pgai icon indicating copy to clipboard operation
pgai copied to clipboard

chore(deps): Update dependencies

Open reneleonhardt opened this issue 9 months ago • 6 comments

Update dependencies

  • GitHub Actions and Dockerfiles: Update uv 0.5.20 to 0.6.14
  • pgai Dockerfile: Update Python 3.12 to 3.13
  • extension Dockerfile: Update pgvectorscale 0.5.1 to 0.7.0
  • uv: Relaxed dependency constraints a bit (by adding the next major/minor release as upper limit) to make upgrading easier
  • pgai, extension and discord_bot: uv lock --upgrade
  • Let Dependabot update uv and docker in pgai, extension and discord_bot

Python version coverage

Recommendation: Add supported Python versions to the CI analog to Postgres. At the moment 3.10 is hard-coded (or loaded from .python-version), so it seems 3.11, 3.12 and 3.13 are not being tested.

pgai uv

For your convenience I converted the uv changes to a readable format 😄

Package Old New Type Downgrade
aiohappyeyeballs 2.4.4 2.6.1 minor
aiohttp 3.11.11 3.11.16
alembic 1.14.1 1.15.2 minor
anyio 4.8.0 4.9.0 minor
attrs 24.3.0 25.3.0 major
beautifulsoup4 4.12.3 4.13.3 minor
boto3 1.36.4 1.37.33 minor
botocore 1.36.4 1.37.33 minor
cachetools 5.5.1 5.5.2
certifi 2024.12.14 2025.1.31 major
datadog 0.50.2 0.51.0 minor
datadog-lambda 6.104.0 6.107.0 minor
ddtrace 2.19.1 3.4.1 major
deprecated 1.2.15 1.2.18
docling 2.21.0 2.29.0 minor
docling-core 2.18.1 2.26.1 minor
docling-ibm-models 3.3.2 3.4.1 minor
docling-parse 3.3.1 4.0.1 major
fastapi 0.115.8 0.115.12
filelock 3.17.0 3.18.0 minor
fsspec 2024.12.0 2025.3.2 major
google-api-core 2.24.0 2.24.2
google-auth 2.37.0 2.38.0 minor
google-cloud-aiplatform 1.78.0 1.88.0 minor
google-cloud-bigquery 3.29.0 3.31.0 minor
google-cloud-core 2.4.1 2.4.3
google-cloud-resource-manager 1.14.0 1.14.2
google-crc32c 1.6.0 1.7.1 minor
googleapis-common-protos 1.66.0 1.69.2 minor
grpc-google-iam-v1 0.14.0 0.14.2
grpcio 1.69.0 1.71.0 minor
grpcio-status 1.69.0 1.71.0 minor
h2 4.1.0 4.2.0 minor
hpack 4.0.0 4.1.0 minor
httpcore 1.0.7 1.0.8
httpx 0.27.2 0.28.1 minor
huggingface-hub 0.27.1 0.30.2 minor
hyperframe 6.0.1 6.1.0 minor
iniconfig 2.0.0 2.1.0 minor
jeepney 0.8.0 0.9.0 minor
jinja2 3.1.5 3.1.6
jiter 0.8.2 0.9.0 minor
langchain-core 0.3.31 0.3.51
langchain-openai 0.3.1 0.3.12
langchain-text-splitters 0.3.5 0.3.8
legacy-cgi 2.6.2 2.6.3
litellm 1.65.4.post1 1.65.7
lxml 5.3.1 5.3.2
mako 1.3.8 1.3.10
marko 2.1.2 2.1.3
multidict 6.1.0 6.4.3 minor
nh3 0.2.20 0.2.21
ninja 1.11.1.3 1.11.1.4
numpy 1.26.4,2.2.2 1.26.4 downgrade
openai 1.70.0 1.72.0 minor
opentelemetry-api 1.16 1.32 minor
orjson 3.10.15 3.10.16
pgvector 0.3.6 0.4.0 minor
pillow 10.4.0 11.1.0 major
propcache 0.2.1 0.3.1 minor
proto-plus 1.25.0 1.26.1 minor
protobuf 5.29.3 5.29.4
psycopg 3.2.1 3.2.6
psycopg-binary 3.2.1 3.2.6
pyasn1-modules 0.4.1 0.4.2
pydantic 2.10.5 2.11.3 minor
pydantic-core 2.27.2 2.33.1 minor
pydantic-settings 2.7.1 2.8.1 minor
pylsqpack 0.3.18 0.3.20
pymupdf 1.25.3 1.25.5
pymupdf4llm 0.0.17 0.0.21
pyright 1.1.394 1.1.399
pytest 8.3.2 8.3.5
pytest-asyncio 0.25.3 0.26.0 minor
python-bidi 0.6.3 0.6.6
python-dotenv 1.0.1 1.1.0 minor
pytz 2025.1 2025.2 minor
pywin32 307 310 major
referencing 0.36.1 0.36.2
rich 13.9.4 14.0.0 major
rich-toolkit 0.14.0 0.14.1
rpds-py 0.22.3 0.24.0 minor
rtree 1.3.0 1.4.0 minor
ruff 0.6.9 0.11.5 minor
s3transfer 0.11.1 0.11.4
safetensors 0.5.2 0.5.3
scikit-image 0.25.1 0.25.2
scipy 1.15.1 1.15.2
setuptools 75.8.0 78.1.0 major
shapely 2.0.6 2.1.0 minor
sqlalchemy 2.0.37 2.0.40
starlette 0.45.3 0.46.1 minor
structlog 24.4.0 25.2.0 major
tenacity 9.0.0 9.1.2 minor
testcontainers 4.8.1 4.10.0 minor
tifffile 2025.1.10 2025.3.30 minor
tiktoken 0.8.0 0.9.0 minor
tokenizers 0.19.1, 0.21.0 0.19.1 minor downgrade
transformers 4.42.4, 4.48.3 4.42.4 minor downgrade
twine 5.1.1 6.1.0 major
typing-extensions 4.12.2 4.13.2 minor
tzdata 2025.1 2025.2 minor
urllib3 1.26.20, 2.3.0 1.26.20, 2.4.0 minor
watchfiles 1.0.4 1.0.5
yarl 1.18.3 1.19.0 minor

extension uv

Package Old New Type
aiohappyeyeballs 2.4.4 2.6.1 minor
aiohttp 3.11.11 3.11.16
anyio 4.8.0 4.9.0 minor
attrs 24.3.0 25.3.0 major
cachetools 5.5.1 5.5.2
certifi 2024.12.14 2025.1.31 major
cohere 5.13.11 5.14.2 minor
datasets 3.1.0 3.5.0 minor
fastapi 0.115.6 0.115.12
fastapi-cli 0.0.5 0.0.7 minor
filelock 3.16.1 3.18.0 minor
fsspec 2024.9.0 2024.12.0 minor
google-api-core 2.24.0 2.24.2
google-auth 2.37.0 2.38.0 minor
google-cloud-aiplatform 1.74.0 1.88.0 minor
google-cloud-bigquery 3.29.0 3.31.0 minor
google-cloud-core 2.4.1 2.4.3
google-cloud-resource-manager 2.14.0 2.14.2
google-crc32c 1.6.0 1.7.1 minor
googleapis-common-protos 1.66.0 1.69.2 minor
grpc-google-iam-v1 0.14.0 0.14.2
grpcio 1.69.0 1.71.0 minor
grpcio-status 1.69.0 1.71.0 minor
httpcore 1.0.7 1.0.8
httpx 0.27.2 0.28.1 minor
huggingface-hub 0.27.1 0.30.2 minor
iniconfig 2.0.0 2.1.0 minor
jiter 0.8.2 0.9.0 minor
langchain-core 0.3.33 0.3.51
langchain-text-splitters 0.3.5 0.3.8
langsmith 0.3.4 0.3.30 minor
litellm 1.58.2 1.65.7 minor
multidict 6.1.0 6.4.3 minor
numpy 2.2.1 2.2.4
ollama 0.4.5 0.4.7
openai 1.69.0 1.72.0 minor
orjson 3.10.15 3.10.16
propcache 0.2.1 0.3.1 minor
proto-plus 1.25.0 1.26.1 minor
protobuf 5.29.3 5.29.4
psycopg 3.2.1 3.2.6 minor
psycopg-binary 3.2.1 3.2.6 minor
pyarrow 19.0.0 19.0.1
pyasn1-modules 0.4.1 0.4.2
pydantic 2.10.5 2.11.3 minor
pydantic-core 2.27.2 2.33.1 minor
pytest 8.3.2 8.3.5
python-dotenv 1.0.1 1.1.0 minor
pytz 2024.2 2025.2 major
referencing 0.36.1 0.36.2
rich 13.9.4 14.0.0 major
rpds-py 0.22.3 0.24.0 minor
ruff 0.6.9 0.11.5 minor
setuptools 75.8.0 78.1.0 major
shapely 2.0.6 2.1.0 minor
starlette 0.41.3 0.46.1 minor
tenacity 9.0.0 9.1.2 minor
tiktoken 0.7.0 0.9.0 minor
tokenizers 0.21.0 0.21.1
typer 0.15.1 0.15.2
types-requests 2.32.0.20241016 2.32.0.20250328
typing-extensions 4.12.2 4.13.2 minor
tzdata 2024.2 2025.2 major
urllib3 2.3.0 2.4.0 minor
uv 0.5.20 0.6.14 minor
watchfiles 1.0.4 1.0.5
websockets 14.1 15.0.1 major
yarl 1.18.3 1.19.0 minor

discord_bot uv

Package Old New Type Downgrade
aiohappyeyeballs 2.4.4 2.6.1 minor
aiohttp 3.11.11 3.11.16
alembic 1.14.0 1.15.2 minor
anyio 4.8.0 4.9.0 minor
attrs 24.3.0 25.3.0 major
bytecode 0.16.0 0.16.1
certifi 2024.12.14 2025.1.31 major
datadog 0.50.2 0.51.0 minor
datadog-lambda 6.104.0 6.107.0 minor
ddtrace 2.19.0 3.4.1 major
deprecated 1.2.15 1.2.18
filelock 3.16.1 3.18.0 minor
fsspec 2024.12.0 2025.3.2 major
httpcore 1.0.7 1.0.8
httpx 0.27.2 0.28.1 minor
huggingface-hub 0.27.1 0.30.2 minor
importlib-metadata 8.5.0 8.6.1 minor
iniconfig 2.0.0 2.1.0 minor
jiter 0.8.2 0.9.0 minor
langchain-core 0.3.30 0.3.51
langchain-openai 0.3.0 0.3.12
langchain-text-splitters 0.3.5 0.3.8
langsmith 0.2.11 0.3.30 minor
legacy-cgi 2.6.2 2.6.3
mako 1.3.8 1.3.10
multidict 6.1.0 6.4.3 minor
numpy 2.2.1 1.26.4 major downgrade
ollama 0.4.6 0.4.7
openai 1.59.7 1.72.0 minor
opentelemetry-api 1.29.0 1.32.0 minor
orjson 3.10.14 3.10.16
pgai 0.5.0 0.10.0.dev0 minor
pgvector 0.3.6 0.4.0 minor
pillow 11.1.0 10.4.0 major downgrade
propcache 0.2.1 0.3.1 minor
protobuf 5.29.3 5.29.4
psycopg 3.2.4 3.2.6
psycopg-binary 3.2.4 3.2.6
pydantic 2.10.5 2.11.3 minor
pydantic-core 2.27.2 2.33.1 minor
pyright 1.1.385 1.1.399
pytest 8.3.2 8.3.5
python-dotenv 1.0.1 1.1.0 minor
pywin32 308 307 major downgrade
ruff 0.6.9 0.11.5 minor
sqlalchemy 2.0.37 2.0.40
tenacity 9.0.0 9.1.2 minor
testcontainers 4.8.1 4.10.0 minor
tiktoken 0.8.0 0.9.0 minor
tokenizers 0.21.0 0.19.1 minor downgrade
typing-extensions 4.12.2 4.13.2 minor
tzdata 2024.2 2025.2 major
urllib3 2.3.0 2.4.0 minor
yarl 1.18.3 1.19.0 minor

reneleonhardt avatar Apr 12 '25 14:04 reneleonhardt

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Apr 12 '25 14:04 CLAassistant

Hey @reneleonhardt thanks for the PR. The team is currently focused on some releases for this month. We'll take a look at this once we have some bandwidth.

alejandrodnm avatar Apr 23 '25 08:04 alejandrodnm

If you need help, maybe look into CodeRabbit, it's free for Open-Source projects. https://www.coderabbit.ai/blog/how-linux-foundation-used-ai-code-reviews-to-reduce-manual-bottlenecks-in-oss

reneleonhardt avatar Apr 23 '25 08:04 reneleonhardt

Hey @reneleonhardt we (Timescale) were having discussions related to AI PR reviewers. Have you try it? Do you have any feedback on it?

alejandrodnm avatar Apr 29 '25 13:04 alejandrodnm

Hola Alejandro, I can only tell about my limited personal experiences. Not many projects I contributed to were using AI reviewers. Those who did, I had very positive experiences. My recommendation is to enable it for one repo first and start pushing PRs yourself, then you will see quickly if it saves time and corrects mistakes like CodeRabbit did for me 😅 I was delighted when I saw that the context was analyzed correctly to show that some unchanged line needed to be updated too, or that a value in a changed line was not allowed or the whole line not needed anymore, sometimes even better than human reviewers in my experience 😉 But in rare occasions some things slipped through its fingers, depending on the complexity of the codebase / changes of course. After all, it's a "one-shot" after each push, it doesn't check-out/pull/commit manually again and again running automated or manual tests. But in all occasions where it found something, it was correct and helped a lot, I just had to press Apply Suggestion to improve my PR a bit more ❤️

reneleonhardt avatar Apr 29 '25 15:04 reneleonhardt

You updated a few dependencies and now my PR is obsolete? 🤔

reneleonhardt avatar May 07 '25 16:05 reneleonhardt

Thank you for this contribution. We've updated dependencies.

JamesGuthrie avatar Jun 05 '25 09:06 JamesGuthrie