#1438 build(deps): bump pydantic-settings from 2.12.0 to 2.14.2 in /packages/assistant-ai

[Anonymous]

Originally created by: dependabot[bot]

Bumps pydantic-settings from 2.12.0 to 2.14.2.

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

• Prevent NestedSecretsSettingsSource from following symlinks outside secrets_dir by @​hramezani in pydantic/pydantic-settings#889](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/889">pydantic/pydantic-settings/issues/889)
• Prepare release 2.14.2 by @​hramezani in pydantic/pydantic-settings#890](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/890">pydantic/pydantic-settings/issues/890)

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: https://github.com/pydantic/pydantic-settings/compare/v2.14.1...v2.14.2

v2.14.1

What's Changed

• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#850](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/850">pydantic/pydantic-settings/issues/850)
• Bump the python-packages group with 5 updates by @​dependabot[bot] in pydantic/pydantic-settings#854](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/854">pydantic/pydantic-settings/issues/854)
• Bump the github-actions group with 3 updates by @​dependabot[bot] in pydantic/pydantic-settings#853](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/853">pydantic/pydantic-settings/issues/853)
• Bump the python-packages group with 2 updates by @​dependabot[bot] in pydantic/pydantic-settings#856](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/856">pydantic/pydantic-settings/issues/856)
• Fix field named cls conflicting with classmethod parameter by @​hramezani in pydantic/pydantic-settings#858](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/858">pydantic/pydantic-settings/issues/858)
• Prepare release 2.14.1 by @​hramezani in pydantic/pydantic-settings#859](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/859">pydantic/pydantic-settings/issues/859)

Full Changelog: https://github.com/pydantic/pydantic-settings/compare/v2.14.0...v2.14.1

v2.14.0

What's Changed

• Fix parsing env vars into Optional Strict types by @​hramezani in pydantic/pydantic-settings#792](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/792">pydantic/pydantic-settings/issues/792)
• Fix RecursionError with mutually recursive models in CLI by @​hramezani in pydantic/pydantic-settings#794](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/794">pydantic/pydantic-settings/issues/794)
• Fix env_file from model_config ignored in CliApp.run() (#795](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/795">/issues/795)) by @​hramezani in pydantic/pydantic-settings#796](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/796">pydantic/pydantic-settings/issues/796)
• Update dependencies by @​hramezani in pydantic/pydantic-settings#798](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/798">pydantic/pydantic-settings/issues/798)
• Add Dependabot configuration by @​hramezani in pydantic/pydantic-settings#801](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/801">pydantic/pydantic-settings/issues/801)
• Bump samuelcolvin/check-python-version from 4.1 to 5 by @​dependabot[bot] in pydantic/pydantic-settings#802](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/802">pydantic/pydantic-settings/issues/802)
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in pydantic/pydantic-settings#803](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/803">pydantic/pydantic-settings/issues/803)
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in pydantic/pydantic-settings#804](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/804">pydantic/pydantic-settings/issues/804)
• Bump astral-sh/setup-uv from 5 to 7 by @​dependabot[bot] in pydantic/pydantic-settings#805](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/805">pydantic/pydantic-settings/issues/805)
• Bump actions/setup-python from 5 to 6 by @​dependabot[bot] in pydantic/pydantic-settings#806](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/806">pydantic/pydantic-settings/issues/806)
• Ignore chardet and group GitHub Actions in Dependabot by @​hramezani in pydantic/pydantic-settings#808](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/808">pydantic/pydantic-settings/issues/808)
• Bump actions/download-artifact from 4 to 8 in the github-actions group by @​dependabot[bot] in pydantic/pydantic-settings#809](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/809">pydantic/pydantic-settings/issues/809)
• Bump the python-packages group with 2 updates by @​dependabot[bot] in pydantic/pydantic-settings#810](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/810">pydantic/pydantic-settings/issues/810)
• Support reading .env files from FIFOs (e.g. 1Password Environments) by @​JacobHayes in pydantic/pydantic-settings#776](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/776">pydantic/pydantic-settings/issues/776)
• Fix AliasChoices ignored when changing provider priority by @​hramezani in pydantic/pydantic-settings#813](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/813">pydantic/pydantic-settings/issues/813)
• fix: resolve KeyError in run_subcommand for underscore field names by @​bradykieffer in pydantic/pydantic-settings#799](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/799">pydantic/pydantic-settings/issues/799)
• Bump the python-packages group with 3 updates by @​dependabot[bot] in pydantic/pydantic-settings#814](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/814">pydantic/pydantic-settings/issues/814)
• Fix Literal[numeric Enum] coercion for CLI and env vars by @​m9810223 in pydantic/pydantic-settings#811](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/811">pydantic/pydantic-settings/issues/811)
• Fix nested discriminated unions not discovered by env/CLI providers by @​hramezani in pydantic/pydantic-settings#816](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/816">pydantic/pydantic-settings/issues/816)
• Bump the python-packages group with 3 updates by @​dependabot[bot] in pydantic/pydantic-settings#820](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/820">pydantic/pydantic-settings/issues/820)
• CLI ensure env nested max split internally. by @​kschwab in pydantic/pydantic-settings#821](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/821">pydantic/pydantic-settings/issues/821)
• Bump the python-packages group with 4 updates by @​dependabot[bot] in pydantic/pydantic-settings#824](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/pull/824">pydantic/pydantic-settings/issues/824)

... (truncated)

Commits

• d703bd7 Prepare release 2.14.2 (#890](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/890">/issues/890))
• e95c30b Prepare release 2.14.1 (#859](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/859">/issues/859))
• 0c87345 Fix field named cls conflicting with classmethod parameter (#858](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/858">/issues/858))
• 7bd0072 Bump the python-packages group with 2 updates (#856](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/856">/issues/856))
• b03e573 Bump the github-actions group with 3 updates (#853](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/853">/issues/853))
• eaa3b43 Bump the python-packages group with 5 updates (#854](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/854">/issues/854))
• 9f95615 Bump the python-packages group with 4 updates (#850](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/850">/issues/850))
• 8916bee Prepare release 2.14.0 (#848](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/848">/issues/848))
• 39e551c Fix CLI descriptions lost under python -OO by falling back to `json_schema_...
• 9ed7f48 Bump the python-packages group with 4 updates (#847](https://github.com/href="https://redirect.github.com/pydantic/pydantic-settings/issues/847">/issues/847))
• Additional commits viewable in compare view

[Anonymous]

Originally posted by: luifr10

@dependabot rebase