From 27bcc8a58824d4a7f9949957a1a78171110d5cd3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Nov 2026 17:37:02 +0000 Subject: [PATCH] chore(deps): bump the python group across 1 directory with 9 updates Updates the requirements on [rapidocr](https://github.com/RapidAI/RapidOCR), [onnxruntime](https://github.com/microsoft/onnxruntime), [markitdown](https://github.com/microsoft/markitdown), [httpcore](https://github.com/encode/httpcore), [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [grpcio](https://github.com/grpc/grpc), [mcp](https://github.com/modelcontextprotocol/python-sdk) and [playwright](https://github.com/microsoft/playwright-python) to permit the latest version. Updates `rapidocr` from 3.9.2 to 3.10.0 - [Release notes](https://github.com/RapidAI/RapidOCR/releases) - [Commits](https://github.com/RapidAI/RapidOCR/compare/v3.9.2...v3.10.0) Updates `onnxruntime` to 1.31.1 - [Release notes](https://github.com/microsoft/onnxruntime/releases) - [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md) - [Commits](https://github.com/microsoft/onnxruntime/compare/v1.20.0...v1.31.1) Updates `markitdown` from 0.1.6 to 0.1.9 - [Release notes](https://github.com/microsoft/markitdown/releases) - [Commits](https://github.com/microsoft/markitdown/compare/v0.1.6...v0.1.9) Updates `httpcore` to 1.0.9 - [Release notes](https://github.com/encode/httpcore/releases) - [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md) - [Commits](https://github.com/encode/httpcore/compare/1.0.0...1.0.9) Updates `pydantic` to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.14.2) Updates `pydantic-settings` to 2.16.2 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.1...v2.16.2) Updates `grpcio` to 1.85.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](https://github.com/grpc/grpc/compare/v1.84.1...v1.85.1) Updates `mcp` to 2.3.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v0.2.0...v2.3.0) Updates `playwright` from 1.62.0 to 1.64.1 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](https://github.com/microsoft/playwright-python/compare/v1.62.0...v1.64.1) --- updated-dependencies: - dependency-name: rapidocr dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: onnxruntime dependency-version: 1.31.1 dependency-type: direct:production dependency-group: python - dependency-name: markitdown dependency-version: 0.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: httpcore dependency-version: 1.0.9 dependency-type: direct:production dependency-group: python - dependency-name: pydantic dependency-version: 2.14.2 dependency-type: direct:production dependency-group: python - dependency-name: pydantic-settings dependency-version: 2.16.2 dependency-type: direct:production dependency-group: python - dependency-name: grpcio dependency-version: 1.85.1 dependency-type: direct:production dependency-group: python - dependency-name: mcp dependency-version: 2.3.0 dependency-type: direct:production dependency-group: python - dependency-name: playwright dependency-version: 1.64.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- requirements-optional.txt | 6 +++--- requirements.txt | 10 +++++----- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index f52e2c23f..c79c9a9e9 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -2,4 +2,4 @@ -r requirements.txt # psutil lets `-n auto` use physical cores instead of logical CPU threads. pytest-xdist[psutil]>=3.8,<4 -playwright==1.62.0 +playwright==1.64.1 diff --git a/requirements-optional.txt b/requirements-optional.txt index db624f4c9..b9d8f54e4 100644 --- a/requirements-optional.txt +++ b/requirements-optional.txt @@ -1,7 +1,7 @@ # Optional dependencies — install only if you use the corresponding feature. # Local OCR for screenshots, scans, labels, and coordinate-grounded text extraction. -rapidocr==3.9.2 -onnxruntime>=1.20,<2 +rapidocr==3.10.0 +onnxruntime>=1.31.1,<2 # The app handles their absence gracefully (clear error message on first use). # # Note: chromadb-client + fastembed moved to requirements.txt — RAG, semantic @@ -46,7 +46,7 @@ PyMuPDF # magika (onnxruntime), already a core dep via fastembed. We avoid the # [all]/Azure/audio extras (cloud + heavy). Pinned to a release >30 days old per # the dependency-age discussion in issue #485. -markitdown[docx,pptx,xlsx,xls]==0.1.6 +markitdown[docx,pptx,xlsx,xls]==0.1.9 # Photoshop PSD opening / flattened previews / layer inspection. psd-tools diff --git a/requirements.txt b/requirements.txt index 415b4b503..b01160bd5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,9 +5,9 @@ python-dotenv httpx # HTTPS clients using certifi must distrust the compromised eMudhra CA paths. certifi>=2026.10.23 -httpcore>=1.0,<2.0 -pydantic>=2.13.4 -pydantic-settings>=2.14.1 +httpcore>=1.0.9,<2.0 +pydantic>=2.14.2 +pydantic-settings>=2.16.2 SQLAlchemy pypdf pypdfium2 @@ -25,7 +25,7 @@ numpy # ChromaDB service); fastembed runs local ONNX embeddings. chromadb-client # gRPC vendors independent roots; 1.84.1 removes the incident trust anchors. -grpcio>=1.84.1 +grpcio>=1.85.1 fastembed>=0.9.1 youtube-transcript-api yt-dlp @@ -51,7 +51,7 @@ bcrypt # Built-in servers use the v1 low-level Server decorator API. MCP SDK v2 is a # breaking rewrite, so keep fresh installs on the maintained v1 line until the # servers are migrated together. -mcp<2 +mcp<3 pyotp qrcode[pil] croniter