chore: weekly dependency update

[github-actions]

Updated Dependencies

Using CPython 3.12.3 interpreter at: /usr/bin/python3
   Updating https://github.com/pydantic/strict-no-cover (HEAD)
    Updated https://github.com/pydantic/strict-no-cover (7fc59da2c4dff919db2095a0f0e47101b657131d)
Resolved 113 packages in 1.34s
Updated anyio v4.10.0 -> v4.12.1
Updated asttokens v3.0.0 -> v3.0.1
Updated attrs v25.3.0 -> v25.4.0
Updated backrefs v5.9 -> v6.1
Updated black v25.1.0 -> v26.1.0
Updated certifi v2025.8.3 -> v2026.1.4
Updated charset-normalizer v3.4.3 -> v3.4.4
Updated click v8.2.1 -> v8.3.1
Updated cryptography v45.0.5 -> v46.0.4
Updated dirty-equals v0.9.0 -> v0.11
Updated exceptiongroup v1.3.0 -> v1.3.1
Updated execnet v2.1.1 -> v2.1.2
Updated griffe v1.14.0 -> v1.15.0
Updated httpx-sse v0.4.1 -> v0.4.3
Updated idna v3.10 -> v3.11
Updated iniconfig v2.1.0 -> v2.3.0
Updated inline-snapshot v0.28.0 -> v0.31.1
Updated jsonschema v4.25.1 -> v4.26.0
Updated markdown v3.9 -> v3.10.1
Updated markupsafe v3.0.2 -> v3.0.3
Updated mkdocs-glightbox v0.5.1 -> v0.5.2
Updated mkdocstrings v0.30.0 -> v1.0.2
Updated nodeenv v1.9.1 -> v1.10.0
Updated packaging v25.0 -> v26.0
Updated pathspec v0.12.1 -> v1.0.4
Updated platformdirs v4.4.0 -> v4.5.1
Updated pycparser v2.23 -> v3.0
Updated pydantic-settings v2.10.1 -> v2.12.0
Updated pymdown-extensions v10.16.1 -> v10.20.1
Updated pyright v1.1.405 -> v1.1.408
Updated pytest v8.4.2 -> v9.0.2
Updated python-dotenv v1.1.1 -> v1.2.1
Updated python-multipart v0.0.20 -> v0.0.22
Added pytokens v0.4.0
Updated pyyaml v6.0.2 -> v6.0.3
Updated referencing v0.36.2 -> v0.37.0
Updated rich v14.1.0 -> v14.3.1
Updated rpds-py v0.27.1 -> v0.30.0
Updated ruff v0.12.12 -> v0.14.14
Updated selectolax v0.3.29 -> v0.4.6
Updated sse-starlette v3.0.2 -> v3.2.0
Updated starlette v0.49.1 -> v0.52.1
Updated tomli v2.2.1 -> v2.4.0
Updated trio v0.31.0 -> v0.32.0
Updated typer v0.17.4 -> v0.21.1
Updated urllib3 v2.5.0 -> v2.6.3
Updated uvicorn v0.35.0 -> v0.40.0
Updated websockets v15.0.1 -> v16.0

[maxisbey]

@claude does this look good

[claude]

Claude finished @maxisbey's task in 1m 55s —— View job

---

Dependency Update Review

Tasks

• Check CI status
• Review lockfile changes
• Identify major version bumps and potential breaking changes
• Provide recommendation

---

Summary

Recommendation: ❌ Not ready to merge - Requires fixes for CI failures

This PR updates 51 dependencies with several major version bumps. While most updates appear safe, there are 2 CI failures that need to be addressed before merging.

---

CI Failures

1. Pyright Type Checking Failure

Location: tests/shared/test_streamable_http.py:1447, 1459

Type of "request" is partially unknown
Type of "request" is "Request[Unknown]" (reportUnknownMemberType)

The type checker can't infer the generic parameter for Request. This needs explicit type annotation or type narrowing.

Fix needed: Add type annotations to resolve the Request[Unknown] type inference issue.

2. Test Failure (Python 3.11 lowest-direct)

Test: test_streamable_http_client_session_termination_204

ExceptionGroup: unhandled errors in a TaskGroup (1 sub-exception)
ERROR: [Errno 98] error while attempting to bind on address ('127.0.0.1', 55585): 
       address already in use

This could be:

• A flaky test with port binding race conditions
• Changed exception handling behavior in pytest 9.0
• Changed TaskGroup behavior in anyio 4.12

Needs investigation: Whether this is a real regression or test infrastructure issue.

---

Major Version Bumps Analysis

High Risk (Breaking Changes Likely)

• pytest 8.4.2 → 9.0.2 ⚠️
  • Major version bump typically includes breaking changes
  • Could affect exception handling, fixture behavior, or test collection
  • The test failure above may be related to this

Medium Risk (Check Release Notes)

• black 25.1.0 → 26.1.0

  • Code formatter - could change formatting rules
  • Should run uv run ruff format . after merge

• ruff 0.12.12 → 0.14.13

  • Linter/formatter - new rules may be enabled
  • Should run uv run ruff check . --fix after merge

• pathspec 0.12.1 → 1.0.3

  • Used by formatting tools
  • May affect file matching patterns

Lower Risk (Likely Safe)

• anyio 4.10.0 → 4.12.1 - async utilities
• pydantic 2.11.7 → 2.12.5 - validation library (within same major version)
• starlette 0.49.1 → 0.52.1 - web framework (within constraints)
• typer 0.17.4 → 0.21.1 - CLI framework
• packaging 25.0 → 26.0 - utilities
• cryptography 45.0.5 → 46.0.3 - crypto library

---

Next Steps

1. Fix the type checking error in tests/shared/test_streamable_http.py:1447,1459

   • Add explicit type annotations for the request parameter

2. Investigate the test failure

   • Check if it's reproducible locally
   • Consider if it's a pytest 9.0 regression
   • May need to adjust test cleanup or port allocation

3. After fixes, verify:

   • Run uv run --frozen ruff format .
   • Run uv run --frozen ruff check . --fix
   • Run uv run --frozen pyright
   • Run full test suite

Would you like me to investigate and fix these issues?

---

• Branch: weekly-lockfile-update