chore(deps): bump the all-dependencies group across 1 directory with 12 updates#2145
Conversation
dependabot
Bot
added
the
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
…12 updates Updates the requirements on [google-cloud-aiplatform[adk,agent_engine]](https://github.com/googleapis/python-aiplatform), [google-adk](https://github.com/google/adk-python), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [pytest](https://github.com/pytest-dev/pytest), [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio), [pylint](https://github.com/pylint-dev/pylint), [google-cloud-aiplatform[evaluation]](https://github.com/googleapis/python-aiplatform), [agent-starter-pack](https://github.com/GoogleCloudPlatform/agent-starter-pack), [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [types-pyyaml](https://github.com/python/typeshed) and [types-requests](https://github.com/python/typeshed) to permit the latest version. Updates `google-cloud-aiplatform[adk,agent_engine]` to 1.159.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.93.0...v1.159.0) Updates `google-adk` from 1.28.0 to 2.3.0 - [Release notes](https://github.com/google/adk-python/releases) - [Changelog](https://github.com/google/adk-python/blob/main/CHANGELOG.md) - [Commits](google/adk-python@v1.28.0...v2.3.0) Updates `pydantic-settings` from 2.13.1 to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.2) Updates `pytest` from 9.0.2 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.1.1) Updates `pytest-asyncio` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.3.0...v1.4.0) Updates `pylint` from 4.0.5 to 4.0.6 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.5...v4.0.6) Updates `google-cloud-aiplatform[evaluation]` to 1.159.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.93.0...v1.159.0) Updates `agent-starter-pack` from 0.40.0 to 0.41.3 - [Release notes](https://github.com/GoogleCloudPlatform/agent-starter-pack/releases) - [Commits](GoogleCloudPlatform/agent-starter-pack@v0.40.0...v0.41.3) Updates `ruff` from 0.15.8 to 0.15.20 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.8...0.15.20) Updates `mypy` from 1.20.0 to 2.1.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.20.0...v2.1.0) Updates `types-pyyaml` from 6.0.12.20250915 to 6.0.12.20260518 - [Commits](https://github.com/python/typeshed/commits) Updates `types-requests` from 2.33.0.20260327 to 2.33.0.20260518 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: agent-starter-pack dependency-version: 0.41.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: google-adk dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: google-cloud-aiplatform[adk,agent_engine] dependency-version: 1.158.0 dependency-type: direct:production dependency-group: all-dependencies - dependency-name: google-cloud-aiplatform[evaluation] dependency-version: 1.158.0 dependency-type: direct:development dependency-group: all-dependencies - dependency-name: mypy dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: pydantic-settings dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pylint dependency-version: 4.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest-asyncio dependency-version: 1.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ruff dependency-version: 0.15.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: types-pyyaml dependency-version: 6.0.12.20260518 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: types-requests dependency-version: 2.33.0.20260518 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/python/agents/customer-service/all-dependencies-276a9392aa
branch
from
d0fdcb8 to
ccf0bbd
Compare
There was a problem hiding this comment.
📋 Security Review Summary
A thorough security review was performed on the changes introduced in this pull request, which consist solely of version bumps for standard dependency packages in python/agents/customer-service/pyproject.toml and python/agents/customer-service/uv.lock. No application source code was modified, added, or removed.
🔍 Findings
- No security vulnerabilities were found.
- The dependency updates upgrade packages to more recent, stable versions, which generally improves security hygiene and reduces exposure to potential known vulnerabilities in older packages.
There was a problem hiding this comment.
📋 Maintainability Review Summary
A thorough maintainability review was performed on the changes introduced in this pull request, as well as the workspace ref.diff references. Since the changes consist solely of standard package dependency updates and documentation changes, no application source code logic was introduced or modified.
🔍 Findings
- No maintainability issues (such as poor naming, magic numbers, or code duplication) were found.
There was a problem hiding this comment.
📋 Correctness Review Summary
This correctness-focused review identifies one critical TypeError startup crash and one significant initialization logic error within the changed files.
🔍 Findings
1. 🔴 Critical TypeError / Startup Crash on None project ID
-
File:
python/agents/financial-advisor/financial_advisor/__init__.py -
Severity: 🔴 critical
-
Demonstrable Bug:
The functiongoogle.auth.default()returns a tuple(credentials, project_id). If the current environment does not have a project explicitly configured in its Application Default Credentials (ADC) metadata (which is extremely common when using user credentials or in certain sandbox/pipeline environments),project_idwill be returned asNone.Passing
Noneas the second argument toos.environ.setdefault("GOOGLE_CLOUD_PROJECT", project_id)raises aTypeError: str expected, not NoneTypeimmediately at import time. This causes the entire module to crash on import (e.g. when run via a linter, pytest, or general execution). -
Corrected Suggestion:
if project_id: os.environ.setdefault("GOOGLE_CLOUD_PROJECT", project_id)
or:
os.environ.setdefault("GOOGLE_CLOUD_PROJECT", project_id or "")
2. 🟠 High Logic Error / Premature Import of Agent Module
-
File:
python/agents/financial-advisor/financial_advisor/__init__.py -
Severity: 🟠 high
-
Demonstrable Bug:
from . import agentis imported before setting the environment variablesGOOGLE_CLOUD_PROJECT,GOOGLE_CLOUD_LOCATION, andGOOGLE_GENAI_USE_VERTEXAI.Since
agent.pyimmediately imports sub-agents and instantiates theLlmAgentupon being imported, these modules are loaded and initialized before their required environment variables are set inos.environ. This can lead to initialization failures or incorrect configuration (e.g., failing to default to Vertex AI or using an incorrect GCP project). -
Corrected Suggestion:
Importagentonly after the environment variables have been fully configured:import os import google.auth _, project_id = google.auth.default() if project_id: os.environ.setdefault("GOOGLE_CLOUD_PROJECT", project_id) os.environ.setdefault("GOOGLE_CLOUD_LOCATION", "global") os.environ.setdefault("GOOGLE_GENAI_USE_VERTEXAI", "True") from . import agent
Updates the requirements on google-cloud-aiplatform[adk,agent_engine], google-adk, pydantic-settings, pytest, pytest-asyncio, pylint, google-cloud-aiplatform[evaluation], agent-starter-pack, ruff, mypy, types-pyyaml and types-requests to permit the latest version.
Updates
google-cloud-aiplatform[adk,agent_engine]to 1.159.0Release notes
Sourced from google-cloud-aiplatform[adk,agent_engine]'s releases.
Changelog
Sourced from google-cloud-aiplatform[adk,agent_engine]'s changelog.
... (truncated)
Commits
b636c73chore(main): release 1.159.0 (#6938)51c4d78Copybara import of the project:548d897fix: GenAI client - Update RagFile.file_status.state to use correct enum1bbd635chore: Mock gcs client to deflake unit test in gcs_utils.py9dbdc9cdocs: GenAI client - Update docstrings for RAG GenAI Modulee17e0fcchore: release 1.159.08bc007bfix: Redact python_spec version in replay testse368858feat: GenAI client - Log operation name when RAG operation fails9ffcbcefeat: Add deprecation warning to vertexai.rag module in favor of agentplatfor...2eb0fcbfix: fix the async_stream_query method. Restore yield_parsed_json method lost...Updates
google-adkfrom 1.28.0 to 2.3.0Release notes
Sourced from google-adk's releases.
... (truncated)
Changelog
Sourced from google-adk's changelog.
... (truncated)
Commits
a2bc0d8chore: update last-release-sha for next releasee4f23dechore(release/candidate): release 2.3.0 (#6150)0cb4c81fix(skills): enforce utf-8 encoding when materializing skill files on Windows81b8067fix: api-registry to fetch all services910e1c1fix: prevent ReDoS in code block extraction5cfef01fix(eval): handle unevaluated final response v2 resultsa546bcffix(auth): handle missing client-credentials scopes safely4340208fix: remove live event buffering in runner054da5dfix(planners): keep all leading parallel function calls9808451fix: call to sanitize schema for complex union typesUpdates
pydantic-settingsfrom 2.13.1 to 2.14.2Release notes
Sourced from pydantic-settings's releases.
... (truncated)
Commits
d703bd7Prepare release 2.14.2 (#890)e95c30bPrepare release 2.14.1 (#859)0c87345Fix field namedclsconflicting with classmethod parameter (#858)7bd0072Bump the python-packages group with 2 updates (#856)b03e573Bump the github-actions group with 3 updates (#853)eaa3b43Bump the python-packages group with 5 updates (#854)9f95615Bump the python-packages group with 4 updates (#850)8916beePrepare release 2.14.0 (#848)39e551cFix CLI descriptions lost underpython -OOby falling back to `json_schema_...9ed7f48Bump the python-packages group with 4 updates (#847)Updates
pytestfrom 9.0.2 to 9.1.1Release notes
Sourced from pytest's releases.
... (truncated)
Commits
cf470ecPrepare release version 9.1.1e0c8ce6Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...1b82d16Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...501c4bcMerge pull request #14596 from bluetech/doc-classmethodb61f588Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir9a567e0[automated] Update plugin list (#14617) (#14618)ef8b299Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...66abd07Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup79fbf93Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...0d312ebMerge pull request #14611 from bluetech/parametrize-argvalues-typingUpdates
pytest-asynciofrom 1.3.0 to 1.4.0Release notes
Sourced from pytest-asyncio's releases.
... (truncated)
Commits
6e14cd2chore: Prepare release of v1.4.0.4b900fbBuild(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1ab9f632Build(deps): Bump zipp from 3.23.1 to 4.1.0a56fc77Build(deps): Bump hypothesis from 6.152.6 to 6.152.8e8bae9bBuild(deps): Bump requests from 2.34.0 to 2.34.2fc43340Build(deps): Bump idna from 3.14 to 3.15762eaf5Build(deps): Bump jaraco-functools from 4.4.0 to 4.5.0b62e222Build(deps): Bump click from 8.3.3 to 8.4.09190447Build(deps): Bump pydantic from 2.13.3 to 2.13.482a393cci: Remove unnecessary debug output.Updates
pylintfrom 4.0.5 to 4.0.6Commits
8a39635Bump pylint to 4.0.6, update changelog (#11105)150f23c[Backport maintenance/4.0.x] Allow digits in ParamSpec and TypeVarTuple names...8b6251e[Backport maintenance/4.0.x] Fix crash when enum member inference fails (#11093)d57aadb[Backport maintenance/4.0.x] Fiximplicit-str-concatfalse positive for mix...d9ea8d9[Backport maintenance/4.0.x] Fixunnecessary-comprehensionsuggestion when ...cb1792a[Backport maintenance/4.0.x] Allow digits in TypeVar names for invalid-name c...ee2ab9aHandle InferenceError in decorator return analysis5bb5498[Backport maintenance/4.0.x] Fix crash in typecheck checker when metaclass ar...a940533[Backport maintenance/4.0.x] Fix a crash inconsider-using-enumeratefor no...b7a873a[Backport maintenance/4.0.x] Fix crash in deprecated checker for non-string `...Updates
google-cloud-aiplatform[evaluation]to 1.159.0Release notes
Sourced from google-cloud-aiplatform[evaluation]'s releases.