[dependabot]

Bumps the minor-and-patch group with 7 updates in the /a2a/git_issue_agent directory:

Package	From	To
python-dotenv	1.2.3	1.2.4
a2a-sdk	1.1.5	1.3.0
litellm	1.103.0	1.106.6
python-multipart	0.0.32	0.0.33
pyasn1	0.6.4	0.6.5
starlette	1.7.0	1.10.0
orjson	3.12.0	3.13.0

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Commits

• a565c2c Bump version: 1.2.3 → 1.2.4
• 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
• f215c02 fix: dotenv get exits 0 for empty string values (#700)
• 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
• e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
• a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
• f5485a6 fix: parse empty unquoted value with inline comment as empty string
• See full diff in compare view

Updates a2a-sdk from 1.1.5 to 1.3.0

Release notes

Sourced from a2a-sdk's releases.

v1.3.0

1.3.0 (2026-10-27)

Features

• server: release parked interrupted tasks after a configurable timeout (#1338) (b22a68d)

Bug Fixes

• client: Create separate httpx per client when none configured (#1358) (d316d0e)
• client: raise A2A errors for malformed JSON-RPC responses (#1375) (7e55413)
• client: rejections from unrecognized fields (#1354) (91929cd)
• compat: keep an unset v0.3 status message and provider as None (#1362) (cdb4799), closes #1361
• compat: return A2A error codes from the v0.3 JSON-RPC adapter (#1369) (8e32d53)
• compat: set last_updated when storing a task in v0.3 format (#1372) (30b6d50), closes #1371
• core: restore structured repr on A2A exceptions (#1348) (79a6f45)
• server: allow recovery after status event validation fails (#1365) (ca3ef0d)
• server: apply history_length to legacy streaming sends (#1364) (261c074)
• server: include legacy task states in database list filters (#1337) (e12d494)
• server: record executor failures through the event consumer (#1366) (ad85806)
• server: reject boolean JSON-RPC request IDs (#1350) (05392b3)
• skip malformed agent card signature headers (#1335) (b21a144)

Documentation

• helpers: note that whole numbers in a data Part come back as floats (#1373) (654774f)

Miscellaneous Chores

• release 1.3.0 (#1389) (fb6373f)

v1.2.3

1.2.3 (2026-10-17)

Bug Fixes

• client: ignore the patch version when preferring a 1.0 interface (#1304) (cbb2d84)
• client: normalize malformed agent card parsing errors (#1307) (486f0f6)
• compat: block on a v0.3 gRPC and REST send without configuration (#1334) (8160310), closes #1321
• compat: treat a v0.3 history_length of 0 as unlimited in JSON-RPC and REST (#1312) (e86695c)
• jcs: count open containers for the nesting bound, so an empty container leaf is refused (#1294) (5653daf)
• server: isolate push notification failures from the task lifecycle (#1329) (0ee47d7)
• server: mark internal lifecycle events done so a cancelled stream frees its producer (#1336) (a4c4fc9)
• server: reject push URLs in shared address space (#1326) (01da00b)
• server: release the ActiveTask after a direct Message response (#1297) (49ebce6)

... (truncated)

Changelog

Sourced from a2a-sdk's changelog.

1.3.0 (2026-10-27)

Features

• server: release parked interrupted tasks after a configurable timeout (#1338) (b22a68d)

Bug Fixes

• client: Create separate httpx per client when none configured (#1358) (d316d0e)
• client: raise A2A errors for malformed JSON-RPC responses (#1375) (7e55413)
• client: rejections from unrecognized fields (#1354) (91929cd)
• compat: keep an unset v0.3 status message and provider as None (#1362) (cdb4799), closes #1361
• compat: return A2A error codes from the v0.3 JSON-RPC adapter (#1369) (8e32d53)
• compat: set last_updated when storing a task in v0.3 format (#1372) (30b6d50), closes #1371
• core: restore structured repr on A2A exceptions (#1348) (79a6f45)
• server: allow recovery after status event validation fails (#1365) (ca3ef0d)
• server: apply history_length to legacy streaming sends (#1364) (261c074)
• server: include legacy task states in database list filters (#1337) (e12d494)
• server: record executor failures through the event consumer (#1366) (ad85806)
• server: reject boolean JSON-RPC request IDs (#1350) (05392b3)
• skip malformed agent card signature headers (#1335) (b21a144)

Documentation

• helpers: note that whole numbers in a data Part come back as floats (#1373) (654774f)

Miscellaneous Chores

• release 1.3.0 (#1389) (fb6373f)

1.2.3 (2026-10-17)

Bug Fixes

• client: ignore the patch version when preferring a 1.0 interface (#1304) (cbb2d84)
• client: normalize malformed agent card parsing errors (#1307) (486f0f6)
• compat: block on a v0.3 gRPC and REST send without configuration (#1334) (8160310), closes #1321
• compat: treat a v0.3 history_length of 0 as unlimited in JSON-RPC and REST (#1312) (e86695c)
• jcs: count open containers for the nesting bound, so an empty container leaf is refused (#1294) (5653daf)
• server: isolate push notification failures from the task lifecycle (#1329) (0ee47d7)
• server: mark internal lifecycle events done so a cancelled stream frees its producer (#1336) (a4c4fc9)
• server: reject push URLs in shared address space (#1326) (01da00b)
• server: release the ActiveTask after a direct Message response (#1297) (49ebce6)
• server: run follow-up messages in the sender's contextvars (#1317) (a016002)
• server: warn when an AgentCard is missing required fields (#1279) (4f4101c)

... (truncated)

Commits

• 0d9dafb chore(main): release 1.3.0 (#1359)
• 3d185ad test: extend selected scenarios to REST (#1370)
• fb6373f chore: release 1.3.0 (#1389)
• 7e55413 fix(client): raise A2A errors for malformed JSON-RPC responses (#1375)
• b21a144 fix: skip malformed agent card signature headers (#1335)
• ca3ef0d fix(server): allow recovery after status event validation fails (#1365)
• c70403a chore(deps): bump opentelemetry-api from 1.42.1 to 1.45.1 (#1387)
• c666b5f chore(deps): bump certifi from 2026.2.25 to 2026.10.19 (#1386)
• 8e32d53 fix(compat): return A2A error codes from the v0.3 JSON-RPC adapter (#1369)
• b22a68d feat(server): release parked interrupted tasks after a configurable timeout (...
• Additional commits viewable in compare view

Updates litellm from 1.103.0 to 1.106.6

Release notes

Sourced from litellm's releases.

v1.106.6

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. This release is signed with the key introduced in commit e82a3c6.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.6

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.106.6/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.6

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(proxy): backport #46712 gzip scoping and off-loop compression to stable/1.106.x for v1.106.6 by @​kerry-berri in BerriAI/litellm#48680

Full Changelog: BerriAI/litellm@v1.106.5...v1.106.6

v1.106.5

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.5

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

... (truncated)

Commits

• 61c6ab7 Merge pull request #48680 from BerriAI/litellm_backport_46712_stable_1_106_x
• 3f6653c bump: version 1.106.6
• a1391ac fix(proxy): limit gzip to dashboard analytics and offload compression (#46712)
• 2569eb8 Merge pull request #48605 from BerriAI/litellm_backport_48599_stable_1_106_x
• 5197c97 bump: version 1.106.5
• fb0506d fix(proxy): merge only dict client metadata into pass-through logging
• 6566067 fix(proxy): always strip client guardrail info and mirror failure attribution...
• 116dd05 fix(proxy): keep allowlisted metadata in proxy-only failure logs
• 97474e4 fix(proxy): drop caller metadata from proxy-only failure logs
• dd8d12d fix(proxy): build proxy-only failure logs from an allowlist and ignore reques...
• Additional commits viewable in compare view

Updates python-multipart from 0.0.32 to 0.0.33

Release notes

Sourced from python-multipart's releases.

Version 0.0.33

🛡️ Safer form parsing

This release lets you cap URL-encoded form fields as they stream in, and fixes several upload and decoding edge cases. It also drops Python 3.10 and adds Python 3.15.

pip install python-multipart==0.0.33

• Limit URL-encoded fields while streaming (#333). The new opt-in MAX_FIELDS and MAX_FIELD_SIZE options for FormParser raise FormParserError before oversized data is buffered. Both default to no limit, and multipart forms are unaffected.
• Nameless uploads no longer crash when spilled to disk (#343). Uploads without a filename used to raise AttributeError when UPLOAD_KEEP_EXTENSIONS or UPLOAD_KEEP_FILENAME was set.
• UPLOAD_DIR accepts str with UPLOAD_KEEP_FILENAME (#335). A str upload directory used to fail on the first write to disk.
• Decoded data is complete before callbacks run (#336, #355). Content-Transfer-Encoding decoders are finalized at the end of each part, and quoted-printable escapes split across writes decode correctly.
• parse_options_header lowercases content types with parameters (#287). Multipart/Form-Data; boundary=abc now returns multipart/form-data, the same as headers without parameters.

⚡ Faster parsing

• Faster opening boundary matching (#328). Complete boundaries are matched in one step.
• Faster parser state lookups (#330). Parser states are module-level enum members, so their repr is now multipart.END instead of <MultipartState.END: 12>.
• Faster querystring callback dispatch (#316).

🐍 Python support

• Python 3.10 is no longer supported (#329). Python 3.11 is now the minimum.
• Python 3.15 is supported (#350).

💜 Thank you

Thanks to @​Edneam, @​sungbin1015, @​carlok, and @​fjvbn2003 for contributing to this release.

Thanks to the individual sponsors who contributed $134.00 to support this work. If python-multipart is useful to you, consider sponsoring me on GitHub.

Full changelog: 0.0.32...0.0.33

Changelog

Sourced from python-multipart's changelog.

0.0.33 (2026-10-31)

• Drop Python 3.10 support #329.
• Add Python 3.15 support #350.
• Add opt-in field-count and field-size limits for URL-encoded forms in FormParser #333.
• Normalize the content type returned by parse_options_header when the header has parameters #287.
• Finalize Content-Transfer-Encoding decoding before invoking field and file callbacks #336.
• Keep only the incomplete escape when quoted-printable data is split across writes #355.
• Handle nameless uploads when UPLOAD_KEEP_FILENAME or UPLOAD_KEEP_EXTENSIONS is set #343.
• Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set #335.
• Speed up parser state lookups #330.
• Speed up opening boundary matching #328.
• Speed up querystring callback dispatch #316.

Commits

• 9217f26 Bump version to 0.0.33 (#357)
• d0344c1 Keep only the incomplete escape when quoted-printable data is split (#355)
• 44871df Handle nameless uploads when keeping the filename or extension (#343)
• b21ea59 Add streaming field limits to FormParser (#333)
• 48f9e21 Fix the In-Depth Example in the docs to return bytes (#338)
• 12a2f8f Accept a str UPLOAD_DIR when UPLOAD_KEEP_FILENAME is set (#335)
• 95f6376 Use the shared security policy (#353)
• 8ec84ef Migrate documentation from MkDocs to Zensical (#352)
• d7af81c Rewrite README for newcomers (#351)
• b035d14 Add Python 3.15 classifier (#350)
• Additional commits viewable in compare view

Updates pyasn1 from 0.6.4 to 0.6.5

Release notes

Sourced from pyasn1's releases.

Release 0.6.5

Revision 0.6.5, released 26-10-2026

• GHSA-mm57-4v3p-rchx: Decoded binary REAL mantissas in linear time instead of repeatedly shifting a growing integer and slicing the remaining bytes (thanks for reporting, manus-use, manus-pi, ucsurf, adriank31)
• GHSA-2qm8-x737-gmw5: Reassembled constructed BIT STRING fragments in linear time while preserving their decoded bit values, including intermediate fragment padding (thanks for reporting, manus-use)
• GHSA-9m75-vc3g-4x39: Reassembled constructed OCTET STRING and character-string fragments and indefinite-length ANY content in linear time. Nested constructed OCTET STRING fragments now contribute their decoded octets (thanks for reporting, alimony, manus-pi, adriank31)
• GHSA-fm9c-5rcf-2q5p: Bounded schemaless container type tracking after two distinct tag sets to prevent quadratic CPU use from colliding long tag IDs (thanks for reporting, droideck)

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.5, released 26-10-2026

• GHSA-mm57-4v3p-rchx: Decoded binary REAL mantissas in linear time instead of repeatedly shifting a growing integer and slicing the remaining bytes (thanks for reporting, manus-use, manus-pi, ucsurf, adriank31)
• GHSA-2qm8-x737-gmw5: Reassembled constructed BIT STRING fragments in linear time while preserving their decoded bit values, including intermediate fragment padding (thanks for reporting, manus-use)
• GHSA-9m75-vc3g-4x39: Reassembled constructed OCTET STRING and character-string fragments and indefinite-length ANY content in linear time. Nested constructed OCTET STRING fragments now contribute their decoded octets (thanks for reporting, alimony, manus-pi, adriank31)
• GHSA-fm9c-5rcf-2q5p: Bounded schemaless container type tracking after two distinct tag sets to prevent quadratic CPU use from colliding long tag IDs (thanks for reporting, droideck)

Commits

• 5d16736 Prepare release 0.6.5
• a36e3a3 Fix quadratic CPU use in schemaless container decoding
• 4ce0079 Remove quadratic constructed OCTET STRING and ANY reassembly
• 73ba7b0 Remove quadratic constructed BIT STRING reassembly
• ce3ec33 Remove quadratic binary REAL mantissa decoding
• See full diff in compare view

Updates starlette from 1.7.0 to 1.10.0

Release notes

Sourced from starlette's releases.

Version 1.10.0

📝 Leaner URL-encoded form parsing

Starlette 1.10.0 parses URL-encoded forms with less memory and CPU, no longer drops the last field when a stream ends early, and lets you compare FormData that holds several uploads under one key.

uv pip install starlette==1.10.0

• Forms with many fields parse faster and use less memory (#3724). FormParser builds each field in the parser callbacks instead of queueing every event and replaying it. On CodSpeed, 1000 fields went from 42.8 ms to 34.9 ms and from 63.5 KB to 54.5 KB, and the max_fields limit case went from 6,880 B to 864 B.
• The last field is kept when the request stream ends without an empty chunk (#3599). The parser is now finalized once the stream is exhausted, so custom streams that never yield a final b"" no longer lose their last field.
• FormData with repeated uploads can be compared (#3619). Comparing two FormData objects with several UploadFile values under the same key used to raise TypeError.

⚠️ Behaviour changes

• Multidict equality keeps the order of values under a repeated key (#3619). Keys can still appear in any order, but QueryParams("a=1&a=2") and QueryParams("a=2&a=1") are no longer equal, matching what getlist() returns.
• starlette.formparsers.FormMessage is deprecated (#3724). The parser no longer uses it, and FormParser.messages is gone. Calling FormMessage(...) emits a StarletteDeprecationWarning.

🧭 Routing and URL generation

• Path parameter values that look like a placeholder are kept as they are (#3725). url_path_for("route", category="{id}", id="42") on /{category}/{id} now returns /{id}/42 instead of /42/42. Substitution also got faster, from 549 ns to 520 ns with two parameters and from 1,078 ns to 779 ns with five.
• Route matching does less work per request (#3665, #3722). Match members are compared by identity, cutting up to 4.9% of the instructions per dispatch in the routing benchmarks.
• WSGIMiddleware strips root_path only at a path segment boundary (#3718). A request to /application under a root_path of /app no longer becomes /lication.
• FloatConvertor reports NaN and infinity correctly (#3716). NaN was reported as a negative float.

🛡️ Middleware, responses and config

• Handled exceptions no longer keep requests alive (#3205). Starlette clears the traceback after an exception handler runs, so an exception instance reused across requests, such as a module-level HTTPException, no longer pins per-request objects in memory.
• Middlewares accept http.response.start without headers (#3721). BaseHTTPMiddleware, GZipMiddleware and SessionMiddleware default the omitted field to an empty list instead of raising KeyError.
• FileResponse ignores Range on methods other than GET and HEAD (#3679). A POST endpoint that returns a file now sends the full file, as RFC 9110 requires.
• Config strips one pair of matching outer quotes from env file values (#3720). KEY='say "hi"' now reads as say "hi" instead of say "hi.

Full changelog: 1.9.0...1.10.0

Version 1.9.0

This release streams TestClient response bodies, so client.stream() returns before the application finishes. It also escapes path delimiters when building URLs, matches host names case-insensitively, and keeps every existing Vary header.

Changed

• Stream TestClient response bodies, so client.stream() returns before the application finishes. Closing an unfinished streamed response now cancels the application #3491.

Fixed

• Percent-encode ?, #, \ and a leading // in the request path when building request.url, and \ and a leading // in url_path_for #3671.
• Use the byte length for Content-Length when the response body is a typed or multidimensional memoryview #3622.
• Include HEAD in the Allow header of HTTPEndpoint 405 responses when GET is defined #3585.
• Match host names case-insensitively in Host routing and TrustedHostMiddleware #3542.
• Preserve every existing Vary header in MutableHeaders.add_vary_header(), used by GZipMiddleware and SessionMiddleware #3675.

Full changelog: 1.8.0...1.9.0

... (truncated)

Changelog

Sourced from starlette's changelog.

1.10.0 (October 24, 2026)

Changed

• Compare multidicts such as FormData and QueryParams by key while keeping the order of values under a repeated key, so FormData with repeated uploads no longer raises TypeError. QueryParams("a=1&a=2") and QueryParams("a=2&a=1") are no longer equal #3619.
• Build URL-encoded form fields in the parser callbacks, lowering memory and CPU usage for forms with many fields #3724.
• Compare Match members by identity during routing #3665 and #3722.

Deprecated

• Deprecate starlette.formparsers.FormMessage, which is no longer used #3724.

Fixed

• Parse the last URL-encoded form field when the request stream ends without an empty chunk #3599.
• Keep path parameter values that look like another placeholder in url_path_for() #3725.
• Default omitted http.response.start headers in BaseHTTPMiddleware, GZipMiddleware and SessionMiddleware instead of raising KeyError #3721.
• Clear the traceback of handled exceptions, so reused exception instances no longer keep per-request objects alive #3205.
• Strip only one pair of matching outer quotes from Config env file values #3720.
• Strip root_path from PATH_INFO only at a path segment boundary in WSGIMiddleware #3718.
• Report NaN and infinity correctly in FloatConvertor.to_string() #3716.
• Ignore Range on requests other than GET and HEAD in FileResponse #3679.

1.9.0 (October 18, 2026)

Changed

• Stream TestClient response bodies, so client.stream() returns before the application finishes. Closing an unfinished streamed response now cancels the application #3491.

Fixed

• Percent-encode ?, #, \ and a leading // in the request path when building request.url, and \ and a leading // in url_path_for #3671.
• Use the byte length for Content-Length when the response body is a typed or multidimensional memoryview #3622.
• Include HEAD in the Allow header of HTTPEndpoint 405 responses when GET is defined #3585.
• Match host names case-insensitively in Host routing and TrustedHostMiddleware #3542.
• Preserve every existing Vary header in MutableHeaders.add_vary_header(), used by GZipMiddleware and SessionMiddleware #3675.

1.8.0 (October 13, 2026)

This release drops Python 3.10 support and adds HTTP 103 Early Hints.

Added

• Add Request.send_early_hints() for HTTP 103 Early Hints through the ASGI http.response.early_hint extension #3435.

Changed

• Require Python 3.11 or later, dropping support for Python 3.10 #3592.
• Exclude native gRPC media types (application/grpc and application/grpc+...) from GZipMiddleware compression by default #3565.
• Send http.response.start immediately in GZipMiddleware for responses with an existing Content-Encoding, status 206, or an excluded content type, instead of waiting for the first body chunk #3631.

... (truncated)

Commits

• 8aa828c Version 1.10.0 (#3728)
• a85a5c3 Substitute URL path parameters in a single pass (#3725)
• 6b8b612 Finalize URL-encoded form parsing at stream exhaustion (#3599)
• b973efd Build URL-encoded form fields in parser callbacks (#3724)
• d7731e0 Compare FormData with repeated uploads without raising TypeError (#3619)
• fb3e818 Compare remaining Match members by identity in routing (#3722)
• fc23aa1 Compare Match members by identity in Router.app (#3665)
• fe000fb Replace the removed route decorator hint in the host routing docs (#3713)
• 4114432 Default omitted http.response.start headers in middlewares (#3721)
• 1a01a02 Clear exc.traceback after handled exceptions to prevent memory leak (#3205)
• Additional commits viewable in compare view

Updates orjson from 3.12.0 to 3.13.0

Release notes

Sourced from orjson's releases.

3.13.0

Changed

• No longer publish PyPI wheels for Windows x86/i686.

Added

• Serialize new Python 3.15 built-in type frozendict identical to dict (PEP 814).

Changelog

Sourced from orjson's changelog.

3.13.0 - 2026-08-17

Changed

• No longer publish PyPI wheels for Windows x86/i686.

Added

• Serialize new Python 3.15 built-in type frozendict identical to dict (PEP 814).

Commits

• bd00937 3.13.0
• de1fd5a frozendict
• f110dbe build update
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions