From 98d4fc5debf621fd61a0bf126a2282ac05ba3956 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 May 2026 22:29:28 +0000 Subject: [PATCH] chore(deps): bump protobuf from 6.33.6 to 7.34.1 Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 6.33.6 to 7.34.1. - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: protobuf dependency-version: 7.34.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 9ecb9ea..d0124d8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ dependencies = [ # protobuf 7.34.1 (PR #60) and broke `pip install -r requirements.txt`. # Explicit ceiling so the bot won't try again until databricks-sdk lifts # its <7.0 cap. - "protobuf<7", + "protobuf<8", # Upper bound is forced by mlflow-skinny: 3.12.0 declares `starlette<1`. # Dependabot tried to bump to starlette 1.0.0 (PR #59) — the pin worked # with `uv pip sync` but `uv pip compile pyproject.toml` rejected it via diff --git a/requirements.txt b/requirements.txt index e3f4107..f36dbda 100644 --- a/requirements.txt +++ b/requirements.txt @@ -120,7 +120,7 @@ opentelemetry-semantic-conventions==0.62b1 # via opentelemetry-sdk packaging==26.2 # via mlflow-skinny -protobuf==6.33.6 +protobuf==7.34.1 # via # coda (pyproject.toml) # databricks-sdk