Skip to content

build(deps): Bump the backend group across 1 directory with 2 updates#63

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-2d68e00fe1
Open

build(deps): Bump the backend group across 1 directory with 2 updates#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/backend/backend-2d68e00fe1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the backend group with 2 updates in the /backend directory: fastapi and mssql-python.

Updates fastapi from 0.138.2 to 0.139.0

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Updates mssql-python from 1.10.0 to 1.11.0

Release notes

Sourced from mssql-python's releases.

v1.11.0

Bug Fixes

• SSH-tunnel / in-process forwarder deadlock (#604)

What changed: The driver now releases the GIL around blocking ODBC network round-trips that previously held it — the teardown path (SQLFreeHandle / SQLFreeStmt(SQL_CLOSE) when closing a statement with an open server-side cursor) and the SQLDescribeParam call issued for parametrized queries containing a None argument. The teardown release is guarded against interpreter finalization to stay safe during shutdown. Who benefits: Users whose connection is routed through an in-process Python TCP forwarder (SSH-tunnel-style setups), where a GIL held across a blocking network syscall wedged the forwarder thread. Impact: conn.close() / cursor.close() after a parametrized query, and parametrized queries with None values, no longer deadlock the interpreter.

PR #604 | GitHub Issue #565

• BINARY/VARBINARY NULL parameters in temp tables and table variables (#654)

What changed: Unknown NULL parameter types are now proactively resolved before any parameter is bound (for both single and batch execution paths). When SQLDescribeParam fails and the type falls back to SQL_VARCHAR, the driver emits a Python warning with concrete cursor.setinputsizes() guidance for binary columns. Who benefits: Users inserting NULL values into BINARY / VARBINARY columns of temp tables or table variables, which previously hit driver errors or SQL Server implicit-conversion failures. Impact: NULL binary parameters bind reliably, and when automatic resolution is not possible users get actionable guidance instead of an opaque error.

PR #654 | GitHub Issue #627

• Context manager transaction semantics (#639)

What changed: The Connection context manager (__exit__) now implements commit-on-success / rollback-on-exception semantics. With autocommit=False, a clean exit commits the transaction and an exception rolls it back; with autocommit=True behavior is unchanged. The connection is always closed on exit. Who benefits: Users relying on with connection: blocks who previously saw every block roll back — because __exit__ only called close() regardless of how the block exited. Impact: with blocks now persist committed work on clean exit and safely roll back on error, matching the documented behavior.

PR #639 | GitHub Issue #635

• macOS Apple Silicon import failure (#661)

What changed: configure_dylibs.sh now rewrites the bundled ODBC dylib dependencies to @loader_path for every architecture shipped in the universal2 wheel (arm64 and x86_64), not just the build host's arch. The committed arm64 and x86_64 dylibs were also re-fixed. Who benefits: Apple Silicon users on a clean machine, where the arm64 driver previously pointed at an absolute Homebrew path (/opt/homebrew/lib/libodbcinst.2.dylib) that is absent until brew install unixodbc is run. Regressed in 1.8.0. Impact: import mssql_python works out of the box on Apple Silicon with no separate unixODBC install.

PR #661 | GitHub Issue #656

• Service Principal bulk copy freeze (#666)

What changed: Fixed a GIL-deadlock in the Rust core that froze bulk copy when authenticating with a service principal. The fix lands in mssql_py_core and is picked up by bumping the bundled dependency from 0.1.5 to 0.1.6. (via mssql_py_core) Who benefits: Users running bulkcopy with Authentication=ActiveDirectoryServicePrincipal, which previously froze mid-operation. Impact: Service principal bulk copy completes without freezing.

PR #666 | GitHub Issue #662

Commits
  • ae5da46 CHORE: Bump mssql-py-core to 0.1.6 (#666)
  • 2377277 FIX: Context manager commits on clean exit, rolls back on exception (#639)
  • aa97146 FIX: configure bundled macOS ODBC dylibs for all arches, not just build host ...
  • 98bb35a FIX: SQLDescribeParam ordinal remapping for VARBINARY/BINARY NULL (#654)
  • c91a600 CHORE: align connection string sanitizer with its documented key masking (#653)
  • 7e58c95 FIX: Release GIL around teardown SQLFreeHandle/SQLFreeStmt (#565) (#604)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the backend group across 1 directory with 2 updates
8948c82 
Bumps the backend group with 2 updates in the /backend directory: [fastapi](https://github.com/fastapi/fastapi) and [mssql-python](https://github.com/microsoft/mssql-python).


Updates `fastapi` from 0.138.2 to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.138.2...0.139.0)

Updates `mssql-python` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/microsoft/mssql-python/releases)
- [Changelog](https://github.com/microsoft/mssql-python/blob/main/CHANGELOG.md)
- [Commits](microsoft/mssql-python@v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: mssql-python
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants