chore(deps): bump the python group with 15 updates by dependabot[bot] · Pull Request #276 · agentevals-dev/agentevals

dependabot · 2026-11-09T21:13:46Z

Bumps the python group with 15 updates:

Package	From	To
python-multipart	`0.0.32`	`0.0.33`
opentelemetry-proto	`1.44.0`	`1.45.2`
authlib	`1.9.1`	`1.9.4`
opentelemetry-sdk	`1.44.0`	`1.45.2`
opentelemetry-exporter-otlp-proto-http	`1.44.0`	`1.45.2`
opentelemetry-exporter-otlp-proto-grpc	`1.44.0`	`1.45.2`
grpcio	`1.85.0`	`1.85.1`
grpcio-health-checking	`1.85.0`	`1.85.1`
grpcio-reflection	`1.85.0`	`1.85.1`
grpcio-status	`1.85.0`	`1.85.1`
opentelemetry-instrumentation-grpc	`0.65b0`	`0.66b2`
pytest-asyncio	`1.4.1`	`1.4.1.post1`
langchain	`1.4.7`	`1.4.9`
langchain-openai	`1.7.3`	`1.7.4`
pydantic	`2.14.1`	`2.14.2`

Updates python-multipart from 0.0.32 to 0.0.33

Release notes

Sourced from python-multipart's releases.

Version 0.0.33

🛡️ Safer form parsing

This release lets you cap URL-encoded form fields as they stream in, and fixes several upload and decoding edge cases. It also drops Python 3.10 and adds Python 3.15.
pip install python-multipart==0.0.33
Limit URL-encoded fields while streaming (#333). The new opt-in MAX_FIELDS and MAX_FIELD_SIZE options for FormParser raise FormParserError before oversized data is buffered. Both default to no limit, and multipart forms are unaffected.

Nameless uploads no longer crash when spilled to disk (#343). Uploads without a filename used to raise AttributeError when UPLOAD_KEEP_EXTENSIONS or UPLOAD_KEEP_FILENAME was set.

UPLOAD_DIR accepts str with UPLOAD_KEEP_FILENAME (#335). A str upload directory used to fail on the first write to disk.

Decoded data is complete before callbacks run (#336, #355). Content-Transfer-Encoding decoders are finalized at the end of each part, and quoted-printable escapes split across writes decode correctly.

parse_options_header lowercases content types with parameters (#287). Multipart/Form-Data; boundary=abc now returns multipart/form-data, the same as headers without parameters.

⚡ Faster parsing

Faster opening boundary matching (#328). Complete boundaries are matched in one step.

Faster parser state lookups (#330). Parser states are module-level enum members, so their repr is now multipart.END instead of <MultipartState.END: 12>.

Faster querystring callback dispatch (#316).

🐍 Python support

Python 3.10 is no longer supported (#329). Python 3.11 is now the minimum.

Python 3.15 is supported (#350).

💜 Thank you

Thanks to @Edneam, @sungbin1015, @carlok, and @fjvbn2003 for contributing to this release.

Thanks to the individual sponsors who contributed $134.00 to support this work. If python-multipart is useful to you, consider sponsoring me on GitHub.

Full changelog: 0.0.32...0.0.33

Changelog

Sourced from python-multipart's changelog.

0.0.33 (2026-10-31)

Drop Python 3.10 support #329.

Add Python 3.15 support #350.

Add opt-in field-count and field-size limits for URL-encoded forms in FormParser #333.

Normalize the content type returned by parse_options_header when the header has parameters #287.

Finalize Content-Transfer-Encoding decoding before invoking field and file callbacks #336.

Keep only the incomplete escape when quoted-printable data is split across writes #355.

Handle nameless uploads when UPLOAD_KEEP_FILENAME or UPLOAD_KEEP_EXTENSIONS is set #343.

Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set #335.

Speed up parser state lookups #330.

Speed up opening boundary matching #328.

Speed up querystring callback dispatch #316.

Commits

9217f26 Bump version to 0.0.33 (#357)
d0344c1 Keep only the incomplete escape when quoted-printable data is split (#355)
44871df Handle nameless uploads when keeping the filename or extension (#343)
b21ea59 Add streaming field limits to FormParser (#333)
48f9e21 Fix the In-Depth Example in the docs to return bytes (#338)
12a2f8f Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set (#335)
95f6376 Use the shared security policy (#353)
8ec84ef Migrate documentation from MkDocs to Zensical (#352)
d7af81c Rewrite README for newcomers (#351)
b035d14 Add Python 3.15 classifier (#350)
Additional commits viewable in compare view

Updates opentelemetry-proto from 1.44.0 to 1.45.2

Release notes

Sourced from opentelemetry-proto's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#5509)

opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#5511)

opentelemetry-sdk: add host.id to the host resource detector (#5653)

opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#5681)

Changed

Enable PIE (flake8-pie) ruff rule and fix all violations (#5150)

The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#5266)

opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#5369)

[BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#5380)

opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#5389)

opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)

opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#5491)

... (truncated)

Changelog

Sourced from opentelemetry-proto's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal

... (truncated)

Commits

ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
4f0fcfa Prepare release 1.45.0/0.66b0 (#5690)
9406f34 opentelemetry-test-utils: add CapturingSampler for instrumentation tests (#5681)
1fe31a9 fix: update W3CBaggagePropagator to properly handle whitespace (#5680)
Additional commits viewable in compare view

Updates authlib from 1.9.1 to 1.9.4

Release notes

Sourced from authlib's releases.

v1.9.4

Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-4

Full Changelog: authlib/authlib@v1.9.3...v1.9.4

v1.9.3

Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-3

Full Changelog: authlib/authlib@v1.9.2...v1.9.3

v1.9.2

Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-2

Full Changelog: authlib/authlib@v1.9.1...v1.9.2

Commits

9dffddf chore: release 1.9.4
67db2aa fix(oauth): let IDJAGGrant resolve users by issuer and subject
e90d1b1 chore: release 1.9.3
ec4c7a1 Merge commit from fork
d74dc90 chore: release 1.9.2
44c9617 fix(oauth): limit ID-JAG access tokens to the scope claim
See full diff in compare view

Updates opentelemetry-sdk from 1.44.0 to 1.45.2

Release notes

Sourced from opentelemetry-sdk's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#5509)

opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#5511)

opentelemetry-sdk: add host.id to the host resource detector (#5653)

opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#5681)

Changed

Enable PIE (flake8-pie) ruff rule and fix all violations (#5150)

The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#5266)

opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#5369)

[BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#5380)

opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#5389)

opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)

opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#5491)

... (truncated)

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal

... (truncated)

Commits

ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
4f0fcfa Prepare release 1.45.0/0.66b0 (#5690)
9406f34 opentelemetry-test-utils: add CapturingSampler for instrumentation tests (#5681)
1fe31a9 fix: update W3CBaggagePropagator to properly handle whitespace (#5680)
Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-http from 1.44.0 to 1.45.2

Release notes

Sourced from opentelemetry-exporter-otlp-proto-http's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with error.type=already_shutdown (batch span/log and simple log processors), which the semantic conventions define as a valid value for this metric. (#5509)

opentelemetry-semantic-conventions: update semantic conventions to v1.44.0 (#5511)

opentelemetry-sdk: add host.id to the host resource detector (#5653)

opentelemetry-test-utils: add CapturingSampler to record what samplers receive in instrumentation tests (#5681)

Changed

Enable PIE (flake8-pie) ruff rule and fix all violations (#5150)

The public opentelemetry.util.types.AttributeValue type in package opentelemetry-api is being expanded to include None, heterogeneous sequences of primitive types (and nested sequences) as opposed to only homogeneous primitive sequences, and Mappings of strings to any primitive types or sequences/mappings (which themselves must only contain primitive types or sequences/mappings validated the same way). If a bytes type is set as an attribute value in the SDK, it will no longer be utf-8 decoded to a string, instead it will be passed along as is in accordance with the OTEL spec, since bytes is a valid type in the OTLP proto. (#5266)

opentelemetry-exporter-otlp-proto-http: add a max_request_size argument to the OTLP HTTP exporters (traces, logs, metrics); serialized requests larger than the limit are dropped before sending, measured before compression. Defaults to 64 MiB (enabled); set to 0 to disable. Mirrors opentelemetry-go#8157. (#5369)

[BREAKING] opentelemetry-api: subclasses of Logger need to implement the enabled method (#5380)

opentelemetry-exporter-otlp-proto-http: refactor to use shared opentelemetry-exporter-otlp-common and opentelemetry-exporter-http-transport packages and switch default HTTP backend to urllib3 (#5389)

opentelemetry-sdk: unify logging force_flush timeout defaults to 30000ms (#5438)

opentelemetry-python: enable Ruff default ruleset and fix auto-fixable lint issues (#5491)

... (truncated)

Changelog

Sourced from opentelemetry-exporter-otlp-proto-http's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0 (2026-09-25)

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal

... (truncated)

Commits

ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
14971ce Prepare release 1.45.1/0.66b1 (#5752)
44ac26e opentelemetry-sdk: fix thread leak bug in resource initialization logic (#570...
a2ec3f9 [release/v1.45.x-0.66bx] opentelemetry-exporter-otlp-proto-http: restore requ...
d5224bf opentelemetry-api: improve performance of tracestate parsing (#5746) (#5749)
db61173 Declare AnyValue and AttributeValue as explicit type aliases (#5703) (#5750)
4f0fcfa Prepare release 1.45.0/0.66b0 (#5690)
9406f34 opentelemetry-test-utils: add CapturingSampler for instrumentation tests (#5681)
1fe31a9 fix: update W3CBaggagePropagator to properly handle whitespace (#5680)
Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-grpc from 1.44.0 to 1.45.2

Release notes

Sourced from opentelemetry-exporter-otlp-proto-grpc's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Version 1.45.1/0.66b1

This is a patch release on the previous 1.45.0/0.66b0 release, fixing the issue(s) below.

Fixed

opentelemetry-api: make AnyValue and AttributeValue explicit type aliases (#5703)

opentelemetry-sdk: fix thread leak bug in resource initialization logic for long running resource detectors (#5706)

opentelemetry-exporter-otlp-proto-http: restore requests as the default HTTP transport so proxy environment variables such as HTTPS_PROXY are honored again (#5714)

opentelemetry-api: fix quadratic time parsing of the tracestate header and discard tracestate headers longer than 8192 characters (#5746)

Version 1.45.0/0.66b0

Added

opentelemetry-exporter-prometheus: add support to configure Resource attributes as metric labels (#5122)

infra: add renovate (#5202)

opentelemetry-api, opentelemetry-sdk: add support for extended attribute values everywhere. (#5266)

opentelemetry-sdk: wire the top-level log_level field in declarative configuration — when set, maps the OTel SeverityNumber value to a Python logging level and applies it to the opentelemetry logger so SDK internal diagnostics respect the configured severity. (#5351)

opentelemetry-sdk: add the new stable AlwaysRecordSampler (#5354)

opentelemetry-configuration, opentelemetry-sdk: wire top-level attribute_limits into per-signal providers via declarative config; add log_record_limits support to LoggerProvider (#5365)

opentelemetry-exporter-otlp-json-http: add OTLP JSON HTTP exporter package (#5374)

opentelemetry-api, opentelemetry-sdk: add enabled() support to the Logger API, SDK, and LogRecordProcessor to let instrumentation skip expensive work when logging is disabled (#5380)

opentelemetry-exporter-otlp-json-file: add OTLP JSON file Docker tests (#5412)

opentelemetry-configuration: wire the experimental tracer_configurator/development, meter_configurator/development and logger_configurator/development fields into create_tracer_provider, create_meter_provider and create_logger_provider, so per-instrumentation-scope enabled overrides declared in the config file are applied to the provider (previously these fields were parsed but silently discarded). The logger minimum_severity/trace_based fields are not supported by the Python SDK and are ignored with a warning. (#5418)

docs/examples: add example on how to manually setup the SDK to get SDK metrics (#5449)

opentelemetry-docker-tests: add Prometheus exporter docker tests (#5457)

opentelemetry-sdk: count records dropped after shutdown on otel.sdk.processor.{span,log}.processed with Description has been truncated

krisztianfekete · 2026-11-10T10:52:11Z

@dependabot rebase

krisztianfekete · 2026-11-10T11:09:14Z

@dependabot rebase

Bumps the python group with 15 updates: | Package | From | To | | --- | --- | --- | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.32` | `0.0.33` | | [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [authlib](https://github.com/authlib/authlib) | `1.9.1` | `1.9.4` | | [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.44.0` | `1.45.2` | | [grpcio](https://github.com/grpc/grpc) | `1.85.0` | `1.85.1` | | [grpcio-health-checking](https://grpc.io) | `1.85.0` | `1.85.1` | | [grpcio-reflection](https://grpc.io) | `1.85.0` | `1.85.1` | | [grpcio-status](https://grpc.io) | `1.85.0` | `1.85.1` | | [opentelemetry-instrumentation-grpc](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.65b0` | `0.66b2` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.4.1` | `1.4.1.post1` | | [langchain](https://github.com/langchain-ai/langchain) | `1.4.7` | `1.4.9` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.7.3` | `1.7.4` | | [pydantic](https://github.com/pydantic/pydantic) | `2.14.1` | `2.14.2` | Updates `python-multipart` from 0.0.32 to 0.0.33 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.32...0.0.33) Updates `opentelemetry-proto` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `authlib` from 1.9.1 to 1.9.4 - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](authlib/authlib@v1.9.1...v1.9.4) Updates `opentelemetry-sdk` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `opentelemetry-exporter-otlp-proto-http` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.44.0 to 1.45.2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.44.0...v1.45.2) Updates `grpcio` from 1.85.0 to 1.85.1 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.85.0...v1.85.1) Updates `grpcio-health-checking` from 1.85.0 to 1.85.1 Updates `grpcio-reflection` from 1.85.0 to 1.85.1 Updates `grpcio-status` from 1.85.0 to 1.85.1 Updates `opentelemetry-instrumentation-grpc` from 0.65b0 to 0.66b2 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `pytest-asyncio` from 1.4.1 to 1.4.1.post1 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.4.1...v1.4.1.post1) Updates `langchain` from 1.4.7 to 1.4.9 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.4.7...langchain==1.4.9) Updates `langchain-openai` from 1.7.3 to 1.7.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.7.3...langchain-openai==1.7.4) Updates `pydantic` from 2.14.1 to 2.14.2 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md) - [Commits](pydantic/pydantic@v2.14.1...v2.14.2) --- updated-dependencies: - dependency-name: python-multipart dependency-version: 0.0.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: opentelemetry-proto dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: authlib dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: opentelemetry-sdk dependency-version: 1.45.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.45.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: opentelemetry-exporter-otlp-proto-grpc dependency-version: 1.45.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: grpcio dependency-version: 1.85.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: grpcio-health-checking dependency-version: 1.85.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: grpcio-reflection dependency-version: 1.85.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: grpcio-status dependency-version: 1.85.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: opentelemetry-instrumentation-grpc dependency-version: 0.66b2 dependency-type: direct:production dependency-group: python - dependency-name: pytest-asyncio dependency-version: 1.4.1.post1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: langchain dependency-version: 1.4.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: langchain-openai dependency-version: 1.7.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: pydantic dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added CLI dependencies Dependency updates labels Nov 9, 2026

krisztianfekete mentioned this pull request Nov 10, 2026

fix(sdk): enforce exporter isolation at send time for OTel 1.45 #277

Merged

krisztianfekete force-pushed the dependabot/uv/python-bbb993fd6b branch from 0d06d45 to 267bc7b Compare November 10, 2026 11:12

krisztianfekete approved these changes Nov 10, 2026

View reviewed changes

krisztianfekete merged commit 19ee746 into main Nov 10, 2026
9 checks passed

dependabot Bot deleted the dependabot/uv/python-bbb993fd6b branch November 10, 2026 11:15

Navigation Menu

Repository navigation

chore(deps): bump the python group with 15 updates - #276

chore(deps): bump the python group with 15 updates#276
krisztianfekete merged 1 commit into
mainfrom
dependabot/uv/python-bbb993fd6b

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

krisztianfekete commented Nov 10, 2026

Uh oh!

krisztianfekete commented Nov 10, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

Version 0.0.33

🛡️ Safer form parsing

⚡ Faster parsing

🐍 Python support

💜 Thank you

0.0.33 (2026-10-31)

Version 1.45.2/0.66b2

Added

Fixed

Version 1.45.1/0.66b1

Fixed

Version 1.45.0/0.66b0

Added

Changed

Version 1.45.2/0.66b2 (2026-10-29)

Added

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

v1.9.4

v1.9.3

v1.9.2

Version 1.45.2/0.66b2

Added

Fixed

Version 1.45.1/0.66b1

Fixed

Version 1.45.0/0.66b0

Added

Changed

Version 1.45.2/0.66b2 (2026-10-29)

Added

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

Version 1.45.2/0.66b2

Added

Fixed

Version 1.45.1/0.66b1

Fixed

Version 1.45.0/0.66b0

Added

Changed

Version 1.45.2/0.66b2 (2026-10-29)

Added

Fixed

Version 1.45.1/0.66b1 (2026-10-06)

Fixed

Version 1.45.0/0.66b0 (2026-09-25)

Added

Version 1.45.2/0.66b2

Added

Fixed

Version 1.45.1/0.66b1

Fixed

Version 1.45.0/0.66b0

Added

Uh oh!

krisztianfekete commented Nov 10, 2026

Uh oh!

krisztianfekete commented Nov 10, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant