chore(deps): bump the python group across 2 directories with 12 updates

[dependabot]

Bumps the python group with 11 updates in the / directory:

Package	From	To
faiss-cpu	1.15.0	1.15.1
openai	3.8.0	3.24.0
build	1.6.0	1.6.1
charset-normalizer	3.5.1	3.5.2
idna	3.19	3.20
ruff	0.16.6	0.16.10
httpcore2	2.12.0	2.13.1
httpx2	2.12.0	2.13.1
jiter	0.16.0	0.17.0
pydantic-core	2.46.5	2.49.0
build	1.6.0	1.6.1
charset-normalizer	3.5.1	3.5.2
idna	3.19	3.20
setuptools	84.0.0	``
ruff	0.16.6	0.16.10
faiss-cpu	1.15.0	1.15.1
httpcore2	2.12.0	2.13.1
httpx2	2.12.0	2.13.1
jiter	0.16.0	0.17.0
openai	3.8.0	3.24.0
pydantic-core	2.46.5	2.49.0

Bumps the python group with 12 updates in the /requirements directory:

Package	From	To
setuptools	84.0.0	``
numpy	2.4.6	2.5.3
faiss-cpu	1.15.0	1.15.1
openai	3.8.0	3.24.0
build	1.6.0	1.6.1
charset-normalizer	3.5.1	3.5.2
idna	3.19	3.20
ruff	0.16.6	0.16.10
httpcore2	2.12.0	2.13.1
httpx2	2.12.0	2.13.1
jiter	0.16.0	0.17.0
pydantic-core	2.46.5	2.49.0
build	1.6.0	1.6.1
charset-normalizer	3.5.1	3.5.2
idna	3.19	3.20
setuptools	84.0.0	``
ruff	0.16.6	0.16.10
faiss-cpu	1.15.0	1.15.1
httpcore2	2.12.0	2.13.1
httpx2	2.12.0	2.13.1
jiter	0.16.0	0.17.0
numpy	2.4.6	2.5.3
openai	3.8.0	3.24.0
pydantic-core	2.46.5	2.49.0

Updates faiss-cpu from 1.15.0 to 1.15.1

Release notes

Sourced from faiss-cpu's releases.

v1.15.1

See CHANGELOG.md for the full list of changes.

Changelog

Sourced from faiss-cpu's changelog.

[1.15.1] - 2026-09-15

Added

• 3b3711c112fbf7dfb9c64b6fcf90ffc3ca412548 Add explicit IVFPQ scanner distance modes (#5632)
• 4fdbc9dc18adbfef3cd410a2446aa4c757320a8a Support ZeroCopyIOReader for IndexRaBitQ deserialization (#5629)
• b5a14632a6f2bfdc824c86d683b9d6e9205c2604 Run the eight SIMD kernel tests that no build executed (#5620)
• e6bd1d252caa5b9315a04390269d382845984ae2 Add AVX512 VPOPCNT dynamic dispatch level (#5531)
• 7f4cedda9c384de652c7bd5690db0f808d668216 Add staged RaBitQ storage to HNSW (#5526)
• cfbf4ec5ff68d0bca4701d0b24b8a0736e110932 SVS: allow option to disable vector storing (#5525)
• cda4f6e7133c629e502c2ea9bc51e0ef51847ab1 Expose IndexBinaryIVF.set_direct_map_type via the C API (#5451)
• 256980cb6ea6610e4b0edf497a038086df8bbfce Add SVE low-dimensional nearest fast path and spherical SuperKMeans support (#5530)
• 3a716ead1a3c4562fe6e96d982d26789c58e19ed Add Windows ARM64 support to CI (#5544)
• 7059eaf7da7eddda62e71367e684d4bdedd7f94f Add AVX512 bitplane kernel for multi-bit RaBitQ inner product (#5522)
• a424dcb809fd725c44dd976d9063febd4837d16a faiss HNSW: add opt-in deterministic lock-free graph build (faiss::hnsw_deterministic_build) (#5486)
• da3191e754b49ca67b6503a9262e96ce5a3d8ed8 IDSelectorWithContext: extend context hook to IVFPQ/PQR, multibit RaBitQ, and Panorama scanners (#5491)
• edddbc998e858f16330f9b226dfd72f73d4d1d46 IDSelectorWithContext: scan-context hook for locality-aware selectors (#5490)

Changed

• 3bb48643ab8ea9e50162b354d2463270acd6ed9c Pin faiss-gpu-cuvs RAPIDS deps to the 26.06 build series (#5643)
• 6bbb068ad8dab612b84304400846da1b14539085 Measure 20-byte Hamming codes eight at a time (#5587)
• 3c7042f17a467c38d99f490ef39e4dfa615dc510 Let the binary Hamming paths reach the VPOPCNT kernels
• 9f993087b07e83f026248addb01dd99e99b15a3e Name the SIMD level masks after what they hold (#5600)
• e2cf9e1ebf24c14b888fa69eee96713aa6d64b1a Accept ragged code sizes in faiss::hammings(), and fix the vectorization axis for wide codes (#5520)
• 545550f6a27031c2269881d97237fd6a5bef15df Use unittest assertions and f-strings in test_index_composite (#5571)
• af9eeffcf70d7795107c2b0511bdba507ac45339 Reserve cs vector capacity in hammings_knn_mc_impl to avoid reallocations (#5548)
• 317a207bcacfcfa695d98289c3f4ea562b782837 ARM SVE optimization for L2 distance kernels adapted to new simd_impl structure (#5098)
• 2027d3b33144dbf19674b540ec0e31b2f842b1cc Make cuVS dispatch opt-in rather than build-implied (#5529)
• a39e2606887bbacc6c8f54e783c4b42da00cf4b3 Fold multi-GPU CAGRA build into train(), delete trainMultiGpu (#5521)
• 1f93154314afbef210f0ebebeab840da22f9ec7d Revert D114685755: Fold multi-GPU CAGRA build into train(), delete trainMultiGpu
• 6644dcfa5576221b1a4417fd766a8b2af71d869e Fold multi-GPU CAGRA build into train(), delete trainMultiGpu (#5500)
• 80a16564f86530dbf0bfaf96c2b71feffeb5093f Enable Faiss dynamic dispatch for OVIS and VeST fbpkgs (#5515)
• 2688c34f942c8462d97c8632c720a53653456270 Parallelize the k-means++ D^2 seeding update (#5457)
• 76c67b7b736ca80c2b3ea29528434d6583adc88b Update default Panorama batch size to 1024 (#5441)
• 3b50babc5914570576b09da043f64dfd7d62a075 Optimize RVV batch-4 distance kernels (#5469)

Fixed

• 7c3b55c01b8418dc044881625a260fceae9c712b Make Panorama bounds checks overflow-safe (#5616)
• fb2d57a3121c073828d2ed7d04ccf09d8bea771c Fix leak and unbounded lists[] in OnDisk invlist deserialization (#5560)
• fc13c81fb8b22f76e4c2c7bd2f027bd049b9a207 Stop aarch64 falling back to SIMDLevel::NONE in faiss dispatch (#5572)
• 00928e3f7628b8288c17cfece5ee9600a8287f56 Fix ROCm CI: build in a dedicated conda env instead of the runner's broken base (#5545)
• 1e5780fbbfbe191f3ed3517f93ace8301239e9b2 Fix OOB read in Panorama::reconstruct via IndexPreTransform (T287094917) (#5562)
• 2ed4c106e9fb9686e7727e5daf8ad6ad1e164109 Fix: Windows SIMD detection (#5497)
• b4c66ba6031d1f659163e43430f8ce745b0dbe79 Fix reverse_index_factory/get_code_size round-trip for HNSW, IMI and IVFPQR (#5564)
• c0084f5cd2534236acda05cf7b8e0fc8062ddec3 Clamp EDEN unbiased L2 distances to be non-negative (#5569)
• 6457e941f5f4808303bb480679cb78df0df51934 Contain DirectoryArchiver entries within the extraction root (#5561)
• ac60182fc009476c91a2788e639191d1f624157f RaBitQ: Fix zero residual sign convention (#5553)
• 1a0cfa64e015923d5009d8c7d917aa591e9eac9a Apply the deserialization byte limit to SVS IVF (#5568)
• 718002f7cf269f3f3752dde04a4cc3f8eabb0050 Fix distance conversion in IndexBinaryFromFloat for non-L2 metrics (#5549)
• 02ea14372c9983f3eaa15698512180dc62ea234d Fix range_search_max_results to respect all similarity metrics (#5533)
• bd7087453e6d2262b6e6c76ab0cfa1e2dfeddebf fix(faiss): use is_similarity_metric for IndexShardsIVF merge (#5541)

... (truncated)

Commits

• 75c755c Add missing CHANGELOG entry for #5632 in v1.15.1 (#5651)
• d63faea Increment to next release, v1.15.1 (#5645)
• 3b3711c Add explicit IVFPQ scanner distance modes (#5632)
• 3bb4864 Pin faiss-gpu-cuvs RAPIDS deps to the 26.06 build series (#5643)
• 7c3b55c Make Panorama bounds checks overflow-safe (#5616)
• fb2d57a Fix leak and unbounded lists[] in OnDisk invlist deserialization (#5560)
• a74867c faiss HNSW: delete the flag and the lock-based graph build (#5611)
• 4fdbc9d Support ZeroCopyIOReader for IndexRaBitQ deserialization (#5629)
• b5a1463 Run the eight SIMD kernel tests that no build executed (#5620)
• 6bbb068 Measure 20-byte Hamming codes eight at a time (#5587)
• Additional commits viewable in compare view

Updates openai from 3.8.0 to 3.24.0

Release notes

Sourced from openai's releases.

v3.24.0

3.24.0 (2026-10-02)

Features

• api: add custom voice creation and agent session events (#4013) (e5de2e5)

Bug Fixes

• api: prioritize Python request routing fields (#4014) (ffcc4c4)
• api: prioritize routing fields in parse helpers (#4016) (ba53a10)

v3.23.0

3.23.0 (2026-10-01)

Features

• agents: [1/n] return typed answers from session streams (#4007) (10f8816)
• agents: stage files and download turn artifacts (#4009) (4fc2438)
• api: Add session traces and Realtime translations (#4001) (138e3d1)
• beta: expose typed application actions as agent tools (#4006) (f219c55)
• collect final output from beta Agents streams (157ac4c)

Bug Fixes

• api: allow original image detail in Chat Completions (#4005) (8a136c2)
• api: correct the eval run cancellation endpoint (#4003) (28c5c9a)
• api: retain WebSocket endpoint paths and query parameters (#3999) (7f203fd)
• keep Castiron budget results valid when main advances (#4012) (73f189b)
• responses: avoid replaying uncertain typed sends on reconnect (#4011) (1dbbf61)
• responses: respect send queue limits during reconnect (#4000) (50f95ac)
• use monotonic clock for file processing timeout (#3748) (58aca1d)

Chores

• api: retain WebRTC Live session transport types (#4002) (5c9ace9)
• deps-dev: bump pyright from 1.1.413 to 1.1.414 (#3902) (a91d779)
• deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#3976) (f15f43c)
• deps: bump CodeQL actions to 4.38.1 (#3974) (fb70d66)

v3.22.1

3.22.1 (2026-09-30)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

3.24.0 (2026-10-02)

Features

• api: add custom voice creation and agent session events (#4013) (e5de2e5)

Bug Fixes

• api: prioritize Python request routing fields (#4014) (ffcc4c4)
• api: prioritize routing fields in parse helpers (#4016) (ba53a10)

3.23.0 (2026-10-01)

Features

• agents: [1/n] return typed answers from session streams (#4007) (10f8816)
• agents: stage files and download turn artifacts (#4009) (4fc2438)
• api: Add session traces and Realtime translations (#4001) (138e3d1)
• beta: expose typed application actions as agent tools (#4006) (f219c55)
• collect final output from beta Agents streams (157ac4c)

Bug Fixes

• api: allow original image detail in Chat Completions (#4005) (8a136c2)
• api: correct the eval run cancellation endpoint (#4003) (28c5c9a)
• api: retain WebSocket endpoint paths and query parameters (#3999) (7f203fd)
• keep Castiron budget results valid when main advances (#4012) (73f189b)
• responses: avoid replaying uncertain typed sends on reconnect (#4011) (1dbbf61)
• responses: respect send queue limits during reconnect (#4000) (50f95ac)
• use monotonic clock for file processing timeout (#3748) (58aca1d)

Chores

• api: retain WebRTC Live session transport types (#4002) (5c9ace9)
• deps-dev: bump pyright from 1.1.413 to 1.1.414 (#3902) (a91d779)
• deps: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 (#3976) (f15f43c)
• deps: bump CodeQL actions to 4.38.1 (#3974) (fb70d66)

3.22.1 (2026-09-30)

Bug Fixes

• api: correct the missing authentication error message (#3993) (51692ed), closes #3962
• transform NotRequired typed dictionary fields (#3995) (5544c18)

... (truncated)

Commits

• 637f1b8 release: 3.24.0 (#4015)
• e5de2e5 feat(api): add custom voice creation and agent session events (#4013)
• ba53a10 fix(api): prioritize routing fields in parse helpers (#4016)
• ffcc4c4 fix(api): prioritize Python request routing fields (#4014)
• 93bd2aa release: 3.23.0 (#3996)
• 73f189b fix: keep Castiron budget results valid when main advances (#4012)
• 1dbbf61 fix(responses): avoid replaying uncertain typed sends on reconnect (#4011)
• 4fc2438 feat(agents): stage files and download turn artifacts (#4009)
• a91d779 chore(deps-dev): bump pyright from 1.1.413 to 1.1.414 (#3902)
• fb70d66 chore(deps): bump CodeQL actions to 4.38.1 (#3974)
• Additional commits viewable in compare view

Updates build from 1.6.0 to 1.6.1

Release notes

Sourced from build's releases.

1.6.1

What's Changed

• chore[v1]: prepare for v1.6.1 by @​henryiii in pypa/build#1181

Full Changelog: pypa/build@1.6.0...1.6.1

Changelog

Sourced from build's changelog.

#################### 1.6.1 (2026-09-10) ####################

---

Bugfixes

---

• Avoid trying to detect symlinks on Windows, regression in 1.6.0 - by :user:henryiii (:issue:1175) (:issue:1175)

---

Documentation

---

• Fix doubled backslashes in the Windows pip config path (%APPDATA%\pip\pip.ini) in the docs - by :user:aroh3006 (:issue:1149)

---

Miscellaneous

---

• :issue:1168, :issue:1170, :issue:1178

#################### 1.6.0 (2026-08-27) ####################

---

Features

---

• Add --report=PATH to write a machine-readable JSON report of built artifacts; --metadata now also accepts .whl files - by :user:gaborbernat (:issue:198)
• The srcdir argument now accepts .tar.gz source distributions, extracting and building from them - by :user:gaborbernat (:issue:311)
• The "Unmet dependencies" error from --no-isolation builds now shows the wanted version, found version, and interpreter - by :user:gaborbernat (:issue:504)
• Add --sdist-extract-dir to extract the intermediate sdist into a persistent directory, enabling compiler cache reuse across rebuilds - by :user:gaborbernat (:issue:614)
• Add --env-dir to place the isolated build environment at a fixed path, enabling compiler cache reuse across builds
  • by :user:gaborbernat (:issue:655)
• Print a summary of resolved dependency versions (name==version) after installing them in isolated builds - by :user:gaborbernat (:issue:959)
• On build failure, print a tip pointing to --env-dir and --sdist-extract-dir for debugging and link to the "Debug a failed build" how-to - reported by :user:dimpase, implemented by :user:gaborbernat (:issue:966)

---

Bugfixes

---

... (truncated)

Commits

• 89cccef chore: prepare for 1.6.1
• a6f707a ci: support releases from v* branches (#1178)
• 7785161 docs: fix doubled backslashes in Windows pip config path (#1149)
• 244b250 fix: always use copies for the isolated venv on Windows (#1176)
• c93ca6f build(deps): bump re-actors/alls-green from 1.2.2 to 1.3.0 in the github-acti...
• e02ffd3 pre-commit: bump repositories (#1173)
• aad39a8 docs: fix changelog page heading levels and sidebar (#1171)
• 5c3fd46 docs: use PyPI ref directly (#1172)
• 1c5bd6c 🐛 fix(release): format generated changelog (#1170)
• 7f0cc7e 🔧 build(type): replace mypy with pyrefly (#1168)
• See full diff in compare view

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

• Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

• Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
• Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)

Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

• Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

• Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
• Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)

Commits

• 935c29a Release 3.5.2 (#805)
• 9d3238a test: disable traefik in downstream niquests
• b4c0368 docs: write changelog entry for 3.5.2
• 717da31 chore: bump version to 3.5.2
• 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
• 41e28b6 chore: raise Cython upper bound to 3.3
• b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
• f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
• See full diff in compare view

Updates idna from 3.19 to 3.20

Release notes

Sourced from idna's releases.

v3.20

• Update to Unicode 18.0.0.
• Better enforcement of the domain length limit in the incremental codec.
• Add support for Python 3.15.

Changelog

Sourced from idna's changelog.

3.20 (2026-09-17)

• Update to Unicode 18.0.0.
• Better enforcement of the domain length limit in the incremental codec.
• Add support for Python 3.15.

Commits

• d55e65e Release 3.20
• 0c0824a Pre-release 3.20rc0
• bd7c316 Note Python 3.15 support in the 3.20 changelog
• b6cce85 Merge pull request #276 from kjd/unicode-18
• 9a4bc59 Update to Unicode 18.0.0
• dfab5a0 Merge branch 'python-3.15'
• 417c354 Read the latest Unicode version from the DerivedAge.txt header instead of the...
• cd17392 Merge pull request #274 from kjd/fix-decode-length-check
• c5796d7 Skip the decode round-trip check for domains past encode's length limit
• d6ee690 Update to Python 3.15 release candidate in CI and add trove classifier
• Additional commits viewable in compare view

Updates ruff from 0.16.6 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

0.16.9

Released on 2026-09-24.

Preview features

• [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

• [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
• [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

• Update LibCST-based fixes for Python 3.15 (#28616)

... (truncated)

Commits

• 3265ed1 Bump version to 0.16.10 (#29055)
• e786964 Authorize shared PR security-review workflow to publish findings (#29052)
• a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
• b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
• 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
• 317e0a3 [ty] Bound nested callable signature display (#29049)
• 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
• 56180bc [ty] Specialize instance members once (#29043)
• aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
• 2d25346 [ty] Improve unresolved-import documentation (#29039)
• Additional commits viewable in compare view

Updates httpcore2 from 2.12.0 to 2.13.1

Release notes

Sourced from httpcore2's releases.

v2.13.1

Highlights

📤 Accurate file upload lengths

Passing a file as content= now calculates Content-Length from its remaining bytes, respecting the current file position (#1214).

🔐 Reliable proxy TLS and HTTP/2 negotiation

TLS hostname overrides now apply inside HTTP proxy tunnels without affecting the proxy's own TLS connection (#1223). HTTP/2 is advertised first when enabled, and HTTP/1.1 is omitted when disabled (#1155).

🧹 Clean WebSocket shutdown

The sync WebSocket keepalive thread now exits cleanly when a ping races with connection shutdown (#1228).

httpx2

Fixed

• Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position (#1214).
• Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown (#1228).

httpcore2

Fixed

• Honor the sni_hostname extension for TLS inside HTTP proxy tunnels without applying it to the proxy's TLS connection (#1223).
• Prefer HTTP/2 during TLS protocol negotiation when enabled, and stop advertising HTTP/1.1 when it is disabled (#1155).

Full Changelog: pydantic/httpx2@v2.13.0...v2.13.1

v2.13.0

Highlights

🔐 Reliable TLS verification controls

The CLI --no-verify flag now disables TLS certificate verification as intended, and --verify provides an explicit counterpart (pydantic/httpx2#1140, pydantic/httpx2#1186).

🧹 Safer async stream cleanup

Stopping a streamed response early no longer risks a nested async generator finalization error (pydantic/httpx2#1204).

httpx2

Changed

• Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations in pydantic/httpx2#1179

Fixed

... (truncated)

Commits

• d91c9f4 Correct the upcoming release version to 2.13.1 (#1228)
• 62a607d Prepare version 2.14.0 (#1227)
• 392bbed Honor the TLS hostname override in proxy tunnels (#1223)
• df9783d Respect file cursor positions when calculating raw content length (#1214)
• 36c4009 httpcore2: prefer h2 for ALPN protocol if requesting HTTP/2 (#1155)
• 04d152b docs: correct stale URL.query example (#1222)
• f295185 Prepare version 2.13.0 (#1208)
• c518f71 Avoid nested async generator finalization errors (#1204)
• 8f215b5 Use portable links in API docstrings (#1202)
• 81c523f Revert "Maintain connection reservations incrementally in the pool" (#1197)
• Additional commits viewable in compare view

Updates httpx2 from 2.12.0 to 2.13.1

Release notes

Sourced from httpx2's releases.

v2.13.1

Highlights

📤 Accurate file upload lengths

Passing a file as content= now calculates Content-Length from its remaining bytes, respecting the current file position (#1214).

🔐 Reliable proxy TLS and HTTP/2 negotiation

TLS hostname overrides now apply inside HTTP proxy tunnels without affecting the proxy's own TLS connection (#1223). HTTP/2 is advertised first when enabled, and HTTP/1.1 is omitted when disabled (#1155).

🧹 Clean WebSocket shutdown

The sync WebSocket keepalive thread now exits cleanly when a ping races with connection shutdown (#1228).

httpx2

Fixed

• Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position (#1214).
• Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown (#1228).

httpcore2

Fixed

• Honor the sni_hostname extension for TLS inside HTTP proxy tunnels without applying it to the proxy's TLS connection (#1223).
• Prefer HTTP/2 during TLS protocol negotiation when enabled, and stop advertising HTTP/1.1 when it is disabled (#1155).

Full Changelog: pydantic/httpx2@v2.13.0...v2.13.1

v2.13.0

Highlights

🔐 Reliable TLS verification controls

The CLI --no-verify flag now disables TLS certificate verification as intended, and --verify provides an explicit counterpart (pydantic/httpx2#1140, pydantic/httpx2#1186).

🧹 Safer async stream cleanup

Stopping a streamed response early no longer risks a nested async generator finalization error (pydantic/httpx2#1204).

httpx2

Changed

• Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations in pydantic/httpx2#1179

Fixed

... (truncated)

Changelog

Sourced from httpx2's changelog.

2.13.1 (September 23rd, 2026)

Fixed

• Calculate Content-Length from the remaining bytes when a file is passed as content=, respecting its current position. (#1214)
• Stop the sync WebSocket keepalive thread cleanly when a ping races with connection shutdown. (#1228)

2.13.0 (September 14th, 2026)

Changed

• Require brotlicffi 1.2.0.2 or later for the brotli extra on non-CPython implementations. (#1179)

Fixed

• Make the --no-verify CLI flag disable TLS certificate verification and add an explicit --verify counterpart. (#1140, #1186)
• Avoid nested async generator finalization errors when streamed responses are abandoned early. (#1204)

Commits

• d91c9f4 Correct the upcoming release version to 2.13.1 (#1228)
• 62a607d Prepare version 2.14.0 (#1227)
• df9783d Respect file cursor positions when calculating raw content length (#1214)
• 04d152b docs: correct stale URL.query example (#1222)
• f295185 Prepare version 2.13.0 (#1208)
• 8f215b5 Use portable links in API docstrings (#1202)
• 36d636a Group httpx2.__all__ exports by source module (#1188)
• f1064aa Bump the python-packages group across 1 directory with 11 updates (#1179)
• bc27137 Update uv-dynamic-versioning requirement from >=0.14.0 to >=0.14.1 (#1180)
• 62e0827 Restore --no-verify CLI flag (#1186)
• Additional commits viewable in compare view

Updates jiter from 0.16.0 to 0.17.0

Commits

• 2b5ec63 release: 0.17.0 (#294)
• 6881310 Return CPython's singletons for empty and single-character strings (#293)
• 819dc92 Lock the Python string cache once per parse (#289)
• e9c1cab Add JsonValueScratch, reusable stacks for parsing values (#292)
• 01f5c8e drop Python 3.9, update PGO workflows (#288)
• 9c6d8e9 use digit...

  Description has been truncated