…-generators#1494)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v7.0.1` → `v7.0.2` |

---

### Release Notes

<details>
<summary>actions/upload-artifact</summary>

###
[`v7.0.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.2)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2)

#### What's Changed

- Improves artifact download retries when the service returns HTTP 429
(rate limiting), including honoring valid Retry-After headers.
- Updates
[@&#8203;actions/artifact](https://redirect.github.com/actions/artifact)
to v6.3.1.

#### New Contributors

- [@&#8203;tunc-d](https://redirect.github.com/tunc-d) made their first
contribution in
[#&#8203;821](https://redirect.github.com/actions/upload-artifact/pull/821)

**Full Changelog**:
<actions/upload-artifact@v7.0.1...v7.0.2>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/openapi-generators/openapi-python-client).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE1Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…pi-generators#1493)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact)
| action | patch | `v8.0.1` → `v8.0.2` |

---

### Release Notes

<details>
<summary>actions/download-artifact</summary>

###
[`v8.0.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.2)

[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.1...v8.0.2)

#### What's Changed

- Update the readme by
[@&#8203;danwkennedy](https://redirect.github.com/danwkennedy) in
[#&#8203;473](https://redirect.github.com/actions/download-artifact/pull/473)
- Improves artifact download retries when the service returns HTTP 429
(rate limiting), including honoring valid Retry-After headers.
- Update
[@&#8203;actions/artifact](https://redirect.github.com/actions/artifact)
to 6.3.1 by [@&#8203;tunc-d](https://redirect.github.com/tunc-d) in
[#&#8203;492](https://redirect.github.com/actions/download-artifact/pull/492)
- Prepare download-artifact v8.0.2 by
[@&#8203;tunc-d](https://redirect.github.com/tunc-d) in
[#&#8203;493](https://redirect.github.com/actions/download-artifact/pull/493)

#### New Contributors

- [@&#8203;tunc-d](https://redirect.github.com/tunc-d) made their first
contribution in
[#&#8203;492](https://redirect.github.com/actions/download-artifact/pull/492)

**Full Changelog**:
<actions/download-artifact@v8.0.1...v8.0.2>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/openapi-generators/openapi-python-client).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE1Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…enapi-generators#1501)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish)
| action | patch | `v1.14.2` → `v1.14.3` |

---

### Release Notes

<details>
<summary>pypa/gh-action-pypi-publish</summary>

###
[`v1.14.3`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.3)

[Compare
Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.2...v1.14.3)

<p align="right"><i>Keeping the community safe is a collaborative
effort! 💛💙</i></p>

> \[!important]
> 🚨 This release includes fixes for
[GHSA-5xjx-3w67-w9x9](https://redirect.github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9)
patched up by
[@&#8203;sethmlarson](https://redirect.github.com/sethmlarson)[💰](https://redirect.github.com/sponsors/sethmlarson)
in
[#&#8203;427](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/427)
and in other places across the ecosystem.
>
> Additional ecosystem and related mitigations beyond you might want to
watch out for:
>
> -
<https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576>
> - <https://emudhra.we-have-a-problem.com>

##### 🛠️ Security Tightening


[@&#8203;webknjaz](https://redirect.github.com/webknjaz)[💰](https://redirect.github.com/sponsors/webknjaz)
made sure the dependency tree within the action runtime uses
hash-checking from now on via
[#&#8203;420](https://redirect.github.com/pypa/gh-action-pypi-publish/pull/420).

**🪞 Full Diff**:
<pypa/gh-action-pypi-publish@v1.14.2...v1.14.3>

**🧔‍♂️ Release Manager:**
[@&#8203;webknjaz](https://redirect.github.com/sponsors/webknjaz)
[🇺🇦](https://stand-with-ukraine.pp.ua)

**💬 Discuss** [on Bluesky
🦋](https://bsky.app/profile/webknjaz.me/post/3mydcjweyak2f), [on
Mastodon 🐘](https://mastodon.social/@webknjaz/117474743338290807) and
[on GitHub][release discussion].

[![GH Sponsors badge]][GH Sponsors URL]

[release discussion]:
https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/429

[GH Sponsors badge]:
https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c

[GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/openapi-generators/openapi-python-client).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…nerators#1504)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | minor | `v7.0.0` → `v7.1.0` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python)
| action | minor | `v7` → `v7.1.0` |

---

### Release Notes

<details>
<summary>actions/setup-python</summary>

###
[`v7.1.0`](https://redirect.github.com/actions/setup-python/releases/tag/v7.1.0)

[Compare
Source](https://redirect.github.com/actions/setup-python/compare/v7.0.0...v7.1.0)

#### What's Changed

##### Enhancements

- Add `mirror` and `mirror-token` inputs for custom Python distribution
sources by [@&#8203;luhenry](https://redirect.github.com/luhenry) in
[#&#8203;1302](https://redirect.github.com/actions/setup-python/pull/1302)
- Improve error message clarity by
[@&#8203;v-lmvysakh](https://redirect.github.com/v-lmvysakh) in
[#&#8203;1351](https://redirect.github.com/actions/setup-python/pull/1351)

##### Dependency Upgrade

- Upgrade browserslist from 4.28.2 to 4.28.9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1353](https://redirect.github.com/actions/setup-python/pull/1353)
- Upgrade
[@&#8203;typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser)
from 8.62.0 to 8.70.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1343](https://redirect.github.com/actions/setup-python/pull/1343)
- Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1342](https://redirect.github.com/actions/setup-python/pull/1342)
- Upgrade [@&#8203;vercel/ncc](https://redirect.github.com/vercel/ncc)
from 0.44.0 to 0.45.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1357](https://redirect.github.com/actions/setup-python/pull/1357)
- Upgrade
[@&#8203;types/semver](https://redirect.github.com/types/semver) from
7.7.1 to 7.8.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1359](https://redirect.github.com/actions/setup-python/pull/1359)
- Upgrade undici from 6.28.0 to 6.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1364](https://redirect.github.com/actions/setup-python/pull/1364)
- Upgrade ts-jest from 29.4.11 to 29.4.14 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1361](https://redirect.github.com/actions/setup-python/pull/1361)
- Upgrade brace-expansion from 5.0.9 to 5.0.12 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1365](https://redirect.github.com/actions/setup-python/pull/1365)
- Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to
7.1.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1363](https://redirect.github.com/actions/setup-python/pull/1363)
- Upgrade
[@&#8203;typescript-eslint/eslint-plugin](https://redirect.github.com/typescript-eslint/eslint-plugin)
from 8.62.0 to 8.71.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1369](https://redirect.github.com/actions/setup-python/pull/1369)
- Upgrade actions/checkout from 7.0.0 to 7.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1345](https://redirect.github.com/actions/setup-python/pull/1345)
- Upgrade cache to 6.3.0 by
[@&#8203;v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti)
in
[#&#8203;1370](https://redirect.github.com/actions/setup-python/pull/1370)
- Resolve Basic Validation audit failures by
[@&#8203;v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti)
in
[#&#8203;1347](https://redirect.github.com/actions/setup-python/pull/1347)
- Resolve npm audit failures by
[@&#8203;v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti)
in
[#&#8203;1350](https://redirect.github.com/actions/setup-python/pull/1350)

#### New Contributors

- [@&#8203;luhenry](https://redirect.github.com/luhenry) made their
first contribution in
[#&#8203;1302](https://redirect.github.com/actions/setup-python/pull/1302)

**Full Changelog**:
<actions/setup-python@v7.0.0...v7.1.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/openapi-generators/openapi-python-client).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR assumes that the deprecation of generating clients with `httpx`
is imminent and updates all golden records to use `httpx2` instead. This
leaves the client generation process with legacy `httpx` untested. This
will cause issues when `httpx2` introduces breaking changes and it is
assumed that the option to use `httpx` will be removed by that time.

Additionally, this leaves the generated method`get_httpx_client` as is,
preferring to update it to `get_httpx2_client` when support for `httpx`
is removed.

---------

Co-authored-by: John Hagen <johnthagen@users.noreply.github.com>
Co-authored-by: Dylan Anthony <43723790+dbanty@users.noreply.github.com>
Co-authored-by: Dylan Anthony <dbanty@users.noreply.github.com>

…ators#1507)

Latest `uv` is 0.13.7

- https://pypi.org/project/uv/0.13.7/

Document 

- openapi-generators#1286

And highlight JSON blocks.

We should also probably consider recommending `uv tool` over `pipx` but
that could be a follow on depending on decision from @dbanty

- https://docs.astral.sh/uv/guides/tools/

---------

Co-authored-by: Dylan Anthony <43723790+dbanty@users.noreply.github.com>

Co-authored-by: Dylan Anthony <dbanty@users.noreply.github.com>

This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/openapi-generators/openapi-python-client).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQ0Ljc5LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…rators#1511)

Fixes openapi-generators#1509

Since openapi-generators#1005 every generated `multipart/form-data` request sets
`Content-Type: multipart/form-data; boundary=+++`. httpx2 builds the
body with that boundary, so a file that contains `\r\n--+++` is split
there and the server gets a truncated file plus a stray part.

This stops setting `Content-Type` for `multipart/form-data` bodies.
httpx2 then adds the header with its own random boundary, the same way
single-body endpoints worked before 0.29.0. For endpoints with several
body types, the multipart branch no longer sets the header either, so
openapi-generators#947 stays fixed: httpx2 still writes a boundary because the header
isn't set. The other content types still set their header explicitly.

Changes:
- `endpoint_module.py.jinja`: skip the `Content-Type` line for multipart
bodies.
- Golden records and the integration-test client regenerated (only the
`boundary=+++` line goes away).
- New functional test `test_multipart_bodies.py`: generates a
single-body and a multi-body endpoint, sends a file containing
`\r\n--+++` through a `MockTransport` and parses the multipart body
back.
- Patch changeset.

Testing:
- `pytest
end_to_end_tests/functional_tests/generated_code_execution/test_multipart_bodies.py`
- before the template change: 2 failed (`{'file': b'first line'} !=
{'file': b'first line\r\n--+++\r\nstill the same file\r\n'}`), 1 passed
(JSON control)
  - after: 3 passed
- Full `pdm test` equivalent with coverage: 471 passed, 100% coverage, 5
snapshots passed
- `ruff format --check .`, `ruff check .`, `mypy openapi_python_client
fuzz` pass

I didn't run the `integration` job locally because it needs the
openapi-test-server container.

Co-authored-by: Dylan Anthony <dbanty@users.noreply.github.com>

Co-authored-by: Dylan Anthony <dbanty@users.noreply.github.com>

> [!IMPORTANT]
> Merging this pull request will create this release

## ❗️Breaking ❗

### Switch from `httpx` to `httpx2` in generated clients

[`httpx2`](https://pydantic.dev/docs/httpx2/get-started/) is largely
compatible with `httpx` and should only be a breaking change for users
who customize the internal `Client`.

Thanks to @s-sajid-ali and @johnthagen for making this one happen in PR
openapi-generators#1461 and discussion openapi-generators#1455!

## 🚀 Features

- Update `uv_build` to 0.13 when using `--meta=uv` (openapi-generators#1507)

## 🐛 Fixes

- Let httpx2 choose the multipart/form-data boundary (openapi-generators#1511)

### Let httpx2 choose the boundary for `multipart/form-data` requests

Since 0.29.0, generated endpoints sent every `multipart/form-data` body
with the fixed boundary `+++`, so an uploaded file containing
`\r\n--+++` was cut short at that point (openapi-generators#1509). These bodies no longer
set `Content-Type`, so httpx2 sets it with a random boundary for each
request, as single-body endpoints did before 0.29.0. Endpoints with
several body types still get a boundary (openapi-generators#947).

Co-authored-by: knope-bot[bot] <152252888+knope-bot[bot]@users.noreply.github.com>