Skip to content

chore(deps): bump the gha group across 1 directory with 9 updates#4278

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/packages/opentelemetry-instrumentation-marqo/gha-c1c21b6303
Open

chore(deps): bump the gha group across 1 directory with 9 updates#4278
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/packages/opentelemetry-instrumentation-marqo/gha-c1c21b6303

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-marqo directory:

Package From To
opentelemetry-api 1.39.1 1.42.1
marqo 3.18.0 3.18.2
pytest-sugar 1.0.0 1.1.1
ruff 0.14.11 0.15.17
pytest-asyncio 0.23.8 1.4.0
vcrpy 8.1.1 8.2.1

Updates opentelemetry-api from 1.39.1 to 1.42.1

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.42.1/0.63b1 (2026-05-21)

Fixed

  • Preserve the random trace ID flag when creating child spans instead of always setting the random trace id bit depending on the available trace id generator. (#5241)

Version 1.42.0/0.63b0 (2026-05-19)

Added

  • opentelemetry-api, opentelemetry-sdk: add support for 'random-trace-id' flags in W3C traceparent header trace flags. Implementations of IdGenerator that do randomly generate the 56 least significant bits, should also implement a is_trace_id_random methods that returns True. (#4854)
  • logs: add exception support to Logger emit and LogRecord attributes (#4908)
  • opentelemetry-exporter-otlp-proto-grpc: make retryable gRPC error codes configurable for gRPC exporters (#4917)
  • opentelemetry-sdk: Add create_logger_provider/configure_logger_provider to declarative file configuration, enabling LoggerProvider instantiation from config files without reading env vars (#4990)
  • opentelemetry-exporter-otlp-json-common: add 'opentelemetry-exporter-otlp-json-common' package for OTLP JSON exporters (#4996)
  • opentelemetry-sdk: Add service resource detector support to declarative file configuration via detection_development.detectors[].service (#5003)
  • opentelemetry-docker-tests: add docker-tests coverage of opentelemetry-exporter-otlp-proto-grpc and opentelemetry-exporter-otlp-proto-http metrics export (#5030)
  • Add registry keyword argument to PrometheusMetricReader to allow passing a custom Prometheus registry (#5055)
  • Add WeaverLiveCheck test util (#5088)
  • opentelemetry-sdk: add load_entry_point shared utility to declarative file configuration for loading plugins via entry points; refactor propagator loading to use it (#5093)
  • opentelemetry-sdk: add sampler plugin loading to declarative file configuration via the opentelemetry_sampler entry point group, matching the spec's PluginComponentProvider mechanism (#5095)

... (truncated)

Commits
  • 367e14d Prepare release 1.42.1/0.63b1 (#5243)
  • fd8e504 Preserve random trace ID flag for child spans (#5241) (#5242)
  • 013045e [release/v1.42.x-0.63bx] Prepare release 1.42.0/0.63b0 (#5225)
  • 1731583 ci: Enable GitHub Merge Queue support (#5209)
  • 7fab34d fix(config): allow deflate for OTLP HTTP exporters (#5075)
  • 0b690d2 ci: validate changelog fragment filenames (#5212)
  • d4fabb4 feat(config): exporter plugin loading via entry points for declarative config...
  • e19d346 feat(config): generic resource detector plugin loading for declarative config...
  • 1d69bd2 sdk/metrics: copy attributes dict to prevent post-recording mutation (#5106)
  • 990a611 feat(config): propagator plugin loading via entry points for declarative conf...
  • Additional commits viewable in compare view

Updates opentelemetry-instrumentation from 0.60b1 to 0.63b1

Release notes

Sourced from opentelemetry-instrumentation's releases.

opentelemetry-instrumentation-openai-v2 2.4b0

  • Migrate experimental path from deprecated LLMInvocation to InferenceInvocation, using handler.start_inference() and invocation.stop()/invocation.fail() directly (#4502)
  • Use create_duration_histogram and create_token_histogram from opentelemetry-util-genai instead of defining bucket boundaries locally (#4501)
  • Import OTEL_INSTRUMENTATION_GENAI_CAPTURE_MESSAGE_CONTENT from opentelemetry.util.genai.environment_variables instead of re-defining it locally, making opentelemetry-util-genai the single source of truth for this constant. (#4455)
  • Fix compatibility with wrapt 2.x by using positional arguments in wrap_function_wrapper() calls (#4445)
  • Fix ChoiceBuffer crash on streaming tool-call deltas with arguments=None (#4350)
  • Fix StreamWrapper missing .headers and other attributes when using with_raw_response streaming (#4113)
  • Add opt-in support for latest experimental semantic conventions (v1.37.0). Set OTEL_SEMCONV_STABILITY_OPT_IN to gen_ai_latest_experimental to enable. Add dependency on opentelemetry-util-genai pypi package. (#3715)
  • Add wrappers for OpenAI Responses API streams and response stream managers (#4280)
  • Add async wrappers for OpenAI Responses API streams and response stream managers (#4325)
  • Add strongly typed Responses API extractors with validation and content extraction improvements (#4337)
  • Add completion hook support. (#4315)
  • Fix response_format handling: map json_object/json_schema to json output type. (#4315)
  • Skip attribute values with openai.Omit value. (#4315)
  • Default empty string for gen_ai.request.model attribute on missing model. (#4494)

opentelemetry-instrumentation-openai-v2 2.3b0

  • Fix AttributeError when handling LegacyAPIResponse (from with_raw_response) (#4017)
  • Add support for chat completions choice count and stop sequences span attributes (#4028)
  • Fix crash with streaming with_raw_response (#4033)
  • Bump to 1.30.0 semconv schema: gen_ai.request.seed instead of gen_ai.openai.request.seed (#4036)

opentelemetry-instrumentation-openai-v2 2.2b0

  • Fix service tier attribute names: use GEN_AI_OPENAI_REQUEST_SERVICE_TIER for request attributes and GEN_AI_OPENAI_RESPONSE_SERVICE_TIER for response attributes. (#3920)
  • Added support for OpenAI embeddings instrumentation (#3461)
  • Record prompt and completion events regardless of span sampling decision. (#3226)
  • Filter out attributes with the value of NotGiven instances (#3760)
  • Migrate off the deprecated events API to use the logs API (#3625)

opentelemetry-instrumentation-openai-agents-v2 0.1.0

  • Initial barebones package skeleton: minimal instrumentor stub, version module, and packaging metadata/entry point. (#3805)
  • Implement OpenAI Agents span processing aligned with GenAI semantic conventions. (#3817)
  • Input and output according to GenAI spec. (#3824)

opentelemetry-instrumentation-openai-v2 2.1b0

  • Coerce openai response_format to semconv format (#3073)
  • Add example to opentelemetry-instrumentation-openai-v2 (#3006)
  • Support for AsyncOpenAI/AsyncCompletions (#2984)
  • Add metrics (#3180)

opentelemetry-instrumentation-openai-v2 2.0b0

  • Use generic OTEL_INSTRUMENTATION_GENAI_CAPTURE_MESSAGE_CONTENT environment variable to control if content of prompt, completion, and other messages is captured. (#2947)

... (truncated)

Changelog

Sourced from opentelemetry-instrumentation's changelog.

Version 1.42.1/0.63b1 (2026-05-21)

No significant changes.

Version 1.42.0/0.63b0 (2026-05-19)

Added

  • opentelemetry-exporter-richconsole: Add support for suppressing resource information (#3898)
  • opentelemetry-instrumentation: Add experimental metrics attributes Labeler utility (#4288)
  • opentelemetry-instrumentation-logging: Add OTEL_PYTHON_LOG_HANDLER_LEVEL and OTEL_PYTHON_LOG_FORMAT environment variables to configure the log level and formatter of the auto-instrumented LoggingHandler. (#4298)
  • opentelemetry-instrumentation-sqlite3: Add uninstrument, error status, suppress, and no-op tests (#4335)
  • Add BaggageLogProcessor to opentelemetry-processor-baggage (#4371)
  • opentelemetry-instrumentation-system-metrics: Add support for process.disk.io metric in system-metrics instrumentation (#4397)
  • opentelemetry-instrumentation: Register OTEL_SEMCONV_STABILITY_OPT_IN in environment_variables.py so opentelemetry-instrument exposes a --semconv_stability_opt_in CLI argument (#4438)
  • Expand AGENTS.md with instrumentation/GenAI guidance and add PR review instructions. (#4457)
  • opentelemetry-instrumentation: update auto-instrumentation to re-inject instrumentation path after init (#4469)
  • opentelemetry-instrumentation-dbapi: Add Database client operation duration and returned rows metrics (#4481)

Changed

  • Remove redundant pylint: disable=attribute-defined-outside-init comments and add rule to global .pylintrc disable list (#3839)
  • Bump pylint to 4.0.5 (#4244)
  • opentelemetry-instrumentation-logging: Use LogRecord.getMessage() to format and extract each log record's body text to more closely match the expected usage of the logging system. As a result, all OTel log record bodies

... (truncated)

Commits

Updates opentelemetry-semantic-conventions from 0.60b1 to 0.63b1

Changelog

Sourced from opentelemetry-semantic-conventions's changelog.

Version 1.42.1/0.63b1 (2026-05-21)

Fixed

  • Preserve the random trace ID flag when creating child spans instead of always setting the random trace id bit depending on the available trace id generator. (#5241)

Version 1.42.0/0.63b0 (2026-05-19)

Added

  • opentelemetry-api, opentelemetry-sdk: add support for 'random-trace-id' flags in W3C traceparent header trace flags. Implementations of IdGenerator that do randomly generate the 56 least significant bits, should also implement a is_trace_id_random methods that returns True. (#4854)
  • logs: add exception support to Logger emit and LogRecord attributes (#4908)
  • opentelemetry-exporter-otlp-proto-grpc: make retryable gRPC error codes configurable for gRPC exporters (#4917)
  • opentelemetry-sdk: Add create_logger_provider/configure_logger_provider to declarative file configuration, enabling LoggerProvider instantiation from config files without reading env vars (#4990)
  • opentelemetry-exporter-otlp-json-common: add 'opentelemetry-exporter-otlp-json-common' package for OTLP JSON exporters (#4996)
  • opentelemetry-sdk: Add service resource detector support to declarative file configuration via detection_development.detectors[].service (#5003)
  • opentelemetry-docker-tests: add docker-tests coverage of opentelemetry-exporter-otlp-proto-grpc and opentelemetry-exporter-otlp-proto-http metrics export (#5030)
  • Add registry keyword argument to PrometheusMetricReader to allow passing a custom Prometheus registry (#5055)
  • Add WeaverLiveCheck test util (#5088)
  • opentelemetry-sdk: add load_entry_point shared utility to declarative file configuration for loading plugins via entry points; refactor propagator loading to use it (#5093)
  • opentelemetry-sdk: add sampler plugin loading to declarative file configuration via the opentelemetry_sampler entry point group, matching the spec's PluginComponentProvider mechanism (#5095)

... (truncated)

Commits

Updates marqo from 3.18.0 to 3.18.2

Updates pytest-sugar from 1.0.0 to 1.1.1

Release notes

Sourced from pytest-sugar's releases.

pytest-sugar 1.1.1

Adjust signature of SugarTerminalReporter to avoid conflicts with other pytest plugins (#297 by @​TolstochenkoDaniil)

pytest-sugar 1.1.0

Add Playwright trace file detection and display support for failed tests (#296 by @​kiebak3r)

This enhancement automatically detects and displays Playwright trace.zip files with viewing commands when tests fail, making debugging easier for Playwright users. Playwright trace.zip

New command-line options:

  • --sugar-trace-dir: Configure the directory name for Playwright trace files (default: test-results)
  • --sugar-no-trace: Disable Playwright trace file detection and display
Changelog

Sourced from pytest-sugar's changelog.

1.1.1 - 2025-08-23 ^^^^^^^^^^^^^^^^^^

Adjust signature of SugarTerminalReporter to avoid conflicts with other pytest plugins

Contributed by Daniil via [PR #297](Teemu/pytest-sugar#297)

1.1.0 - 2025-08-16 ^^^^^^^^^^^^^^^^^^

Add Playwright trace file detection and display support for failed tests. This enhancement automatically detects and displays Playwright trace.zip files with viewing commands when tests fail, making debugging easier for Playwright users. Playwright trace.zip

New command-line options:

  • --sugar-trace-dir: Configure the directory name for Playwright trace files (default: test-results)
  • --sugar-no-trace: Disable Playwright trace file detection and display

Contributed by kie via [PR #296](Teemu/pytest-sugar#296)

Commits
  • 8133503 Release pytest-sugar 1.1.1
  • 6798042 Fix conflict with other Pytest plugins (#297)
  • 43bbdd0 Release pytest-sugar 1.1.0
  • 855d661 Feature - Playwright Support for Trace Zip Mapping (#296)
  • 2a5862a Merge pull request #293 from cgoldberg/add-py313
  • ca26d98 Add support for Python 3.13
  • 69989eb Clarify license as BSD 3-Clause License
  • 3c86a5c Merge pull request #289 from deronnax/remove-packaging-dep
  • c123be0 remove 'packaging' package
  • efafd9c Merge pull request #282 from penguinpee/main
  • Additional commits viewable in compare view

Updates ruff from 0.14.11 to 0.15.17

Release notes

Sourced from ruff's releases.

0.15.17

Release Notes

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.17

Released on 2026-06-11.

Preview features

  • Allow human-readable names in suppression comments (#25614)
  • Fix handling of ignore comments within a disable/enable pair (#25845)
  • Prioritize human-readable names in CLI output (#25869)
  • Respect diagnostic start and parent ranges and trailing comments in ruff:ignore suppressions (#25673)
  • [flake8-async] Add trio.as_safe_channel to safe decorators (ASYNC119) (#25775)
  • [flake8-pytest-style] Also check pytest_asyncio fixtures (#25375)
  • [ruff] Ban pytest autouse fixtures (RUF076) (#25477)
  • [pyupgrade] Add from __future__ import annotations automatically (UP007, UP045) (#23259)

Bug fixes

  • Fix diagnostic when ruff:enable or ruff:disable appears where ruff:ignore is expected (#25700)
  • [pyupgrade] Preserve leading empty literals to avoid syntax errors (UP032) (#25491)

Rule changes

  • [flake8-pytest-style] Clarify diagnostic message for single parameters (PT007) (#25592)
  • [numpy] Drop autofix for np.in1d (NPY201) (#25612)
  • [pylint] Exempt Python version comparisons (PLR2004) (#25743)

Performance

  • Reserve AST Vecs with correct capacity for common cases (#25451)

Formatter

  • Preserve whitespace for Quarto cell option comments (#25641)

CLI

  • Allow rule names in ruff rule (#25640)

Other changes

  • Fix playground diagnostics scrollbars (#25642)

Contributors

... (truncated)

Commits
  • 7c645a9 Bump 0.15.17 (#25872)
  • f381eb1 Prioritize human-readable names in CLI output (#25869)
  • b9b4546 Minor workflow simplification (#25870)
  • 1e77ba0 [ty] Move PreformattedBlockScanner to format-agnostic location. (#25856)
  • 6f2b772 [ty] Preserve nominal type of enum.property instances (#25849)
  • be4777c [ty] Fix site-package error when multiple versions of pythons are installed i...
  • 53f6ff7 Allow human-readable names in suppression comments (#25614)
  • 6740325 [ty] Restrict uncached raw signature access (#25866)
  • 970b1bf Auto-update snapshots when syncing typeshed (#25841)
  • 0785793 Fix handling of ignore comments within a disable/enable pair (#25845)
  • Additional commits viewable in compare view

Updates opentelemetry-sdk from 1.39.1 to 1.42.1

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.42.1/0.63b1 (2026-05-21)

Fixed

  • Preserve the random trace ID flag when creating child spans instead of always setting the random trace id bit depending on the available trace id generator. (#5241)

Version 1.42.0/0.63b0 (2026-05-19)

Added

  • opentelemetry-api, opentelemetry-sdk: add support for 'random-trace-id' flags in W3C traceparent header trace flags. Implementations of IdGenerator that do randomly generate the 56 least significant bits, should also implement a is_trace_id_random methods that returns True. (#4854)
  • logs: add exception support to Logger emit and LogRecord attributes (#4908)
  • opentelemetry-exporter-otlp-proto-grpc: make retryable gRPC error codes configurable for gRPC exporters (#4917)
  • opentelemetry-sdk: Add create_logger_provider/configure_logger_provider to declarative file configuration, enabling LoggerProvider instantiation from config files without reading env vars (#4990)
  • opentelemetry-exporter-otlp-json-common: add 'opentelemetry-exporter-otlp-json-common' package for OTLP JSON exporters (#4996)
  • opentelemetry-sdk: Add service resource detector support to declarative file configuration via detection_development.detectors[].service (#5003)
  • opentelemetry-docker-tests: add docker-tests coverage of opentelemetry-exporter-otlp-proto-grpc and opentelemetry-exporter-otlp-proto-http metrics export (#5030)
  • Add registry keyword argument to PrometheusMetricReader to allow passing a custom Prometheus registry (#5055)
  • Add WeaverLiveCheck test util (#5088)
  • opentelemetry-sdk: add load_entry_point shared utility to declarative file configuration for loading plugins via entry points; refactor propagator loading to use it (#5093)
  • opentelemetry-sdk: add sampler plugin loading to declarative file configuration via the opentelemetry_sampler entry point group, matching the spec's PluginComponentProvider mechanism (#5095)

... (truncated)

Commits
  • 367e14d Prepare release 1.42.1/0.63b1 (#5243)
  • fd8e504 Preserve random trace ID flag for child spans (#5241) (#5242)
  • 013045e [release/v1.42.x-0.63bx] Prepare release 1.42.0/0.63b0 (#5225)
  • 1731583 ci: Enable GitHub Merge Queue support (#5209)
  • 7fab34d fix(config): allow deflate for OTLP HTTP exporters (#5075)
  • 0b690d2 ci: validate changelog fragment filenames (#5212)
  • d4fabb4 feat(config): exporter plugin loading via entry points for declarative config...
  • e19d346 feat(config): generic resource detector plugin loading for declarative config...
  • 1d69bd2 sdk/metrics: copy attributes dict to prevent post-recording mutation (#5106)
  • 990a611 feat(config): propagator plugin loading via entry points for declarative conf...
  • Additional commits viewable in compare view

Updates pytest-asyncio from 0.23.8 to 1.4.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.0

1.4.0 - 2026-05-26

Deprecated

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

  • Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged.

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)
  • Updated minimum supported pytest version to v8.4.0. (#1397)

Fixed

  • Fixed a ResourceWarning: unclosed event loop warning that could occur when a synchronous test called asyncio.run() or otherwise unset the current event loop after pytest-asyncio had run an async test or fixture. (#724)

Notes for Downstream Packagers

  • Added dependency on sphinx-tabs >= 3.5 to organize documentation examples into tabs. (#1395)

pytest-asyncio v1.4.0a2

1.4.0a2 - 2026-05-02

Deprecated

  • Overriding the event_loop_policy fixture is deprecated. Use the pytest_asyncio_loop_factories hook instead. (#1419)

Added

  • Added the pytest_asyncio_loop_factories hook to parametrize asyncio tests with custom event loop factories.

    The hook returns a mapping of factory names to loop factories, and pytest.mark.asyncio(loop_factories=[...]) selects a subset of configured factories per test. When a single factory is configured, test names are unchanged on pytest 8.4+.

    Synchronous @pytest_asyncio.fixture functions now see the correct event loop when custom loop factories are configured, even when test code disrupts the current event loop (e.g., via asyncio.run() or asyncio.set_event_loop(None)). (#1164)

Changed

  • Improved the readability of the warning message that is displayed when asyncio_default_fixture_loop_scope is unset (#1298)
  • Only import asyncio.AbstractEventLoopPolicy for type checking to avoid raising a DeprecationWarning. (#1394)

... (truncated)

Commits
  • 6e14cd2 chore: Prepare release of v1.4.0.
  • 4b900fb Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1
  • ab9f632 Build(deps): Bump zipp from 3.23.1 to 4.1.0
  • a56fc77 Build(deps): Bump hypothesis from 6.152.6 to 6.152.8
  • e8bae9b Build(deps): Bump requests from 2.34.0 to 2.34.2
  • fc43340 Build(deps): Bump idna from 3.14 to 3.15
  • 762eaf5 Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0
  • b62e222 Build(deps): Bump click from 8.3.3 to 8.4.0
  • 9190447 Build(deps): Bump pydantic from 2.13.3 to 2.13.4
  • 82a393c ci: Remove unnecessary debug output.
  • Additional commits viewable in compare view

Updates vcrpy from 8.1.1 to 8.2.1

Release notes

Sourced from vcrpy's releases.

v8.2.1

What's Changed

  • SECURITY: Cassettes are now loaded with a safe YAML loader, preventing arbitrary code execution when a cassette from an untrusted source is loaded. Previously a crafted cassette containing a Python object tag (e.g. !!python/object/apply:os.system) would execute code on load, including via the normal vcr.use_cassette() path. Existing cassettes (including file-upload/streaming bodies) continue to load. Advisory: GHSA-rpj2-4hq8-938g — thanks @​RamiAltai and @​EQSTLab for the reports.
  • Validate record_mode and raise a clear error on an invalid value (#208)
  • Recommend pytest-recording over the unmaintained pytest-vcr in the docs (#986)

Full Changelog: kevin1024/vcrpy@v8.2.0...v8.2.1

v8.2.0

What's Changed

  • Add support for httpx 2.x (#993) - thanks @​dsfaccini
  • Patch httpx transports instead of httpcore (#972) - thanks @​seowalex
  • Fix aiohttp 3.14 compatibility: AsyncStreamReaderMixin removed and ClientResponse now requires stream_writer (#995) - thanks @​dsfaccini
  • Account for modified requests when storing played cassettes, so drop_unused_requests honours before_record_request filtering (#962) - thanks @​jamesbraza
  • Make the request URL available on VCRHTTPResponse (#976) - thanks @​dAnjou
  • Improve error message when a matching request has already been consumed (#985) - thanks @​Polandia94
  • Fix body check in convert_body_to_unicode to use an explicit type check (#982) - thanks @​Polandia94
  • Add env proxy cassette regression test (#994) - thanks @​tine1117
  • Remove milestone references from docs (#984) - thanks @​Polandia94
  • CI: bump sphinx-rtd-theme from 3.0.2 to 3.1.0 (#973)

Full Changelog: kevin1024/vcrpy@v8.1.1...v8.2.0

Changelog

Sourced from vcrpy's changelog.

Changelog

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

  • 8.2.1

    • SECURITY: Load cassettes with a safe YAML loader, preventing arbitrary code execution when a cassette from an untrusted source is loaded (GHSA-rpj2-4hq8-938g) - thanks @​RamiAltai and @​EQSTLab
    • Validate record_mode and raise a clear error on an invalid value (#208)
    • Recommend pytest-recording over the unmaintained pytest-vcr in the docs (#986)

  • 8.2.0

    • Add support for httpx 2.x (#993) - thanks @​dsfaccini
    • Patch httpx transports instead of httpcore (#972) - thanks @​seowalex
    • Fix aiohttp 3.14 compatibility: AsyncStreamReaderMixin removed and ClientResponse now requires stream_writer (#995) - thanks @​dsfaccini
    • Account for modified requests when storing played cassettes, so drop_unused_requests honours before_record_request filtering (#962) - thanks @​jamesbraza
    • Make the request URL available on VCRHTTPResponse (#976) - thanks @​dAnjou
    • Improve error message when a matching request has already been consumed (#985) - thanks @​Polandia94
    • Fix body check in convert_body_to_unicode to use an explicit type check (#982) - thanks @​Polandia94
    • Add env proxy cassette regression test (#994) - thanks @​tine1117
    • Remove milestone references from docs (#984) - thanks @​Polandia94
    • CI: bump sphinx-rtd-theme from 3.0.2 to 3.1.0 (#973)

  • 8.1.1

    • Fix sync requests in async contexts for HTTPX (#965) - thanks @​seowalex
    • CI: bump peter-evans/create-pull-request from 7 to 8 (#969)

  • 8.1.0

  • 8.0.0

    • BREAKING: Drop support for Python 3.9 (major version bump) - thanks @​jairhenrique
    • BREAKING: Drop support for urllib3 < 2 - fixes CVE warnings from urllib3 1.x (#926, #880) - thanks @​jairhenrique
    • New feature: drop_unused_requests option to remove unused interactions from cassettes (#763) - thanks @​danielnsilva
    • Rewrite httpx support to patch httpcore instead of httpx (#943) - thanks @​seowalex
      • Fixes httpx.ResponseNotRead exceptions (#832, #834)
      • Fixes KeyError: 'follow_redirects' (#945)
      • Adds support for custom httpx transports
    • Fix HTTPS proxy handling - proxy address no longer ends up in cassette URIs (#809, #914) - thanks @​alga
    • Fix iscoroutinefunction deprecation warning on Python 3.14 - thanks @​kloczek
    • Only log message if response is appended - thanks @​talfus-laddus
    • Optimize urllib.parse calls - thanks @​Martin-Brunthaler
    • Fix CI for Ubuntu 24.04 - thanks @​hartwork
    • Various CI improvements: migrate to uv, update GitHub Actions - thanks @​jairhenrique
    • Various linting and test improvements - thanks @​jairhenrique and @​hartwork

... (truncated)

Commits
  • 8531203 Release v8.2.1
  • 045acb1 Use a safe YAML loader for cassettes to prevent code execution
  • de43f46 Fix lint failures from merged PRs (codespell + ruff UP032)
  • 514c374 Validate record_mode and raise a clear error on invalid values
  • b736cad docs: recommend pytest-recording over unmaintained pytest-vcr
  • 06758c9 Release v8.2.0
  • 6554837 Add env proxy cassette regression test (#994)
  • 62cf5e1 Accounting for modified requests when storing played cassettes, with a test (...
  • 13f201a make url available in VCRHTTPResponse (#976)
  • d57b553 improve error message on repeated requestt (#985)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • `@dependab...

Description has been truncated

@dependabot
chore(deps): bump the gha group across 1 directory with 9 updates
cf55c00 
Bumps the gha group with 6 updates in the /packages/opentelemetry-instrumentation-marqo directory:

| Package | From | To |
| --- | --- | --- |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.42.1` |
| marqo | `3.18.0` | `3.18.2` |
| [pytest-sugar](https://github.com/Teemu/pytest-sugar) | `1.0.0` | `1.1.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.11` | `0.15.17` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.23.8` | `1.4.0` |
| [vcrpy](https://github.com/kevin1024/vcrpy) | `8.1.1` | `8.2.1` |



Updates `opentelemetry-api` from 1.39.1 to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.42.1)

Updates `opentelemetry-instrumentation` from 0.60b1 to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-semantic-conventions` from 0.60b1 to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `marqo` from 3.18.0 to 3.18.2

Updates `pytest-sugar` from 1.0.0 to 1.1.1
- [Release notes](https://github.com/Teemu/pytest-sugar/releases)
- [Changelog](https://github.com/Teemu/pytest-sugar/blob/main/CHANGES.rst)
- [Commits](Teemu/pytest-sugar@v1.0.0...v1.1.1)

Updates `ruff` from 0.14.11 to 0.15.17
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.11...0.15.17)

Updates `opentelemetry-sdk` from 1.39.1 to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.42.1)

Updates `pytest-asyncio` from 0.23.8 to 1.4.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v0.23.8...v1.4.0)

Updates `vcrpy` from 8.1.1 to 8.2.1
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v8.1.1...v8.2.1)

---
updated-dependencies:
- dependency-name: opentelemetry-api
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: gha
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: gha
- dependency-name: marqo
  dependency-version: 3.18.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: gha
- dependency-name: pytest-sugar
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: ruff
  dependency-version: 0.15.17
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: opentelemetry-sdk
  dependency-version: 1.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: gha
- dependency-name: vcrpy
  dependency-version: 8.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: gha
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants