47.0

What's Changed

Eagerly import the ASGI app in the parent process by @Kludex in Kludex/uvicorn#2919

Add ssl_context_factory for custom SSLContext configuration by @Kludex in Kludex/uvicorn#2920

Treat fd=0 as a valid file descriptor with reload/workers by @eltoder in Kludex/uvicorn#2927

Full Changelog: Kludex/uvicorn@0.46.0...0.47.0

Changelog

Sourced from uvicorn's changelog.

0.47.0 (May 14, 2026)

Added

Add ssl_context_factory for custom SSLContext configuration (#2920)

Changed

Eagerly import the ASGI app in the parent process (#2919)

Fixed

Treat fd=0 as a valid file descriptor with reload/workers (#2927)

Commits

479a2c0 Version 0.47.0 (#2937)
89347fd Add 7-day cooldown for dependency resolution via uv exclude-newer (#2936)
767315b Drop unused contents/actions permissions from zizmor workflow (#2935)
f25ee43 chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#2933)
8782666 Fix typo in docs/deployment/index.md. (#2932)
ad5ff87 Treat fd=0 as a valid file descriptor with reload/workers (#2927)
6761b2c Remove Hugging Face sponsor block from docs (#2923)
438f648 Surface sponsors on welcome page and sidebar (#2921)
10ddc6d Add ssl_context_factory for custom SSLContext configuration (#2920)
b499bc4 Eagerly import the ASGI app in the parent process (#2919)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group with 4 updates: [fastapi](https://github.com/fastapi/fastapi), [playwright](https://github.com/microsoft/playwright-python), [openai](https://github.com/openai/openai-python) and [uvicorn](https://github.com/Kludex/uvicorn). Updates `fastapi` from 0.136.1 to 0.136.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.136.1...0.136.3) Updates `playwright` from 1.59.0 to 1.60.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.59.0...v1.60.0) Updates `openai` from 2.37.0 to 2.38.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.37.0...v2.38.0) Updates `uvicorn` from 0.46.0 to 0.47.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.46.0...0.47.0) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: deps - dependency-name: playwright dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps - dependency-name: openai dependency-version: 2.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps - dependency-name: uvicorn dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-31T08:51:25Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 24, 2026

dependabot Bot closed this May 31, 2026

dependabot Bot deleted the dependabot/uv/deps-ed9feb5fdb branch May 31, 2026 08:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the deps group with 4 updates#85

deps: bump the deps group with 4 updates#85
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/deps-ed9feb5fdb

dependabot Bot commented on behalf of github May 24, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.136.3

Refactors

0.136.2

Refactors

Docs

Translations

Internal

v1.60.0

🐍 Python improvements

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

New APIs

Browser, Context and Page

Locators and Assertions

v2.38.0

2.38.0 (2026-05-21)

Features

Chores

2.38.0 (2026-05-21)

Features

Chores

Version 0.47.0

What's Changed

0.47.0 (May 14, 2026)

Added

Changed

Fixed

Uh oh!

dependabot Bot commented on behalf of github May 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 24, 2026 •

edited

Loading