Skip to content

Update pydantic-settings requirement from >=2.14.1 to >=2.14.2 in the python-dependencies group across 1 directory#21

Merged
jasmeralia merged 1 commit into
masterfrom
dependabot/pip/python-dependencies-10713fdc8d
Jun 22, 2026
Merged

Update pydantic-settings requirement from >=2.14.1 to >=2.14.2 in the python-dependencies group across 1 directory#21
jasmeralia merged 1 commit into
masterfrom
dependabot/pip/python-dependencies-10713fdc8d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic-settings to permit the latest version.
Updates pydantic-settings to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 21, 2026
@dependabot
Update pydantic-settings requirement
c16c6e3 
Updates the requirements on [pydantic-settings](https://github.com/pydantic/pydantic-settings) to permit the latest version.

Updates `pydantic-settings` to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

---
updated-dependencies:
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Update pydantic-settings requirement from >=2.14.1 to >=2.14.2 in the python-dependencies group Update pydantic-settings requirement from >=2.14.1 to >=2.14.2 in the python-dependencies group across 1 directory Jun 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/python-dependencies-10713fdc8d branch from d2f47c2 to c16c6e3 Compare June 22, 2026 15:31
@jasmeralia jasmeralia merged commit 5c48f49 into master Jun 22, 2026
3 checks passed
@jasmeralia jasmeralia deleted the dependabot/pip/python-dependencies-10713fdc8d branch June 22, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jasmeralia