## mozilla/bugbug — v0.0.637…v0.0.638

_64 commits._

### Features
- **Support loading code review skills from URLs on demand (#6036)** (ac668b2)
- **Add type annotations to scripts/commit_retriever.py** (726913a)

### Fixes
- **Add more tools (based on searchfox-py) to the LLM review agent, and make it patch stack aware to a certain extent (#6051)** (b91406b)
- **Bump the patch group across 1 directory with 12 updates (#6092)** (62f6dbe)
- **Bump python in /infra in the patch group across 1 directory (#6044)** (bfa32fc)
- **Bump the patch group with 13 updates (#6067)** (f7a1783)

### Backend
- **Version 0.0.638** (ca11407)
- **Bump taskcluster from 100.0.1 to 100.1.1 (#6089)** (2b52ebf)
- **Bump lmdb from 1.8.1 to 2.2.0 (#6082)** (ba0859c)
- **Update sentry-sdk[flask] requirement from ~=2.55.0 to >=2.55,<2.62 (#6090)** (daf0c97)
- **Use real LMDBDict in tests** (642b358)
- **If commit_to_coverage DB is already open, don't open it again** (d0d5e70)
- **Update Starlette to 1.2 (#6091)** (b8efac4)
- **If path_to_component DB is already open, don't open it again** (1ec9006)
- **Bump pydantic-settings in /services/reviewhelper-api (#6059)** (8a57e97)
- **Update cloud-sql-python-connector[asyncpg] requirement (#6060)** (a1f0d13)
- **Bump hypothesis from 6.151.9 to 6.152.9 (#6077)** (0c18b4b)
- **Bump gunicorn from 25.1.0 to 26.0.0 (#6069)** (59a747d)
- **Bump rq from 2.7.0 to 2.9.0 (#6078)** (e21d4e0)
- **Remove duplicated langchain-protocol dependency in uv.lock** (c9ec7f6)
- **Bump types-tabulate from 0.10.0.20260408 to 0.10.0.20260508 (#6028)** (43cb5d2)
- **Bump fastmcp from 3.2.0 to 3.3.1 in /services/mcp (#6058)** (3a36ad9)
- **Update sqlalchemy[asyncio] requirement in /services/reviewhelper-api (#6061)** (1dd38ef)
- **Bump fastapi from 0.135.2 to 0.136.1 in /services/reviewhelper-api (#6062)** (c4eaddd)
- **Bump types-python-dateutil from 2.9.0.20260408 to 2.9.0.20260518 (#6039)** (9a8eedf)
- **Bump qdrant-client from 1.15.1 to 1.18.0 (#6080)** (f4c8944)
- **Bump langchain-anthropic from 1.3.4 to 1.4.3 (#6075)** (d911aa8)
- **Bump langchain-openai from 1.1.14 to 1.2.1 (#6071)** (d9ffd6c)
- **Bump gitpython from 3.1.49 to 3.1.50 in /services/mcp (#6016)** (9c6fee8)
- **Bump boto3 from 1.42.78 to 1.43.11 (#6081)** (cf0b2f4)
- **Bump coverage from 7.13.5 to 7.14.0 (#6079)** (3dcf444)
- **Bump fast-uri from 3.1.0 to 3.1.2 in /functions/diff2html (#6012)** (e80a83c)
- **Bump gitpython from 3.1.49 to 3.1.50 in /services/reviewhelper-api (#6013)** (24449f9)
- **Bump langchain-core from 1.2.31 to 1.3.3 in /services/mcp (#6014)** (60e5b60)
- **Bump langchain-core from 1.2.31 to 1.3.3 in /services/reviewhelper-api (#6018)** (abcb240)
- **Bump urllib3 from 2.6.3 to 2.7.0 (#6020)** (ba64a3a)
- **Bump urllib3 from 2.6.3 to 2.7.0 in /services/mcp (#6022)** (339a11c)
- **Bump urllib3 from 2.6.3 to 2.7.0 in /services/reviewhelper-api (#6021)** (f1d9105)
- **Update sentry-sdk[flask] requirement from ~=2.55.0 to >=2.55,<2.61 (#6076)** (3ae44f7)
- **Bump authlib from 1.6.11 to 1.6.12 in /services/mcp (#6031)** (6a68c08)
- **Bump pre-commit from 4.5.1 to 4.6.0 (#6074)** (0c3395e)
- **Bump langsmith from 0.7.31 to 0.8.0 in /services/mcp (#6032)** (e667246)
- **Bump langsmith from 0.7.31 to 0.8.0 (#6033)** (5204a16)
- **Bump langchain-classic from 1.0.3 to 1.0.7 (#6034)** (f5ba3f7)
- **Bump langsmith from 0.7.31 to 0.8.0 in /services/reviewhelper-api (#6037)** (52de486)
- **Bump marshmallow from 3.26.2 to 4.3.0 (#6072)** (c180a13)
- **Bump types-requests from 2.33.0.20260503 to 2.33.0.20260518 (#6040)** (432c142)
- **Bump sentry-sdk from 2.57.0 to 2.60.0 in /services/mcp (#6057)** (b65f898)
- **Bump types-pyyaml from 6.0.12.20260408 to 6.0.12.20260518 (#6042)** (2075e11)
- **Bump idna from 3.11 to 3.15 in /services/reviewhelper-api (#6045)** (5475122)
- **Bump idna from 3.11 to 3.15 in /services/mcp (#6047)** (f3202a0)
- **Bump idna from 3.11 to 3.15 (#6046)** (c9f323d)
- **Bump qs, body-parser and express in /functions/diff2html (#6050)** (129cb04)
- **Bump taskcluster from 97.1.0 to 100.0.1 (#6070)** (5a67d0a)
- **Bump apexcharts from 5.10.6 to 5.12.0 in /ui/changes (#6052)** (5323d73)
- **Bump https://github.com/astral-sh/ruff-pre-commit (#6053)** (9a296f8)
- **Update uvicorn[standard] requirement in /services/reviewhelper-api (#6063)** (cfcbf00)
- **Bump sentry-sdk from 2.56.0 to 2.60.0 in /services/reviewhelper-api (#6064)** (1bc43d8)
- **Bump pydantic from 2.12.5 to 2.13.4 in /services/reviewhelper-api (#6065)** (6188c04)
- **Bump google-cloud-tasks in /services/reviewhelper-api (#6066)** (e44cb24)
- **Bump requests from 2.33.0 to 2.34.2 (#6068)** (f1e9fc7)
- **Bump pyopenssl from 26.0.0 to 26.2.0 (#6085)** (e270f3e)
- **Split root folder and services folders in different dependabot sections** (32d598f)
- **Revert "Retrieve taskcluster s3 credentials only once"** (9795a49)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mozilla/bugbug?utm_source=github-action)._