Skip to content

chore(deps): bump the python-runtime-dependencies group across 5 directories with 6 updates - #295

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/lib/stac-api/runtime/python-runtime-dependencies-0f0bc0a346
Open

chore(deps): bump the python-runtime-dependencies group across 5 directories with 6 updates#295
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/lib/stac-api/runtime/python-runtime-dependencies-0f0bc0a346

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-runtime-dependencies group with 2 updates in the /lib/stac-api/runtime directory: stac-fastapi-pgstac and starlette-cramjam.
Bumps the python-runtime-dependencies group with 1 update in the /lib/stac-auth-proxy/runtime directory: stac-auth-proxy.
Bumps the python-runtime-dependencies group with 2 updates in the /lib/stac-loader/runtime directory: boto3 and stac-pydantic.
Bumps the python-runtime-dependencies group with 1 update in the /lib/stactools-item-generator/runtime directory: stac-pydantic.
Bumps the python-runtime-dependencies group with 1 update in the /lib/tipg-api/runtime directory: tipg.

Updates stac-fastapi-pgstac from 6.2.2 to 6.3.1

Release notes

Sourced from stac-fastapi-pgstac's releases.

6.3.1

What's Changed

Full Changelog: stac-utils/stac-fastapi-pgstac@6.3.0...6.3.1

6.3.0

What's Changed

New Contributors

Full Changelog: stac-utils/stac-fastapi-pgstac@6.2.2...6.3.0

Changelog

Sourced from stac-fastapi-pgstac's changelog.

[6.3.1] - 2026-06-24

Fixed

  • Make catalogs extension imports conditional to allow running app without the optional [catalogs] extra (#396)

Removed

  • Removed optional catalogs imports from extensions init (#396)

[6.3.0] - 2026-06-23

Changed

  • remove pgstac 0.8.6 in tests and update documentation (#354)
  • simplify extensions.query.Operator class, by removing unused operator method and unncessary dependencies (#364)
  • handle ENABLE_TRANSACTIONS_EXTENSIONS, ENABLED_EXTENSIONS and UVICORN_ROOT_PATH environment configuration variables via the config.Settings class (#368)
  • Refactor Docker Compose files and Makefile for better organization and modularity. (#379)

Added

  • implement neq query operator (#364)
  • add api test for neq query operator (#364)
  • Multi-Tenant Catalogs Extension: Integrated optional stac-fastapi-catalogs-extension to support native DAG (Directed Acyclic Graph) traversal of Catalogs and Collections. Enabled via ENABLE_CATALOGS_EXTENSION environment variable (#366)
  • Added HIDE_ALTERNATE_PARENTS environment variable (default False) to suppress rel="related" and rel="duplicate" links for alternate parents in poly-hierarchy. Useful for multi-tenant deployments to prevent information leakage about other tenants. When enabled, only the contextual rel="parent" link is advertised. Requires ENABLE_CATALOGS_EXTENSION=true. (#387)
  • Added rel="duplicate" links for scoped collection endpoints (/catalogs/{catalogId}/collections/{collectionId}) to expose alternative scoped paths where collections can be accessed through other parent catalogs in poly-hierarchy. (#387)

Fixed

  • preprocess fields to give the include set precendence over the exclude set (#370)
  • Fix route extraction in router tests to handle FastAPI >= 0.137.0 _IncludedRouter wrappers with original_router and include_context attributes (#389)
  • Fixed extensions import paths changed in stac-fastapi v6.3.0 (#392)

Updated

  • Update stac-fastapi-catalogs-extension to v0.4.0 (#387)
  • Transitioned Dockerfile.tests to use uv sync for strict lockfile adherence in local development. (#390)
  • Updated stac-fastapi dependencies to >= v6.3.0 (#392)
Commits
  • 4b0ea12 fix: catalogs optional import (#396)
  • a81cc09 update v6.2.2 -> v6.3.0 (#393)
  • 475ae19 update stac-fastapi v6.3.0, fix extension import paths (#392)
  • 30a7469 fix: router tests (#389)
  • 1a15c39 update dockerfile.tests to use uv (#390)
  • 066ad49 Update to catalogs extension v0.4.0. add hide alternate parents env var, add ...
  • ac432cf Add the Multi-Tenant Catalogs Endpoint Extension, for nested catalog support ...
  • ad0573e chore(deps): bump the all group across 1 directory with 6 updates (#386)
  • df1de10 Update makefile, compose files (#379)
  • 0d758af Cover corner cases of Fields extension (#370)
  • Additional commits viewable in compare view

Updates starlette-cramjam from 0.4.0 to 0.7.0

Release notes

Sourced from starlette-cramjam's releases.

0.7.0

What's Changed

New Contributors

Full Changelog: developmentseed/starlette-cramjam@0.6.0...0.7.0

0.6.0

What's Changed

New Contributors

Full Changelog: developmentseed/starlette-cramjam@0.5.1...0.6.0

0.5.1

What's Changed

New Contributors

Full Changelog: developmentseed/starlette-cramjam@0.5.0...0.5.1

Changelog

Sourced from starlette-cramjam's changelog.

0.7.0 (2026-04-27)

  • change: skip compression for 204 NO_CONTENT response

0.6.0 (2026-01-15)

  • remove support for python 3.9 and 3.10
  • use uv for project managment

0.5.1 (2025-10-27)

  • add python 3.14 support
  • add py.typed file

0.5.0 (2025-04-18)

  • add support for zstd compression
  • remove support for python 3.7 and 3.
Commits
  • 333ce4e Bump version: 0.6.0 → 0.7.0
  • a6e7a78 Merge pull request #29 from developmentseed/feat/204-skip-compression
  • d828cdb feat: skip compression for 204 responses
  • 2ad507f Merge pull request #27 from developmentseed/dependabot/github_actions/all-205...
  • 0434be4 Merge pull request #28 from developmentseed/dependabot/uv/all-5035f4443d
  • 020ed0d Bump the all group across 1 directory with 4 updates
  • 1a10dae Bump the all group across 1 directory with 4 updates
  • b940e7a update pre-commit config
  • 67b68bd update release process
  • 7f8de06 Merge pull request #24 from developmentseed/fix/pin-github-actions
  • Additional commits viewable in compare view

Updates stac-auth-proxy from 1.1.1 to 1.2.0

Release notes

Sourced from stac-auth-proxy's releases.

v1.2.0

1.2.0 (2026-07-23)

Features

  • add optional prometheus metrics endpoint. (#186) (6825f23)

Bug Fixes

  • add ROOT_PATH_SKIP_PREFIXES to exempt sibling-service links from root_path rewriting 2 (#198) (349986b)
  • allow , delimited string in configuration (#191) (df530a2)
  • allow Any type for classInput (#182) (56aa3f5)
  • configurable upstream timeout. (#174) (533bac6)
  • helm: make health path take root path into account. (#189) (5236a0e)
  • publish helm chart only on release (#178) (c89f650)
  • tests: fix flaky health-check retry test caused by global asyncio.sleep patch (#193) (fec33b6)
Changelog

Sourced from stac-auth-proxy's changelog.

1.2.0 (2026-07-23)

Features

  • add optional prometheus metrics endpoint. (#186) (6825f23)

Bug Fixes

  • add ROOT_PATH_SKIP_PREFIXES to exempt sibling-service links from root_path rewriting 2 (#198) (349986b)
  • allow , delimited string in configuration (#191) (df530a2)
  • allow Any type for classInput (#182) (56aa3f5)
  • configurable upstream timeout. (#174) (533bac6)
  • helm: make health path take root path into account. (#189) (5236a0e)
  • publish helm chart only on release (#178) (c89f650)
  • tests: fix flaky health-check retry test caused by global asyncio.sleep patch (#193) (fec33b6)
Commits
  • 8d86810 chore(main): release 1.2.0 (#175)
  • 349986b fix: add ROOT_PATH_SKIP_PREFIXES to exempt sibling-service links from root_pa...
  • 6825f23 feat: add optional prometheus metrics endpoint. (#186)
  • 5236a0e fix(helm): make health path take root path into account. (#189)
  • 0af3b20 ci: disable UV Cache for publishing workflows (#190)
  • fec33b6 fix(tests): fix flaky health-check retry test caused by global asyncio.sleep ...
  • 515f438 ci: add Claude auto PR review workflow (#192)
  • df530a2 fix: allow , delimited string in configuration (#191)
  • c89f650 fix: publish helm chart only on release (#178)
  • 56aa3f5 fix: allow Any type for classInput (#182)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.15 to 1.43.72

Commits
  • a3fc41f Merge branch 'release-1.43.72'
  • 27a2636 Bumping version to 1.43.72
  • 33a1671 Add changelog entries from botocore
  • a0b0f50 Merge branch 'release-1.43.71'
  • f1ea765 Merge branch 'release-1.43.71' into develop
  • 3a07077 Bumping version to 1.43.71
  • 9886147 Add changelog entries from botocore
  • 8c2ae68 Merge branch 'release-1.43.70'
  • 116daa7 Merge branch 'release-1.43.70' into develop
  • 4901fc8 Bumping version to 1.43.70
  • Additional commits viewable in compare view

Updates stac-pydantic from 3.5.1 to 3.6.0

Release notes

Sourced from stac-pydantic's releases.

3.6.0

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.2...3.6.0

3.6.0a1

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.6.0a0...3.6.0a1

3.6.0a0

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.2...3.6.0a0

3.5.2

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.1...3.5.2

Changelog

Sourced from stac-pydantic's changelog.

3.6.0 (2026-06-26)

  • No change since 3.6.0a1

3.6.0a1 (2026-06-25)

  • fix: invalid urljoin usage in Link model resolve method

3.6.0a0 (2026-06-24)

  • update: type hints for python >=3.10
  • fix: invalid urljoin usage in link factories (#219, @​vincentsarago)
  • remove: python 3.8 and 3.9 support

3.5.2 (2026-05-29)

Commits
  • 0e25ea8 3.6.0a1 -> 3.6.0
  • fca23a7 chore: 3.6.0a0 -> 3.6.0a1
  • 146d1fd Merge pull request #222 from stac-utils/fix/links-urljoin-issue-2
  • 1dd57dd fix: invalid urljoin usage
  • cd5e100 chore: 3.5.2 -> 3.6.0a0
  • 68acdb1 Merge pull request #221 from stac-utils/feat/update-min-python-to-310
  • f1e05e5 fix: add UP rule
  • 0fb2ab1 feat: update min python version to >= 3.10 and update typing hints
  • 0454ec8 Merge pull request #215 from stac-utils/dependabot/github_actions/codecov/cod...
  • a09df35 Bump codecov/codecov-action from 6.0.1 to 7.0.0
  • Additional commits viewable in compare view

Updates stac-pydantic from 3.5.1 to 3.6.0

Release notes

Sourced from stac-pydantic's releases.

3.6.0

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.2...3.6.0

3.6.0a1

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.6.0a0...3.6.0a1

3.6.0a0

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.2...3.6.0a0

3.5.2

What's Changed

Full Changelog: stac-utils/stac-pydantic@3.5.1...3.5.2

Changelog

Sourced from stac-pydantic's changelog.

3.6.0 (2026-06-26)

  • No change since 3.6.0a1

3.6.0a1 (2026-06-25)

  • fix: invalid urljoin usage in Link model resolve method

3.6.0a0 (2026-06-24)

  • update: type hints for python >=3.10
  • fix: invalid urljoin usage in link factories (#219, @​vincentsarago)
  • remove: python 3.8 and 3.9 support

3.5.2 (2026-05-29)

Commits
  • 0e25ea8 3.6.0a1 -> 3.6.0
  • fca23a7 chore: 3.6.0a0 -> 3.6.0a1
  • 146d1fd Merge pull request #222 from stac-utils/fix/links-urljoin-issue-2
  • 1dd57dd fix: invalid urljoin usage
  • cd5e100 chore: 3.5.2 -> 3.6.0a0
  • 68acdb1 Merge pull request #221 from stac-utils/feat/update-min-python-to-310
  • f1e05e5 fix: add UP rule
  • 0fb2ab1 feat: update min python version to >= 3.10 and update typing hints
  • 0454ec8 Merge pull request #215 from stac-utils/dependabot/github_actions/codecov/cod...
  • a09df35 Bump codecov/codecov-action from 6.0.1 to 7.0.0
  • Additional commits viewable in compare view

Updates tipg from 1.3.1 to 1.5.0

Release notes

Sourced from tipg's releases.

1.4.0

What's Changed

New Contributors

Full Changelog: developmentseed/tipg@1.3.1...1.4.0

Changelog

Sourced from tipg's changelog.

[1.5.0] - 2026-07-23

  • add: optional Prometheus metrics endpoint at /metrics with low-cardinality operation labels
  • fix: exclude /healthz and /metrics from Cache-Control headers

[1.4.0] - 2026-06-11

  • change: switch from pygeofilter to cql2 for CQL filter parsing and evaluation
  • change: update starlette dependency to >=1.0
  • remove: usage of buildpg library in favor of directly using asyncpg
  • add: allow simplifying geometries in OGC Tiles API
Commits
  • 6ef824b Bump version: 1.4.0 → 1.5.0
  • 3f53ce5 chore: update changelog
  • cd18b21 Merge pull request #268 from developmentseed/dependabot/github_actions/all-8b...
  • 8803886 Merge branch 'main' into dependabot/github_actions/all-8b1b129795
  • ead747e Merge pull request #267 from developmentseed/feat/prometheus-metrics-endpoint
  • 5d6a4ec Feedback from PR review.
  • e0467ea feat: control metrics with settings
  • bdc0bc6 feat: add optional prometheus metrics endpoint.
  • 8212f75 Bump the all group across 1 directory with 7 updates
  • 258bdb2 Merge pull request #265 from developmentseed/dependabot/github_actions/all-22...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctories with 6 updates

Bumps the python-runtime-dependencies group with 2 updates in the /lib/stac-api/runtime directory: [stac-fastapi-pgstac](https://github.com/stac-utils/stac-fastapi-pgstac) and [starlette-cramjam](https://github.com/developmentseed/starlette-cramjam).
Bumps the python-runtime-dependencies group with 1 update in the /lib/stac-auth-proxy/runtime directory: [stac-auth-proxy](https://github.com/developmentseed/stac-auth-proxy).
Bumps the python-runtime-dependencies group with 2 updates in the /lib/stac-loader/runtime directory: [boto3](https://github.com/boto/boto3) and [stac-pydantic](https://github.com/stac-utils/stac-pydantic).
Bumps the python-runtime-dependencies group with 1 update in the /lib/stactools-item-generator/runtime directory: [stac-pydantic](https://github.com/stac-utils/stac-pydantic).
Bumps the python-runtime-dependencies group with 1 update in the /lib/tipg-api/runtime directory: [tipg](https://github.com/developmentseed/tipg).


Updates `stac-fastapi-pgstac` from 6.2.2 to 6.3.1
- [Release notes](https://github.com/stac-utils/stac-fastapi-pgstac/releases)
- [Changelog](https://github.com/stac-utils/stac-fastapi-pgstac/blob/main/CHANGES.md)
- [Commits](stac-utils/stac-fastapi-pgstac@6.2.2...6.3.1)

Updates `starlette-cramjam` from 0.4.0 to 0.7.0
- [Release notes](https://github.com/developmentseed/starlette-cramjam/releases)
- [Changelog](https://github.com/developmentseed/starlette-cramjam/blob/main/CHANGES.md)
- [Commits](developmentseed/starlette-cramjam@0.4.0...0.7.0)

Updates `stac-auth-proxy` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/developmentseed/stac-auth-proxy/releases)
- [Changelog](https://github.com/developmentseed/stac-auth-proxy/blob/main/CHANGELOG.md)
- [Commits](developmentseed/stac-auth-proxy@v1.1.1...v1.2.0)

Updates `boto3` from 1.43.15 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.15...1.43.72)

Updates `stac-pydantic` from 3.5.1 to 3.6.0
- [Release notes](https://github.com/stac-utils/stac-pydantic/releases)
- [Changelog](https://github.com/stac-utils/stac-pydantic/blob/main/CHANGELOG.md)
- [Commits](stac-utils/stac-pydantic@3.5.1...3.6.0)

Updates `stac-pydantic` from 3.5.1 to 3.6.0
- [Release notes](https://github.com/stac-utils/stac-pydantic/releases)
- [Changelog](https://github.com/stac-utils/stac-pydantic/blob/main/CHANGELOG.md)
- [Commits](stac-utils/stac-pydantic@3.5.1...3.6.0)

Updates `tipg` from 1.3.1 to 1.5.0
- [Release notes](https://github.com/developmentseed/tipg/releases)
- [Changelog](https://github.com/developmentseed/tipg/blob/main/CHANGES.md)
- [Commits](developmentseed/tipg@1.3.1...1.5.0)

---
updated-dependencies:
- dependency-name: stac-fastapi-pgstac
  dependency-version: 6.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
- dependency-name: starlette-cramjam
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
- dependency-name: stac-auth-proxy
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime-dependencies
- dependency-name: stac-pydantic
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
- dependency-name: stac-pydantic
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
- dependency-name: tipg
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants