fix(deps): Update security vulnerability in weaviate-client to v4 #4230

utic-renovate · 2026-02-10T04:03:14Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
weaviate-client	`>=3.26.7, <4.0.0` → `>=4.19.2, <4.20.0`

Release Notes

weaviate/weaviate-python-client (weaviate-client)

`v4.19.2`

Compare Source

Revert #1915; not yet merged into Weaviate server

`v4.19.0`

Compare Source

This minor version includes:

Support for new 1.35 features:
- Add support for time-to-live (TTL) on objects
- Add support for new multi2multivec-weaviate module
- Enhance model integration helper functions
  - Add separate service-specific helpers for aws sagemaker vs bedrock, or google gemini vs vertex
  - Add BaseURL support for Cohere rerankers
  - Fix model provider parameters
- Improve batch performance by optimizing checks for live threads
- Update authlib

`v4.18.3`

Compare Source

What's Changed

Reorder overloads to remove deprecation warning in pycharm by @dirkkul in #1901
Fix boolean filters by @dirkkul in #1902

Full Changelog: weaviate/weaviate-python-client@v4.18.2...v4.18.3

`v4.18.2`

Compare Source

What's Changed

Add new zstd backup configs by @dirkkul in #1877
Mark 'ChunkSize' as deprecated & exclude it from export by @databyjp in #1886
Add Contextual AI's Generative and Reranker Client support by @antas-marcin in #1887
Adding VoyageAI's voyage-3-large model by @fzowl in #1890

Full Changelog: weaviate/weaviate-python-client@v4.18.1...v4.18.2

`v4.18.1`

Compare Source

Add dimensions parameters for cohere vectorizers (#1875)
Add dimensions parameters for text2vec-voyage (#1870)

`v4.18.0`

Compare Source

What's Changed

feat: add return fields for list backups and support ordering by @gkampitakis in #1856
Fix agents docs build by @g-despot in #1858
chore: rename started_at_asc for sorting backup list by @gkampitakis in #1859
Adding VoyageAI's contextual model by @fzowl in #1862
add gse_ch Tokenize by @lcedaw in #1860
Dev/1.34 by @tsmith023 in #1861

New Contributors

@gkampitakis made their first contribution in #1856
@g-despot made their first contribution in #1858
@lcedaw made their first contribution in #1860

Full Changelog: weaviate/weaviate-python-client@v4.17.0...v4.18.0

`v4.17.0`

Compare Source

What's Changed

Remove support for old weaviate versions <1.27.0 by @dirkkul in #1792
Add uncompressed quantitizer factory by @dirkkul in #1800
Add support for groups by @dirkkul in #1778
feat: add Not and ContainsNone operators by @bevzzz in #1809
feat: add overwrite_alias to backup restore by @bevzzz in #1808
Remove azure docker compose file by @dirkkul in #1814
Add Multi2vec-aws and text2vec-morph by @dirkkul in #1820
Add max token to AWS generative module by @dirkkul in #1819
Add support for exists on aliases. by @jfrancoa in #1813
Add note re GPT4All deprecation by @databyjp in #1825
Update setup.cfg with min weaviate agents version by @cdpierse in #1826
remove erroneous type alias by @databyjp in #1830
Add jina-embeddings-v4 support by @MaskyS in #1833
Add reasoning and verbosity to generative openai by @dirkkul in #1827

New Contributors

@bevzzz made their first contribution in #1809
@MaskyS made their first contribution in #1833

Full Changelog: weaviate/weaviate-python-client@v4.16.9...v4.17.0

`v4.16.10`

Compare Source

What's Changed

Add uncompressed quantitizer factory by @dirkkul in #1800
Add support for groups by @dirkkul in #1778
feat: add overwrite_alias to backup restore by @bevzzz in #1808
Add Multi2vec-aws and text2vec-morph by @dirkkul in #1820
Add support for exists on aliases. by @jfrancoa in #1813
Add note re GPT4All deprecation by @databyjp in #1825
Update setup.cfg with min weaviate agents version by @cdpierse in #1826

Full Changelog: weaviate/weaviate-python-client@v4.16.9...v4.16.10

`v4.16.9`

Compare Source

What's Changed

Deprecate broken method by @dirkkul in #1795
Improve user create docstring by @dirkkul in #1796
Fixup dependencies for package test by @dirkkul in #1791

Full Changelog: weaviate/weaviate-python-client@v4.16.8...v4.16.9

`v4.16.8`

Compare Source

What's Changed

Add backup list endpoint by @dirkkul in #1785
Attempt further fix of protobuf runtime stub incompatibilities by @tsmith023 in #1788

Full Changelog: weaviate/weaviate-python-client@v4.16.7...v4.16.8

`v4.16.7`

Compare Source

What's Changed

Deprecate min_occurrences and add limit to Metrics.text by @databyjp in #1756
Add text2vec_model2vec support for new syntax. by @jfrancoa in #1779
Change vers in build to generate stubs with correct protobuf vers by @tsmith023 in #1759

Full Changelog: weaviate/weaviate-python-client@v4.16.6...v4.16.7

`v4.16.6`

Compare Source

What's Changed

rq: Add bits to the update method by @rlmanrique in #1766
Deprecate contextionar, add model2vec and dimension parameter for transformers by @dirkkul in #1773

Full Changelog: weaviate/weaviate-python-client@v4.16.5...v4.16.6

`v4.16.5`

Compare Source

What's Changed

Add dimensions property to Google vectorizers in Configure.Vectors by @tsmith023 in #1767

Full Changelog: weaviate/weaviate-python-client@v4.16.4...v4.16.5

`v4.16.4`

Compare Source

What's Changed

Remove unused configs from new vectorizer syntax by @dirkkul in #1755
Change default to True for vectorize_collection_name in _Vectors and _MultiVectors by @tsmith023 in #1757

Full Changelog: weaviate/weaviate-python-client@v4.16.3...v4.16.4

`v4.16.3`

Compare Source

What's Changed

Add support for protobuf v4+5+6 by @dirkkul in #1682
handle date with nanoseconds by @augustas1 in #1753

Full Changelog: weaviate/weaviate-python-client@v4.16.2...v4.16.3

`v4.16.2`

Compare Source

What's Changed

Rename model_id to model in google vectorizers by @dirkkul in #1747

Full Changelog: weaviate/weaviate-python-client@v4.16.1...v4.16.2

`v4.16.1`

Compare Source

What's Changed

fix(rbac): Capitalize first letter for alias similar to collection by @kavirajk in #1741
Change default for vectorizeCollectionName back to true by @dirkkul in #1743
RQ: Add rescoreLimit parameter by @rlmanrique in #1745

Full Changelog: weaviate/weaviate-python-client@v4.16.0...v4.16.1

`v4.16.0`

Compare Source

What's Changed

fix: auto capitalize target collection in by_ref_multi_target by @melsonic in #1471
Provide helpers when updating tenant activity statuses by @tsmith023 in #1695
Add support for new features of Weaviate in v1.32 by @tsmith023 in #1727
Add restore for users and roles by @dirkkul in #1737
Add jina multi2multi by @dirkkul in #1738

New Contributors

@melsonic made their first contribution in #1471

Full Changelog: weaviate/weaviate-python-client@v4.15.4...v4.16.0

`v4.15.4`

Compare Source

What's Changed

Deprecate usage of OIDC with WCD by @dirkkul in #1696

Full Changelog: weaviate/weaviate-python-client@v4.15.3...v4.15.4

`v4.15.3`

Compare Source

What's Changed

Allow wider range of authlib by @dirkkul in #1693

Full Changelog: weaviate/weaviate-python-client@v4.15.2...v4.15.3

`v4.15.2`

Compare Source

What's Changed

pass error details in async client search by @augustas1 in #1690

Full Changelog: weaviate/weaviate-python-client@v4.15.1...v4.15.2

`v4.15.1`

Compare Source

What's Changed

Add original error to exception by @dirkkul in #1687
Fix: Update (soon to be) deprecated model_fields access to use class reference by @upDJ in #1688

New Contributors

@upDJ made their first contribution in #1688

Full Changelog: weaviate/weaviate-python-client@v4.15.0...v4.15.1

`v4.15.0`

Compare Source

What's Changed

Allow adding vectors using collection.config.add_vector by @tsmith023 in #1640
Adding VoyageAI's v3.5 models by @fzowl in #1679
Add embed-v4.0 to the list of available Cohere models by @databyjp in #1680
Unify Weaviate Python Client RTD docs with Weaviate Agents Python Client RTD docs by @StefanBogdan in #1678
Copy context to ensure open telemetry makes it to batch requests by @tsmith023 in #1655
Embedded Weaviate changes by @databyjp in #1681
Fix config schema with multivector by @robbespo00 in #1573
Bm25 operators by @dirkkul in #1683

Full Changelog: weaviate/weaviate-python-client@v4.14.4...v4.15.0

`v4.14.4`

Compare Source

What's Changed

Add support for extracting nested object array properties from data models by @jstol in #1671
Permit parsing API key as string in all connect_to_x helpers by @tsmith023 in #1661
Readd .db/.oidc interfaces by @dirkkul in #1675

New Contributors

@jstol made their first contribution in #1671

Full Changelog: weaviate/weaviate-python-client@v4.14.3...v4.14.4

`v4.14.3`

Compare Source

What's Changed

Permit vector: list[list[float32]] in .hybrid by @tsmith023 in #1664
Fix groupby returns without results by @dirkkul in #1667

Full Changelog: weaviate/weaviate-python-client@v4.14.1...v4.14.3

`v4.14.1`

Compare Source

What's Changed

Order return of collections.list_all() alphabetically by key by @saireddythfc in #1636
Add missing default stub to query.bm25 by @tsmith023 in #1656

New Contributors

@saireddythfc made their first contribution in #1636

Full Changelog: weaviate/weaviate-python-client@v4.14.0...v4.14.1

`v4.14.0`

Compare Source

What's Changed

Stefan/readthedocs update by @StefanBogdan in #1568
Only assign self._connected at end of .connect() method by @tsmith023 in #1639
Move docstring from update to replace by @tsmith023 in #1642
Suggestion re: error msg by @databyjp in #1566
Add a python script that auto generates async/sync stubs from executor defs by @tsmith023 in #1646
Remove all tests for <1.24 version by @tsmith023 in #1647
Fix parsing of skip & vec_prop_name to moduleConfig by @tsmith023 in #1648
Fix a few issues: by @tsmith023 in #1649
Use client context manager to avoid warning flakes by @tsmith023 in #1650
Remove duplicated mock tests from when we needed v3 and v4 differences by @tsmith023 in #1651
Add changelog for v4.14.0 by @tsmith023 in #1652

Full Changelog: weaviate/weaviate-python-client@v4.13.2...v4.14.0

`v4.13.2`

Compare Source

What's Changed

Fix accidental adding of / to all AnyHttpUrl models in grpc gen.conf. by @tsmith023 in #1628
Add sleep to test to avoid eventual consistency errors by @tsmith023 in #1632

Full Changelog: weaviate/weaviate-python-client@v4.13.1...v4.13.2

`v4.13.1`

Compare Source

What's Changed

Add missing default value by @dirkkul in #1625
Add changelog for 4.13.1 by @dirkkul in #1626

Full Changelog: weaviate/weaviate-python-client@v4.13.0...v4.13.1

`v4.13.0`

Compare Source

What's Changed

Refactor to separate sync and async connections by @tsmith023 in #1594

Full Changelog: weaviate/weaviate-python-client@v4.12.1...v4.13.0

`v4.12.1`

Compare Source

What's Changed

Rename openai_azure in GenerativeConfig to azure_openai by @tsmith023 in #1623

Full Changelog: weaviate/weaviate-python-client@v4.12.0...v4.12.1

`v4.12.0`

Compare Source

What's Changed

Minor bugfix & proposed docstring changes for dynamic rag by @databyjp in #1578
Feature/dynamic rag support by @tsmith023 in #1377
Initial support for dynamic users by @dirkkul in #1581
Dynamic users: single calls for deprecated functions by @dirkkul in #1597
Handle double (de)activate of dynamic users by @dirkkul in #1599
Adapt to changes in returns in getRoleForUser by @dirkkul in #1602
Adapt get users for role by @dirkkul in #1609
Add missing deprecation warning by @dirkkul in #1608
Handle renaming of dynamic users =>db users by @dirkkul in #1610
Create Generative xAI module by @erika-cardenas in #1586
Change get_by_name to use TenantGetOne REST endpoint by @tsmith023 in #1617
Add tenant option to Permissions.data and Permissions.tenants by @tsmith023 in #1593

Full Changelog: weaviate/weaviate-python-client@v4.11.3...v4.12.0

`v4.11.3`

Compare Source

What's Changed

Fix collision between waiting_count and backoff_count when looping by @tsmith023 in #1604
Remove sync in async warning because of erroneous throw in notebooks by @tsmith023 in #1605
Add changelog for v4.11.3 by @tsmith023 in #1606

Full Changelog: weaviate/weaviate-python-client@v4.11.2...v4.11.3

`v4.11.2`

Compare Source

What's Changed

Fix missing parameters in certain modules, align all text2vec docstrings by @tsmith023 in #1587
Add warning to client init when running sync client in async context by @tsmith023 in #1589
Add exponential backoff of UNAVAILABLE to grpc batch objects by @tsmith023 in #1582
Add support for updating property descriptions by @tsmith023 in #1583
add OIDC support to tex2vec-weaviate by @augustas1 in #1574
Handle module config in properties for named vector collections by @tsmith023 in #1595
If multivector.enabled==False then return None by @tsmith023 in #1596

Full Changelog: weaviate/weaviate-python-client@v4.11.1...v4.11.2

`v4.11.1`

Compare Source

What's Changed

Add nvidia-reranker factory function by @databyjp in #1558
Fix get current user return by @dirkkul in #1563
Weaviate Agents extras integration by @cdpierse in #1562
Fix named vectors reimport by @dirkkul in #1569
Add collections.use as alias for collections.get by @tsmith023 in #1571
Throw errors if headers with None are supplied by @tsmith023 in #1570

Full Changelog: weaviate/weaviate-python-client@v4.11.0...v4.11.1

`v4.11.0`

Compare Source

What's Changed

Add support for ColBERT vectors by @tsmith023 in #1521
Refactor backend of aggregate API to use gRPC by @tsmith023 in #1522
Add NVIDIA Modules by @erika-cardenas in #1538

New Contributors

@nathanwilk7 made their first contribution in #1527
@augustas1 made their first contribution in #1517
@erika-cardenas made their first contribution in #1538

Full Changelog: weaviate/weaviate-python-client@v4.10.4...v4.11.0

`v4.10.4`

Compare Source

What's Changed

Add dimensions param to text2vec_azure_openai by @tsmith023 in #1508

Full Changelog: weaviate/weaviate-python-client@v4.10.3...v4.10.4

`v4.10.3`

Compare Source

What's Changed

Fix backup/restore for the embedded server by @parkerduckworth in #1485
Ensure all BlockingIOError exceptions are ignored in event loop by @tsmith023 in #1503
Add support for tenant operations by @dirkkul in #1493
Add support for dynamic backup path by @dirkkul in #1494
Replace threading.Lock with asyncio.Lock when batching to avoid deadlocks by @tsmith023 in #1270
Fix adding a location when no config is given by @dirkkul in #1506
Add support for debug get object endpoint: by @tsmith023 in #1507
Add google ai studio by @dirkkul in #1510

Full Changelog: weaviate/weaviate-python-client@v4.10.2...v4.10.3

`v4.10.2`

Compare Source

What's Changed

Reduce test matrix by @dirkkul in #1478
Add pipeline to test docs build by @dirkkul in #1479
Fix query params issue dependent on bug in httpx<0.28 by @rlmanrique in #1482

New Contributors

@rlmanrique made their first contribution in #1482

Full Changelog: weaviate/weaviate-python-client@v4.10.1...v4.10.2

`v4.10.1`

Compare Source

What's Changed

Enable new httpx versions by @dirkkul in #1474
Update docs and imports by @dirkkul in #1475

Full Changelog: weaviate/weaviate-python-client@v4.10.0...v4.10.1

`v4.10.0`

Compare Source

What's Changed

Remove v3 by @dirkkul in #1452
Update to protobuf 5 by @dirkkul in #1453
Support RBAC by @tsmith023 in #1388
Generate GRPC code with lowest version we support by @dirkkul in #1458
VoyageAI's new multimodal embedding model by @fzowl in #1461

New Contributors

@moogacs made their first contribution in #1415

Full Changelog: weaviate/weaviate-python-client@v4.9.6...v4.10.0

`v4.9.6`

Compare Source

What's Changed

Add support for kagame_ja by @dirkkul in #1449

Full Changelog: weaviate/weaviate-python-client@v4.9.5...v4.9.6

`v4.9.5`

Compare Source

What's Changed

Add specific exception for tenant get by @dirkkul in #1435
Weaviate embedding service support by @dirkkul in #1425

Full Changelog: weaviate/weaviate-python-client@v4.9.4...v4.9.5

`v4.9.4`

Compare Source

What's Changed

fix type boolean restriction on include vector for _QueryReference by @paul7Junior in #1399
Fix documentation URL for within_geo_range by @jensenbox in #1407
Add support for multi2vec-cohere by @dirkkul in #1390
Add time based deletion strategy by @dirkkul in #1364
Add support for multi2vec-jinaai; docstring changes by @databyjp in #1422

New Contributors

@paul7Junior made their first contribution in #1399
@jensenbox made their first contribution in #1407

Full Changelog: weaviate/weaviate-python-client@v4.9.3...v4.9.4

`v4.9.3`

Compare Source

What's Changed

Add missing options to sync interface by @dirkkul in #1386

Full Changelog: weaviate/weaviate-python-client@v4.9.2...v4.9.3

`v4.9.2`

Compare Source

What's Changed

Ensure each per-process event loop has its exception handler patched properly by @tsmith023 in #1381

Full Changelog: weaviate/weaviate-python-client@v4.9.1...v4.9.2

`v4.9.1`

Compare Source

What's Changed

Fix warning message for multi vector search by @dirkkul in #1353
Remove octoai. They are shutting down by @dirkkul in #1365
Automatically pick up GRPC message size from weaviate by @dirkkul in #1362
Use exponential backoff to retry UNAVAILABLE error codes by @tsmith023 in #1370
Add update of generative and reranker moduleconfig by @dirkkul in #1376
Gracefully handle multiprocessing forks in _EventLoopSingleton by @tsmith023 in #1373

Full Changelog: weaviate/weaviate-python-client@v4.9.0...v4.9.1

`v4.9.0`

Compare Source

What's Changed

Add baseURL and dimensions params to text2vec-jinaai by @tsmith023 in #1308
Introducing VoyageAI's new embedding and rerank models by @fzowl in #1318
fix: add is_safe to _WeaviateUUIDInt by @tibor-reiss in #1319
Fix: Warning message fixed for datetime insertions without any timezone by @gssakash in #1320
Add missing tenant and consistency_level to collection/base.pyi by @tsmith023 in #1327
Add support for object deletion conflict resolution by @dirkkul in #1307
Use Sequence for list filtering to aid type usage by @tsmith023 in #1328
Add support for cancel backups by @dirkkul in #1264
Remove CI testing and pkg building of Python3.8 by @tsmith023 in #1333
Allow return_properties={True, False} as equivalents to {None, []} by @tsmith023 in #1331
Palm to google by @dirkkul in #1329
Support multiple vectors for a single target by @dirkkul in #1235
Add support for acorn by @dirkkul in #1341
Allow user-definition of connection pool timeout by @tsmith023 in #1347

New Contributors

@gssakash made their first contribution in #1320

Full Changelog: weaviate/weaviate-python-client@v4.8.1...v4.9.0

`v4.8.1`

Compare Source

What's Changed

Suppress outdated warning emitted by auto-gened protobuf code by @tsmith023 in #1282
Fix authlib below 1.3.2 until bug is fixed by @tsmith023 in #1293

Full Changelog: weaviate/weaviate-python-client@v4.8.0...v4.8.1

`v4.8.0`

Compare Source

What's Changed

Bump importlib-metadata from 8.1.0 to 8.2.0 by @dependabot in #1211
Bump pytest from 8.2.2 to 8.3.1 by @dependabot in #1210
Bump pytest-asyncio from 0.23.7 to 0.23.8 by @dependabot in #1213
Pass AdditionalConfig.trust_env correctly to httpx client by @tsmith023 in #1214
Bump pytest from 8.3.1 to 8.3.2 by @dependabot in #1219
Bump types-requests from 2.30.0.0 to 2.32.0.20240712 by @dependabot in #1215
Bump requests from 2.32.2 to 2.32.3 by @dependabot in #1216
Bump typing-extensions from 4.8.0 to 4.12.2 by @dependabot in #1218
Bump litestar from 2.9.1 to 2.10.0 by @dependabot in #1223
feature: fetch_objects_by_ids by @tibor-reiss in #1241
disable WCS auth tests by @dirkkul in [#1251](https://redirect.github.com/weaviate/weaviate-python

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

fix(deps): Update security vulnerability in weaviate-client to v4

fc4afb5

utic-renovate bot added dependencies Pull requests that update a dependency file security labels Feb 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): Update security vulnerability in weaviate-client to v4 #4230

fix(deps): Update security vulnerability in weaviate-client to v4 #4230

utic-renovate bot commented Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

fix(deps): Update security vulnerability in weaviate-client to v4 #4230

Are you sure you want to change the base?

fix(deps): Update security vulnerability in weaviate-client to v4 #4230

Conversation

utic-renovate bot commented Feb 10, 2026

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants