chore(backend)(deps): bump the database group in /backend with 3 updates

[dependabot]

Updates the requirements on supabase, pinecone-client and websockets to permit the latest version.
Updates supabase to 2.29.0

Release notes

Sourced from supabase's releases.

v2.29.0

2.29.0 (2026-04-22)

Features

• postgrest: add retry logic on cloudflare errors (#1449) (a282549)

Bug Fixes

• storage: make signedURL an optional string (#1461) (611cdbb)

Changelog

Sourced from supabase's changelog.

2.29.0 (2026-04-22)

Features

• postgrest: add retry logic on cloudflare errors (#1449) (a282549)

Bug Fixes

• storage: make signedURL an optional string (#1461) (611cdbb)

2.28.3 (2026-03-20)

Bug Fixes

• postgrest: fix maybe_single (#1424) (c7f8f13)

2.28.2 (2026-03-13)

Bug Fixes

• auth: fix admin list factors payload format. (#1415) (32843cf)

2.28.1 (2026-03-12)

Bug Fixes

• auth: prevent OverflowError in auto-refresh token retry (#1397) (#1400) (08bdf38)
• postgrest: comment out ssl error test (#1410) (51b86be)
• postgrest: remove check against message field in data payload (#1413) (81041a4)

2.28.0 (2026-02-10)

Features

• storage: add list_v2 method to file_api client (#1377) (259f4ad)

Bug Fixes

• auth: add missing is_sso_user, deleted_at, banned_until to User model (#1375) (7f84a62)
• realtime: ensure remove_channel removes channel from channels dict (#1373) (0923314)
• realtime: use pop with default in _handle_message to prevent KeyError (#1388) (baea26f)
• storage3: replace print() with warnings.warn() for trailing slash notice (#1380) (50b099f)

... (truncated)

Commits

• 23f937c chore(main): release 2.29.0 (#1470)
• c503b15 chore(deps): bump the uv group across 1 directory with 3 updates (#1462)
• 1882d95 chore(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#1464)
• 2a77471 chore(deps): bump supabase/setup-cli from 1.6.0 to 2.0.0 (#1471)
• 611cdbb fix(storage): make signedURL an optional string (#1461)
• cf509bb chore(ci): disable fail-on-error for coveralls (#1463)
• 36cfcd0 chore(deps): bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#1457)
• 41ee4e7 chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 (#1458)
• a3433a2 chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#1435)
• a282549 feat(postgrest): add retry logic on cloudflare errors (#1449)
• Additional commits viewable in compare view

Updates pinecone-client to 6.0.0

Release notes

Sourced from pinecone-client's releases.

Release v6.0.0

What's new in this release?

Indexes with Integrated Inference

This release adds a new create_index_for_model method as well as upsert_records, and search methods. Together these methods provide a way for you to easily store your data and let us manage the process of creating embeddings. To learn about available models, see the Model Gallery.

Note: If you were previously using the preview versions of this functionality via the pinecone-plugin-records package, you will need to uninstall that package in order to use the v6 pinecone release.

from pinecone import (
    Pinecone,
    CloudProvider,
    AwsRegion,
    EmbedModel,
)
1. Instantiate the Pinecone client
pc = Pinecone(api_key="<<PINECONE_API_KEY>>")
2. Create an index configured for use with a particular model
index_config = pc.create_index_for_model(
name="my-model-index",
cloud=CloudProvider.AWS,
region=AwsRegion.US_EAST_1,
embed=IndexEmbed(
model=EmbedModel.Multilingual_E5_Large,
field_map={"text": "my_text_field"}
)
)
3. Instantiate an Index client
idx = pc.Index(host=index_config.host)
4. Upsert records
idx.upsert_records(
namespace="my-namespace",
records=[
{
"_id": "test1",
"my_text_field": "Apple is a popular fruit known for its sweetness and crisp texture.",
},
{
"_id": "test2",
"my_text_field": "The tech company Apple is known for its innovative products like the iPhone.",
},
{
"_id": "test3",
"my_text_field": "Many people enjoy eating apples as a healthy snack.",
},
</tr></table>

... (truncated)

Commits

• See full diff in compare view

Updates websockets to 16.0

Release notes

Sourced from websockets's releases.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits

• d4303a5 Release version 16.0.
• 851bcd7 Bump pypa/cibuildwheel from 3.3.0 to 3.3.1
• 740c8d3 Temporarily remove the trio implementation.
• 92ea055 Add missing changelog entry.
• ba74244 Document bug fix.
• 9410483 Pin sphinx to avoid error in sphinxcontrib-trio.
• 8e4d408 Document asyncio's TLS read buffer.
• cb3500b Stop referring to the asyncio implementation as new.
• 6563a9c The threading implementation supports max_queue.
• 9f17e92 Clarify that protocol_mutex protects pending_pings.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: backend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.