Skip to content

chore(deps-dev): bump pydantic from 1.10.26 to 2.14.1 - #4068

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pydantic-2.13.5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pydantic-2.13.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pydantic from 1.10.26 to 2.14.1.

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

v2.14.0 2026-10-08

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.0 (2026-10-08)

GitHub release

What's Changed

The highlights of the v2.14 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release drops support for Python 3.9 and adds support for Python 3.15.

New Features

  • Add support for multiple_of constraint in fraction and timedelta core schemas by @​Viicos in #13873
  • Add __namespace__ parameter to create_model() by @​Viicos in #13895

Changes

Fixes

  • Call enum constructors in both validation modes by @​Viicos in #13792
  • Fix documentation examples not raising and remove unused string_sub_type unused error code by @​Viicos in #13821
  • Catch OverflowError during ByteSize validation by @​Viicos in #13850
  • Require multiple_of constraints to be positive by @​Viicos in #13862
  • Always pop field name and model type stacks during schema generation by @​saquibjawedbit in #13859
  • Handle TypeError gracefully during docstring extraction by @​Viicos in #13874
  • Fix config propagation of stdlib dataclasses and TypedDicts in JSON Schema by @​Viicos in #13891
  • Don't apply ser_json_timedelta to all datetime types in serialization inference by @​Viicos in #13892
  • Encode JSON Schema defaults with a consistent configuration by @​Viicos in #13893
  • Propagate init and kw_only=False from Field() to stdlib dataclass fields by @​Viicos in #13898
  • Respect propagated extra config in the JSON Schema of stdlib dataclasses by @​Viicos in #13899
  • Handle OS errors during ZoneInfo validation by @​Viicos in #13912
  • Handle exceptions during Decimal validation by @​Viicos in #13940
  • Rebuild incomplete types during serialization inference by @​Viicos in #13922
  • Reject large exponents in Fraction validation by @​Viicos in #13944
  • Avoid validating URL prefix multiple times in multi host URLs by @​Viicos in #13945

New Contributors

... (truncated)

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 13, 2026 03:08
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 13, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-22T20:07:06.448152Z eaa36bb New commits
🔒 Security Review ✅ Completed 2026-10-22T20:08:43.591842Z eaa36bb New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@openai-sdks

openai-sdks Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

OkTest Summary

✅ 236/236 SDK tests passed in 6.842s for Python SDK PR #4068.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 182ms
tests/chat-completions-create.test.ts ✅ Passed 170ms
tests/chat-completions-stream.test.ts ✅ Passed 148ms
tests/files-content-binary.test.ts ✅ Passed 100ms
tests/files-create-multipart.test.ts ✅ Passed 100ms
tests/files-list-pagination.test.ts ✅ Passed 109ms
tests/initialize-config.test.ts ✅ Passed 153ms
tests/instance-isolation.test.ts ✅ Passed 79ms
tests/models-list.test.ts ✅ Passed 94ms
tests/responses-background-lifecycle.test.ts ✅ Passed 130ms
tests/responses-body-method-errors.test.ts ✅ Passed 247ms
tests/responses-cancel-timeout.test.ts ✅ Passed 194ms
tests/responses-cancel.test.ts ✅ Passed 162ms
tests/responses-compact-retries.test.ts ✅ Passed 195ms
tests/responses-compact.test.ts ✅ Passed 160ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 154ms
tests/responses-create-advanced.test.ts ✅ Passed 187ms
tests/responses-create-disconnect.test.ts ✅ Passed 1.039s
tests/responses-create-errors.test.ts ✅ Passed 123ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 173ms
tests/responses-create-retries.test.ts ✅ Passed 150ms
tests/responses-create-stream-failures.test.ts ✅ Passed 91ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 211ms
tests/responses-create-stream-wire.test.ts ✅ Passed 1.472s
tests/responses-create-stream.test.ts ✅ Passed 88ms
tests/responses-create-terminal-states.test.ts ✅ Passed 219ms
tests/responses-create-timeout.test.ts ✅ Passed 215ms
tests/responses-create.test.ts ✅ Passed 249ms
tests/responses-delete.test.ts ✅ Passed 211ms
tests/responses-input-items-errors.test.ts ✅ Passed 123ms
tests/responses-input-items-list.test.ts ✅ Passed 166ms
tests/responses-input-items-options.test.ts ✅ Passed 183ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 245ms
tests/responses-input-tokens-count.test.ts ✅ Passed 152ms
tests/responses-malformed-inputs.test.ts ✅ Passed 795ms
tests/responses-not-found-errors.test.ts ✅ Passed 194ms
tests/responses-parse.test.ts ✅ Passed 154ms
tests/responses-retrieve-retries.test.ts ✅ Passed 173ms
tests/responses-retrieve.test.ts ✅ Passed 151ms
tests/responses-stored-method-errors.test.ts ✅ Passed 383ms
tests/retry-behavior.test.ts ✅ Passed 3.196s
tests/sdk-error-shape.test.ts ✅ Passed 201ms

View OkTest run #39085349703

SDK merge (2869ff423156) · head (06ff2a41d81f) · base (547ecb1e4fc2) · OkTest (f7a4b61f9287)

@github-actions

github-actions Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Castiron custom code

Evaluated main: e8a0fd28bbdc1699c97ff0f602b1af3dd378382d.

Trusted main policy: e8a0fd28bbdc1699c97ff0f602b1af3dd378382d.

✅ No new custom-code files detected.

41 mixed files remain; 0 existing customizations changed.

Compared e8a0fd28bbdc → eaa36bba08af. Generated baselines verified.

41 existing customizations unchanged
  • api.md
  • scripts/castiron/CUSTOM_CODE.md
  • scripts/castiron/custom_code_budget.py
  • scripts/castiron/custom_code_policy.py
  • scripts/castiron/custom_code_report.py
  • scripts/castiron/fixtures/github_publisher.cjs
  • scripts/castiron/test_custom_code_policy.py
  • scripts/castiron/test_custom_code_publication.py
  • scripts/castiron/test_custom_code_report.py
  • src/openai/init.py
  • src/openai/_client.py
  • src/openai/resources/audio/transcriptions.py
  • src/openai/resources/audio/translations.py
  • src/openai/resources/beta/agents/environments/files.py
  • src/openai/resources/beta/agents/sessions/artifacts.py
  • src/openai/resources/beta/agents/sessions/sessions.py
  • src/openai/resources/beta/responses/responses.py
  • src/openai/resources/beta/threads/runs/runs.py
  • src/openai/resources/beta/threads/threads.py
  • src/openai/resources/chat/completions/completions.py
  • src/openai/resources/conversations/api.md
  • src/openai/resources/embeddings.py
  • src/openai/resources/realtime/api.md
  • src/openai/resources/realtime/realtime.py
  • src/openai/resources/realtime/translations/translations.py
  • src/openai/resources/responses/api.md
  • src/openai/resources/responses/responses.py
  • src/openai/resources/uploads/uploads.py
  • src/openai/resources/webhooks/init.py
  • src/openai/resources/webhooks/webhooks.py
  • src/openai/types/init.py
  • src/openai/types/decision_input_image_param.py
  • src/openai/types/decision_input_message_param.py
  • src/openai/types/decision_input_text_param.py
  • src/openai/types/fine_tuning/fine_tuning_job_integration.py
  • src/openai/types/realtime/conversation_item_input_audio_transcription_delta_event.py
  • src/openai/types/realtime/realtime_error_event.py
  • src/openai/types/responses/tool_param.py
  • src/openai/types/webhooks/init.py
  • src/openai/types/webhooks/live_call_incoming_webhook_event.py

1 more in the full report.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 39846052038 --repo openai/openai-python \
  --name castiron-custom-code-39846052038-1 --dir /tmp/castiron-custom-code-39846052038-1
git apply --stat /tmp/castiron-custom-code-39846052038-1/custom-code.patch
cat /tmp/castiron-custom-code-39846052038-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin e8a0fd28bbdc1699c97ff0f602b1af3dd378382d eaa36bba08aff3398b52e852ca1f928134fd83eb
python3 scripts/castiron/custom_code_report.py report \
  --base e8a0fd28bbdc1699c97ff0f602b1af3dd378382d \
  --head eaa36bba08aff3398b52e852ca1f928134fd83eb --target-branch main --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-eaa36bba08af
cat /tmp/castiron-custom-code-eaa36bba08af/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: de0830aa92

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pyproject.toml
]
pydantic-v1 = ["pydantic>=1.10.26,<2"]
pydantic-v2 = ["pydantic>=2,<3"]
pydantic-v1 = ["pydantic>=1.10.26,<3"]

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Restore the Pydantic v1 upper bound

When scripts/test-pydantic-v1 syncs this group, the new <3 constraint permits Pydantic 2.13.5; correspondingly, the regenerated uv.lock contains only 2.13.5. The supposed v1 test pass therefore runs the v2 suite again and stops protecting the SDK's advertised Pydantic v1 compatibility, so this group must retain its <2 bound and separate locked v1 resolution.

AGENTS.md reference: AGENTS.md:L31-L34

Useful? React with 👍 / 👎.

Comment thread uv.lock Outdated
[[package]]
name = "openai"
version = "3.29.0" # x-release-please-version
version = "3.29.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve the release-please version marker

Removing this comment makes the Verify dependency groups and committed lock step in .github/workflows/ci.yml fail its explicit marker assertion on every run. It also removes the marker used for the configured uv.lock release version update, so retain # x-release-please-version on this line.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/uv/pydantic-2.13.5 branch 3 times, most recently from 2852ce9 to 315550c Compare October 14, 2026 05:40
@dependabot dependabot Bot changed the title chore(deps-dev): bump pydantic from 1.10.26 to 2.13.5 chore(deps-dev): bump pydantic from 1.10.26 to 2.14.0 Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/pydantic-2.13.5 branch 5 times, most recently from 4beaca7 to 06ff2a4 Compare October 18, 2026 01:07
@dependabot dependabot Bot changed the title chore(deps-dev): bump pydantic from 1.10.26 to 2.14.0 chore(deps-dev): bump pydantic from 1.10.26 to 2.14.1 Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/pydantic-2.13.5 branch 3 times, most recently from 48aa0d0 to 8761017 Compare October 22, 2026 03:34
Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.26 to 2.14.1.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v1.10.26...v2.14.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/uv/pydantic-2.13.5 branch from 8761017 to eaa36bb Compare October 22, 2026 20:06

Copy link
Copy Markdown
Contributor

Thanks for the update! This group intentionally tests Pydantic v1, and upgrading it to v2 would remove that coverage. We already test v2 separately, so I’m closing this update.

@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/uv/pydantic-2.13.5 branch October 23, 2026 01:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant