chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the /a2a/git_issue_agent directory: a2a-sdk, litellm and starlette.

Updates a2a-sdk from 1.1.0 to 1.1.2

Release notes

Sourced from a2a-sdk's releases.

v1.1.2

1.1.2 (2026-07-20)

Features

• server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

• agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
• persist early producer failure as FAILED with originating message (#1106) (4e3d724)

v1.1.1

1.1.1 (2026-07-15)

Bug Fixes

• server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

• grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
• http: eliminate httpx-sse dependency (#1132) (0d82ab9)

Changelog

Sourced from a2a-sdk's changelog.

1.1.2 (2026-07-20)

Features

• server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

• agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
• persist early producer failure as FAILED with originating message (#1106) (4e3d724)

1.1.1 (2026-07-15)

Bug Fixes

• server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

• grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
• http: eliminate httpx-sse dependency (#1132) (0d82ab9)

Commits

• 3e6fa6a chore(main): release 1.1.2 (#1139)
• 9801f46 feat(server): add aclose() to drain ActiveTask background tasks (#1101) (#1105)
• d19c4d2 fix(agent_execution): resolve ActiveTask 'destroyed but pending' warning duri...
• 4e3d724 fix: persist early producer failure as FAILED with originating message (#1106)
• 86c6b0d chore(main): release 1.1.1 (#1103)
• 0d82ab9 refactor(http): eliminate third-party httpx-sse dependency (#1132)
• 723880e refactor(grpc): remove grpcio-status dependency (#1130)
• 343373b test: expand itk scenarios with ts java and rust agents (#1129)
• e7eafe3 chore(deps): bump cryptography from 48.0.0 to 48.0.1 (#1109)
• 46b292b fix(server): improve Swagger /docs example annotations for A2A routes (#1092)
• Additional commits viewable in compare view

Updates litellm from 1.91.1 to 1.96.0

Release notes

Sourced from litellm's releases.

v1.96.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.96.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.96.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.96.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(prometheus): add service_tier label to latency and spend metrics by @​yassin-berriai in BerriAI/litellm#34966
• fix(aiohttp): keep keep-alive connector config when a session is rebuilt by @​yassin-berriai in BerriAI/litellm#34962
• fix(helm): pin bundled postgres and redis to the bitnamilegacy images by @​yassin-berriai in BerriAI/litellm#34963
• fix(vertex): decide rawPredict passthrough streaming from the request body by @​tin-berri in BerriAI/litellm#34672
• fix(anthropic-adapter): translate stop_sequences and disabled thinking for non-Claude targets by @​tin-berri in BerriAI/litellm#34589
• ci: publish a generated JSON schema for model_prices_and_context_window.json by @​mateo-berri in BerriAI/litellm#34816
• fix(jwt_auth): allow /v1/messages for JWT teams by default by @​devin-ai-integration[bot] in BerriAI/litellm#34222
• fix(proxy): skip team model aliases that point at deleted deployments by @​mateo-berri in BerriAI/litellm#34993
• fix(proxy): report when a model write does not survive the post-write reload by @​tin-berri in BerriAI/litellm#34861
• fix(proxy): reject model writes that corrupt an auto-router pseudo-model by @​tin-berri in BerriAI/litellm#34151
• fix(router_strategy): serialize latency for non-chat responses in lowest-latency routing by @​mihidumh in BerriAI/litellm#33290
• fix(logging): preserve callback order in get_combined_callback_list by @​Harsh23Kashyap in BerriAI/litellm#33008
• fix(router): honor explicit priority=0 in acompletion by @​Harsh23Kashyap in BerriAI/litellm#33214
• fix(router_strategy): serialize latency for non-chat responses in lowest-latency routing by @​tin-berri in BerriAI/litellm#35048
• fix(anthropic-adapter): open the first content block with the real upstream type so reasoning-first streams start with thinking by @​Napuh in BerriAI/litellm#34433

... (truncated)

Commits

• 8843766 Merge pull request #36320 from BerriAI/litellm_/litellm-1-96-0-release-ui-48fbeb
• d6f5338 chore: update Next.js build artifacts (2026-08-08 23:40 UTC, node v20.20.2)
• 2c2e9fd Merge pull request #36294 from BerriAI/litellm_backport_rc_1_96_0_bp-rc196-0808
• 4788d34 chore(deps): carry the pypdf scanner exceptions from staging
• c5026e1 chore(deps): bump js-yaml, brace-expansion, postcss and nanoid in the dashboard
• 502b03b chore(deps): bump cryptography to 50.0.0
• 7cdb02a chore(deps): bump h2 to 4.4.1
• 737881e chore(deps): bump gitpython to 3.1.58
• f4cef64 Merge pull request #35844 from BerriAI/litellm_/terraform-provider-dep-bump-5...
• ca18a2a Merge pull request #35835 from BerriAI/litellm_/elated-margulis-7f300f
• Additional commits viewable in compare view

Updates starlette from 1.3.1 to 1.6.0

Release notes

Sourced from starlette's releases.

Version 1.6.0

What's Changed

• Add max_body_size to Starlette and route classes by @​Kludex in Kludex/starlette#3431
• Expose http.response.debug info via response extensions by @​y2kbugger in Kludex/starlette#3130

New Contributors

• @​y2kbugger made their first contribution in Kludex/starlette#3130

Full Changelog: Kludex/starlette@1.5.1...1.6.0

Version 1.5.1

What's Changed

• Reject inverted single-byte Range like bytes=5-4 by @​nikolauspschuetz in encode/starlette#3389
• Limit FileResponse to 100 ranges by @​Kludex in encode/starlette#3430

Full Changelog: Kludex/starlette@1.5.0...1.5.1

Version 1.5.0

This release is all about giving GZipMiddleware some love. 🗜️

What's Changed

• Add exclude_content_types parameter to GZipMiddleware by @​Kludex in encode/starlette#3418
• Flush GZip output for each streamed chunk by @​Kludex in encode/starlette#3419
• Skip compression of partial responses in GZipMiddleware by @​Kludex in encode/starlette#3420
• Expand default excluded content types in GZipMiddleware by @​Kludex in encode/starlette#3421

Full Changelog: Kludex/starlette@1.4.1...1.5.0

Version 1.4.1

What's Changed

• Default thread_minimum_size in GZipResponder by @​Kludex in Kludex/starlette#3415

Full Changelog: Kludex/starlette@1.4.0...1.4.1

Version 1.4.0

What's Changed

• Lazily allocate GZipMiddleware compression resources by @​Kludex in Kludex/starlette#3407
• Use zlib.compressobj instead of GzipFile in GZipMiddleware by @​Kludex in Kludex/starlette#3411
• Offload large GZip compression by @​Kludex in Kludex/starlette#3410

New Contributors

• @​benberryallwood made their first contribution in Kludex/starlette#3334
• @​lkk7 made their first contribution in Kludex/starlette#3359

Full Changelog: Kludex/starlette@1.3.1...1.4.0

Changelog

Sourced from starlette's changelog.

1.6.0 (August 8, 2026)

Added

• Add max_body_size to Starlette and route classes #3431.
• Expose http.response.debug information via response extensions #3130.

1.5.1 (August 8, 2026)

Fixed

• Reject inverted single-byte ranges in FileResponse #3389.
• Limit FileResponse to 100 ranges #3430.

1.5.0 (August 8, 2026)

Added

• Add exclude_content_types parameter to GZipMiddleware #3418.

Changed

• Expand default excluded content types in GZipMiddleware #3421.

Fixed

• Flush GZip output for each streamed chunk #3419.
• Skip compression of partial responses in GZipMiddleware #3420.

1.4.1 (August 5, 2026)

Fixed

• Default thread_minimum_size to 128 KiB in GZipResponder, keeping it usable without the new keyword argument #3415.

1.4.0 (August 5, 2026)

Added

• Offload large GZip compression to a worker thread, keeping the event loop responsive. GZipMiddleware accepts a new thread_minimum_size parameter (default 128 KiB) controlling the minimum body chunk size compressed in a thread #3410.

Changed

• Use zlib.compressobj instead of GzipFile in GZipMiddleware, reducing memory usage during compression #3411.
• Lazily allocate GZipMiddleware compression resources, avoiding compressor allocation for responses that are never compressed #3407.

Commits

• 4f250d6 Version 1.6.0 (#3434)
• 9eea41a Expose http.response.debug info via response extensions (#3130)
• 38f8999 Add max_body_size to Starlette and route classes (#3431)
• c41236c Version 1.5.1 (#3432)
• 9c500db Limit FileResponse to 100 ranges (#3430)
• 78ae82c Reject inverted single-byte Range like bytes=5-4 (#3389)
• c1d6eda chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 (#3429)
• ee66ca4 chore(deps): bump the python-packages group across 1 directory with 8 updates...
• 00d1016 fix(tests): skip test_staticfiles_filename_too_long on Windows where os.pathc...
• d96887e Add Pydantic Logfire banner to the docs (#3428)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions