#2087 chore(deps): bump the default group in /hub-utils with 6 updates Pull request opened by dependabot[bot] Bumps the default group in /hub-utils with 6 updates: | Package | From | To | | ------------------------------------------------ | ------- | ------- | | [boto3](https://github.com/boto/boto3) | 1.40.12 | 1.40.18 | | [requests](https://github.com/psf/requests) | 2.32.4 | 2.32.5 | | ruamel-yaml | 0.18.14 | 0.18.15 | | [uv](https://github.com/astral-sh/uv) | 0.8.11 | 0.8.13 | | [coverage](https://github.com/nedbat/coveragepy) | 7.10.4 | 7.10.5 | | [moto](https://github.com/getmoto/moto) | 5.1.10 | 5.1.11 | Updates

boto3

from 1.40.12 to 1.40.18 Commits • `4515c41` Merge branch 'release-1.40.18' • `e77ca4b` Bumping version to 1.40.18 • `5662fde` Add changelog entries from botocore • `50b1b67` Merge branch 'release-1.40.17' • `47e2545` Merge branch 'release-1.40.17' into develop • `bf25224` Bumping version to 1.40.17 • `ba4d50a` Add changelog entries from botocore • `fe7457e` Merge branch 'release-1.40.16' • `2811578` Merge branch 'release-1.40.16' into develop • `3930259` Bumping version to 1.40.16 • Additional commits viewable in compare view Updates

requests

from 2.32.4 to 2.32.5 Release notes Sourced from requests's releases.

## v2.32.5

## 2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.

• Dropped support for Python 3.8 following its end of support.

Changelog Sourced from requests's changelog.

## 2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.

• Dropped support for Python 3.8 following its end of support.

Commits • `b25c87d` v2.32.5 • `131e506` Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-... • `b336cb2` Bump actions/checkout from 4.2.0 to 5.0.0 • `46e939b` Update publish workflow to use

artifact-id

instead of

name

• `4b9c546` Merge pull request #6999 from psf/dependabot/github_actions/step-security/har... • `7618dbe` Bump step-security/harden-runner from 2.12.0 to 2.13.0 • `2edca11` Add support for Python 3.14 and drop support for Python 3.8 (#6993) • `fec96cd` Update Makefile rules (#6996) • `d58d8aa` docs: clarify timeout parameter uses seconds in Session.request (#6994) • `91a3eab` Bump github/codeql-action from 3.28.5 to 3.29.0 • Additional commits viewable in compare view Updates

ruamel-yaml

from 0.18.14 to 0.18.15 Updates

uv

from 0.8.11 to 0.8.13 Release notes Sourced from uv's releases.

## 0.8.13

## Release Notes

### Enhancements

• Add

--no-install-*

arguments to

uv add

(#15375)

• Initialize Git prior to reading author in

uv init

(#15377)

• Add CUDA 129 to available torch backends (#15416)

• Update Pyodide to 0.28.2 (#15385)

### Preview features

• Add an experimental

uv format

command (#15017)

• Allow version specifiers in

extra-build-dependencies

if match-runtime is explicitly

false

(#15420)

### Bug fixes

• Add

triton

to

torch-backend

manifest (#15405)

• Avoid panicking when resolver returns stale distributions (#15389)

• Fix

uv_build

wheel hashes (#15400)

• Treat

--upgrade-package

on the command-line as overriding

upgrade = false

in configuration (#15395)

• Restore DockerHub publishing (#15381)

## Install uv 0.8.13

### Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.8.13/uv-installer.sh | sh

### Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/uv/releases/download/0.8.13/uv-installer.ps1 | iex"

## Download uv 0.8.13

| File | Platform | Checksum |

| ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------------- |

| [uv-aarch64-apple-darwin.tar.gz](<https://github.com/astral-sh/uv/releases/download/0.8.13/…

meltano/hub