Skip to content

build(deps) bump scale-gp-beta to 0.2.0#344

Merged
jean-lucas merged 1 commit intomainfrom
jean-lucas-update-gp-beta-sdk
May 5, 2026
Merged

build(deps) bump scale-gp-beta to 0.2.0#344
jean-lucas merged 1 commit intomainfrom
jean-lucas-update-gp-beta-sdk

Conversation

@jean-lucas
Copy link
Copy Markdown
Contributor

@jean-lucas jean-lucas commented May 5, 2026

This version bump is necessary to make use of the new features in the sgp tracing SDK

Greptile Summary

This PR bumps scale-gp-beta from >=0.1.0a20 (pinned at 0.1.0a51) to >=0.2.0 to enable new SGP tracing SDK features. The version change is straightforward in pyproject.toml, but the resulting lock-file resolution cascades into several notable transitive changes.

  • Starlette 1.0.0 (up from 0.46.2): confirmed major release with breaking changes; all HTTP endpoints and middleware backed by Starlette/FastAPI should be smoke-tested before merging.
  • Package downgrades: click 8.3.1→8.1.8, importlib-metadata 8.7.1→8.5.0, jsonschema 4.26.0→4.23.0, and python-dotenv 1.2.2→1.0.1 — the python-dotenv rollback is the largest and loses 14+ months of fixes.

Confidence Score: 3/5

Not safe to merge without verifying the starlette 1.0.0 breaking changes do not affect the project's HTTP layer.

A P1 is present for the starlette 1.0.0 major-version jump, which has confirmed breaking changes and could silently break FastAPI routes or middleware. The additional package downgrades (especially python-dotenv) add further uncertainty. Score is 3 rather than 4 because the P1 affects a broad foundational layer (all HTTP handling) rather than an isolated code path.

requirements.lock and requirements-dev.lock — specifically the starlette, fastapi, and python-dotenv resolution lines.

Important Files Changed

Filename Overview
pyproject.toml Bumps scale-gp-beta minimum from >=0.1.0a20 to >=0.2.0; also fixes indentation on four dependency lines.
requirements.lock Transitive resolution of scale-gp-beta 0.2.0 pulls in fastapi 0.136.1, starlette 1.0.0 (major version with breaking changes), httpx 0.28.1, and downgrades click, importlib-metadata, jsonschema, and python-dotenv.
requirements-dev.lock Same transitive changes as requirements.lock plus dev-only additions; mirrors all starlette/fastapi/downgrade concerns.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["pyproject.toml\nscale-gp-beta >= 0.2.0"] --> B["scale-gp-beta==0.2.0"]
    B --> C["fastapi==0.136.1\n(was 0.115.14)"]
    B --> D["annotated-doc==0.0.4\n(new)"]
    B --> E["python-dotenv==1.0.1\n(was 1.2.2 ⬇️)"]
    C --> F["starlette==1.0.0\n(was 0.46.2 ⚠️ major bump)"]
    C --> D
    B --> G["httpx==0.28.1\n(was 0.27.2 ⬆️)"]
    B --> H["click==8.1.8\n(was 8.3.1 ⬇️)"]
    B --> I["litellm==1.83.7\n(was 1.83.0 ⬆️)"]
    B --> J["jsonschema==4.23.0\n(was 4.26.0 ⬇️)"]
Loading

Fix All in Cursor Fix All in Claude Code Fix All in Codex

Prompt To Fix All With AI
Fix the following 2 code review issues. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 2
requirements.lock:355-359
**Starlette major version jump may introduce breaking changes**

`starlette` is upgraded from `0.46.2` to `1.0.0` — a major milestone confirmed to contain breaking changes (released March 2026). The impact is described as "minimal if you've kept up with deprecation warnings," but the project was on `0.46.x` which is several minor versions behind. Since `starlette` backs every `fastapi` route, middleware, and exception handler in the project, it's worth running the full test suite and smoke-testing all HTTP endpoints before merging. `fastapi` itself jumped from `0.115.14` to `0.136.1`, which also carries its own set of changes across 20+ minor versions.

### Issue 2 of 2
requirements.lock:290-295
**Several transitive packages were downgraded**

The resolver produced downgrades for multiple packages: `click` 8.3.1→8.1.8, `importlib-metadata` 8.7.1→8.5.0, `jsonschema` 4.26.0→4.23.0, and `python-dotenv` 1.2.2→1.0.1. The `python-dotenv` regression is the largest — it rolls back 14+ months of bug fixes (1.1.x and 1.2.x series). If `scale-gp-beta==0.2.0` is pinning an older upper bound on any of these packages, consider adding explicit lower-bound constraints in `pyproject.toml` to prevent silent regressions from leaking into downstream environments.

Reviews (1): Last reviewed commit: "build(deps) bump scale-gp-beta to 0.2.0" | Re-trigger Greptile

Greptile also left 2 inline comments on this PR.

Comment thread requirements.lock
Comment thread requirements.lock
@jean-lucas jean-lucas requested a review from danielmillerp May 5, 2026 16:47
@jean-lucas jean-lucas merged commit 2c59850 into main May 5, 2026
32 checks passed
@jean-lucas jean-lucas deleted the jean-lucas-update-gp-beta-sdk branch May 5, 2026 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants