From 15c9e773a348f35d0f04e8a48d7dbbffc73e4d11 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 12 Jul 2026 22:05:16 +0000
Subject: [PATCH] deps(pip): bump the production group across 1 directory with
 5 updates

Updates the requirements on [tree-sitter](https://github.com/tree-sitter/py-tree-sitter), [httpx](https://github.com/encode/httpx), [tenacity](https://github.com/jd/tenacity), [fastapi](https://github.com/fastapi/fastapi) and [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version.

Updates `tree-sitter` to 0.26.0
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](https://github.com/tree-sitter/py-tree-sitter/compare/v0.25.0...v0.26.0)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/encode/httpx/compare/0.24.0...0.28.1)

Updates `tenacity` to 9.1.4
- [Release notes](https://github.com/jd/tenacity/releases)
- [Commits](https://github.com/jd/tenacity/compare/8.2.0...9.1.4)

Updates `fastapi` to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.95.0...0.139.0)

Updates `uvicorn` to 0.51.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.22.0...0.51.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  dependency-group: production
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  dependency-group: production
- dependency-name: tenacity
  dependency-version: 9.1.4
  dependency-type: direct:production
  dependency-group: production
- dependency-name: tree-sitter
  dependency-version: 0.26.0
  dependency-type: direct:production
  dependency-group: production
- dependency-name: uvicorn
  dependency-version: 0.50.0
  dependency-type: direct:production
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 9a4f551..48c7b8e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -89,13 +89,13 @@ keywords = ["code-similarity", "clone-detection", "plagiarism", "winnowing", "fi
 
 [tool.poetry.dependencies]
 python = "^3.9"
-tree-sitter = "^0.25.0"
+tree-sitter = ">=0.25,<0.27"
 tree-sitter-python = "^0.23.0"
 tree-sitter-java = "^0.23.0"
 tree-sitter-javascript = "^0.23.0"
 tree-sitter-typescript = "^0.23.0"
-httpx = "^0.24.0"
-tenacity = "^8.2.0"
+httpx = ">=0.24,<0.29"
+tenacity = ">=8.2,<10.0"
 click = "^8.1.0"
 rich = "^13.3.0"
 jinja2 = "^3.1.0"
@@ -104,8 +104,8 @@ pyyaml = "^6.0"
 numpy = "^1.24"
 prometheus-client = "^0.17"
 PyJWT = "^2.8"
-fastapi = {version = "^0.95.0", optional = true}
-uvicorn = {version = "^0.22.0", optional = true}
+fastapi = {version = ">=0.95,<0.140", optional = true}
+uvicorn = {version = ">=0.22,<0.52", optional = true}
 slowapi = {version = "^0.1.9", optional = true}
 opentelemetry-api = {version = "^1.20", optional = true}
 opentelemetry-sdk = {version = "^1.20", optional = true}